last executing test programs:

18m36.530838349s ago: executing program 32 (id=688):
inotify_init1(0x800)
socket$inet6(0xa, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0xa, 0x2)
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1500, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

18m35.956390498s ago: executing program 33 (id=686):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r0, 0x0, r1, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r2=>0x0)
syz_ublk_setup_queues(r0, r2, &(0x7f0000000180)={0x0, 0x5b5b, 0x0, 0xfffffffe, 0x213}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x5f, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x73a3, 0x4000, 0x7, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x24a02, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (fail_nth: 32)

18m35.73505755s ago: executing program 34 (id=687):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x209d, 0x56, 0x0, 0x7ffffff9}, 0x10)
recvmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40, 0x0)

18m35.493538509s ago: executing program 35 (id=682):
syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x24100)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14)
ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000100)={&(0x7f0000000080)='/dev/mtd#\x00', &(0x7f00000000c0)='/:%,]:\x00', 0xfffffffffffffff0})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="0080004e"])

17m52.982882571s ago: executing program 4 (id=704):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585", @ANYRES16], 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40000)

17m50.186409019s ago: executing program 4 (id=708):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

17m47.988512396s ago: executing program 4 (id=714):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009690342058200510f6b50102030109021b00020000000009043d0000518e3f000904"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x30, 0x6, "b2d31c719bb7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17m45.520131413s ago: executing program 4 (id=718):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})

17m43.780615702s ago: executing program 4 (id=729):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)

17m35.728621879s ago: executing program 4 (id=730):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
getresuid(0x0, 0x0, &(0x7f0000000200))
syz_ublk_setup_io_uring(0x294a, 0x0, 0x0, 0x0, &(0x7f0000000580))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e20, 0x71c, 0x4e21, 0xfff9, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x400006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK_MASK={0x8}]}, 0xf8}}, 0x844)
syz_open_dev$ublk_chdev(0x0, 0x0, 0x381400)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80)

17m20.045899584s ago: executing program 36 (id=730):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300))
getresuid(0x0, 0x0, &(0x7f0000000200))
syz_ublk_setup_io_uring(0x294a, 0x0, 0x0, 0x0, &(0x7f0000000580))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, 0x1, 0x7fff, 0x4e23, 0x25, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0x4, 0x3ff, 0x9, 0x400100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=@newsa={0xf8, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e20, 0x71c, 0x4e21, 0xfff9, 0x2, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x300, 0xf, 0x400006, 0xfffffffffffffbff, 0x8251c, 0xffffffffffff37a6, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1ff, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@XFRMA_SET_MARK_MASK={0x8}]}, 0xf8}}, 0x844)
syz_open_dev$ublk_chdev(0x0, 0x0, 0x381400)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80)

16m51.655395348s ago: executing program 6 (id=800):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io(r0, 0x0, 0x0)

16m48.062278174s ago: executing program 6 (id=806):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
madvise(&(0x7f0000200000/0x200000)=nil, 0x200000, 0xe)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

16m45.173102239s ago: executing program 6 (id=811):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001980)={0x4c, 0x0, &(0x7f0000000480)=[@increfs, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

16m44.701487919s ago: executing program 6 (id=812):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffffffffffff, 0x40000000000000, 0x0, 0x1fffffd, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41980})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16m44.022672748s ago: executing program 6 (id=814):
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0)

16m43.475582355s ago: executing program 6 (id=816):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
write(0xffffffffffffffff, &(0x7f0000000100)='N', 0x1)
write(r1, &(0x7f0000000100)='10', 0x2)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0)

16m28.189604557s ago: executing program 37 (id=816):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
write(0xffffffffffffffff, &(0x7f0000000100)='N', 0x1)
write(r1, &(0x7f0000000100)='10', 0x2)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0)

7m28.645658964s ago: executing program 9 (id=2185):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000100010160c080000000000000109022400010600a0020904000502030002000921000040012218000905810340"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000c80)={0x0, 0x30, 0x1, ':'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
close(0xffffffffffffffff)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$vim2m(0x0, 0x1f7ff6, 0x2)
readv(0xffffffffffffffff, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04040a00000000000d00000002bc"], 0xd)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

7m25.650027536s ago: executing program 9 (id=2189):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8402, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0c0fc7ac8ccc00000026640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0cc4e281acb5a9580a5666ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x80}], 0x1, 0x13, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m23.875213747s ago: executing program 9 (id=2193):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000540)={0x20, 0x16, 0x4, "6058d41e"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x83, 0x3, "7c261f"}, &(0x7f00000007c0)={0x20, 0x84, 0x1, "94"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "35edf8"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00044100400003"], 0x0, 0x0, 0x0, 0x0})

7m21.21010768s ago: executing program 9 (id=2199):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198)
syz_usb_connect$uac1(0x0, 0xe8, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x582, 0x9a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd6, 0x3, 0x1, 0x5, 0xe0, 0xa, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x3e}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0x9, 0x2]}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x9, 0x8, '4'}, @feature_unit={0xd, 0x24, 0x6, 0x3, 0x3, 0x3, [0x6, 0x7, 0x8], 0x9}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x100, 0x4, 'i'}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x405, 0x1, 0x0, 0x6, 0xf8, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xdd, 0x7, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x20, 0x2, 0x8, 0x40, "", '(^'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x8, 0x1007}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x0, 0x0, 0x42}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x3, 0xf, 0x9, '+', 'l'}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9b, 0x1, 0x9, 0x9, "dcce", "8e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xe0, 0x3, 0x5, {0x7, 0x25, 0x1, 0x4, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x4, "3acc2c"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xfc, 0x0, 0x0, {0x7, 0x25, 0x1, 0x8, 0xc2, 0x234a}}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x201, 0x1, 0x12, 0x8, 0xff, 0x80}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0xc2, &(0x7f0000000440)=@string={0xc2, 0x3, "e75a6c74578a306f7f2d51484e601baa3108550b61ef20624f615a02c5414a47aa4289b7f6b51efab3235f76e25407d9ebd11e0b72a9cd6c09ab085698a3941c62dd1751f3aea273fb2db8a4cfbc1f1c2c691b51bc12f44ab23d1d06ff10cef8eedd83fc59dd95177998e723c2c936094164b0d5120378032e0b49b86dcb21177949a6ab0ce8dedb4e183280024ee9fc46af88d1ed3127e6a448b8706243e6d780518841f3c05af20e2a26f87af6031cc31d9e0edfdd5b52acfa3fed149f4593"}}]})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)
r5 = fsopen(&(0x7f00000000c0)='ubifs\x00', 0x1)
syz_usb_connect$cdc_ecm(0xe2abf73ffc8c21a4, 0x70, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x6, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "27cf14a11f"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x7, 0x9, 0x1}, [@obex={0x5, 0x24, 0x15, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xfb}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x7, 0x9f96}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xbf, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0xfa, 0xd8}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0x4, 0x40}}}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x8, 0x1, 0x8c, 0x20, 0x7}, 0xf, &(0x7f0000000600)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x0, 0x2}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}, {0x9, &(0x7f0000000680)=@string={0x9, 0x3, "7e873c717ca77c"}}]})
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0)
syz_usb_disconnect(r0)

7m18.259717062s ago: executing program 9 (id=2206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r2, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
syz_ublk_setup_io_uring(0x252e, &(0x7f0000000380)={0x0, 0x85e9, 0x8000, 0x0, 0x9a}, &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000440), &(0x7f0000000480))
syz_io_uring_setup(0x7687, &(0x7f00000004c0)={0x0, 0x909e, 0x2, 0x0, 0x26}, &(0x7f0000000540), &(0x7f0000000580)=<r5=>0x0, &(0x7f00000005c0))
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r8 = syz_io_uring_setup(0x29f4, &(0x7f0000000600)={0x0, 0x870f, 0x40, 0x1, 0x33c}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700))
syz_io_uring_submit(r4, r5, 0x0, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x18, 0x0, r8, &(0x7f0000000740)="cdcf3501a077b133df6916e5de176f1e171079402512a2d7650b142d0036538f963bff72fa2f68207c890fb94b97051665ca8034f847826ba2267df2915a501571d916cad29dcf6fc943f605dec858bdb6713900149f80a18e8ffba84531666e1b7818b195a15ad9a0e550a865", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, r2, 0x4}})
listen(r3, 0x2)
r9 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r10, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
listen(r10, 0x2)
preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

7m17.788141515s ago: executing program 9 (id=2208):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000540)={0x20, 0x16, 0x4, "6058d41e"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x84, 0x1, "94"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "35edf8"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00044100400003"], 0x0, 0x0, 0x0, 0x0})

7m16.751667409s ago: executing program 38 (id=2208):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000540)={0x20, 0x16, 0x4, "6058d41e"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x20, 0x84, 0x1, "94"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "35edf8"}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d40)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="00044100400003"], 0x0, 0x0, 0x0, 0x0})

7m16.40398909s ago: executing program 7 (id=2212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0)

7m15.662898442s ago: executing program 7 (id=2214):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64018105, 0x4e20, 0x3, 'dh\x00', 0x30, 0x2, 0xc}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'wlc\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0x1, 0x1, 0x1}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xf5ff, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

7m14.819998132s ago: executing program 7 (id=2217):
mmap(&(0x7f000091d000/0x12000)=nil, 0x12000, 0xf, 0x30, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0)
write(r1, &(0x7f0000000200)='md0\n\x00', 0x4)
close(r0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r7)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x14}}, 0x0)
ioctl(r2, 0x40480923, 0x0)
ioctl(r2, 0x4004092b, 0x0)

7m13.899637153s ago: executing program 7 (id=2219):
mmap(&(0x7f000091d000/0x12000)=nil, 0x12000, 0xf, 0x30, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x8081, 0x0)
write(r1, &(0x7f0000000200)='md0\n\x00', 0x4)
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4)
write$tun(r4, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x2)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)
fchdir(r6)
stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)

7m12.968045856s ago: executing program 7 (id=2221):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000018000480140003007465616d5f736c6176655f31"], 0x6c}, 0x1, 0x0, 0x0, 0x20040845}, 0x802) (fail_nth: 1)

7m11.92069741s ago: executing program 7 (id=2222):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x0)
finit_module(r0, 0x0, 0x0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x22)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00')

7m10.56937656s ago: executing program 39 (id=2222):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x0)
finit_module(r0, 0x0, 0x0)
openat(r0, &(0x7f0000000080)='./file0\x00', 0x80, 0x22)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff)
rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00')

7m4.237281157s ago: executing program 5 (id=2236):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
mbind(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000000)=0xe, 0x85, 0x1)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

7m2.996132689s ago: executing program 5 (id=2238):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000440)=ANY=[], 0x0}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000300), 0x4, 0x1)
ioctl$int_in(r1, 0x5452, &(0x7f0000001900)=0x9)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000019c0)={0x34, 0x3, 0x0, {0x1, 0x13, 0x0, 'default_permissions'}}, 0x34)
ioctl$KVM_SMI(r1, 0xaeb7)

7m0.459364678s ago: executing program 5 (id=2242):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000020a01030000e6ff00100000020000000900010073797a30"], 0x7c}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

6m58.703159142s ago: executing program 5 (id=2243):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r0, 0x80079a0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000100000000fbdbdf250a010102000000000000000000000000e0000002000000000000000000000000000000040e0000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000080000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000006000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

6m58.477496679s ago: executing program 5 (id=2244):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101d42, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffee2)
r1 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r3, 0x0)
recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009"], 0x80}}, 0x0)
syz_usb_connect$uac2(0x3, 0xcb, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010440621804000010203010902b90003010080c0080b0001010520070904"], 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./file0\x00', 0x214040, 0x9)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xb0, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x13}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a3}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x127}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x217}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004004)
mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64018105, 0x4e20, 0x3, 'dh\x00', 0x30, 0x2, 0xc}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'wlc\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0x1, 0x1, 0x1}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

6m54.882051747s ago: executing program 5 (id=2249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x100})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_WAITID={0x32, 0x4c, 0x0, 0xffffffff, &(0x7f0000000240)={0x1f, 0xffffff5c, 0x5da9}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100f3ff000500050002000000050004"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10040043}, 0x4000050)

6m39.691439388s ago: executing program 40 (id=2249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000800)={0x0, 0x0, 0x80, 0x2, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'ip6gre0\x00', 0x100})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_WAITID={0x32, 0x4c, 0x0, 0xffffffff, &(0x7f0000000240)={0x1f, 0xffffff5c, 0x5da9}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100f3ff000500050002000000050004"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x10040043}, 0x4000050)

6m31.913519942s ago: executing program 0 (id=2281):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r0, 0x80079a0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000100000000fbdbdf250a010102000000000000000000000000e0000002000000000000000000000000000000040e0000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000080000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000006000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

6m31.141845913s ago: executing program 0 (id=2283):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x8e1a}}], 0x30}, 0x0)

6m30.571845284s ago: executing program 0 (id=2286):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/2, 0x2)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) (async)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x4000880}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac0000000001010200000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000240001800c00028005000100000000001400018008000100ac1e000108000200e00000010800075e010000013000068014000400000000000000000000000000000000010400038014000500fc010000000000000000000000000001"], 0xac}}, 0x0)
mbind(&(0x7f0000244000/0x12000)=nil, 0x12000, 0x8000, 0x0, 0x8, 0x6) (async)
mbind(&(0x7f0000244000/0x12000)=nil, 0x12000, 0x8000, 0x0, 0x8, 0x6)
mkdirat(0xffffffffffffff9c, 0x0, 0x18f) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x18f)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
add_key(&(0x7f00000005c0)='rxrpc_s\x00', 0x0, &(0x7f0000000600)="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"/310, 0x18b, 0xfffffffffffffffd) (async)
add_key(&(0x7f00000005c0)='rxrpc_s\x00', 0x0, &(0x7f0000000600)="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"/310, 0x18b, 0xfffffffffffffffd)
socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read(r3, 0x0, 0x0) (async)
read(r3, 0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/file0\x00', 0x200001, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r4, 0x0, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0)
fgetxattr(r5, &(0x7f00000001c0)=@known='trusted.overlay.opaque\x00', &(0x7f00000003c0)=""/131, 0x83)
symlinkat(&(0x7f0000000100)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') (async)
symlinkat(&(0x7f0000000100)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

6m29.523155237s ago: executing program 0 (id=2288):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c)
listen(r1, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20)
syz_ublk_setup_io_uring(0x252e, &(0x7f0000000380)={0x0, 0x85e9, 0x8000, 0x0, 0x9a}, &(0x7f0000000400)=<r3=>0x0, &(0x7f0000000440), &(0x7f0000000480))
syz_io_uring_setup(0x7687, &(0x7f00000004c0)={0x0, 0x909e, 0x2, 0x0, 0x26}, &(0x7f0000000540), &(0x7f0000000580)=<r4=>0x0, &(0x7f00000005c0))
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r7 = syz_io_uring_setup(0x29f4, &(0x7f0000000600)={0x0, 0x870f, 0x40, 0x1, 0x33c}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700))
syz_io_uring_submit(r3, r4, 0x0, &(0x7f00000007c0)=@IORING_OP_MSG_RING={0x28, 0x18, 0x0, r7, &(0x7f0000000740)="cdcf3501a077b133df6916e5de176f1e171079402512a2d7650b142d0036538f963bff72fa2f68207c890fb94b97051665ca8034f847826ba2267df2915a501571d916cad29dcf6fc943f605dec858bdb6713900149f80a18e8ffba84531666e1b7818b195a15ad9a0e550a865", 0x1, 0x8, 0x1, 0x0, {0x0, 0x0, r1, 0x4}})
r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/225, 0xe1}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000)

6m28.136894088s ago: executing program 0 (id=2293):
getpid()
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000080), 0x5, 0x40800)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32314247, 0x0, 0x0, 0x20000ff, 0x8, 0xfeedcafe, 0x3, 0x7008, 0x2, 0x2}})
r2 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0xca8b, 0xfffffffe, 0xffffffff, 0x37ffc, 0x1b, "9820e6c7d10b030000000000000001713cf366"})
syz_open_dev$ptys(0xc, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0)
write(r3, &(0x7f0000000200)='offline', 0x7)

6m26.976203645s ago: executing program 0 (id=2295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100f3ff000500050002000000050004"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x2000000, 0x300, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040043}, 0x4000050)

6m11.812157994s ago: executing program 41 (id=2295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100f3ff000500050002000000050004"], 0x48}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x2000000, 0x300, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040043}, 0x4000050)

9.927899965s ago: executing program 1 (id=3397):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0)

9.549569286s ago: executing program 1 (id=3401):
socket$inet_smc(0x2b, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x740, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x2, 0x8000200, &(0x7f0000000c40)="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"})
r2 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000003700)='workdir', &(0x7f0000003740)='./file0\x00', 0xffffffffffffff9c)
setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2)
fdatasync(r0)
r3 = fsopen(&(0x7f0000000480)='hfsplus\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

8.267746414s ago: executing program 1 (id=3408):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3ff, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x10, 0xe99, {0x77359400}, {0x4, 0x8, 0x4, 0x0, 0x5f, 0x2, "c231a93b"}, 0xffffffff, 0x1, {&(0x7f00000000c0)=[{0x1, 0x800, {0x400}, 0x6}, {0x7, 0x3, {0x7}, 0x4}]}, 0x2}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000180)=@multiplanar_mmap={0x400, 0x3, 0x4, 0x10, 0xe99, {0x77359400}, {0x4, 0x8, 0x4, 0x0, 0x5f, 0x2, "c231a93b"}, 0xffffffff, 0x1, {&(0x7f00000000c0)=[{0x1, 0x800, {0x400}, 0x6}, {0x7, 0x3, {0x7}, 0x4}]}, 0x2})
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59aca2a713a1f848400000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x90) (async)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59aca2a713a1f848400000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x90)

6.788136375s ago: executing program 8 (id=3412):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write(r0, &(0x7f0000002400)="2bcb5bfa655902afa4976b49336cc318e19869df1b98c3d192da26f822ad67a9ad33d61f170e4dc00960f7e33d717aed3541a794d0710f4cd7861ac20ca768605e433f43fc", 0x45)

6.316234478s ago: executing program 8 (id=3414):
r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9957b00000064323723e7eecdf40c363423eb3d259266ec9c37865c6c1a3e40ce1b22bb33270450001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e65852548deb01efd54f11ed2c4998d99ece2ab1e39566153c97e4af37017ea6b16b694b94a6e4606c3fb19d1d2bd3c8c4e97b90400000000000000c2000000000000008e6827d61dcc3a633bf6ff250b5a293eb2a39e48660edb720a010000000000000044febf7ddc73fd4a5a000001c55f7f46c7084e17c809268103a0584ab40a68e528329d97afc3652e325c1eb4a3ab2e156a9744480000000800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef6bc502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e880500000000000000023610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba9379d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee950500000000000000fbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3402cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e60078c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948aa74ebc946d57a8bde89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4cc025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce09959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f002bf14cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040895c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a4b134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de548350800000000000000a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b7545b76317b47683f6b0f80dfdeecbf8767c7e0500000086093a21477431fea0458023953700"}) (async)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
nanosleep(&(0x7f0000000280)={0x0, 0x989680}, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x40, 0x6, 0x5, "0835a0acd8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.607551279s ago: executing program 1 (id=3418):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a80016000500014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000640), 0x4, 0x82)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000700)={'vcan0\x00', <r3=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000780)=0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'sit0\x00', &(0x7f00000007c0)={'tunl0\x00', <r5=>0x0, 0x40, 0x8, 0xfffffff6, 0x200, {{0x9, 0x4, 0x0, 0x26, 0x24, 0x68, 0x0, 0x24, 0x4, 0x0, @remote, @loopback, {[@timestamp={0x44, 0xc, 0x8f, 0x0, 0x6, [0x1, 0x1]}, @end]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000003180)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003140)={&(0x7f0000002f40)={0x1ec, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r4}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r7)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r7)
sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r8, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x202, 0xc, 0x0, {0xa, 0x4e26, 0x9, @mcast1, 0x9b}}}, 0x80, 0x0}, 0x2400bf64)
ioctl$SIOCSIFHWADDR(r7, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/msi_bus\x00', 0x1, 0x0)
write(r9, &(0x7f0000000080)="8c", 0x1)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x9815, 0x40, 0x3, 0x4b}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa60a, 0x2000, 0x2, 0x213}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xef36, 0x1, 0x1, 0x371}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed03, 0x2, 0x2, 0x14a}, <r10=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b80, 0x20, 0x2, 0x1a3}}], 0x4, &(0x7f0000001980)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x2, 0x647, 0x0, &(0x7f0000000980)=@buf_max_buf="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"}}, &(0x7f0000001a00))
r11 = syz_ublk_setup_io_uring(0x6431, &(0x7f0000001ac0)={0x0, 0xdb5e, 0x8, 0x1, 0x159}, &(0x7f0000001b40), &(0x7f0000001b80), &(0x7f0000001bc0))
socket$inet_tcp(0x2, 0x1, 0x0)
r12 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4)
r13 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r13, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendto$inet(r13, 0x0, 0x0, 0x4004150, &(0x7f0000000180)={0x2, 0x4e20, @multicast2}, 0x10)
r14 = dup(r12)
bind$unix(r14, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000100)={0x0, 0x5937, 0x200, 0x3, 0xd8, 0x0, r9}, &(0x7f0000001c00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1393, 0x40, 0x2, 0x2d2, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdff8, 0x4, 0x2, 0x328}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7533, 0x10, 0x2, 0x47, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d21, 0x40, 0x0, 0x55}}], 0x4, &(0x7f00000008c0)={0x2e, 0x8, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x49}, 0x0, 0x0, '\x00', {0x0, 0x281, 0x0, &(0x7f0000001e80)=@buf_4k="24b708667ab7c4c5f7761957979a38c2e8fb442926e3f00510902abc183e3e65465dd3a5ea5afcdaa6ac5baaaacf1aed32ab181c7c59adf8ff05445e2509152c60ba6423139ad1849cc70506a57e5f2ffeb4b58e7e0898d2eea14c066aedadf4df7a534be563ac91c7f59a7597c32a04b502e1750d50b187737f804c7c87c9cbe0f57160bd4af958347ee41521038895b4f276828c15507ace70a0128a66ed5865ea438e954badd140a4b6491835f1eabaee190c6ddf058c7d558a770648473e62da750e826b5d24ccce055ebd473b0ea04ad94e525b7dae5002bc9de9062cdff7a022c2a0dd06cac16e999e33a61b1ed7d2bf012331569d49f8ddff94f521fd985c218fcb889a08c9b5df62e9d4b37e5521e93ea994f7da252bd2c275d53135317064d8f2b55e0b51dec90feea8055edd440128afce9dee6897f70de894a1fe2ccef44ce1b7419a870cc738dd77004dfeab10e8c7304915dc39e372c43ce68940df6a633a92c44f37467715a77370427aaf143e46e9c306c6d954ab64d3b8174650308ea464b49fb92b392d0674bad30e96c6311ea6f89abb9bc9c4ae0a24b811325197aa4c0ff2feb5bbf939318d40285ec74114bf0068b2abb5e559a46e214506c002dd65549364ba57552c9fe6d3912697d4c6ba3d7b9a67fd8d48846ac5256c4cfca9882266b453f1f0d3421c0dc5e0d563b5b87de915ef89953bff3d42c5d9aac02330e75cf00da07fe78fd47aea799305194764ba5ec9b06406c11eb51f771b8f384d9a09bacf78b3f2b782312a98594c55e530696413e0459b5c8e26918167525f40758833c425fdbcdff6134a9aad289c121a9d759f2256a567f5250506128ba08bf6408cf5917b0dfcfecf85840890472b97d5df61028f53e5d9b7a04e54fe9843c369b32184fe7b7fc1eac25f6dace7515db4a4fd8a5e361ca01b8d73b9daccf02b9462c0a26f430d3a236dc6c0d09f421ffe944bbc26e7e7256cbb7ba9aca5c050c85d4c214ca983a92424267ccd528eedc813e407d3ddf56bc7c90387551fbf1371fa7f7c1e90d0191eb79ceed912f903f1d655667c57c09b82f7086f6aaf6289be8dcc38a1ca2ce9f830dfe618a028bd65b27b85a6c82fce375460871570776c318963286dac42d0bffff8c56eebb6fbeb0b766d61b91f9779d14c5af92a5caff1d8fdb213ecb77b65f851838b83b6ddbf8111c3b9f3dedd8f706b2a78b0361be35254010c2a59e64b47ee45bc1f97661b6b5fb806503e322f3fea5cfb46a637e9b4a870f1385944b7fba17703cd36312c00aa2e6c931c7deeb8b7ab4e6329ece4c16c3667d5376a9ec79e5b800a150607ce463366ab2a977a02d82afb63649156440b606399572aa01bcfbaf09668c716a2b2f88620619aef7554b42032072ea6f34c110e4797c8795d8f34a5fc175ace0dc4442b28b5892b500933992522eb02a7914fa0ade400c4e1be4a8429afcb3b6943b19246394d2efff0e2c37ef4bc212009d1b146ae02605eec344ed0aef3079886f070f21607f62c4bf56ff70e1db03efd6740a4d62c5c5aa7af0fb2a845c5e06192ed122af9413fa311a7bb6b12cecc2191ab49c858c808037143c015f179ad03b908cd490e05c3637e7d09baa021ebe312abbed26f5cc89936b2e176109bfd94ee0b4ec67fd53963f3d74342be65f026a8eb4c8930c78866df47617ec66184e3c2dccfcb5c70a4d929fc0c015592fd5fc14063aaf91cfe0b697227fa3970b7479ab449720ecaee6fce523359d17a3826b17305e24c5d4ee2019c728fbbd3a37daa482be7b256ec1669019527acbc8fb033873862d8f7f211d9d3db4420804e63b83687d251bb3f8a6bef447a7828888b8f5b15f05e71557bbe34526bbccf0627dcaea7b175cb63e541540ee320ee8615a481410b35be921b240769fbfff305a579be013f582465c9115e723b66d39119035d19fc222a2025bbb1cf78d0c54951c759da17ffad289019e1bb2d467adcd671664a9d080efe89d1693405a5ac975844ccca554b41a82393610e9168e998afa7dbc3c92c7726bcee778d21023f77b4df9cca2a18a033b3df907d7c6219b686f0ed35b616a35ee9964993731dc1f2b565117e95d939065b07af185ee4ee192839d20d8e290a6b65739b896486d2256793449082d00515fa3165c65e747c3fdae5807f958679f4489774179b2e7a02c316deb2d0dcdbcf1c0d3c386d9b658bafc7518eb1726c8bfa7a01570b911adb8011b0bcb0dfd3c60a9cf13c8011b01b18362346702ad35b988b3d6b68b22db2cb40cd36ca3786c8c6b44a2954fea685544527a3020339e3af4d3b0e3d77d01643ab4a97662b221b02e839a58c9af0ce1a030d08dc785d995cdee98fae34de01cc46637d51943459f3f8c97751b5e4a9fe99e9a2f7b1a5e8583345095456494a2b9cba05bc0a6c1a3863a9e2a0f0ce61095f286422f221a4a4f7a0a56ff5101c708fbd3644bcd906dd67a003349409a4046123e3eef2a2d23d0ee82629f9e282073487998d64626d5f3db7de47ca77f8ce53e0cec04a596bf54292e48cc0f96002b6b54bdb052a531d44a4766d2e2bdac3037a88abecdbe6388f343772de53ad266410c49d7b61dc594cae5b2986c9408df41692090e2eb6c8a60f80f853b52ec660610bf9c617eac5992064182542dde552792f0fc12997a299908f4ad54c0a3e8acdf9f4bd43c44e9e92b58766ff5ba69ec13af5d8809dda373aa4625ba018abc9aabf7ea8db42dab1edcdaf9cbbf3a64e876eb210264f7efb61c47745bb8923bd9a28fb1b176ffab7a5817028e8634e89b6b628e72b91d6e93322b2653a202962394063cf1ab1bd86b2cdece9d2e68dd6da5b3e52bb62d8469ca5a8e12c62e9d12c792f309ac5669f1c798f1292912ae2f751c6048b1f5cd6cad9e087422bd86a1d0ae7607e0c4b85bf0f46a5767f50efec6c627f6414e966d818932e20e140d5821062e5f337ede8a8921c60f77be6f8719feea7e7c650f4d513e1fbab31d4d18498630e2329e72d6c6ef475928f1446dff79173bb5f823ab1bc93932705f4c405490cea9145a5dfd1fd2baf60fcd190187e6c60493d3f4ff59e46a142806d575b721ac99f8a3acb73bab61376b94ecf0f1aea510373cd181d5580dd4e8634738452a538d9ec04c925b6c21ecb0fcf4a609d2c34fec6bd35c6e3f8413e2b0e98201de14a022e7a0f8fbfbca3345423376b16b9c1687790a7166002caea9e2cf0532cef73acaf5ba1beee5b8d8b2afbd273232ad518f3f8aba971d0d85dbd2ee4e8b45c321fc38306b86bc9afe84b8a01cf40fc08052303eb2b2e0556c1e60f0e2530293b86417c8a6a0dac9dd2254364b9710205b83145d60ed18bfee3feaf6e92fe035115460307d31ddd58f47a84b4a044e3bc7a186b7a11f92eedd59545ca92bbfcbcc6d8a426b01eebbf6deb096f4db036e7d1c9d5d91643dc7e5c8660e254b5facd3da28aedaa1e2410e2cf7483ea6480487f6731494b6c0e6b413d19afda08e1013bc90dee7c357ac3bb34d8ada29414ced07b8694586f8b0f2809999d44545a70f94d654feb4d4af89de5cad0d216f561e8dc66b4b4f21a5dbbdf1ecef6e9bf940443287d75c6fdbdbe90edb45f063d16c32baabc6635331617aee896fb6e3f414413aa9e2c1999b83bab47e59b109b88c4f5adb6286bd103cf11aec442331017bac2a9b5b91818d73c4fbde96a6483e49e5e88193013eed8ffbcf76fdde8a19dca1ed162509de31d900de1a6bf59038e71711ccee1b3a51f84cde4a2be87a561c8c59e2a8a589fa56d26843236f43b61d1b03f7c3e444c0ca1aec18c7fb0952a1ebfb17d6b33a4d3fa437fd281435de1948d9760008c1ad041b6a1f91c4d73a37167949eb740e1a1fb5683f9a66c7c9c61bd03beab10c8a2c9b0f9ddf6af7ea514755a5892831fec0bfa99b21bb0b5a4ae399c5bee32ef8c790a3c2542ecdf94ec23a7d96f6b05911609ae2ee9e03bc308d25b45d3f6a44b43f3037107053e1602c7f4d0732953ff26e6f8483328a33e0801497181255bd8e44a4467027c5b9db63e053c76e50e0658f34819dbfbf4798e4b6ac016bbe30376693f101559d73093f90046078ba07903fa8f6a9308bdba90c3c97ad3217641dbbff2c95a1c8c2351f477d53aab628e6a0eceb4e3bb90aa85cbb1ca598fae618b7d35aa635f2fc1a34e3aa98aebe11f32e4127afd82b54d5b6495c04ef63287d2a9b112d08495722898956a7edee50f4ac66a413dff0aedbcdce1a697e62eb736412015b5a328427505e4b4dd97cf368dd31f468e2d964f6fe94e719c6e027b726cdcee67167df246392647791243d15bed8d268ac3355ffb1d6df3467ed646ce30b98937cae2778c16c1d87b4db95f801ca0a6051bd40f91885b4d40fe387c08c0843c9c8e999d8b6d5135bfcb1ef8bdae1b167df7de437a1cf3ba2e9143c9e577c13f039a8ff9bdb7c8df871378a193631e9e16526f9b5b3eb6667c3ba2b728eb918ad9d34a02cd3b61f6936dd9b2ec22a48dd9f6a45019feaba0400cae32a018d310e7f3d24a6d2f816be27267ebb048669f0ee644ce1f2b676abc79c4e1dc2954ef639f20806b2dc6e65e3214c394b350716bd41206e44567761e23fe69dc2f6828c9e361d2b35a076bfe368b9cddbb735709f004faf3b48223f829a471e44e5f9ff72457b50e2067baa54041fcbef23e5d31c5f81180de9a27d494e38587fde6a973fd66a7c690bb2533271fd29d52295ff5b36743358fd46ce844f0821079fa975584c0e885ece0edd15feb4476a172a0ed523248d628c83f67ae589702fad45d035d8ccb6721f6632534235ad394a5ab1f3e5d98cb18fd9cd62b5ebc9597d525a355687262500e298fd03ac99e2133c5b37d11520416ade31cef46befd308aa70935945b8e1e3b21864f120726e932af0cdb6d6195d8ef9727c575de55ef597cf9e616d7c71f726ef65cf2c7db6b94e8f72159b14335a79907d473f082877cab8df7f764fa5c1aa12180b26978abe34be4598ee69e652461fbad9717191365d6b739b1a8482e5d0d0fda49d656f6c95d22ac72b319a4e1b5b1d7c714a670040fe2c63820a915491806b9a32e4bf23e24a97eeb2384a837530b61de5613bd68df021ef6dc491944b204b87a7d5530c088c4ecd32fd2d35d7c5bd4db5db05290dab66a447982fd6f4252aa7fb48590205f2139bd88e8d4143ce1fc7af28a8c1ddc7501b6eaae8cf078ea8f8bdfd8353edb407764fafbbd9e4e28c84d4289225ed0534d1a9cc0554b6cae3ae7046d1847089ee8790e7782d96ab3c918f77ee82836499cd52a195eb876aaa0670941738d70cf698171157d86efaa99141bb36df66dbb412327eca52b3b07e1866012271456a132471063a6fc5badd0b352824bbccb3fb7a4fc1520d006d4629848607fb274bdfb07d1d3af991a86d3bb2500abe62dfc422ddee0df8a3fe8c59a5cc7f6e16fe3f4cc1c66108c673c0422805eb41b07080b519e7d8c14358a96fdbc11861572cf0718e990cb3d3ddca82a5fccb5cfb7ad1ca2e250398e03bc9dd09a50eeb0c19fae7cc5581c2543d7363007b16b3a945d87e08319a4f9486400ce1844b4eb138fdc45eb7a83f9d9bcda129b58d2cd945f0160e9e7dbab6fae130cc3e4fbc24b228695f1c58895b31a07d1eafe42764b652bb3e0306ee5ff9ed623ec8b23934875a734a04216fb8ea2095cfca0179831c538dbe4c224a715bfe462b33ce732aaebcd94273e9a88472a4d9f83919cce1e8b358dd62f"}}, &(0x7f0000002f00))

4.235836955s ago: executing program 3 (id=3421):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r0, 0x80079a0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000100000000fbdbdf250a010102000000000000000000000000e0000002000000000000000000000000000000040e0000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000080000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000006000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

3.883771224s ago: executing program 1 (id=3423):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000a, 0x30, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x7)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_emit_vhci(0x0, 0x2fe)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open$dir(0x0, 0x800, 0x100)
r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
writev(r2, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, [0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0xfffffffffffffffc, 0x1]}, &(0x7f0000000000)=0x100)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {0x8000}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0xa5b0e763, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x487, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x14], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x403, 0x40, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x806, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x5, 0xff, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1, 0x6]}, 0x45c)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x2f)
ioctl$UI_DEV_CREATE(r3, 0x5501)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f00000000c0)={@local, @initdev, @multicast2}, &(0x7f0000000200)=0xc)
getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000003480)={'ip6_vti0\x00', 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x2000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000140)=0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3.727163392s ago: executing program 3 (id=3424):
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="bd42f78a80a3dcf0a998b7afa7dea3a85d413ecef32dab255d7a4de534b1339923a1f7e28ae6104762e90e3a5a03828a4cedae602fe41b0dbd9f80c6aa349fa27aeeae", 0x43}, {&(0x7f0000000140)="fe169a6478", 0x5}], 0x2)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='async\x00', 0x0, 0x0)
setpgid(r3, r3)
setpgid(0x0, r3)
fchdir(r2)
stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

3.516027116s ago: executing program 8 (id=3426):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (fail_nth: 1)

2.684775564s ago: executing program 1 (id=3427):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa)
write(r1, &(0x7f0000000140)='n', 0x1)
write(r0, &(0x7f0000000080)='4', 0x1)
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0x0, 0x368c, 0xc98d, 0x3d78e91c}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r4=>0x0})
syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100"], 0x58}}, 0x20008000)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$lan78xx(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$rtl8150(r5, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x2, 0x33, {0x33, 0xa, "b98d33cfe957c74693861af16e68493630c61ed870e799a52401dc59d7c0d6b70b4bd03cc4591e9b66e829849adda65ceb"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1409}}}, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x5, 0x8f, "f15f38032a10984df1b16bb721559e7bb51b1e3663c3fa92fd1f7b9cf080ca5f4dd74d9ccf0c3c8e26feb874e5e675ab2c0b8773fb8121338334659166f6b02663abaee811c7949c7905eff0031195d8fdb3580f5712b4a4b5e6f852d981fb42d4594b5e64af7f6e80e6bd7865199300c61a5d2d1133855100522ba8cbf1562f0b9d263b3e9510d68607f9c514d01e"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000340)={0xc0, 0x5, 0x4, "ef50edf7"}, &(0x7f0000000380)={0x40, 0x5, 0x2, "8021"}})
r6 = syz_open_dev$sndmidi(&(0x7f0000000000), 0xfffffffffffffffe, 0x901001)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r7, 0x1)
setsockopt(r7, 0x84, 0x83, &(0x7f0000000240)="1a00000002000000", 0x8)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

2.616572318s ago: executing program 8 (id=3428):
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x1}}}, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r1, &(0x7f0000000300)={0x2, 0x115c, @loopback}, 0x10)

2.536100694s ago: executing program 2 (id=3429):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

2.258038256s ago: executing program 3 (id=3430):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dummy0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x160}}, 0x0)

2.210968164s ago: executing program 2 (id=3431):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x24}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050)

2.195832621s ago: executing program 8 (id=3432):
r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r0, 0x80079a0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000100000000fbdbdf250a010102000000000000000000000000e0000002000000000000000000000000000000040e0000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000200000000000000080000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000000000000000000000050000000000000006000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x840, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

1.825221086s ago: executing program 3 (id=3433):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/apparmor/.access\x00', 0x2, 0x0)
write(r0, &(0x7f0000002400)="2bcb5bfa655902afa4976b49336cc318e19869df1b98c3d192da26f822ad67a9ad33d61f170e4dc00960f7e33d717aed3541a794d0710f4cd7861ac20ca768605e433f43fc", 0x45)

1.731890752s ago: executing program 2 (id=3434):
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) (async)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x4003b) (async)
mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) (async, rerun: 32)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) (async, rerun: 32)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0x0) (async, rerun: 64)
setuid(0x0) (rerun: 64)
pread64(r2, &(0x7f0000000640)=""/4130, 0x1022, 0x9) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xfffffff9, 0x0, 0x2, 0x6, 0x808, 0x4006}, 0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) (async, rerun: 64)
ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) (async, rerun: 64)
mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='xfs\x00', 0x0, &(0x7f0000000980)='norecovery') (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETVIFCNT(r4, 0x89e0, &(0x7f0000000380)) (async, rerun: 32)
ioctl(r3, 0x8b32, &(0x7f0000000040)) (rerun: 32)
ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000080)={0x9, "262423764f807166966b3afd33beead2418be067b449e84f0df8ba9228f77583", 0x2, 0x10001, 0x2, 0x100000, 0x100, 0x2}) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/sample_interval\x00', 0x2, 0x0)
write(r5, &(0x7f0000000180)='1000000\x00', 0x8) (async)
r6 = openat(r5, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x105180, 0x0) (async)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (rerun: 32)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r7, 0x40045109, 0x0)
write(r6, &(0x7f0000000400)="04080076657273696f6e000205000000040000", 0x13) (async, rerun: 32)
syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) (rerun: 32)

1.690817415s ago: executing program 8 (id=3435):
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x3, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, 0x0)
timer_create(0x4, &(0x7f00000011c0)={0x0, 0xd, 0x4, @thr={&(0x7f0000000440)="26b789378447762d27feedc78e2485b5dff348", &(0x7f00000010c0)="07c5107a94c1ceefcc1598dbe53a22be1ad3422bb873b2ca8b9a588795a979a42b4249bf66a91fb1a0b98ad9bfa8e5d39e25e270267a5e285d2d874f0b55797ef6bbb7cec7267827ae06bab1cf6cea1634fce363672459b25021cac31b74434ab38f3327d3aafae95d0a784e42538c2836368703dd720c5d7f4108566149cf8cc0a6af581031ffecdd0e15d28114c293a9ef0ae503ba06364ab7a946114b7bf771d70b2877130114588ea76c386c3b79504ad97d2b2103f119f955028d6efca60d774d4932cb3d835781d8f7e469ae7ff4412535923b0abc587ae3ee0de8beb7dc00f7c918fadc7605729396ec4ebee02629"}}, &(0x7f00000001c0)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000001240))
timer_settime(r2, 0x0, &(0x7f0000001280), 0x0)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000004082057a0040000102030109026e0003017f5006080b0002012030230904000000010130000a0401100a000a000000090401"], 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000300)=0x7, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000280)="0f01fc440f20c03506000000440f22c00f79f60fc7280f32f30f0966b8b1008ec80f20c666b839000f00d0c4e27d1818", 0x30}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000480)="360f222636670f017a260f20d835200000000f22d8c482795945010f5dc1420fab26c744240001010000c744240200080000ff1c240f3235004000000f300fc7790dc4e245473666b808000f00d0", 0x4e}], 0x1, 0x10, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000040)=@x86={0x8c, 0x1, 0x81, 0x0, 0x81, 0x4, 0x81, 0xf, 0xc, 0x5, 0x1, 0x4, 0x0, 0xd5c, 0x6, 0x10, 0x9, 0x12, 0x81, '\x00', 0x1d, 0x4})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r7, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @remote, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="cdfbbef7f34c9f75e11a042d50b9fd196a7672726e2bfce176021a5df43beef403ef7c588ca99f5334e2c9d037a8cf329ef83a40a2a74c6376f2ec1a0de4b2dc1700000000000000000000000000c005f66ba957ae7df60b4f10f70c38fae31a6019a10b23d77a57", 0x68}], 0x1}}], 0x1, 0x931766f6319eed44)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x30, 0x3, 0x2, 0xfffff03c}]}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000400), &(0x7f00000000c0)=0x8)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r8, 0x4b3a, 0x2)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @rand_addr=0x64010101}, 0x10)
r9 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff)

1.246624207s ago: executing program 2 (id=3436):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}})
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bacf314aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x807, 0x3c5b, 0x80000001, 0x26, 0xc, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x0, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x2, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0xfff, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0xfffffffe, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x80003, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
fstatfs(r0, &(0x7f0000000080)=""/165)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d657461000000001400028008000140000000090800024000000010090001"], 0xb0}}, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7)

1.021878435s ago: executing program 3 (id=3437):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
socket(0x23, 0x80000, 0x3d)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000180), 0x80) (async)
pipe2$watch_queue(&(0x7f0000000180)={<r1=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb0) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xb0)
keyctl$setperm(0x5, r0, 0x30925)
socket$inet6(0xa, 0x2, 0x0) (async)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x83d3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc02d, 0x800, 0x1000002, 0x95}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c88, 0x4, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f73, 0x40002, 0x40040002, 0x336}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x4001, 0xffffffff}}], 0x1, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r5=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) (async)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002)
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000280)="21cb3b09c98a442631ccff1d44c3f4dec40142ebfe6f65fc01", 0x19}]) (async)
io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r6, &(0x7f0000000280)="21cb3b09c98a442631ccff1d44c3f4dec40142ebfe6f65fc01", 0x19}])

742.68775ms ago: executing program 2 (id=3438):
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='2', 0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

115.360201ms ago: executing program 3 (id=3439):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x8)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f0000002040)={0xdb, 0x0, 0x8e8})
dup(0xffffffffffffffff)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x3, 0x5479, 0x103d, 0x8, 0x1, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x4000000000a, 0x5, 0x6a], 0x2000, 0x808d6})
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000040)={0xc140a1e51f32d997, 0x0, {[0x40007f, 0xf974, 0x0, 0x7ff, 0x17c1, 0xefc, 0x80000000, 0x20000]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$NILFS_IOCTL_SET_SUINFO(r5, 0x40186e8d, 0x0)
r6 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r6, &(0x7f0000000100)={0x1, 0x1}, 0x2)
bind$802154_dgram(r4, &(0x7f0000002180)={0x24, @short={0x2, 0xfffc, 0xaaa0}}, 0x14)
write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000201)={0x2, 0xfc}, 0x2)
write$tun(r4, &(0x7f00000020c0)=ANY=[@ANYRESDEC], 0x3e)
r7 = socket(0x2, 0x80805, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000100)={r9, 0x80000000}, 0x8)
write$tun(r4, &(0x7f0000000240)=ANY=[], 0xfdef)

0s ago: executing program 2 (id=3440):
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
lsm_get_self_attr(0xfb29c5c7cb40410f, &(0x7f0000000040)={0x0, 0x0, 0xd3, 0xb3, ""/179}, &(0x7f0000000180)=0xd3, 0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x80000001, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210})
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000140)=@attr_other={0x0, 0x800, 0xffffffffffffffff, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp', 0x4)
shutdown(r3, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

 __alloc_skb+0x1db/0x7a0
[ 1341.587790][T17684]  netlink_sendmsg+0x5d4/0xb40
[ 1341.587822][T17684]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1341.587852][T17684]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1341.587874][T17684]  ? lock_acquire+0x115/0x350
[ 1341.587900][T17684]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1341.587923][T17684]  sock_sendmsg_nosec+0x13a/0x180
[ 1341.587951][T17684]  sock_write_iter+0x2de/0x3e0
[ 1341.587977][T17684]  ? __pfx_sock_write_iter+0x10/0x10
[ 1341.588007][T17684]  ? bpf_lsm_file_permission+0x9/0x20
[ 1341.588026][T17684]  ? security_file_permission+0x75/0x260
[ 1341.588053][T17684]  vfs_write+0x612/0xba0
[ 1341.588080][T17684]  ? __pfx_vfs_write+0x10/0x10
[ 1341.588108][T17684]  ? __fget_files+0x2a/0x420
[ 1341.588133][T17684]  ksys_write+0x150/0x270
[ 1341.588156][T17684]  ? __pfx_ksys_write+0x10/0x10
[ 1341.588184][T17684]  do_syscall_64+0x166/0x520
[ 1341.588202][T17684]  ? trace_irq_disable+0x3b/0x140
[ 1341.588226][T17684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1341.588249][T17684]  ? clear_bhb_loop+0x70/0xc0
[ 1341.588270][T17684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1341.588286][T17684] RIP: 0033:0x7fdd02d9e0d9
[ 1341.588302][T17684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1341.588317][T17684] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1341.588335][T17684] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1341.588348][T17684] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1341.588359][T17684] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1341.588370][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1341.588380][T17684] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1341.588405][T17684]  </TASK>
[ 1343.693459][ T5794] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[ 1343.874591][ T5794] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1343.890854][ T5794] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1343.890901][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1343.890934][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1343.891029][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.942587][T12133] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1343.971439][ T5794] usb 3-1: config 0 descriptor??
[ 1343.991564][T17715] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1344.017469][T17355] veth0_vlan: entered promiscuous mode
[ 1344.102758][T12133] usb 4-1: Using ep0 maxpacket: 8
[ 1344.115635][T12133] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1344.128353][T12133] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30
[ 1344.128471][T12133] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1344.128504][T12133] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1344.128540][T12133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.141894][T17355] veth1_vlan: entered promiscuous mode
[ 1344.215349][T12133] usb 4-1: config 0 descriptor??
[ 1344.442871][T17355] veth0_macvtap: entered promiscuous mode
[ 1344.489322][T17355] veth1_macvtap: entered promiscuous mode
[ 1344.521809][ T5794] hid_parser_main: 10 callbacks suppressed
[ 1344.543531][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551541][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551565][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551585][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551676][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551696][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551716][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551735][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551755][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551836][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unknown main item tag 0x0
[ 1344.551855][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: unbalanced collection at end of report description
[ 1344.645055][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: parse failed (reason: -22)
[ 1344.645138][ T5794] hid-corsair-void 0003:1B1C:0A30.0048: probe with driver hid-corsair-void failed with error -22
[ 1344.762518][T12133] kye 0003:0458:5015.0049: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1344.774156][T12133] kye 0003:0458:5015.0049: ignoring exceeding usage max
[ 1344.834283][T12133] kye 0003:0458:5015.0049: hidraw0: USB HID vff.fd Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0
[ 1344.846650][T12133] kye 0003:0458:5015.0049: tablet-enabling feature report not found
[ 1344.846670][T12133] kye 0003:0458:5015.0049: tablet enabling failed
[ 1344.885580][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1344.950624][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1345.016595][T17715] syz.2.3156 (17715): drop_caches: 2
[ 1345.050636][T12133] usb 3-1: USB disconnect, device number 104
[ 1345.072642][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.084202][ T1026] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.085481][ T1026] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.154474][ T1026] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1346.004358][T12094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1346.004390][T12094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1346.411546][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1346.411578][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1346.872660][T12133] usb 4-1: USB disconnect, device number 99
[ 1347.382727][T12133] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 1347.554835][T12133] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1347.575199][T12133] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
[ 1347.575296][T12133] usb 9-1: config 0 has no interface number 0
[ 1347.575340][T12133] usb 9-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1347.575360][T12133] usb 9-1: config 0 interface 41 has no altsetting 0
[ 1347.626464][T12133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.626500][T12133] usb 9-1: Product: syz
[ 1347.626523][T12133] usb 9-1: Manufacturer: syz
[ 1347.626537][T12133] usb 9-1: SerialNumber: syz
[ 1347.672551][T12133] usb 9-1: config 0 descriptor??
[ 1347.702657][T12133] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -22
[ 1347.743753][T17759] FAULT_INJECTION: forcing a failure.
[ 1347.743753][T17759] name failslab, interval 1, probability 10, space 0, times 0
[ 1347.743793][T17759] CPU: 0 UID: 0 PID: 17759 Comm: syz.2.3167 Not tainted syzkaller #0 PREEMPT(full) 
[ 1347.743812][T17759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1347.743822][T17759] Call Trace:
[ 1347.743829][T17759]  <TASK>
[ 1347.743837][T17759]  dump_stack_lvl+0xe8/0x150
[ 1347.743866][T17759]  should_fail_ex+0x3eb/0x540
[ 1347.743895][T17759]  should_failslab+0xa8/0x100
[ 1347.743913][T17759]  __kmalloc_noprof+0xfe/0x720
[ 1347.743936][T17759]  ? tomoyo_encode+0x2ad/0x570
[ 1347.743962][T17759]  ? tomoyo_encode+0x2ad/0x570
[ 1347.743991][T17759]  tomoyo_encode+0x2ad/0x570
[ 1347.744020][T17759]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1347.744061][T17759]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1347.744083][T17759]  tomoyo_path_number_perm+0x246/0x5f0
[ 1347.744107][T17759]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1347.744128][T17759]  ? __lock_acquire+0x6df/0x2e50
[ 1347.744165][T17759]  ? hook_file_ioctl+0x1f2/0x600
[ 1347.744201][T17759]  ? __fget_files+0x2a/0x420
[ 1347.744223][T17759]  ? __fget_files+0x2a/0x420
[ 1347.744240][T17759]  ? __fget_files+0x3a2/0x420
[ 1347.744259][T17759]  ? __fget_files+0x2a/0x420
[ 1347.744280][T17759]  security_file_ioctl+0xc3/0x2a0
[ 1347.744302][T17759]  __se_sys_ioctl+0x47/0x170
[ 1347.744328][T17759]  do_syscall_64+0x166/0x520
[ 1347.744346][T17759]  ? trace_irq_disable+0x3b/0x140
[ 1347.744369][T17759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1347.744387][T17759]  ? clear_bhb_loop+0x70/0xc0
[ 1347.744406][T17759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1347.744423][T17759] RIP: 0033:0x7f8332d9e0d9
[ 1347.744438][T17759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1347.744453][T17759] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1347.744471][T17759] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1347.744484][T17759] RDX: 0000200000001900 RSI: 000000000000541c RDI: 0000000000000003
[ 1347.744495][T17759] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1347.744505][T17759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1347.744516][T17759] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1347.744541][T17759]  </TASK>
[ 1347.744638][T17759] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1348.376090][T12133] usb 4-1: new full-speed USB device number 100 using dummy_hcd
[ 1348.553729][T12133] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1348.566220][T12133] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1348.566270][T12133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1348.566302][T12133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1348.566408][T12133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1348.621954][T12133] usb 4-1: config 0 descriptor??
[ 1348.633734][T17760] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1349.079493][T12133] hid-corsair-void 0003:1B1C:0A30.004A: unbalanced collection at end of report description
[ 1349.095833][T12133] hid-corsair-void 0003:1B1C:0A30.004A: parse failed (reason: -22)
[ 1349.116209][T12133] hid-corsair-void 0003:1B1C:0A30.004A: probe with driver hid-corsair-void failed with error -22
[ 1349.183283][T17773] syzkaller0: entered promiscuous mode
[ 1349.183315][T17773] syzkaller0: entered allmulticast mode
[ 1349.342808][T17760] syz.3.3168 (17760): drop_caches: 2
[ 1349.367617][T12133] usb 4-1: USB disconnect, device number 100
[ 1350.268813][T17786] FAULT_INJECTION: forcing a failure.
[ 1350.268813][T17786] name failslab, interval 1, probability 10, space 0, times 0
[ 1350.282178][T17786] CPU: 0 UID: 0 PID: 17786 Comm: syz.3.3178 Not tainted syzkaller #0 PREEMPT(full) 
[ 1350.282201][T17786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1350.282211][T17786] Call Trace:
[ 1350.282218][T17786]  <TASK>
[ 1350.282226][T17786]  dump_stack_lvl+0xe8/0x150
[ 1350.282257][T17786]  should_fail_ex+0x3eb/0x540
[ 1350.282290][T17786]  should_failslab+0xa8/0x100
[ 1350.282308][T17786]  ? skb_clone+0x212/0x3a0
[ 1350.282331][T17786]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1350.282356][T17786]  ? skb_clone+0x212/0x3a0
[ 1350.282382][T17786]  skb_clone+0x212/0x3a0
[ 1350.282406][T17786]  __netlink_deliver_tap+0x413/0x860
[ 1350.282439][T17786]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1350.282464][T17786]  netlink_deliver_tap+0x19c/0x1b0
[ 1350.282488][T17786]  netlink_unicast+0x781/0x940
[ 1350.282517][T17786]  netlink_sendmsg+0x813/0xb40
[ 1350.282548][T17786]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1350.282577][T17786]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1350.282603][T17786]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1350.282626][T17786]  sock_sendmsg_nosec+0x13a/0x180
[ 1350.282655][T17786]  ____sys_sendmsg+0x54e/0x850
[ 1350.282680][T17786]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1350.282707][T17786]  ? import_iovec+0x73/0xa0
[ 1350.282727][T17786]  ___sys_sendmsg+0x2a5/0x360
[ 1350.282747][T17786]  ? __lock_acquire+0x6df/0x2e50
[ 1350.282776][T17786]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1350.282827][T17786]  ? __fget_files+0x2a/0x420
[ 1350.282846][T17786]  ? __fget_files+0x3a2/0x420
[ 1350.282873][T17786]  __x64_sys_sendmsg+0x1b1/0x290
[ 1350.282896][T17786]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1350.282932][T17786]  do_syscall_64+0x166/0x520
[ 1350.282950][T17786]  ? trace_irq_disable+0x3b/0x140
[ 1350.282975][T17786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1350.282992][T17786]  ? clear_bhb_loop+0x70/0xc0
[ 1350.283013][T17786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1350.283029][T17786] RIP: 0033:0x7fdd02d9e0d9
[ 1350.283045][T17786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1350.283060][T17786] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1350.283078][T17786] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1350.283091][T17786] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 1350.283101][T17786] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1350.283112][T17786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1350.283122][T17786] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1350.283147][T17786]  </TASK>
[ 1350.650281][ T5814] usb 9-1: USB disconnect, device number 24
[ 1351.075228][T17786] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[ 1351.085130][T17786] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[ 1351.085168][T17786] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[ 1351.410278][T17794] syzkaller0: entered promiscuous mode
[ 1351.410312][T17794] syzkaller0: entered allmulticast mode
[ 1351.567973][T17786] syz.3.3178 (17786) used greatest stack depth: 18312 bytes left
[ 1352.272794][T12133] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[ 1352.435331][T12133] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1352.447270][T12133] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1352.447318][T12133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1352.447410][T12133] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1352.447446][T12133] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1352.514878][T12133] usb 2-1: config 0 descriptor??
[ 1352.531692][T17802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1352.795585][T17806] syz.3.3188 (17806) used greatest stack depth: 18088 bytes left
[ 1352.940980][ T5814] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 1352.992792][T12133] hid_parser_main: 10 callbacks suppressed
[ 1353.000497][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008711][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008736][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008756][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008776][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008796][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008815][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008835][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008855][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008875][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unknown main item tag 0x0
[ 1353.008894][T12133] hid-corsair-void 0003:1B1C:0A30.004B: unbalanced collection at end of report description
[ 1353.098555][T12133] hid-corsair-void 0003:1B1C:0A30.004B: parse failed (reason: -22)
[ 1353.098700][T12133] hid-corsair-void 0003:1B1C:0A30.004B: probe with driver hid-corsair-void failed with error -22
[ 1353.182749][ T5814] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1353.190445][ T5814] usb 9-1: config 0 has an invalid interface number: 41 but max is 0
[ 1353.190484][ T5814] usb 9-1: config 0 has no interface number 0
[ 1353.190518][ T5814] usb 9-1: config 0 interface 41 has no altsetting 0
[ 1353.241162][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1353.241198][ T5814] usb 9-1: Product: syz
[ 1353.241212][ T5814] usb 9-1: Manufacturer: syz
[ 1353.241227][ T5814] usb 9-1: SerialNumber: syz
[ 1353.283549][ T5814] usb 9-1: config 0 descriptor??
[ 1353.339165][T17802] syz.1.3186 (17802): drop_caches: 2
[ 1353.353102][T12133] usb 2-1: USB disconnect, device number 117
[ 1353.948908][ T5814] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71
[ 1353.992801][ T5814] usb 9-1: USB disconnect, device number 25
[ 1354.153200][T17822] syzkaller0: entered promiscuous mode
[ 1354.153234][T17822] syzkaller0: entered allmulticast mode
[ 1354.977800][T17835] binder_alloc: binder_alloc_mmap_handler: 17832 200000ffc000-200000ffd000 already mapped failed -16
[ 1355.016208][T17834] binder_alloc: 17832: binder_alloc_buf, no vma
[ 1355.089217][T17842] FAULT_INJECTION: forcing a failure.
[ 1355.089217][T17842] name failslab, interval 1, probability 10, space 0, times 0
[ 1355.104742][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.2.3204 Not tainted syzkaller #0 PREEMPT(full) 
[ 1355.104766][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1355.104777][T17842] Call Trace:
[ 1355.104784][T17842]  <TASK>
[ 1355.104794][T17842]  dump_stack_lvl+0xe8/0x150
[ 1355.104821][T17842]  should_fail_ex+0x3eb/0x540
[ 1355.104849][T17842]  should_failslab+0xa8/0x100
[ 1355.104868][T17842]  __kmalloc_noprof+0xfe/0x720
[ 1355.104910][T17842]  ? rcu_is_watching+0x16/0xb0
[ 1355.104927][T17842]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1355.104954][T17842]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1355.104994][T17842]  tomoyo_realpath_from_path+0xef/0x640
[ 1355.105039][T17842]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1355.105072][T17842]  tomoyo_path_number_perm+0x246/0x5f0
[ 1355.105097][T17842]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1355.105130][T17842]  ? __lock_acquire+0x6df/0x2e50
[ 1355.105165][T17842]  ? hook_file_ioctl+0x1f2/0x600
[ 1355.105203][T17842]  ? __fget_files+0x2a/0x420
[ 1355.105242][T17842]  ? __fget_files+0x2a/0x420
[ 1355.105261][T17842]  ? __fget_files+0x3a2/0x420
[ 1355.105278][T17842]  ? __fget_files+0x2a/0x420
[ 1355.105300][T17842]  security_file_ioctl+0xc3/0x2a0
[ 1355.105323][T17842]  __se_sys_ioctl+0x47/0x170
[ 1355.105349][T17842]  do_syscall_64+0x166/0x520
[ 1355.105372][T17842]  ? trace_irq_disable+0x3b/0x140
[ 1355.105395][T17842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.105412][T17842]  ? clear_bhb_loop+0x70/0xc0
[ 1355.105433][T17842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1355.105449][T17842] RIP: 0033:0x7f8332d9e0d9
[ 1355.105465][T17842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1355.105480][T17842] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1355.105499][T17842] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1355.105511][T17842] RDX: 0000200000000380 RSI: 00000000c0d05640 RDI: 0000000000000003
[ 1355.105522][T17842] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1355.105533][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1355.105543][T17842] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1355.105568][T17842]  </TASK>
[ 1355.181198][T17842] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1355.642115][ T5794] usb 9-1: new low-speed USB device number 26 using dummy_hcd
[ 1355.781049][ T5794] usb 9-1: device descriptor read/64, error -71
[ 1356.011507][ T5814] usb 3-1: new full-speed USB device number 105 using dummy_hcd
[ 1356.020594][ T5794] usb 9-1: new low-speed USB device number 27 using dummy_hcd
[ 1356.151496][ T5794] usb 9-1: device descriptor read/64, error -71
[ 1356.183517][ T5814] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1356.222860][ T5814] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1356.222917][ T5814] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1356.223023][ T5814] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1356.223063][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1356.273063][ T5794] usb usb9-port1: attempt power cycle
[ 1356.292414][ T5814] usb 3-1: config 0 descriptor??
[ 1356.317995][T17848] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1356.469531][T17857] syzkaller0: entered promiscuous mode
[ 1356.475452][T17857] syzkaller0: entered allmulticast mode
[ 1356.565749][T17858] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.3209'.
[ 1356.620235][ T5794] usb 9-1: new low-speed USB device number 28 using dummy_hcd
[ 1356.647217][ T5794] usb 9-1: device descriptor read/8, error -71
[ 1356.763247][ T5814] hid-corsair-void 0003:1B1C:0A30.004C: unbalanced collection at end of report description
[ 1356.764078][ T5814] hid-corsair-void 0003:1B1C:0A30.004C: parse failed (reason: -22)
[ 1356.764236][ T5814] hid-corsair-void 0003:1B1C:0A30.004C: probe with driver hid-corsair-void failed with error -22
[ 1356.881852][ T5794] usb 9-1: new low-speed USB device number 29 using dummy_hcd
[ 1356.913135][ T5794] usb 9-1: device descriptor read/8, error -71
[ 1357.021399][ T5794] usb usb9-port1: unable to enumerate USB device
[ 1357.035413][T17848] syz.2.3205 (17848): drop_caches: 2
[ 1357.080574][ T5814] usb 3-1: USB disconnect, device number 105
[ 1357.402037][ T5794] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 1357.564209][ T5794] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1357.575788][ T5794] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 1357.575821][ T5794] usb 2-1: config 0 has no interface number 0
[ 1357.575921][ T5794] usb 2-1: config 0 interface 41 has no altsetting 0
[ 1357.615947][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.625755][ T5794] usb 2-1: Product: syz
[ 1357.631040][ T5794] usb 2-1: Manufacturer: syz
[ 1357.635967][ T5794] usb 2-1: SerialNumber: syz
[ 1357.659480][ T5794] usb 2-1: config 0 descriptor??
[ 1358.357463][ T5794] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[ 1358.399825][ T5794] usb 2-1: USB disconnect, device number 118
[ 1358.616959][T17880] syzkaller0: entered promiscuous mode
[ 1358.616992][T17880] syzkaller0: entered allmulticast mode
[ 1358.687311][T17883] FAULT_INJECTION: forcing a failure.
[ 1358.687311][T17883] name failslab, interval 1, probability 10, space 0, times 0
[ 1358.724841][T17883] CPU: 0 UID: 0 PID: 17883 Comm: syz.3.3221 Not tainted syzkaller #0 PREEMPT(full) 
[ 1358.724894][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1358.724912][T17883] Call Trace:
[ 1358.724919][T17883]  <TASK>
[ 1358.724927][T17883]  dump_stack_lvl+0xe8/0x150
[ 1358.724954][T17883]  should_fail_ex+0x3eb/0x540
[ 1358.724991][T17883]  should_failslab+0xa8/0x100
[ 1358.725010][T17883]  __kvmalloc_node_noprof+0x176/0x820
[ 1358.725037][T17883]  ? sbitmap_init_node+0x2bc/0x630
[ 1358.725055][T17883]  ? sbitmap_init_node+0x2bc/0x630
[ 1358.725077][T17883]  sbitmap_init_node+0x2bc/0x630
[ 1358.725101][T17883]  sbitmap_queue_init_node+0x3e/0x4d0
[ 1358.725123][T17883]  blk_mq_init_tags+0x15c/0x2d0
[ 1358.725147][T17883]  blk_mq_alloc_map_and_rqs+0xbc/0x980
[ 1358.725239][T17883]  ? __kmalloc_noprof+0x38c/0x720
[ 1358.725261][T17883]  ? __kmalloc_noprof+0x1ab/0x720
[ 1358.725282][T17883]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[ 1358.725306][T17883]  ? blk_mq_alloc_sched_tags+0x6e/0x380
[ 1358.725336][T17883]  blk_mq_alloc_sched_tags+0x14d/0x380
[ 1358.725367][T17883]  blk_mq_alloc_sched_res+0x92/0x360
[ 1358.725395][T17883]  elevator_change+0x122/0x480
[ 1358.725452][T17883]  ? do_raw_spin_unlock+0xf5/0x200
[ 1358.725480][T17883]  elv_iosched_store+0x504/0x630
[ 1358.725510][T17883]  ? __pfx_elv_iosched_store+0x10/0x10
[ 1358.725541][T17883]  ? __lock_acquire+0x6df/0x2e50
[ 1358.725570][T17883]  queue_attr_store+0x207/0x2b0
[ 1358.725617][T17883]  ? __pfx_queue_attr_store+0x10/0x10
[ 1358.725645][T17883]  ? lock_acquire+0x115/0x350
[ 1358.725669][T17883]  ? sysfs_file_kobj+0x1a/0x230
[ 1358.725695][T17883]  ? sysfs_file_kobj+0x1a/0x230
[ 1358.725713][T17883]  ? sysfs_file_kobj+0x1a/0x230
[ 1358.725730][T17883]  ? sysfs_file_kobj+0x1a/0x230
[ 1358.725749][T17883]  ? sysfs_file_kobj+0x1e4/0x230
[ 1358.725769][T17883]  ? sysfs_kf_write+0x166/0x260
[ 1358.725792][T17883]  ? __pfx_sysfs_kf_write+0x10/0x10
[ 1358.725810][T17883]  kernfs_fop_write_iter+0x3a4/0x540
[ 1358.725832][T17883]  vfs_write+0x612/0xba0
[ 1358.725861][T17883]  ? __pfx_vfs_write+0x10/0x10
[ 1358.725890][T17883]  ? __fget_files+0x2a/0x420
[ 1358.725918][T17883]  ksys_write+0x150/0x270
[ 1358.725950][T17883]  ? __pfx_ksys_write+0x10/0x10
[ 1358.725984][T17883]  do_syscall_64+0x166/0x520
[ 1358.726003][T17883]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1358.726020][T17883]  ? clear_bhb_loop+0x70/0xc0
[ 1358.726041][T17883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1358.726058][T17883] RIP: 0033:0x7fdd02d9e0d9
[ 1358.726074][T17883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1358.726090][T17883] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1358.726111][T17883] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1358.726124][T17883] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1358.726135][T17883] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1358.726146][T17883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1358.726156][T17883] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1358.726182][T17883]  </TASK>
[ 1359.810161][ T5814] usb 4-1: new full-speed USB device number 101 using dummy_hcd
[ 1359.830058][ T5794] usb 3-1: new full-speed USB device number 106 using dummy_hcd
[ 1359.975372][ T5814] usb 4-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[ 1359.988648][ T5794] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1360.024261][ T5794] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1360.024438][ T5794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1360.024590][ T5794] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1360.024626][ T5794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.086652][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.098380][ T5814] usb 4-1: Product: syz
[ 1360.098417][ T5814] usb 4-1: Manufacturer: syz
[ 1360.098432][ T5814] usb 4-1: SerialNumber: syz
[ 1360.143930][ T5794] usb 3-1: config 0 descriptor??
[ 1360.153712][ T5814] usb 4-1: config 0 descriptor??
[ 1360.169436][T17894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1360.200782][ T5814] usb 4-1: selecting invalid altsetting 1
[ 1360.208953][ T5814] technisat-usb2: could not set alternate setting to 0
[ 1360.382061][T17889] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3222'.
[ 1360.382098][T17889] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3222'.
[ 1360.382203][T17889] netlink: 'syz.3.3222': attribute type 5 has an invalid length.
[ 1360.382217][T17889] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3222'.
[ 1360.432049][ T5814] technisat-usb2: firmware version: 0.0
[ 1360.432211][ T5814] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[ 1360.462863][T17906] FAULT_INJECTION: forcing a failure.
[ 1360.462863][T17906] name failslab, interval 1, probability 10, space 0, times 0
[ 1360.475901][T17906] CPU: 0 UID: 0 PID: 17906 Comm: syz.8.3227 Not tainted syzkaller #0 PREEMPT(full) 
[ 1360.475928][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1360.475939][T17906] Call Trace:
[ 1360.475947][T17906]  <TASK>
[ 1360.475955][T17906]  dump_stack_lvl+0xe8/0x150
[ 1360.475982][T17906]  should_fail_ex+0x3eb/0x540
[ 1360.476011][T17906]  should_failslab+0xa8/0x100
[ 1360.476029][T17906]  __kmalloc_noprof+0xfe/0x720
[ 1360.476050][T17906]  ? rcu_is_watching+0x16/0xb0
[ 1360.476067][T17906]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1360.476092][T17906]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1360.476122][T17906]  tomoyo_realpath_from_path+0xef/0x640
[ 1360.476153][T17906]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1360.476174][T17906]  tomoyo_path_number_perm+0x246/0x5f0
[ 1360.476197][T17906]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1360.476217][T17906]  ? __lock_acquire+0x6df/0x2e50
[ 1360.476251][T17906]  ? hook_file_ioctl+0x1f2/0x600
[ 1360.476287][T17906]  ? __fget_files+0x2a/0x420
[ 1360.476307][T17906]  ? __fget_files+0x2a/0x420
[ 1360.476324][T17906]  ? __fget_files+0x3a2/0x420
[ 1360.476340][T17906]  ? __fget_files+0x2a/0x420
[ 1360.476361][T17906]  security_file_ioctl+0xc3/0x2a0
[ 1360.476383][T17906]  __se_sys_ioctl+0x47/0x170
[ 1360.476408][T17906]  do_syscall_64+0x166/0x520
[ 1360.476427][T17906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1360.476443][T17906]  ? clear_bhb_loop+0x70/0xc0
[ 1360.476463][T17906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1360.476479][T17906] RIP: 0033:0x7f3217d9e0d9
[ 1360.476495][T17906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1360.476508][T17906] RSP: 002b:00007f3218d2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1360.476526][T17906] RAX: ffffffffffffffda RBX: 00007f3218026090 RCX: 00007f3217d9e0d9
[ 1360.476538][T17906] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004
[ 1360.476549][T17906] RBP: 00007f3218d2f090 R08: 0000000000000000 R09: 0000000000000000
[ 1360.476559][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1360.476569][T17906] R13: 00007f3218026128 R14: 00007f3218026090 R15: 00007ffe34f5e888
[ 1360.476593][T17906]  </TASK>
[ 1360.476686][T17906] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1360.797309][ T5794] hid_parser_main: 10 callbacks suppressed
[ 1360.797422][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797447][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797470][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797492][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797515][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797611][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797633][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797656][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797685][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797778][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unknown main item tag 0x0
[ 1360.797801][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: unbalanced collection at end of report description
[ 1360.842752][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: parse failed (reason: -22)
[ 1360.842905][ T5794] hid-corsair-void 0003:1B1C:0A30.004D: probe with driver hid-corsair-void failed with error -22
[ 1361.181759][T17889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1361.194303][T17889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1361.257511][T17894] syz.2.3224 (17894): drop_caches: 2
[ 1361.275066][ T5794] usb 3-1: USB disconnect, device number 106
[ 1361.405214][ T5814] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1361.446771][ T5814] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[ 1361.546857][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.548989][ T1311] aoe: packet could not be sent on ipvlan0.  consider increasing tx_queue_len
[ 1361.774774][ T5349] usb 4-1: USB disconnect, device number 101
[ 1362.066553][T17917] syzkaller0: entered promiscuous mode
[ 1362.066590][T17917] syzkaller0: entered allmulticast mode
[ 1362.419658][ T5349] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1362.569364][ T5349] usb 3-1: Using ep0 maxpacket: 16
[ 1362.575667][ T5349] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c
[ 1362.587635][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1362.587674][ T5349] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1362.587701][ T5349] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1362.587799][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1362.655943][ T5349] usb 3-1: config 0 descriptor??
[ 1362.849343][ T5630] usb 9-1: new full-speed USB device number 30 using dummy_hcd
[ 1362.993982][T17920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1363.013390][ T5630] usb 9-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00
[ 1363.028981][T17920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1363.038406][ T5630] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1363.038444][ T5630] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1363.038480][ T5630] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.076231][ T5630] usb 9-1: config 0 descriptor??
[ 1363.092802][T17924] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1363.283489][ T5349] usbhid 3-1:0.0: can't add hid device: -71
[ 1363.283679][ T5349] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1363.341865][ T5349] usb 3-1: USB disconnect, device number 107
[ 1363.609647][ T5630] lenovo 0003:17EF:6062.004E: reserved main item tag 0xe
[ 1363.617108][ T5630] lenovo 0003:17EF:6062.004E: item fetching failed at offset 32/40
[ 1363.636476][ T5630] lenovo 0003:17EF:6062.004E: hid_parse failed
[ 1363.643493][ T5630] lenovo 0003:17EF:6062.004E: probe with driver lenovo failed with error -22
[ 1363.722947][T17934] jffs2: notice: (17934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (1 dead, 0 orphan) found.
[ 1363.817477][ T5630] usb 9-1: USB disconnect, device number 30
[ 1364.520342][ T5630] usb 3-1: new full-speed USB device number 108 using dummy_hcd
[ 1364.691270][ T5630] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1364.709497][ T5630] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1364.709544][ T5630] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1364.709576][ T5630] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1364.709672][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.772675][ T5630] usb 3-1: config 0 descriptor??
[ 1364.789242][T17941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1364.987139][T17947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3244'.
[ 1365.237035][ T5630] hid-corsair-void 0003:1B1C:0A30.004F: unbalanced collection at end of report description
[ 1365.257968][ T5630] hid-corsair-void 0003:1B1C:0A30.004F: parse failed (reason: -22)
[ 1365.258064][ T5630] hid-corsair-void 0003:1B1C:0A30.004F: probe with driver hid-corsair-void failed with error -22
[ 1365.361529][ T5814] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1365.455874][T17941] syz.2.3241 (17941): drop_caches: 2
[ 1365.489515][ T5630] usb 3-1: USB disconnect, device number 108
[ 1365.520882][ T5814] usb 9-1: Using ep0 maxpacket: 8
[ 1365.537040][ T5814] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1365.555133][ T5814] usb 9-1: config index 0 descriptor too short (expected 301, got 45)
[ 1365.555245][ T5814] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1365.555275][ T5814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1365.555296][ T5814] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1365.555317][ T5814] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1365.555351][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1365.883188][T17954] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3247'.
[ 1365.904837][ T5814] usb 9-1: usb_control_msg returned -32
[ 1365.914192][ T5814] usbtmc 9-1:16.0: can't read capabilities
[ 1366.136259][ T5349] usb 9-1: USB disconnect, device number 31
[ 1366.219862][ T5814] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1366.383114][ T5814] usb 4-1: Using ep0 maxpacket: 16
[ 1366.392122][ T5814] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1366.416376][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1366.444917][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.445010][ T5814] usb 4-1: Product: syz
[ 1366.445034][ T5814] usb 4-1: Manufacturer: syz
[ 1366.445048][ T5814] usb 4-1: SerialNumber: syz
[ 1366.479411][ T5814] usb 4-1: config 0 descriptor??
[ 1366.504948][ T5814] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1366.518624][ T5814] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1366.621153][ T5630] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1366.789895][ T5630] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1366.803145][ T5630] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 1366.814318][ T5630] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[ 1366.836229][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1366.845228][ T5630] usb 3-1: Product: syz
[ 1366.852666][ T5630] usb 3-1: Manufacturer: 趖㮺왈∧꧉踢홯ᬭ菑탲먰⣚렷⠶ﺙ픑﷤⯒螅姟鰣㡄張횡읾㯮ⴼꡪ㱹ḝ鿾颫ᚭ轇㾓㑾㺂ᨣ㙌贼᪃咤ᭁ楎茈黤灱⃨쾏쎢᧥ॠ띫퀒ㇷ࿥⶿쀇勵聇皡熫ʴ᪴莗❺쌶㼡⭛芟ퟅ埮鐓睹犃귒퐴烝⠺檱ﾭ옾ᬥ
[ 1366.852797][ T5630] usb 3-1: SerialNumber: syz
[ 1367.069789][T12134] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[ 1367.110753][ T5814] em28xx 4-1:0.0: chip ID is em2882/3
[ 1367.136474][T17960] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1367.136664][T17960] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1367.232657][T12134] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1367.253541][T12134] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1367.267105][T12134] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1367.267420][T12134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1367.301508][T12134] usb 2-1: config 0 descriptor??
[ 1367.332986][T12134] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1367.353229][T12134] dvb-usb: bulk message failed: -22 (3/0)
[ 1367.375074][T12134] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1367.394843][T12134] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1367.407733][T12134] usb 2-1: media controller created
[ 1367.446041][T12134] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1367.520220][T12134] dvb-usb: bulk message failed: -22 (6/0)
[ 1367.599894][T12134] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1367.632185][T12134] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input68
[ 1367.660460][T12134] dvb-usb: schedule remote query interval to 150 msecs.
[ 1367.671631][T12134] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1367.701907][T12134] usb 2-1: USB disconnect, device number 119
[ 1367.782741][ T5814] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1367.834325][ T5814] em28xx 4-1:0.0: board has no eeprom
[ 1367.863052][ T5630] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[ 1367.863193][ T5630] cdc_ncm 3-1:1.0: bind() failure
[ 1367.927526][ T5630] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 1367.937968][T12134] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1367.953582][ T5630] cdc_ncm 3-1:1.1: bind() failure
[ 1368.008494][ T5630] usb 3-1: USB disconnect, device number 109
[ 1368.039351][ T5814] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1368.039389][ T5814] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1368.061342][ T5794] em28xx 4-1:0.0: Binding DVB extension
[ 1368.123568][ T5814] usb 4-1: USB disconnect, device number 102
[ 1368.155288][ T5814] em28xx 4-1:0.0: Disconnecting em28xx
[ 1368.457250][ T5794] em28xx 4-1:0.0: Registering input extension
[ 1368.779474][ T5794] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[ 1368.779705][ T5794] Registered IR keymap rc-empty
[ 1368.823122][ T5794] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1368.845249][ T5794] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69
[ 1368.974194][ T5794] em28xx 4-1:0.0: Input extension successfully initialized
[ 1368.984647][ T5814] em28xx 4-1:0.0: Closing input extension
[ 1369.176500][T17977] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3256'.
[ 1369.176533][T17977] tipc: Invalid UDP bearer configuration
[ 1369.176573][T17977] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1369.400204][ T5794] usb 9-1: new full-speed USB device number 32 using dummy_hcd
[ 1369.433577][ T5814] em28xx: Freeing device
[ 1369.568509][ T5794] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1369.600063][ T5794] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1369.600169][ T5794] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1369.600203][ T5794] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1369.600238][ T5794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1369.670451][ T5794] usb 9-1: config 0 descriptor??
[ 1369.688157][T17984] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1370.146432][ T5794] hid_parser_main: 13 callbacks suppressed
[ 1370.158194][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166336][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166362][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166382][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166402][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166422][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166442][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166521][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166541][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166561][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unknown main item tag 0x0
[ 1370.166580][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: unbalanced collection at end of report description
[ 1370.268366][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: parse failed (reason: -22)
[ 1370.268536][ T5794] hid-corsair-void 0003:1B1C:0A30.0050: probe with driver hid-corsair-void failed with error -22
[ 1370.382976][T17984] syz.8.3258 (17984): drop_caches: 2
[ 1370.413618][ T5794] usb 9-1: USB disconnect, device number 32
[ 1371.228229][T18002] netlink: 'syz.1.3265': attribute type 28 has an invalid length.
[ 1371.241223][T18002] netlink: 'syz.1.3265': attribute type 3 has an invalid length.
[ 1371.250493][T18002] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3265'.
[ 1371.666376][T18005] sg_write: data in/out 286684/136 bytes for SCSI command 0x0-- guessing data in;
[ 1371.666376][T18005]    program syz.1.3267 not setting count and/or reply_len properly
[ 1371.962264][T18013] FAULT_INJECTION: forcing a failure.
[ 1371.962264][T18013] name failslab, interval 1, probability 10, space 0, times 0
[ 1371.962306][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.2.3269 Not tainted syzkaller #0 PREEMPT(full) 
[ 1371.962325][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1371.962339][T18013] Call Trace:
[ 1371.962346][T18013]  <TASK>
[ 1371.962353][T18013]  dump_stack_lvl+0xe8/0x150
[ 1371.962380][T18013]  should_fail_ex+0x3eb/0x540
[ 1371.962406][T18013]  ? __alloc_skb+0x1db/0x7a0
[ 1371.962424][T18013]  should_failslab+0xa8/0x100
[ 1371.962442][T18013]  ? __alloc_skb+0x1db/0x7a0
[ 1371.962458][T18013]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1371.962480][T18013]  ? __alloc_skb+0x18d/0x7a0
[ 1371.962498][T18013]  ? __alloc_skb+0x1db/0x7a0
[ 1371.962520][T18013]  __alloc_skb+0x1db/0x7a0
[ 1371.962541][T18013]  netlink_sendmsg+0x5d4/0xb40
[ 1371.962572][T18013]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1371.962601][T18013]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1371.962633][T18013]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1371.962657][T18013]  sock_sendmsg_nosec+0x13a/0x180
[ 1371.962685][T18013]  ____sys_sendmsg+0x54e/0x850
[ 1371.962710][T18013]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1371.962737][T18013]  ? import_iovec+0x73/0xa0
[ 1371.962755][T18013]  ___sys_sendmsg+0x2a5/0x360
[ 1371.962776][T18013]  ? __lock_acquire+0x6df/0x2e50
[ 1371.962803][T18013]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1371.962847][T18013]  ? __fget_files+0x2a/0x420
[ 1371.962865][T18013]  ? __fget_files+0x3a2/0x420
[ 1371.962889][T18013]  __x64_sys_sendmsg+0x1b1/0x290
[ 1371.962911][T18013]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1371.962946][T18013]  do_syscall_64+0x166/0x520
[ 1371.962963][T18013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.962980][T18013]  ? clear_bhb_loop+0x70/0xc0
[ 1371.963000][T18013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1371.963016][T18013] RIP: 0033:0x7f8332d9e0d9
[ 1371.963032][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1371.963046][T18013] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1371.963064][T18013] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1371.963076][T18013] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1371.963088][T18013] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1371.963098][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1371.963109][T18013] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1371.963133][T18013]  </TASK>
[ 1372.624275][T18020] netlink: 'syz.1.3271': attribute type 28 has an invalid length.
[ 1372.624307][T18020] netlink: 'syz.1.3271': attribute type 3 has an invalid length.
[ 1372.624389][T18020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3271'.
[ 1372.796510][T18021] XFS (nullb0): no-recovery mounts must be read-only.
[ 1372.822016][   T50] IPVS: starting estimator thread 0...
[ 1372.912466][T13143] Bluetooth: hci3: unexpected event 0x04 length: 11 > 10
[ 1372.918966][T18025] IPVS: using max 10 ests per chain, 24000 per kthread
[ 1372.990190][T18024] IPVS: set_ctl: invalid protocol: 25647 47.107.118.109:116
[ 1373.017747][T18024] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1373.444273][T12133] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[ 1373.611778][T12133] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1373.629526][T12133] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1373.629576][T12133] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1373.629608][T12133] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1373.629708][T12133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.693633][T12133] usb 4-1: config 0 descriptor??
[ 1373.710016][T18028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1374.198631][T12133] hid-corsair-void 0003:1B1C:0A30.0051: unbalanced collection at end of report description
[ 1374.213947][T12133] hid-corsair-void 0003:1B1C:0A30.0051: parse failed (reason: -22)
[ 1374.225693][T12133] hid-corsair-void 0003:1B1C:0A30.0051: probe with driver hid-corsair-void failed with error -22
[ 1374.462328][ T5794] usb 4-1: USB disconnect, device number 103
[ 1374.939806][ T5630] usb 9-1: new full-speed USB device number 33 using dummy_hcd
[ 1374.978049][T17356] Bluetooth: hci3: command 0x0406 tx timeout
[ 1375.109794][ T5630] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1375.135156][ T5630] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.135223][ T5630] usb 9-1: Product: syz
[ 1375.135248][ T5630] usb 9-1: Manufacturer: syz
[ 1375.135262][ T5630] usb 9-1: SerialNumber: syz
[ 1375.213739][ T5630] usb 9-1: config 0 descriptor??
[ 1375.476493][ T5630] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1375.586890][T18053] FAULT_INJECTION: forcing a failure.
[ 1375.586890][T18053] name failslab, interval 1, probability 10, space 0, times 0
[ 1375.603609][T18053] CPU: 0 UID: 0 PID: 18053 Comm: syz.2.3285 Not tainted syzkaller #0 PREEMPT(full) 
[ 1375.603633][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1375.603644][T18053] Call Trace:
[ 1375.603653][T18053]  <TASK>
[ 1375.603661][T18053]  dump_stack_lvl+0xe8/0x150
[ 1375.603691][T18053]  should_fail_ex+0x3eb/0x540
[ 1375.603718][T18053]  ? __alloc_skb+0x1db/0x7a0
[ 1375.603737][T18053]  should_failslab+0xa8/0x100
[ 1375.603755][T18053]  ? __alloc_skb+0x1db/0x7a0
[ 1375.603771][T18053]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1375.603794][T18053]  ? __alloc_skb+0x18d/0x7a0
[ 1375.603812][T18053]  ? __alloc_skb+0x1db/0x7a0
[ 1375.603834][T18053]  __alloc_skb+0x1db/0x7a0
[ 1375.603855][T18053]  netlink_sendmsg+0x5d4/0xb40
[ 1375.603887][T18053]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1375.603916][T18053]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1375.603941][T18053]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1375.603964][T18053]  sock_sendmsg_nosec+0x13a/0x180
[ 1375.603991][T18053]  ____sys_sendmsg+0x54e/0x850
[ 1375.604017][T18053]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1375.604044][T18053]  ? import_iovec+0x73/0xa0
[ 1375.604062][T18053]  ___sys_sendmsg+0x2a5/0x360
[ 1375.604082][T18053]  ? __lock_acquire+0x6df/0x2e50
[ 1375.604110][T18053]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1375.604155][T18053]  ? __fget_files+0x2a/0x420
[ 1375.604173][T18053]  ? __fget_files+0x3a2/0x420
[ 1375.604199][T18053]  __x64_sys_sendmsg+0x1b1/0x290
[ 1375.604222][T18053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1375.604258][T18053]  do_syscall_64+0x166/0x520
[ 1375.604275][T18053]  ? trace_irq_disable+0x3b/0x140
[ 1375.604299][T18053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1375.604315][T18053]  ? clear_bhb_loop+0x70/0xc0
[ 1375.604336][T18053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1375.604375][T18053] RIP: 0033:0x7f8332d9e0d9
[ 1375.604391][T18053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1375.604405][T18053] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1375.604423][T18053] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1375.604436][T18053] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000004
[ 1375.604447][T18053] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1375.604457][T18053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1375.604468][T18053] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1375.604492][T18053]  </TASK>

syzkaller
syzkaller login: [ 1377.057473][T17356] Bluetooth: hci3: command 0x0406 tx timeout
[ 1377.157977][ T5794] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[ 1377.245663][ T5630] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1377.274970][ T5630] usb 9-1: USB disconnect, device number 33
[ 1377.297249][ T5794] usb 2-1: device descriptor read/64, error -71
[ 1377.306571][ T5814] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1377.437897][ T5814] usb 4-1: device descriptor read/64, error -71
[ 1377.537520][ T5794] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[ 1377.576866][T12133] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[ 1377.676834][ T5794] usb 2-1: device descriptor read/64, error -71
[ 1377.683328][ T5814] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1377.738865][T12133] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1377.750547][T12133] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1377.762746][T12133] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1377.762771][T12133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1377.762805][T12133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.803312][ T5794] usb usb2-port1: attempt power cycle
[ 1377.818749][T12133] usb 3-1: config 0 descriptor??
[ 1377.830239][T18073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1377.858011][ T5814] usb 4-1: device descriptor read/64, error -71
[ 1377.968151][ T5814] usb usb4-port1: attempt power cycle
[ 1378.150563][ T5794] usb 2-1: new full-speed USB device number 122 using dummy_hcd
[ 1378.304735][T12133] hid_parser_main: 10 callbacks suppressed
[ 1378.304841][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.304868][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.304890][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.304913][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.304935][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.305008][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.305032][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.305061][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.305084][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.305106][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unknown main item tag 0x0
[ 1378.320986][ T5814] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1378.341394][T12133] hid-corsair-void 0003:1B1C:0A30.0052: unbalanced collection at end of report description
[ 1378.342184][T12133] hid-corsair-void 0003:1B1C:0A30.0052: parse failed (reason: -22)
[ 1378.379803][ T5794] usb 2-1: device not accepting address 122, error -71
[ 1378.400179][ T5814] usb 4-1: device descriptor read/8, error -71
[ 1378.408538][T12133] hid-corsair-void 0003:1B1C:0A30.0052: probe with driver hid-corsair-void failed with error -22
[ 1378.541677][T12133] usb 3-1: USB disconnect, device number 110
[ 1378.639121][ T5814] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1378.672085][ T5814] usb 4-1: device descriptor read/8, error -71
[ 1378.814685][ T5814] usb usb4-port1: unable to enumerate USB device
[ 1379.138948][T17356] Bluetooth: hci3: command 0x0406 tx timeout
[ 1379.401810][T18085] FAULT_INJECTION: forcing a failure.
[ 1379.401810][T18085] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1379.401851][T18085] CPU: 0 UID: 0 PID: 18085 Comm: syz.8.3298 Not tainted syzkaller #0 PREEMPT(full) 
[ 1379.401871][T18085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1379.401882][T18085] Call Trace:
[ 1379.401888][T18085]  <TASK>
[ 1379.401896][T18085]  dump_stack_lvl+0xe8/0x150
[ 1379.401933][T18085]  should_fail_ex+0x3eb/0x540
[ 1379.401960][T18085]  _copy_from_iter+0x1d3/0x1660
[ 1379.401994][T18085]  ? __pfx__copy_from_iter+0x10/0x10
[ 1379.402017][T18085]  ? trace_kmalloc+0x2a/0xf0
[ 1379.402043][T18085]  ? __kmalloc_noprof+0x38c/0x720
[ 1379.402065][T18085]  ? __kmalloc_noprof+0x1ab/0x720
[ 1379.402086][T18085]  ? kernfs_fop_write_iter+0x157/0x540
[ 1379.402109][T18085]  kernfs_fop_write_iter+0x19a/0x540
[ 1379.402129][T18085]  vfs_write+0x612/0xba0
[ 1379.402156][T18085]  ? __pfx_vfs_write+0x10/0x10
[ 1379.402184][T18085]  ? __fget_files+0x2a/0x420
[ 1379.402210][T18085]  ksys_write+0x150/0x270
[ 1379.402232][T18085]  ? __pfx_ksys_write+0x10/0x10
[ 1379.402270][T18085]  do_syscall_64+0x166/0x520
[ 1379.402289][T18085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.402306][T18085]  ? clear_bhb_loop+0x70/0xc0
[ 1379.402326][T18085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.402342][T18085] RIP: 0033:0x7f3217d9e0d9
[ 1379.402358][T18085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1379.402373][T18085] RSP: 002b:00007f3218d50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1379.402392][T18085] RAX: ffffffffffffffda RBX: 00007f3218025fa0 RCX: 00007f3217d9e0d9
[ 1379.402404][T18085] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003
[ 1379.402415][T18085] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1379.402425][T18085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1379.402435][T18085] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1379.402460][T18085]  </TASK>
[ 1380.305125][T18093] kvm: pic: level sensitive irq not supported
[ 1380.323728][T18097] FAULT_INJECTION: forcing a failure.
[ 1380.323728][T18097] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1380.358306][T18093] kvm: pic: level sensitive irq not supported
[ 1380.359084][T18093] kvm: pic: single mode not supported
[ 1380.359119][T18093] kvm: pic: level sensitive irq not supported
[ 1380.381845][T18097] CPU: 0 UID: 0 PID: 18097 Comm: syz.8.3303 Not tainted syzkaller #0 PREEMPT(full) 
[ 1380.381871][T18097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1380.381882][T18097] Call Trace:
[ 1380.381889][T18097]  <TASK>
[ 1380.381897][T18097]  dump_stack_lvl+0xe8/0x150
[ 1380.381927][T18097]  should_fail_ex+0x3eb/0x540
[ 1380.381955][T18097]  _copy_to_user+0x31/0xb0
[ 1380.381974][T18097]  simple_read_from_buffer+0xe1/0x170
[ 1380.381998][T18097]  proc_fail_nth_read+0x1bb/0x230
[ 1380.382021][T18097]  ? common_file_perm+0x20e/0x2b0
[ 1380.382048][T18097]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1380.382073][T18097]  ? rw_verify_area+0x24a/0x4c0
[ 1380.382095][T18097]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1380.382117][T18097]  vfs_read+0x213/0xa80
[ 1380.382142][T18097]  ? __pfx___mutex_lock+0x10/0x10
[ 1380.382161][T18097]  ? __pfx_vfs_read+0x10/0x10
[ 1380.382182][T18097]  ? __fget_files+0x2a/0x420
[ 1380.382204][T18097]  ? __fget_files+0x3a2/0x420
[ 1380.382222][T18097]  ? __fget_files+0x2a/0x420
[ 1380.382247][T18097]  ksys_read+0x150/0x270
[ 1380.382269][T18097]  ? __pfx_ksys_read+0x10/0x10
[ 1380.382298][T18097]  do_syscall_64+0x166/0x520
[ 1380.382314][T18097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.382331][T18097]  ? clear_bhb_loop+0x70/0xc0
[ 1380.382350][T18097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.382367][T18097] RIP: 0033:0x7f3217d5e90e
[ 1380.382383][T18097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1380.382398][T18097] RSP: 002b:00007f3218d4ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1380.382416][T18097] RAX: ffffffffffffffda RBX: 00007f3218d506c0 RCX: 00007f3217d5e90e
[ 1380.382429][T18097] RDX: 000000000000000f RSI: 00007f3218d500a0 RDI: 0000000000000003
[ 1380.382439][T18097] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1380.382450][T18097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.382460][T18097] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1380.382484][T18097]  </TASK>
[ 1380.645408][T18093] kvm: pic: single mode not supported
[ 1380.646120][T18093] kvm: pic: level sensitive irq not supported
[ 1380.654058][T18093] kvm: pic: level sensitive irq not supported
[ 1380.664965][T18093] kvm: pic: single mode not supported
[ 1380.664993][T18093] kvm: pic: level sensitive irq not supported
[ 1380.692516][T18093] kvm: pic: single mode not supported
[ 1380.692545][T18093] kvm: pic: level sensitive irq not supported
[ 1380.692819][T18093] kvm: pic: level sensitive irq not supported
[ 1380.692979][T18093] kvm: pic: level sensitive irq not supported
[ 1380.929724][T18100] FAULT_INJECTION: forcing a failure.
[ 1380.929724][T18100] name failslab, interval 1, probability 10, space 0, times 0
[ 1380.929767][T18100] CPU: 0 UID: 0 PID: 18100 Comm: syz.3.3304 Not tainted syzkaller #0 PREEMPT(full) 
[ 1380.929786][T18100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1380.929797][T18100] Call Trace:
[ 1380.929804][T18100]  <TASK>
[ 1380.929812][T18100]  dump_stack_lvl+0xe8/0x150
[ 1380.929842][T18100]  should_fail_ex+0x3eb/0x540
[ 1380.929870][T18100]  ? zswap_store+0xc25/0x2050
[ 1380.929889][T18100]  should_failslab+0xa8/0x100
[ 1380.929907][T18100]  ? zswap_store+0xc25/0x2050
[ 1380.929923][T18100]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1380.929946][T18100]  ? percpu_ref_put+0x1e/0x230
[ 1380.929965][T18100]  ? percpu_ref_put+0x1e/0x230
[ 1380.929983][T18100]  ? zswap_store+0xc25/0x2050
[ 1380.930005][T18100]  zswap_store+0xc25/0x2050
[ 1380.930026][T18100]  ? zswap_store+0x76b/0x2050
[ 1380.930055][T18100]  ? __pfx_zswap_store+0x10/0x10
[ 1380.930073][T18100]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1380.930101][T18100]  ? do_raw_spin_unlock+0xf5/0x200
[ 1380.930124][T18100]  swap_writeout+0x96a/0x14d0
[ 1380.930148][T18100]  ? try_to_unmap_flush_dirty+0x96/0x100
[ 1380.930173][T18100]  shrink_folio_list+0x34e8/0x5250
[ 1380.930248][T18100]  ? __pfx_shrink_folio_list+0x10/0x10
[ 1380.930272][T18100]  ? __pfx___css_rstat_updated+0x10/0x10
[ 1380.930329][T18100]  ? lock_acquire+0x115/0x350
[ 1380.930352][T18100]  ? try_to_inc_min_seq+0x6db/0x750
[ 1380.930385][T18100]  ? evict_folios+0x250/0x3fb0
[ 1380.930408][T18100]  evict_folios+0x3055/0x3fb0
[ 1380.930451][T18100]  ? evict_folios+0x250/0x3fb0
[ 1380.930476][T18100]  ? __pfx_evict_folios+0x10/0x10
[ 1380.930523][T18100]  try_to_shrink_lruvec+0xe3b/0x1340
[ 1380.930545][T18100]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[ 1380.930581][T18100]  ? __pfx_try_to_shrink_lruvec+0x10/0x10
[ 1380.930612][T18100]  ? blk_start_plug+0x6e/0x1b0
[ 1380.930636][T18100]  shrink_lruvec+0x54f/0x2ce0
[ 1380.930655][T18100]  ? lock_acquire+0x115/0x350
[ 1380.930691][T18100]  ? is_bpf_text_address+0x26/0x2b0
[ 1380.930713][T18100]  ? __pfx_shrink_lruvec+0x10/0x10
[ 1380.930727][T18100]  ? is_bpf_text_address+0x26/0x2b0
[ 1380.930748][T18100]  ? __lock_acquire+0x6df/0x2e50
[ 1380.930773][T18100]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1380.930797][T18100]  ? arch_stack_walk+0xfb/0x150
[ 1380.930823][T18100]  ? __update_load_avg_cfs_rq+0x6ae/0xad0
[ 1380.930845][T18100]  ? lock_acquire+0x115/0x350
[ 1380.930883][T18100]  ? page_counter_calculate_protection+0x188/0x470
[ 1380.930906][T18100]  ? mem_cgroup_iter+0x3b/0x440
[ 1380.930930][T18100]  shrink_node+0xa9b/0x3e30
[ 1380.930984][T18100]  ? __pfx_shrink_node+0x10/0x10
[ 1380.931006][T18100]  ? __queue_work+0x1f8/0x10d0
[ 1380.931031][T18100]  ? queue_work_on+0x117/0x1d0
[ 1380.931050][T18100]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1380.931069][T18100]  ? _raw_spin_unlock+0x28/0x50
[ 1380.931096][T18100]  do_try_to_free_pages+0x6a3/0x1990
[ 1380.931128][T18100]  ? __pfx_do_try_to_free_pages+0x10/0x10
[ 1380.931144][T18100]  ? trace_contention_end+0x3d/0x140
[ 1380.931168][T18100]  try_to_free_mem_cgroup_pages+0x30d/0x830
[ 1380.931186][T18100]  ? mem_cgroup_resize_max+0x36e/0x470
[ 1380.931214][T18100]  ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10
[ 1380.931231][T18100]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1380.931261][T18100]  ? page_counter_set_max+0x65/0x170
[ 1380.931285][T18100]  mem_cgroup_resize_max+0x23c/0x470
[ 1380.931320][T18100]  mem_cgroup_write+0x1a6/0x230
[ 1380.931346][T18100]  ? __pfx_mem_cgroup_write+0x10/0x10
[ 1380.931368][T18100]  ? kernfs_root+0x1c/0x230
[ 1380.931389][T18100]  ? kernfs_root+0x1c/0x230
[ 1380.931410][T18100]  ? kernfs_root+0x1ea/0x230
[ 1380.931433][T18100]  ? __pfx_mem_cgroup_write+0x10/0x10
[ 1380.931455][T18100]  cgroup_file_write+0x331/0x8f0
[ 1380.931480][T18100]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1380.931502][T18100]  ? __kmalloc_noprof+0x38c/0x720
[ 1380.931531][T18100]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1380.931550][T18100]  kernfs_fop_write_iter+0x3a4/0x540
[ 1380.931571][T18100]  vfs_write+0x612/0xba0
[ 1380.931598][T18100]  ? __pfx_vfs_write+0x10/0x10
[ 1380.931626][T18100]  ? __fget_files+0x2a/0x420
[ 1380.931651][T18100]  ksys_write+0x150/0x270
[ 1380.931679][T18100]  ? __pfx_ksys_write+0x10/0x10
[ 1380.931709][T18100]  do_syscall_64+0x166/0x520
[ 1380.931726][T18100]  ? trace_irq_disable+0x3b/0x140
[ 1380.931750][T18100]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.931767][T18100]  ? clear_bhb_loop+0x70/0xc0
[ 1380.931788][T18100]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1380.931805][T18100] RIP: 0033:0x7fdd02d9e0d9
[ 1380.931822][T18100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1380.931838][T18100] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1380.931856][T18100] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1380.931869][T18100] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005
[ 1380.931880][T18100] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1380.931891][T18100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1380.931902][T18100] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1380.931928][T18100]  </TASK>
[ 1381.897591][ T5349] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 1382.063243][ T5349] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1382.089663][ T5349] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1382.089774][ T5349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1382.089810][ T5349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1382.089845][ T5349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.157772][ T5349] usb 2-1: config 0 descriptor??
[ 1382.168772][T18104] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1382.442312][T18118] netlink: 'syz.3.3309': attribute type 16 has an invalid length.
[ 1382.442344][T18118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3309'.
[ 1382.479941][T18113] can: request_module (can-proto-0) failed.
[ 1382.615863][ T5349] usbhid 2-1:0.0: can't add hid device: -71
[ 1382.625236][ T5349] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1382.649209][ T5349] usb 2-1: USB disconnect, device number 124
[ 1382.748802][ T5794] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 1382.907777][ T5794] usb 3-1: Using ep0 maxpacket: 16
[ 1382.916967][ T5794] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[ 1382.933198][ T5794] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1382.933268][ T5794] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1382.933335][ T5794] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1382.973586][ T5794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.982078][ T5794] usb 3-1: Product: ⢕㨜ⶬᙖ轂撰ꥴ蜎䌟ꗒ팄䋧촬▀἟딉䑰뵩ࣣ녳䴰ꅕ鲒ጒ᭡씜ꋿ챝젻鿹൅凂왚⺿材ᕰ떳ϗ籤㌠膿ꋍ럢蔞ఙҥ퐐덩ָ穪䷏꣚誃꘏懸遧萘ꁓꡡ鎌걧븎넔싾죖鑣쳀捩ꜮᎮ訵㝗霷廛瓪쫙缨⽾ᕄ撗鷩ῑ돱峄䰾悢ڕ↣䋞닥ନꫬ䊥랸镩⒨鴷Ǿ렁뚀Ԕ墶
[ 1382.982170][ T5794] usb 3-1: Manufacturer: 쿢賴蠯ﯳz淌孒ꆻꫩꀐ㢳゗⤎ㅝꮓ䦥䳽ਜ਼倫鐝短！汾跨↏ມᥥ뎜䵢県륰솖슰뷗梉竢젯▯鰦褩ﳙ喯û웲๿Ï᤺윖ẓ略囑楄ᢈ鼕
[ 1382.982191][ T5794] usb 3-1: SerialNumber: 廌嘣냴煪魕齁垆삭훪纋酂鹢轼磵풇㘒㰰覍깚ƻ긛ꪸ颺꣞✨⒏
[ 1383.073640][T18117] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1383.073822][T18117] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1383.568123][ T5794] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 3 proto 1 vid 0x04B8 pid 0x0202
[ 1383.598422][ T5794] usb 3-1: USB disconnect, device number 111
[ 1383.621218][ T5794] usblp0: removed
[ 1384.127761][T18134] FAULT_INJECTION: forcing a failure.
[ 1384.127761][T18134] name failslab, interval 1, probability 10, space 0, times 0
[ 1384.142503][T18134] CPU: 0 UID: 0 PID: 18134 Comm: syz.8.3316 Not tainted syzkaller #0 PREEMPT(full) 
[ 1384.142527][T18134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1384.142539][T18134] Call Trace:
[ 1384.142546][T18134]  <TASK>
[ 1384.142554][T18134]  dump_stack_lvl+0xe8/0x150
[ 1384.142580][T18134]  should_fail_ex+0x3eb/0x540
[ 1384.142607][T18134]  ? __alloc_skb+0x1db/0x7a0
[ 1384.142625][T18134]  should_failslab+0xa8/0x100
[ 1384.142643][T18134]  ? __alloc_skb+0x1db/0x7a0
[ 1384.142660][T18134]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1384.142681][T18134]  ? __alloc_skb+0x18d/0x7a0
[ 1384.142699][T18134]  ? __alloc_skb+0x1db/0x7a0
[ 1384.142721][T18134]  __alloc_skb+0x1db/0x7a0
[ 1384.142742][T18134]  netlink_sendmsg+0x5d4/0xb40
[ 1384.142774][T18134]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1384.142804][T18134]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1384.142828][T18134]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1384.142852][T18134]  sock_sendmsg_nosec+0x13a/0x180
[ 1384.142880][T18134]  ____sys_sendmsg+0x54e/0x850
[ 1384.142905][T18134]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1384.142932][T18134]  ? import_iovec+0x73/0xa0
[ 1384.142950][T18134]  ___sys_sendmsg+0x2a5/0x360
[ 1384.142970][T18134]  ? __lock_acquire+0x6df/0x2e50
[ 1384.142998][T18134]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1384.143043][T18134]  ? __fget_files+0x2a/0x420
[ 1384.143062][T18134]  ? __fget_files+0x3a2/0x420
[ 1384.143088][T18134]  __x64_sys_sendmsg+0x1b1/0x290
[ 1384.143111][T18134]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1384.143146][T18134]  do_syscall_64+0x166/0x520
[ 1384.143163][T18134]  ? trace_irq_disable+0x3b/0x140
[ 1384.143187][T18134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.143204][T18134]  ? clear_bhb_loop+0x70/0xc0
[ 1384.143224][T18134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1384.143241][T18134] RIP: 0033:0x7f3217d9e0d9
[ 1384.143257][T18134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1384.143272][T18134] RSP: 002b:00007f3218d50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1384.143295][T18134] RAX: ffffffffffffffda RBX: 00007f3218025fa0 RCX: 00007f3217d9e0d9
[ 1384.143308][T18134] RDX: 0000000020000000 RSI: 00002000000002c0 RDI: 0000000000000004
[ 1384.143320][T18134] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1384.143330][T18134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1384.143340][T18134] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1384.143364][T18134]  </TASK>
[ 1384.968792][T18141] netlink: 'syz.2.3318': attribute type 11 has an invalid length.
[ 1385.126753][ T5794] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[ 1385.298180][ T5794] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a30, bcdDevice= 0.00
[ 1385.324115][ T5794] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1385.324162][ T5794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1385.324261][ T5794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1385.324296][ T5794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.401636][ T5794] usb 2-1: config 0 descriptor??
[ 1385.407714][T18144] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1385.646441][ T5794] usbhid 2-1:0.0: can't add hid device: -71
[ 1385.646617][ T5794] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1385.675795][ T5349] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1385.690866][ T5794] usb 2-1: USB disconnect, device number 125
[ 1385.840703][ T5349] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1385.870380][ T5349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1385.870422][ T5349] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1385.870526][ T5349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.913162][ T5349] usb 4-1: config 0 descriptor??
[ 1386.326142][T12133] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1386.488009][T12133] usb 9-1: Using ep0 maxpacket: 8
[ 1386.499397][T12133] usb 9-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c3.eb
[ 1386.513885][T12133] usb 9-1: config 150 has an invalid interface number: 204 but max is 2
[ 1386.513918][T12133] usb 9-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[ 1386.513945][T12133] usb 9-1: config 150 has 1 interface, different from the descriptor's value: 3
[ 1386.514036][T12133] usb 9-1: config 150 has no interface number 0
[ 1386.514061][T12133] usb 9-1: config 150 interface 204 has no altsetting 0
[ 1386.576478][T12133] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1386.576513][T12133] usb 9-1: Product: syz
[ 1386.576617][T12133] usb 9-1: Manufacturer: syz
[ 1386.576633][T12133] usb 9-1: SerialNumber: syz
[ 1386.921326][ T5349] usbhid 4-1:0.0: can't add hid device: -71
[ 1386.921499][ T5349] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1386.992454][ T5349] usb 4-1: USB disconnect, device number 108
[ 1387.032087][T18160] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3326'.
[ 1387.118272][T18167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.136166][T18167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.224193][T18160] veth2: entered allmulticast mode
[ 1388.187887][ T5630] usb 2-1: new low-speed USB device number 126 using dummy_hcd
[ 1388.239048][T18187] netlink: 'syz.2.3336': attribute type 10 has an invalid length.
[ 1388.249779][T18187] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3336'.
[ 1388.328463][ T5630] usb 2-1: device descriptor read/64, error -71
[ 1388.433541][T18191] FAULT_INJECTION: forcing a failure.
[ 1388.433541][T18191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1388.433631][T18191] CPU: 0 UID: 0 PID: 18191 Comm: syz.3.3337 Not tainted syzkaller #0 PREEMPT(full) 
[ 1388.433650][T18191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1388.433661][T18191] Call Trace:
[ 1388.433667][T18191]  <TASK>
[ 1388.433675][T18191]  dump_stack_lvl+0xe8/0x150
[ 1388.433701][T18191]  should_fail_ex+0x3eb/0x540
[ 1388.433731][T18191]  _copy_from_user+0x2d/0xb0
[ 1388.433748][T18191]  scsi_ioctl+0x4d1/0x2130
[ 1388.433895][T18191]  ? __pfx_scsi_ioctl+0x10/0x10
[ 1388.433941][T18191]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1388.433978][T18191]  ? scsi_block_when_processing_errors+0x3b6/0x480
[ 1388.434008][T18191]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[ 1388.434049][T18191]  sg_ioctl+0x17a9/0x21b0
[ 1388.434119][T18191]  ? __pfx_sg_ioctl+0x10/0x10
[ 1388.434141][T18191]  ? __fget_files+0x2a/0x420
[ 1388.434162][T18191]  ? __fget_files+0x2a/0x420
[ 1388.434180][T18191]  ? __fget_files+0x3a2/0x420
[ 1388.434198][T18191]  ? __fget_files+0x2a/0x420
[ 1388.434218][T18191]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1388.434239][T18191]  ? __pfx_sg_ioctl+0x10/0x10
[ 1388.434259][T18191]  __se_sys_ioctl+0xfc/0x170
[ 1388.434283][T18191]  do_syscall_64+0x166/0x520
[ 1388.434300][T18191]  ? trace_irq_disable+0x3b/0x140
[ 1388.434323][T18191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1388.434339][T18191]  ? clear_bhb_loop+0x70/0xc0
[ 1388.434359][T18191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1388.434375][T18191] RIP: 0033:0x7fdd02d9e0d9
[ 1388.434391][T18191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1388.434406][T18191] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1388.434424][T18191] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1388.434437][T18191] RDX: 0000000000000000 RSI: 0000000000005393 RDI: 0000000000000003
[ 1388.434447][T18191] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1388.434457][T18191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1388.434468][T18191] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1388.434492][T18191]  </TASK>
[ 1388.664276][ T5630] usb 2-1: new low-speed USB device number 127 using dummy_hcd
[ 1388.856567][ T5630] usb 2-1: device descriptor read/64, error -71
[ 1388.965658][ T5630] usb usb2-port1: attempt power cycle
[ 1389.113199][   T31] audit: type=1800 audit(1787731157.763:74): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3336" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0
[ 1389.141115][T18188] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[ 1389.153690][T18188] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[ 1389.164694][T18188] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[ 1389.266045][ T5349] usb 9-1: USB disconnect, device number 34
[ 1389.315069][ T5630] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[ 1389.337604][ T5630] usb 2-1: device descriptor read/8, error -71
[ 1389.498476][T17356] Bluetooth: Unexpected continuation frame (len 26)
[ 1389.575396][ T5630] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[ 1389.607355][ T5630] usb 2-1: device descriptor read/8, error -71
[ 1389.715491][ T5630] usb usb2-port1: unable to enumerate USB device
[ 1389.980032][T18201] netlink: zone id is out of range
[ 1389.980097][T18201] netlink: zone id is out of range
[ 1389.980115][T18201] netlink: zone id is out of range
[ 1389.980124][T18201] netlink: zone id is out of range
[ 1389.980133][T18201] netlink: zone id is out of range
[ 1389.980142][T18201] netlink: zone id is out of range
[ 1389.980530][T18201] netlink: zone id is out of range
[ 1389.980542][T18201] netlink: zone id is out of range
[ 1389.980551][T18201] netlink: zone id is out of range
[ 1389.980560][T18201] netlink: zone id is out of range
[ 1390.052875][T18201] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3342'.
[ 1390.738169][T18217] FAULT_INJECTION: forcing a failure.
[ 1390.738169][T18217] name failslab, interval 1, probability 10, space 0, times 0
[ 1390.752601][T18217] CPU: 0 UID: 0 PID: 18217 Comm: syz.8.3349 Not tainted syzkaller #0 PREEMPT(full) 
[ 1390.752625][T18217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1390.752636][T18217] Call Trace:
[ 1390.752644][T18217]  <TASK>
[ 1390.752651][T18217]  dump_stack_lvl+0xe8/0x150
[ 1390.752678][T18217]  should_fail_ex+0x3eb/0x540
[ 1390.752710][T18217]  should_failslab+0xa8/0x100
[ 1390.752728][T18217]  __kmalloc_noprof+0xfe/0x720
[ 1390.752753][T18217]  ? tomoyo_encode+0x2ad/0x570
[ 1390.752778][T18217]  ? tomoyo_encode+0x2ad/0x570
[ 1390.752808][T18217]  tomoyo_encode+0x2ad/0x570
[ 1390.752843][T18217]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1390.752877][T18217]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1390.752900][T18217]  tomoyo_path_number_perm+0x246/0x5f0
[ 1390.752924][T18217]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1390.752946][T18217]  ? __lock_acquire+0x6df/0x2e50
[ 1390.752982][T18217]  ? hook_file_ioctl+0x1f2/0x600
[ 1390.753018][T18217]  ? __fget_files+0x2a/0x420
[ 1390.753040][T18217]  ? __fget_files+0x2a/0x420
[ 1390.753058][T18217]  ? __fget_files+0x3a2/0x420
[ 1390.753076][T18217]  ? __fget_files+0x2a/0x420
[ 1390.753097][T18217]  security_file_ioctl+0xc3/0x2a0
[ 1390.753120][T18217]  __se_sys_ioctl+0x47/0x170
[ 1390.753146][T18217]  do_syscall_64+0x166/0x520
[ 1390.753163][T18217]  ? trace_irq_disable+0x3b/0x140
[ 1390.753187][T18217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.753203][T18217]  ? clear_bhb_loop+0x70/0xc0
[ 1390.753224][T18217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1390.753240][T18217] RIP: 0033:0x7f3217d9e0d9
[ 1390.753257][T18217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1390.753271][T18217] RSP: 002b:00007f3218d50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1390.753289][T18217] RAX: ffffffffffffffda RBX: 00007f3218025fa0 RCX: 00007f3217d9e0d9
[ 1390.753302][T18217] RDX: 0000200000000540 RSI: 00000000c0d05605 RDI: 0000000000000003
[ 1390.753314][T18217] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1390.753324][T18217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1390.753334][T18217] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1390.753359][T18217]  </TASK>
[ 1390.871000][T18217] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1391.368582][T18221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1391.368606][T18221] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1391.368817][T18221] vhci_hcd vhci_hcd.0: Device attached
[ 1391.415676][T18222] vhci_hcd: unknown pdu 1
[ 1391.468071][T17046] vhci_hcd vhci_hcd.3: stop threads
[ 1391.468101][T17046] vhci_hcd vhci_hcd.3: release socket
[ 1391.468244][T17046] vhci_hcd vhci_hcd.3: disconnect device
[ 1391.756623][ T5630] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1391.927280][ T5630] usb 4-1: device descriptor read/64, error -71
[ 1392.165931][ T5630] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1392.178342][T18237] FAULT_INJECTION: forcing a failure.
[ 1392.178342][T18237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1392.178367][T18237] CPU: 0 UID: 0 PID: 18237 Comm: syz.1.3355 Not tainted syzkaller #0 PREEMPT(full) 
[ 1392.178389][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1392.178399][T18237] Call Trace:
[ 1392.178406][T18237]  <TASK>
[ 1392.178413][T18237]  dump_stack_lvl+0xe8/0x150
[ 1392.178440][T18237]  should_fail_ex+0x3eb/0x540
[ 1392.178468][T18237]  _copy_to_user+0x31/0xb0
[ 1392.178486][T18237]  simple_read_from_buffer+0xe1/0x170
[ 1392.178510][T18237]  proc_fail_nth_read+0x1bb/0x230
[ 1392.178532][T18237]  ? common_file_perm+0x20e/0x2b0
[ 1392.178565][T18237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1392.178591][T18237]  ? rw_verify_area+0x24a/0x4c0
[ 1392.178613][T18237]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1392.178635][T18237]  vfs_read+0x213/0xa80
[ 1392.178660][T18237]  ? __pfx___mutex_lock+0x10/0x10
[ 1392.178679][T18237]  ? __pfx_vfs_read+0x10/0x10
[ 1392.178701][T18237]  ? __fget_files+0x2a/0x420
[ 1392.178723][T18237]  ? __fget_files+0x3a2/0x420
[ 1392.178741][T18237]  ? __fget_files+0x2a/0x420
[ 1392.178766][T18237]  ksys_read+0x150/0x270
[ 1392.178788][T18237]  ? __pfx_ksys_read+0x10/0x10
[ 1392.178808][T18237]  ? __pfx_snd_timer_user_ioctl+0x10/0x10
[ 1392.178928][T18237]  do_syscall_64+0x166/0x520
[ 1392.178946][T18237]  ? trace_irq_disable+0x3b/0x140
[ 1392.178970][T18237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.178986][T18237]  ? clear_bhb_loop+0x70/0xc0
[ 1392.179006][T18237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1392.179022][T18237] RIP: 0033:0x7f4365d5e90e
[ 1392.179038][T18237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1392.179053][T18237] RSP: 002b:00007f4366cdafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1392.179071][T18237] RAX: ffffffffffffffda RBX: 00007f4366cdb6c0 RCX: 00007f4365d5e90e
[ 1392.179084][T18237] RDX: 000000000000000f RSI: 00007f4366cdb0a0 RDI: 0000000000000004
[ 1392.179094][T18237] RBP: 00007f4366cdb090 R08: 0000000000000000 R09: 0000000000000000
[ 1392.179105][T18237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1392.179114][T18237] R13: 00007f4366026038 R14: 00007f4366025fa0 R15: 00007ffe3c48e2a8
[ 1392.179139][T18237]  </TASK>
[ 1392.365212][ T5630] usb 4-1: device descriptor read/64, error -71
[ 1392.487627][ T5630] usb usb4-port1: attempt power cycle
[ 1392.835413][ T5630] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1392.865364][ T5630] usb 4-1: device descriptor read/8, error -71
[ 1393.105063][ T5630] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1393.126440][ T5630] usb 4-1: device descriptor read/8, error -71
[ 1393.235041][ T5630] usb usb4-port1: unable to enumerate USB device
[ 1394.354460][ T5349] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1394.515387][ T5349] usb 3-1: Using ep0 maxpacket: 32
[ 1394.521962][ T5349] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1394.535563][ T5349] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[ 1394.535657][ T5349] usb 3-1: config 0 has no interface number 0
[ 1394.535690][ T5349] usb 3-1: config 0 interface 255 has no altsetting 0
[ 1394.535718][ T5349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.588372][ T5349] usb 3-1: config 0 descriptor??
[ 1394.831839][ T5349] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1394.857631][ T5349] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1394.875573][ T5349] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1394.886292][ T5349] usb 3-1: media controller created
[ 1394.981946][ T5349] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1395.107447][ T5349] az6027: usb out operation failed. (-71)
[ 1395.114123][ T5349] az6027: usb out operation failed. (-71)
[ 1395.114147][ T5349] stb0899_attach: Driver disabled by Kconfig
[ 1395.114159][ T5349] az6027: no front-end attached
[ 1395.114159][ T5349] 
[ 1395.135691][ T5349] az6027: usb out operation failed. (-71)
[ 1395.135720][ T5349] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1395.173041][ T5349] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input70
[ 1395.232356][ T5349] dvb-usb: schedule remote query interval to 400 msecs.
[ 1395.232390][ T5349] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1395.262447][ T5349] usb 3-1: USB disconnect, device number 113
[ 1395.536011][ T5814] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1395.562083][ T5349] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1395.695366][ T5814] usb 9-1: Using ep0 maxpacket: 32
[ 1395.703503][ T5814] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1395.720981][ T5814] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1395.745153][ T5814] usb 9-1: config 0 descriptor??
[ 1395.826497][ T5630] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1395.877874][T18279] net_ratelimit: 18 callbacks suppressed
[ 1395.886631][T18279] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[ 1395.911589][T18279] device-mapper: ioctl: Invalid data size in the ioctl structure: 2037539694
[ 1395.985314][ T5630] usb 4-1: Using ep0 maxpacket: 32
[ 1396.005091][ T5630] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1396.019075][ T5630] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.037069][ T5814] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1396.057210][ T5814] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1396.073614][ T5630] usb 4-1: config 0 descriptor??
[ 1396.087670][ T5814] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1396.098329][ T5814] usb 9-1: media controller created
[ 1396.227499][ T5814] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1396.375568][ T5630] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1396.421816][ T5814] az6027: usb out operation failed. (-71)
[ 1396.428556][ T5814] az6027: usb out operation failed. (-71)
[ 1396.428579][ T5814] stb0899_attach: Driver disabled by Kconfig
[ 1396.428596][ T5814] az6027: no front-end attached
[ 1396.428596][ T5814] 
[ 1396.435879][ T5814] az6027: usb out operation failed. (-71)
[ 1396.435957][ T5814] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1396.470309][ T5630] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1396.488095][ T5630] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1396.501479][ T5630] usb 4-1: media controller created
[ 1396.503408][ T5814] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input71
[ 1396.538625][ T5814] dvb-usb: schedule remote query interval to 400 msecs.
[ 1396.546215][ T5814] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1396.572942][ T5814] usb 9-1: USB disconnect, device number 35
[ 1396.605495][T18277] FAULT_INJECTION: forcing a failure.
[ 1396.605495][T18277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1396.605597][T18277] CPU: 0 UID: 0 PID: 18277 Comm: syz.3.3370 Not tainted syzkaller #0 PREEMPT(full) 
[ 1396.605617][T18277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1396.605628][T18277] Call Trace:
[ 1396.605635][T18277]  <TASK>
[ 1396.605642][T18277]  dump_stack_lvl+0xe8/0x150
[ 1396.605667][T18277]  should_fail_ex+0x3eb/0x540
[ 1396.605695][T18277]  _copy_to_user+0x31/0xb0
[ 1396.605717][T18277]  simple_read_from_buffer+0xe1/0x170
[ 1396.605741][T18277]  proc_fail_nth_read+0x1bb/0x230
[ 1396.605764][T18277]  ? common_file_perm+0x20e/0x2b0
[ 1396.605790][T18277]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1396.605815][T18277]  ? rw_verify_area+0x24a/0x4c0
[ 1396.605837][T18277]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1396.605860][T18277]  vfs_read+0x213/0xa80
[ 1396.605883][T18277]  ? __pfx___mutex_lock+0x10/0x10
[ 1396.605903][T18277]  ? __pfx_vfs_read+0x10/0x10
[ 1396.605925][T18277]  ? __fget_files+0x2a/0x420
[ 1396.605946][T18277]  ? __fget_files+0x3a2/0x420
[ 1396.605965][T18277]  ? __fget_files+0x2a/0x420
[ 1396.605990][T18277]  ksys_read+0x150/0x270
[ 1396.606018][T18277]  ? __pfx_ksys_read+0x10/0x10
[ 1396.606047][T18277]  do_syscall_64+0x166/0x520
[ 1396.606064][T18277]  ? trace_irq_disable+0x3b/0x140
[ 1396.606089][T18277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.606106][T18277]  ? clear_bhb_loop+0x70/0xc0
[ 1396.606127][T18277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1396.606143][T18277] RIP: 0033:0x7fdd02d5e90e
[ 1396.606159][T18277] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1396.606174][T18277] RSP: 002b:00007fdd03c7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1396.606192][T18277] RAX: ffffffffffffffda RBX: 00007fdd03c7e6c0 RCX: 00007fdd02d5e90e
[ 1396.606205][T18277] RDX: 000000000000000f RSI: 00007fdd03c7e0a0 RDI: 0000000000000004
[ 1396.606216][T18277] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1396.606227][T18277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1396.606237][T18277] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1396.606261][T18277]  </TASK>
[ 1396.954061][ T5349] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 1396.974923][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1397.136407][ T5349] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1397.146245][ T5349] usb 2-1: not running at top speed; connect to a high speed hub
[ 1397.146343][ T5349] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[ 1397.155196][ T5630] az6027: usb out operation failed. (-71)
[ 1397.166496][ T5630] az6027: usb out operation failed. (-71)
[ 1397.166511][ T5630] stb0899_attach: Driver disabled by Kconfig
[ 1397.166520][ T5630] az6027: no front-end attached
[ 1397.166520][ T5630] 
[ 1397.179473][ T5814] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1397.185980][ T5630] az6027: usb out operation failed. (-71)
[ 1397.185994][ T5630] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1397.229099][ T5349] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1397.272179][ T5349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.272272][ T5349] usb 2-1: Product: syz
[ 1397.272296][ T5349] usb 2-1: Manufacturer: syz
[ 1397.272310][ T5349] usb 2-1: SerialNumber: syz
[ 1397.330345][ T5630] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72
[ 1397.387927][ T5630] dvb-usb: schedule remote query interval to 400 msecs.
[ 1397.387969][ T5630] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1397.446455][ T5630] usb 4-1: USB disconnect, device number 113
[ 1397.491080][ T5349] snd-ua101 2-1:1.1: sample format descriptor not found
[ 1397.491115][ T5349] snd-ua101 2-1:1.0: invalid bNumEndpoints
[ 1397.619710][T18288] binder: BINDER_SET_CONTEXT_MGR already set
[ 1397.619800][T18288] binder: 18285:18288 ioctl 4018620d 200000004a80 returned -16
[ 1397.727542][ T5814] usb 2-1: USB disconnect, device number 4
[ 1397.880552][ T5630] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1398.166758][T18292] FAULT_INJECTION: forcing a failure.
[ 1398.166758][T18292] name failslab, interval 1, probability 10, space 0, times 0
[ 1398.184640][T18292] CPU: 0 UID: 0 PID: 18292 Comm: syz.3.3378 Not tainted syzkaller #0 PREEMPT(full) 
[ 1398.184665][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1398.184677][T18292] Call Trace:
[ 1398.184684][T18292]  <TASK>
[ 1398.184692][T18292]  dump_stack_lvl+0xe8/0x150
[ 1398.184721][T18292]  should_fail_ex+0x3eb/0x540
[ 1398.184749][T18292]  should_failslab+0xa8/0x100
[ 1398.184768][T18292]  __kmalloc_noprof+0xfe/0x720
[ 1398.184790][T18292]  ? rcu_is_watching+0x16/0xb0
[ 1398.184807][T18292]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1398.184834][T18292]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1398.184865][T18292]  tomoyo_realpath_from_path+0xef/0x640
[ 1398.184898][T18292]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1398.184921][T18292]  tomoyo_path_number_perm+0x246/0x5f0
[ 1398.184946][T18292]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1398.184973][T18292]  ? __lock_acquire+0x6df/0x2e50
[ 1398.185008][T18292]  ? hook_file_ioctl+0x1f2/0x600
[ 1398.185046][T18292]  ? __fget_files+0x2a/0x420
[ 1398.185067][T18292]  ? __fget_files+0x2a/0x420
[ 1398.185085][T18292]  ? __fget_files+0x3a2/0x420
[ 1398.185103][T18292]  ? __fget_files+0x2a/0x420
[ 1398.185124][T18292]  security_file_ioctl+0xc3/0x2a0
[ 1398.185147][T18292]  __se_sys_ioctl+0x47/0x170
[ 1398.185173][T18292]  do_syscall_64+0x166/0x520
[ 1398.185191][T18292]  ? trace_irq_disable+0x3b/0x140
[ 1398.185215][T18292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.185232][T18292]  ? clear_bhb_loop+0x70/0xc0
[ 1398.185252][T18292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1398.185268][T18292] RIP: 0033:0x7fdd02d9e0d9
[ 1398.185284][T18292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1398.185298][T18292] RSP: 002b:00007fdd03c7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1398.185317][T18292] RAX: ffffffffffffffda RBX: 00007fdd03025fa0 RCX: 00007fdd02d9e0d9
[ 1398.185330][T18292] RDX: 0000200000001980 RSI: 00000000c0306201 RDI: 0000000000000004
[ 1398.185341][T18292] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1398.185352][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1398.185362][T18292] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1398.185387][T18292]  </TASK>
[ 1398.458638][T18292] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1398.789856][T18299] netlink: 'syz.3.3380': attribute type 6 has an invalid length.
[ 1398.789953][T18299] netlink: 'syz.3.3380': attribute type 6 has an invalid length.
[ 1401.336665][T18340] FAULT_INJECTION: forcing a failure.
[ 1401.336665][T18340] name failslab, interval 1, probability 10, space 0, times 0
[ 1401.336707][T18340] CPU: 0 UID: 0 PID: 18340 Comm: syz.1.3393 Not tainted syzkaller #0 PREEMPT(full) 
[ 1401.336727][T18340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1401.336738][T18340] Call Trace:
[ 1401.336745][T18340]  <TASK>
[ 1401.336752][T18340]  dump_stack_lvl+0xe8/0x150
[ 1401.336782][T18340]  should_fail_ex+0x3eb/0x540
[ 1401.336810][T18340]  should_failslab+0xa8/0x100
[ 1401.336829][T18340]  __kmalloc_noprof+0xfe/0x720
[ 1401.336850][T18340]  ? rcu_is_watching+0x16/0xb0
[ 1401.336868][T18340]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1401.336894][T18340]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1401.336925][T18340]  tomoyo_realpath_from_path+0xef/0x640
[ 1401.336961][T18340]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1401.336984][T18340]  tomoyo_path_number_perm+0x246/0x5f0
[ 1401.337008][T18340]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1401.337030][T18340]  ? __lock_acquire+0x6df/0x2e50
[ 1401.337065][T18340]  ? hook_file_ioctl+0x1f2/0x600
[ 1401.337102][T18340]  ? __fget_files+0x2a/0x420
[ 1401.337123][T18340]  ? __fget_files+0x2a/0x420
[ 1401.337140][T18340]  ? __fget_files+0x3a2/0x420
[ 1401.337158][T18340]  ? __fget_files+0x2a/0x420
[ 1401.337178][T18340]  security_file_ioctl+0xc3/0x2a0
[ 1401.337200][T18340]  __se_sys_ioctl+0x47/0x170
[ 1401.337225][T18340]  do_syscall_64+0x166/0x520
[ 1401.337244][T18340]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.337261][T18340]  ? clear_bhb_loop+0x70/0xc0
[ 1401.337280][T18340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1401.337296][T18340] RIP: 0033:0x7f4365d9e0d9
[ 1401.337312][T18340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1401.337326][T18340] RSP: 002b:00007f4366cdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1401.337344][T18340] RAX: ffffffffffffffda RBX: 00007f4366025fa0 RCX: 00007f4365d9e0d9
[ 1401.337356][T18340] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1401.337367][T18340] RBP: 00007f4366cdb090 R08: 0000000000000000 R09: 0000000000000000
[ 1401.337377][T18340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1401.337388][T18340] R13: 00007f4366026038 R14: 00007f4366025fa0 R15: 00007ffe3c48e2a8
[ 1401.337413][T18340]  </TASK>
[ 1401.337494][T18340] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1402.530391][T18358] FAULT_INJECTION: forcing a failure.
[ 1402.530391][T18358] name failslab, interval 1, probability 10, space 0, times 0
[ 1402.549039][T18358] CPU: 0 UID: 0 PID: 18358 Comm: syz.8.3400 Not tainted syzkaller #0 PREEMPT(full) 
[ 1402.549064][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1402.549075][T18358] Call Trace:
[ 1402.549082][T18358]  <TASK>
[ 1402.549090][T18358]  dump_stack_lvl+0xe8/0x150
[ 1402.549116][T18358]  should_fail_ex+0x3eb/0x540
[ 1402.549144][T18358]  should_failslab+0xa8/0x100
[ 1402.549160][T18358]  ? alloc_empty_file+0x5b/0x1d0
[ 1402.549177][T18358]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1402.549199][T18358]  ? stack_depot_save_flags+0x33/0x7f0
[ 1402.549222][T18358]  ? _raw_spin_unlock+0x41/0x50
[ 1402.549247][T18358]  ? alloc_empty_file+0x5b/0x1d0
[ 1402.549263][T18358]  ? kmem_cache_alloc_noprof+0x156/0x600
[ 1402.549287][T18358]  alloc_empty_file+0x5b/0x1d0
[ 1402.549304][T18358]  path_openat+0xa2/0x1d60
[ 1402.549331][T18358]  ? __lock_acquire+0x6df/0x2e50
[ 1402.549362][T18358]  do_file_open+0x23e/0x4a0
[ 1402.549388][T18358]  ? __pfx_do_file_open+0x10/0x10
[ 1402.549430][T18358]  ? _raw_spin_unlock+0x28/0x50
[ 1402.549454][T18358]  ? alloc_fd+0x651/0x6c0
[ 1402.549479][T18358]  do_sys_openat2+0x115/0x200
[ 1402.549497][T18358]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1402.549516][T18358]  ? __irq_exit_rcu+0xcb/0x220
[ 1402.549537][T18358]  ? handle_softirqs+0x720/0x860
[ 1402.549557][T18358]  __x64_sys_openat+0x138/0x170
[ 1402.549577][T18358]  do_syscall_64+0x166/0x520
[ 1402.549594][T18358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1402.549610][T18358]  ? clear_bhb_loop+0x70/0xc0
[ 1402.549630][T18358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1402.549646][T18358] RIP: 0033:0x7f3217d9e0d9
[ 1402.549663][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1402.549678][T18358] RSP: 002b:00007f3218d50028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1402.549697][T18358] RAX: ffffffffffffffda RBX: 00007f3218025fa0 RCX: 00007f3217d9e0d9
[ 1402.549709][T18358] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c
[ 1402.549722][T18358] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1402.549732][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1402.549743][T18358] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1402.549767][T18358]  </TASK>
[ 1402.967952][T18357] evm: overlay not supported
[ 1402.988744][T18361] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3402'.
[ 1403.493591][ T5349] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1403.677271][ T5349] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1403.677323][ T5349] usb 9-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40
[ 1403.717533][ T5349] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1403.717569][ T5349] usb 9-1: Product: syz
[ 1403.717653][ T5349] usb 9-1: Manufacturer: syz
[ 1403.717668][ T5349] usb 9-1: SerialNumber: syz
[ 1403.947147][T18378] [U] 
[ 1403.947163][T18378] [U] K{�
[ 1403.947265][T18378] [U] �t �1��Š�F���fˊ�`G�J��g���������o��/�mC�
[ 1403.947306][T18378] [U] t�ؖ/,�~�Ĝ��j���}8���'o1��"�7-�JQ�K��W��q�5c%"�H12��Y������X�`����`+��(��!(���z'�tXln�I�g�j����ݭ�p�~�7�!���"�����(�5�Ob���̓J�
[ 1403.947341][T18378] [U] �k\&�}6�6�X�HX�������.`�a�$�40|϶��9��ި����U��4���Vbz��}�w�M�T���Q��Φr�4��
[ 1403.947466][T18378] [U] ".h6��"�k�[����J�4��I�n��[Z(��C|T�]z{��3�c=��x�����4�w�)\T�XJ��SH{q;칢��t��+���g����d�.˂�>y����wUh�fN����hl]S�2���\g%�O�&z)��'�pul�_<�	�ذ����`ұT�������;_�"(�u{7j��2X �/�'��c���I����H�c�ճ�V�=��Ai�%w�Es� R��j���g��r����hI
���a��6-�D��V�� i"��n� ��Asc~4���8c�*�OO5/��J�~���w�vK+����3��Y)��M���v��yq潀DTr�
Otpem%f��ej�A5��T_-X~�^aaۂ�q��
[ 1403.947556][T18378] [U] 	+�w�G?]��'a:	��)�
����' B>t���f/��<'�U�'��h�i�.+]e�.�-ɿ���%��>2`�^U�8F.�6��3��+�A�«���g3�p��6:�^0��t��v�'E�t����YC�n��rϩ�n�Pj�;�Z������8!��\���A�ʖ2��$�­wi.��#��/Bai���`��4j��d�y@�z��gW�5˿B��ٜ�N�y"vI2��
[ 1403.947653][T18378] [U] �T�_K5�t�YJ���9��c�$br�L�Nul��9w���|�G�"ʃ�%����C�؝���q��
 ��3��q��N^HP*��$	�.�7yӱ�2�
[ 1403.947672][T18378] [U] �?���h��*����3�7�鍾^#Q�"0~���(�o�XL�b�,'v��=���C�S���G�S��0�ւ��`���ه��=1(��p#�2DO*Ƀ
[ 1403.947715][T18378] [U] �s��g������Gu��d-{���|&������2��L�c_��!`��oz֥�B��%>�r��w���Ss�H"�yA4�O.�Y��䏄RTԶ�B�[+/<<R�B����|Фe���۠�V96#���ͤ�j�U�%
s81���ҩs�P��\��?q�|L��QX�0�K�1orɴ2��|��d�F�������2ޔ���0��H�}C[/����px^��o
[ 1403.947836][T18378] [U] �؛���(J�Л��m��xz�;�����؝_����*3�3��5�\�xm��U��AK!aQ`��;F�I+��VUH���m�j��Ʒ��Z�c��z���)_矡	���&�����a�xto���_� ���:���%�P���C���y�+_�����}U�m��ƫC�!KJ�7��g��=b�
[ 1403.947990][T18378] [U] ٽ�F�%�XA��l�2r*g��VW��$��j	�A��F�ߝ�+��9̈́Vi�֗�kپ�1}_��
�%�r6��(]��/����řYܺ��h����r g��rn/ܫ�#!�d����%���D��-{�$�vU��T���$:mtr�E�C1V�D~��];[�����sq����(��e,X�8�"�
��G�d���2@T8��������t8.Rc+�@�ꦇp�u�
p����C���'�yL�-Ss1E?�7�O���^]����c��H]�Jkr]Rkq܆��ݣ��OTc��x���4�N�	��&���ڋ��@�:m7�~�+�W*���xM��>>��{q���
_�՝LX8�U����{�Z����)��7?�rR;�c�r�hײڣ����1�>)�Mă��t���(��aϝ�}9�ڥ�J*Mќ�ġ�'L��q	�DW����=��|q�	�Æ�W;5��Ž�!�dB�x`��/��E�`ƦM��X��"�\
[ 1403.948029][T18378] [U] {;����٘_�o2��)�o��.2�W2���y���x_  HPϱ�S�D����:]�{������
[ 1403.948060][T18378] [U] I,�>��	��5�1��^1�N4�oǶ�'0�?֒i�9w.�_.�W�a���V��`)�Z���c6Giӹ�a��XL[����F�*��O�W)+��'\n�
[K@����2�Ǭ���p"^`���	��
[ 1403.948076][T18378] [U] 22��Ʃ���x?0;3u�
[ 1403.948189][T18378] [U] ޜ�
��sObx�8�W�4�(�~/���K�U��ԖoQ�e+�G�-y�gY_
�>v�����3.h�ә]̈́�2��)�D�,	��	�D~�d���+�w;A\�F
P��Ș|$��)�
KؐI���ɿk�YT^R���癵��A=�#�ܜ	����ae��t�1��ݯ4K�.e"R�S|��s���:��>p��r�"z������#P!�KY"�}��F�N84����hޱ�o��sߙ̫%Dlw�m��
[ 1403.948219][T18378] [U] [�['xn�'�����,mr��/����1D=!D�x91B�
w�R�lf���K�Z��#�`�l؛�˜��b~�m���
[ 1403.948241][T18378] [U] �L�>��d+�d�����"5���h3<���iR=F^�f�n��������v���D�OIO�:U�>�Y�
[ 1403.948254][T18378] [U] 'B�6v�20��瞥�׌�"t8�{9�FW��]���쩍
[ 1403.948351][T18378] [U] �72�����u�C6����τI]8c��tۨQSk�Y��I��� �|V'�TV/��g�$[� 9kh`�"����}��[^=��0�]��%�̂T�����F�_v�4C���
[ 1403.948385][T18378] [U] �ec�
[ 1403.948395][T18378] [U] ���|���<��:^�3$7nK~�-�@��?��/mtl��۾�I�w�@g~t�{��P�+�$�jp|���I�Ri�pm� ��Y� ��8�t���V�����,�l�,�
[ 1404.288088][ T5349] usb 9-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[ 1404.341920][ T5349] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1404.502655][ T5794] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1404.591024][ T5349] usb 9-1: USB disconnect, device number 36
[ 1404.664614][ T5794] usb 2-1: Using ep0 maxpacket: 8
[ 1404.674730][ T5794] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4
[ 1404.706073][ T5794] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1404.706110][ T5794] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[ 1404.706138][ T5794] usb 2-1: config 0 has no interface number 0
[ 1404.706170][ T5794] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1404.706263][ T5794] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1404.706285][ T5794] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1404.782701][ T5794] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0
[ 1404.782795][ T5794] usb 2-1: Product: syz
[ 1404.782818][ T5794] usb 2-1: Manufacturer: syz
[ 1404.847542][ T5794] usb 2-1: config 0 descriptor??
[ 1404.857190][T18376] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1405.026235][T18375] [U] �K�����)0���~��ʪ�iP'�f��z��r���@B�]�5��{��ʼ�'�8�ƥF��UTqUd
ǩ�K;7��0c[��y���YC���ذm��L�8�T�͚�5���rx����W� x���oQhVi'8����L�
[ 1405.068054][T15943] udevd[15943]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1405.510705][T18376] netlink: 'syz.1.3408': attribute type 10 has an invalid length.
[ 1405.540121][T18377] netlink: 'syz.1.3408': attribute type 10 has an invalid length.
[ 1405.641386][T18376] bond0: (slave geneve0): Enslaving as an active interface with an up link
[ 1405.751382][T18387] FAULT_INJECTION: forcing a failure.
[ 1405.751382][T18387] name failslab, interval 1, probability 10, space 0, times 0
[ 1405.782008][T18387] CPU: 0 UID: 0 PID: 18387 Comm: syz.2.3413 Not tainted syzkaller #0 PREEMPT(full) 
[ 1405.782037][T18387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1405.782048][T18387] Call Trace:
[ 1405.782055][T18387]  <TASK>
[ 1405.782063][T18387]  dump_stack_lvl+0xe8/0x150
[ 1405.782090][T18387]  should_fail_ex+0x3eb/0x540
[ 1405.782117][T18387]  ? __alloc_skb+0x1db/0x7a0
[ 1405.782136][T18387]  should_failslab+0xa8/0x100
[ 1405.782154][T18387]  ? __alloc_skb+0x1db/0x7a0
[ 1405.782170][T18387]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1405.782194][T18387]  ? __alloc_skb+0x1db/0x7a0
[ 1405.782216][T18387]  __alloc_skb+0x1db/0x7a0
[ 1405.782237][T18387]  tcp_stream_alloc_skb+0x3f/0x580
[ 1405.782263][T18387]  tcp_sendmsg_locked+0x14a9/0x5640
[ 1405.782294][T18387]  ? __lock_acquire+0x6df/0x2e50
[ 1405.782326][T18387]  ? __lock_acquire+0x6df/0x2e50
[ 1405.782362][T18387]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[ 1405.782385][T18387]  ? tcp_sendmsg+0x21/0x50
[ 1405.782403][T18387]  ? __local_bh_enable_ip+0xd6/0x140
[ 1405.782425][T18387]  tcp_sendmsg+0x2f/0x50
[ 1405.782442][T18387]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1405.782465][T18387]  sock_sendmsg_nosec+0x10e/0x180
[ 1405.782492][T18387]  sock_sendmsg+0x1ca/0x2d0
[ 1405.782519][T18387]  ? __pfx_sock_sendmsg+0x10/0x10
[ 1405.782553][T18387]  ? __asan_memset+0x22/0x50
[ 1405.782575][T18387]  ? iov_iter_bvec+0xb8/0x180
[ 1405.782602][T18387]  splice_to_socket+0xb5e/0x12a0
[ 1405.782638][T18387]  ? __pfx_splice_to_socket+0x10/0x10
[ 1405.782691][T18387]  ? __pfx_splice_to_socket+0x10/0x10
[ 1405.782712][T18387]  direct_splice_actor+0x101/0x160
[ 1405.782736][T18387]  splice_direct_to_actor+0x57b/0xcb0
[ 1405.782770][T18387]  ? __pfx_direct_splice_actor+0x10/0x10
[ 1405.782791][T18387]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 1405.782819][T18387]  do_splice_direct+0x195/0x290
[ 1405.782842][T18387]  ? __pfx_do_splice_direct+0x10/0x10
[ 1405.782863][T18387]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 1405.782887][T18387]  ? bpf_lsm_file_permission+0x9/0x20
[ 1405.782905][T18387]  ? security_file_permission+0x75/0x260
[ 1405.782927][T18387]  ? rw_verify_area+0x203/0x4c0
[ 1405.782950][T18387]  do_sendfile+0x52e/0x7c0
[ 1405.782972][T18387]  ? __pfx_do_sendfile+0x10/0x10
[ 1405.782988][T18387]  ? __fget_files+0x3a2/0x420
[ 1405.783014][T18387]  __se_sys_sendfile64+0x144/0x1a0
[ 1405.783041][T18387]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1405.783074][T18387]  do_syscall_64+0x166/0x520
[ 1405.783091][T18387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.783108][T18387]  ? clear_bhb_loop+0x70/0xc0
[ 1405.783127][T18387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1405.783144][T18387] RIP: 0033:0x7f8332d9e0d9
[ 1405.783160][T18387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1405.783174][T18387] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1405.783192][T18387] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1405.783205][T18387] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[ 1405.783215][T18387] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1405.783226][T18387] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001
[ 1405.783237][T18387] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1405.783266][T18387]  </TASK>
[ 1406.265142][ T5794] usb 2-1: USB disconnect, device number 5
[ 1406.563034][ T5814] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1406.719264][T18393] FAULT_INJECTION: forcing a failure.
[ 1406.719264][T18393] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1406.733219][T18393] CPU: 0 UID: 0 PID: 18393 Comm: syz.3.3416 Not tainted syzkaller #0 PREEMPT(full) 
[ 1406.733245][T18393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1406.733256][T18393] Call Trace:
[ 1406.733264][T18393]  <TASK>
[ 1406.733271][T18393]  dump_stack_lvl+0xe8/0x150
[ 1406.733298][T18393]  should_fail_ex+0x3eb/0x540
[ 1406.733326][T18393]  _copy_to_user+0x31/0xb0
[ 1406.733344][T18393]  simple_read_from_buffer+0xe1/0x170
[ 1406.733367][T18393]  proc_fail_nth_read+0x1bb/0x230
[ 1406.733389][T18393]  ? common_file_perm+0x20e/0x2b0
[ 1406.733415][T18393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1406.733439][T18393]  ? rw_verify_area+0x24a/0x4c0
[ 1406.733460][T18393]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1406.733482][T18393]  vfs_read+0x213/0xa80
[ 1406.733505][T18393]  ? __pfx___mutex_lock+0x10/0x10
[ 1406.733525][T18393]  ? __pfx_vfs_read+0x10/0x10
[ 1406.733546][T18393]  ? __fget_files+0x2a/0x420
[ 1406.733567][T18393]  ? __fget_files+0x3a2/0x420
[ 1406.733584][T18393]  ? __fget_files+0x2a/0x420
[ 1406.733609][T18393]  ksys_read+0x150/0x270
[ 1406.733630][T18393]  ? __pfx_ksys_read+0x10/0x10
[ 1406.733658][T18393]  do_syscall_64+0x166/0x520
[ 1406.733675][T18393]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.733692][T18393]  ? clear_bhb_loop+0x70/0xc0
[ 1406.733711][T18393]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1406.733727][T18393] RIP: 0033:0x7fdd02d5e90e
[ 1406.733743][T18393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1406.733758][T18393] RSP: 002b:00007fdd03c7dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1406.733776][T18393] RAX: ffffffffffffffda RBX: 00007fdd03c7e6c0 RCX: 00007fdd02d5e90e
[ 1406.733788][T18393] RDX: 000000000000000f RSI: 00007fdd03c7e0a0 RDI: 0000000000000005
[ 1406.733799][T18393] RBP: 00007fdd03c7e090 R08: 0000000000000000 R09: 0000000000000000
[ 1406.733809][T18393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1406.733820][T18393] R13: 00007fdd03026038 R14: 00007fdd03025fa0 R15: 00007ffc96fec4f8
[ 1406.733844][T18393]  </TASK>
[ 1406.842859][ T5814] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1406.842898][ T5814] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1406.880909][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1406.880932][ T5814] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1407.062837][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1407.071203][ T5814] usb 9-1: Product: syz
[ 1407.077031][ T5814] usb 9-1: Manufacturer: syz
[ 1407.082466][ T5814] usb 9-1: SerialNumber: syz
[ 1407.128658][ T5814] usb 9-1: selecting invalid altsetting 1
[ 1407.139164][ T5814] usb 9-1: unit 6 not found!
[ 1407.466623][T18400] netlink: 'syz.1.3418': attribute type 17 has an invalid length.
[ 1407.589972][ T5814] usb 9-1: 2:0: failed to get current value for ch 0 (-71)
[ 1407.859198][ T5814] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1407.888247][ T5814] usb 9-1: USB disconnect, device number 37
[ 1408.097987][T15943] udevd[15943]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1408.352865][T18410] input: syz1 as /devices/virtual/input/input74
[ 1408.564952][T18417] FAULT_INJECTION: forcing a failure.
[ 1408.564952][T18417] name failslab, interval 1, probability 10, space 0, times 0
[ 1408.588412][T18417] CPU: 0 UID: 0 PID: 18417 Comm: syz.2.3425 Not tainted syzkaller #0 PREEMPT(full) 
[ 1408.588438][T18417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1408.588449][T18417] Call Trace:
[ 1408.588458][T18417]  <TASK>
[ 1408.588466][T18417]  dump_stack_lvl+0xe8/0x150
[ 1408.588495][T18417]  should_fail_ex+0x3eb/0x540
[ 1408.588526][T18417]  should_failslab+0xa8/0x100
[ 1408.588545][T18417]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1408.588571][T18417]  ? do_setattr+0x166/0x7e0
[ 1408.588595][T18417]  ? do_setattr+0x166/0x7e0
[ 1408.588623][T18417]  kmemdup_nul+0x36/0xf0
[ 1408.588649][T18417]  do_setattr+0x166/0x7e0
[ 1408.588675][T18417]  ? __pfx_do_setattr+0x10/0x10
[ 1408.588699][T18417]  ? lock_acquire+0x115/0x350
[ 1408.588734][T18417]  ? __might_fault+0xaf/0x130
[ 1408.588755][T18417]  ? lsm_name_to_attr+0xe6/0x130
[ 1408.588780][T18417]  proc_pid_attr_write+0x5cc/0x630
[ 1408.588801][T18417]  ? proc_pid_attr_write+0xc2/0x630
[ 1408.588825][T18417]  ? __pfx_proc_pid_attr_write+0x10/0x10
[ 1408.588845][T18417]  vfs_write+0x296/0xba0
[ 1408.588872][T18417]  ? __pfx_vfs_write+0x10/0x10
[ 1408.588894][T18417]  ? __fget_files+0x2a/0x420
[ 1408.588916][T18417]  ? __fget_files+0x3a2/0x420
[ 1408.588934][T18417]  ? __fget_files+0x2a/0x420
[ 1408.588965][T18417]  ksys_write+0x150/0x270
[ 1408.588988][T18417]  ? __pfx_ksys_write+0x10/0x10
[ 1408.589018][T18417]  do_syscall_64+0x166/0x520
[ 1408.589036][T18417]  ? trace_irq_disable+0x3b/0x140
[ 1408.589059][T18417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.589076][T18417]  ? clear_bhb_loop+0x70/0xc0
[ 1408.589097][T18417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.589114][T18417] RIP: 0033:0x7f8332d9e0d9
[ 1408.589131][T18417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1408.589145][T18417] RSP: 002b:00007f8330ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1408.589163][T18417] RAX: ffffffffffffffda RBX: 00007f8333025fa0 RCX: 00007f8332d9e0d9
[ 1408.589176][T18417] RDX: 00000000000000ff RSI: 00002000000003c0 RDI: 0000000000000003
[ 1408.589187][T18417] RBP: 00007f8330ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 1408.589197][T18417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1408.589208][T18417] R13: 00007f8333026038 R14: 00007f8333025fa0 R15: 00007ffddaa69dc8
[ 1408.589233][T18417]  </TASK>
[ 1408.851309][T18416] FAULT_INJECTION: forcing a failure.
[ 1408.851309][T18416] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1408.851396][T18416] CPU: 0 UID: 0 PID: 18416 Comm: syz.8.3426 Not tainted syzkaller #0 PREEMPT(full) 
[ 1408.851415][T18416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1408.851426][T18416] Call Trace:
[ 1408.851433][T18416]  <TASK>
[ 1408.851440][T18416]  dump_stack_lvl+0xe8/0x150
[ 1408.851466][T18416]  should_fail_ex+0x3eb/0x540
[ 1408.851495][T18416]  _copy_from_user+0x2d/0xb0
[ 1408.851515][T18416]  ___sys_sendmsg+0x1c6/0x360
[ 1408.851539][T18416]  ? __lock_acquire+0x6df/0x2e50
[ 1408.851568][T18416]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1408.851613][T18416]  ? __fget_files+0x2a/0x420
[ 1408.851632][T18416]  ? __fget_files+0x3a2/0x420
[ 1408.851658][T18416]  __x64_sys_sendmsg+0x1b1/0x290
[ 1408.851681][T18416]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1408.851717][T18416]  do_syscall_64+0x166/0x520
[ 1408.851736][T18416]  ? trace_irq_disable+0x3b/0x140
[ 1408.851759][T18416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.851776][T18416]  ? clear_bhb_loop+0x70/0xc0
[ 1408.851797][T18416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1408.851814][T18416] RIP: 0033:0x7f3217d9e0d9
[ 1408.851829][T18416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1408.851844][T18416] RSP: 002b:00007f3218d50028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1408.851863][T18416] RAX: ffffffffffffffda RBX: 00007f3218025fa0 RCX: 00007f3217d9e0d9
[ 1408.851875][T18416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1408.851886][T18416] RBP: 00007f3218d50090 R08: 0000000000000000 R09: 0000000000000000
[ 1408.851897][T18416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1408.851906][T18416] R13: 00007f3218026038 R14: 00007f3218025fa0 R15: 00007ffe34f5e888
[ 1408.851936][T18416]  </TASK>
[ 1409.934425][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'.
[ 1410.212317][T12133] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[ 1410.382943][T12133] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1410.419308][T12133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.428670][T12133] usb 2-1: Product: syz
[ 1410.428689][T12133] usb 2-1: Manufacturer: syz
[ 1410.428700][T12133] usb 2-1: SerialNumber: syz
[ 1410.469052][T12133] usb 2-1: config 0 descriptor??
[ 1410.503673][T12133] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1410.761771][ T5814] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1410.904035][T17356] Bluetooth: hci3: unexpected event for opcode 0x2031
[ 1410.926899][ T5814] usb 9-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40
[ 1410.949169][ T5814] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1410.949202][ T5814] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1410.949323][ T5814] usb 9-1: config 1 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 10
[ 1410.949349][ T5814] usb 9-1: config 1 interface 1 has no altsetting 1
[ 1411.017294][ T5814] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1411.017329][ T5814] usb 9-1: Product: syz
[ 1411.017353][ T5814] usb 9-1: Manufacturer: syz
[ 1411.017367][ T5814] usb 9-1: SerialNumber: syz
[ 1411.394879][T18455] FAULT_INJECTION: forcing a failure.
[ 1411.394879][T18455] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1411.419823][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.2.3438 Not tainted syzkaller #0 PREEMPT(full) 
[ 1411.419852][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1411.419864][T18455] Call Trace:
[ 1411.419872][T18455]  <TASK>
[ 1411.419882][T18455]  dump_stack_lvl+0xe8/0x150
[ 1411.419912][T18455]  should_fail_ex+0x3eb/0x540
[ 1411.419942][T18455]  get_futex_key+0x1b4/0x1580
[ 1411.419981][T18455]  ? __pfx_get_futex_key+0x10/0x10
[ 1411.420018][T18455]  futex_wake+0x119/0x5f0
[ 1411.420046][T18455]  ? __pfx_futex_wake+0x10/0x10
[ 1411.420081][T18455]  do_futex+0x458/0x4e0
[ 1411.420099][T18455]  ? __might_fault+0xaf/0x130
[ 1411.420123][T18455]  ? __pfx_do_futex+0x10/0x10
[ 1411.420143][T18455]  ? put_timespec64+0xd8/0x130
[ 1411.420165][T18455]  __se_sys_futex+0x3a8/0x450
[ 1411.420188][T18455]  ? __x64_sys_clock_gettime+0x238/0x290
[ 1411.420210][T18455]  ? __pfx___se_sys_futex+0x10/0x10
[ 1411.420230][T18455]  ? __pfx___x64_sys_clock_gettime+0x10/0x10
[ 1411.420256][T18455]  ? __x64_sys_futex+0x21/0xf0
[ 1411.420278][T18455]  do_syscall_64+0x166/0x520
[ 1411.420297][T18455]  ? trace_irq_disable+0x3b/0x140
[ 1411.420323][T18455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.420343][T18455]  ? clear_bhb_loop+0x70/0xc0
[ 1411.420365][T18455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1411.420383][T18455] RIP: 0033:0x7f8332d9e0d9
[ 1411.420401][T18455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1411.420417][T18455] RSP: 002b:00007f8330ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1411.420438][T18455] RAX: ffffffffffffffda RBX: 00007f8333025fa8 RCX: 00007f8332d9e0d9
[ 1411.420452][T18455] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8333025fac
[ 1411.420464][T18455] RBP: 00007f8333025fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 1411.420477][T18455] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[ 1411.420488][T18455] R13: 00007f8333026038 R14: 00007ffddaa69ce0 R15: 00007ffddaa69dc8
[ 1411.420514][T18455]  </TASK>
[ 1412.205993][T12133] gspca_stk1135: reg_w 0x7 err -110
[ 1412.213340][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213355][T12133] gspca_stk1135: Sensor write failed
[ 1412.213381][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213389][T12133] gspca_stk1135: Sensor write failed
[ 1412.213422][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213429][T12133] gspca_stk1135: Sensor read failed
[ 1412.213454][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213462][T12133] gspca_stk1135: Sensor read failed
[ 1412.213467][T12133] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1412.213496][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213504][T12133] gspca_stk1135: Sensor read failed
[ 1412.213528][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213536][T12133] gspca_stk1135: Sensor read failed
[ 1412.213561][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213568][T12133] gspca_stk1135: Sensor write failed
[ 1412.213594][T12133] gspca_stk1135: serial bus timeout: status=0x00
[ 1412.213601][T12133] gspca_stk1135: Sensor write failed
[ 1412.213681][T12133] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110
[ 1413.407117][T18429] 
[ 1413.409475][T18429] ============================================
[ 1413.415621][T18429] WARNING: possible recursive locking detected
[ 1413.421956][T18429] syzkaller #0 Not tainted
[ 1413.426395][T18429] --------------------------------------------
[ 1413.432572][T18429] syz.1.3427/18429 is trying to acquire lock:
[ 1413.438633][T18429] ffff88802eea8160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170
[ 1413.448542][T18429] 
[ 1413.448542][T18429] but task is already holding lock:
[ 1413.455994][T18429] ffff888057086160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170
[ 1413.465849][T18429] 
[ 1413.465849][T18429] other info that might help us debug this:
[ 1413.474014][T18429]  Possible unsafe locking scenario:
[ 1413.474014][T18429] 
[ 1413.481466][T18429]        CPU0
[ 1413.484767][T18429]        ----
[ 1413.488054][T18429]   lock(&rmidi->open_mutex);
[ 1413.492777][T18429]   lock(&rmidi->open_mutex);
[ 1413.497455][T18429] 
[ 1413.497455][T18429]  *** DEADLOCK ***
[ 1413.497455][T18429] 
[ 1413.505660][T18429]  May be due to missing lock nesting notation
[ 1413.505660][T18429] 
[ 1413.514050][T18429] locks held by syz.1.3427/18429: 2, last CPU#0:
[ 1413.520452][T18429]  #0: ffff888057086160 (&rmidi->open_mutex){+.+.}-{4:4}, at: rawmidi_release_priv+0x48/0x170
[ 1413.530759][T18429]  #1: ffff88802eea8460 (&ump->open_mutex){+.+.}-{4:4}, at: snd_ump_legacy_close+0xe5/0x320
[ 1413.540872][T18429] 
[ 1413.540872][T18429] stack backtrace:
[ 1413.546764][T18429] CPU: 0 UID: 0 PID: 18429 Comm: syz.1.3427 Not tainted syzkaller #0 PREEMPT(full) 
[ 1413.556157][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1413.566219][T18429] Call Trace:
[ 1413.569526][T18429]  <TASK>
[ 1413.572479][T18429]  dump_stack_lvl+0xe8/0x150
[ 1413.577094][T18429]  print_deadlock_bug+0x27a/0x290
[ 1413.582125][T18429]  __lock_acquire+0x261c/0x2e50
[ 1413.586993][T18429]  ? __lock_acquire+0x6df/0x2e50
[ 1413.591943][T18429]  ? __lock_acquire+0x6df/0x2e50
[ 1413.596906][T18429]  lock_acquire+0x115/0x350
[ 1413.601421][T18429]  ? rawmidi_release_priv+0x48/0x170
[ 1413.606721][T18429]  __mutex_lock+0x19d/0x1550
[ 1413.611315][T18429]  ? rawmidi_release_priv+0x48/0x170
[ 1413.616612][T18429]  ? __lock_acquire+0x6df/0x2e50
[ 1413.621581][T18429]  ? trace_contention_end+0x3d/0x140
[ 1413.626890][T18429]  ? __mutex_lock+0x30b/0x1550
[ 1413.631670][T18429]  ? rawmidi_release_priv+0x48/0x170
[ 1413.636979][T18429]  ? __pfx___mutex_lock+0x10/0x10
[ 1413.642039][T18429]  ? snd_rawmidi_drain_output+0x6df/0x8b0
[ 1413.647810][T18429]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1413.652857][T18429]  rawmidi_release_priv+0x48/0x170
[ 1413.658157][T18429]  snd_rawmidi_kernel_release+0x46/0xa0
[ 1413.663758][T18429]  snd_ump_legacy_close+0x1f7/0x320
[ 1413.668983][T18429]  close_substream+0x453/0x790
[ 1413.673754][T18429]  ? __pfx_close_substream+0x10/0x10
[ 1413.679071][T18429]  ? __pfx___fsnotify_parent+0x10/0x10
[ 1413.684543][T18429]  rawmidi_release_priv+0xeb/0x170
[ 1413.689667][T18429]  snd_rawmidi_release+0x5b/0xc0
[ 1413.694625][T18429]  ? __pfx_snd_rawmidi_release+0x10/0x10
[ 1413.700364][T18429]  __fput+0x418/0xa50
[ 1413.704370][T18429]  task_work_run+0x1d9/0x270
[ 1413.708974][T18429]  ? __pfx_task_work_run+0x10/0x10
[ 1413.714090][T18429]  ? do_raw_spin_unlock+0xf5/0x200
[ 1413.719321][T18429]  do_exit+0x73a/0x2360
[ 1413.723515][T18429]  ? __pfx_do_exit+0x10/0x10
[ 1413.728220][T18429]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1413.733254][T18429]  do_group_exit+0x22d/0x2f0
[ 1413.737860][T18429]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1413.743075][T18429]  get_signal+0x121b/0x12c0
[ 1413.747595][T18429]  arch_do_signal_or_restart+0xbb/0x860
[ 1413.753168][T18429]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1413.759332][T18429]  ? __x64_sys_clock_gettime+0x238/0x290
[ 1413.764978][T18429]  exit_to_user_mode_loop+0x10e/0x770
[ 1413.770388][T18429]  ? rcu_is_watching+0x16/0xb0
[ 1413.775162][T18429]  do_syscall_64+0x328/0x520
[ 1413.779757][T18429]  ? trace_irq_disable+0x3b/0x140
[ 1413.784793][T18429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.790864][T18429]  ? clear_bhb_loop+0x70/0xc0
[ 1413.795551][T18429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.801464][T18429] RIP: 0033:0x7f4365d9e0d9
[ 1413.805885][T18429] Code: Unable to access opcode bytes at 0x7f4365d9e0af.
[ 1413.812986][T18429] RSP: 002b:00007f4366cba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1413.821419][T18429] RAX: fffffffffffffe00 RBX: 00007f4366026098 RCX: 00007f4365d9e0d9
[ 1413.829414][T18429] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4366026098
[ 1413.837421][T18429] RBP: 00007f4366026090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.845433][T18429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1413.853434][T18429] R13: 00007f4366026128 R14: 00007ffe3c48e1c0 R15: 00007ffe3c48e2a8
[ 1413.861421][T18429]  </TASK>
[ 1414.280017][ T5814] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1414.289813][ T5814] usb 9-1: USB disconnect, device number 38
[ 1414.455246][T15943] udevd[15943]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 1414.922752][ T1026] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1414.948555][ T5794] usb 2-1: USB disconnect, device number 6
[ 1414.983736][ T1026] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1414.998155][T13611] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz-executor: bg 1: bad block bitmap checksum
[ 1415.028745][ T1026] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1415.062678][T13611] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6680: Filesystem failed CRC
[ 1415.063560][T18462] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[ 1415.126774][ T1026] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1415.408273][ T1026] bridge_slave_1: left allmulticast mode
[ 1415.408305][ T1026] bridge_slave_1: left promiscuous mode
[ 1415.408521][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1415.442676][ T1026] bridge_slave_0: left allmulticast mode
[ 1415.442709][ T1026] bridge_slave_0: left promiscuous mode
[ 1415.442930][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1415.829517][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1415.856142][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1415.871741][ T1026] bond0 (unregistering): Released all slaves
[ 1416.178567][ T1026] hsr_slave_0: left promiscuous mode
[ 1416.192276][ T1026] hsr_slave_1: left promiscuous mode
[ 1416.203604][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1416.211530][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1416.237925][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1416.237952][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1416.350134][ T1026] veth1_macvtap: left promiscuous mode
[ 1416.357130][ T1026] veth0_macvtap: left promiscuous mode
[ 1416.364248][ T1026] veth1_vlan: left promiscuous mode
[ 1416.369696][ T1026] veth0_vlan: left promiscuous mode
[ 1416.967111][ T1026] team0 (unregistering): Port device team_slave_1 removed
[ 1416.997323][ T1026] team0 (unregistering): Port device team_slave_0 removed
[ 1417.224038][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1417.508950][ T1026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.549651][ T1026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.604699][ T1026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.671352][ T1026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.851943][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.897272][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.938267][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1417.982841][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1418.131694][ T1026] bridge_slave_1: left allmulticast mode
[ 1418.137511][ T1026] bridge_slave_1: left promiscuous mode
[ 1418.143972][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1418.161507][ T1026] bridge_slave_0: left allmulticast mode
[ 1418.167288][ T1026] bridge_slave_0: left promiscuous mode
[ 1418.175500][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1418.188749][ T1026] bridge_slave_1: left allmulticast mode
[ 1418.199473][ T1026] bridge_slave_1: left promiscuous mode
[ 1418.208506][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1418.221185][ T1026] bridge_slave_0: left allmulticast mode
[ 1418.227044][ T1026] bridge_slave_0: left promiscuous mode
[ 1418.233601][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1418.481603][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1418.497675][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1418.513239][ T1026] bond0 (unregistering): Released all slaves
[ 1418.580114][ T1026] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1418.602143][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1418.618033][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1418.628841][ T1026] bond0 (unregistering): Released all slaves
[ 1418.644021][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1419.057042][ T1026] hsr_slave_0: left promiscuous mode
[ 1419.064894][ T1026] hsr_slave_1: left promiscuous mode
[ 1419.072270][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1419.080393][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1419.090527][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1419.090610][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1419.116578][ T1026] hsr_slave_0: left promiscuous mode
[ 1419.123319][ T1026] hsr_slave_1: left promiscuous mode
[ 1419.123987][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1419.124011][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1419.151094][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1419.151119][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1419.184985][ T1026] veth1_macvtap: left promiscuous mode
[ 1419.185113][ T1026] veth1_vlan: left promiscuous mode
[ 1419.197903][ T1026] veth1_macvtap: left promiscuous mode
[ 1419.197931][ T1026] veth0_macvtap: left promiscuous mode
[ 1419.198051][ T1026] veth1_vlan: left promiscuous mode
[ 1419.198088][ T1026] veth0_vlan: left promiscuous mode
[ 1419.695252][ T1026] team0 (unregistering): Port device team_slave_1 removed
[ 1419.719653][ T1026] team0 (unregistering): Port device team_slave_0 removed
[ 1420.001146][ T1026] team0 (unregistering): Port device team_slave_1 removed
[ 1420.017648][ T1026] team0 (unregistering): Port device team_slave_0 removed
[ 1420.117422][ T5278] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1420.418556][ T1026] IPVS: stop unused estimator thread 0...
[ 1420.430501][ T1026] IPVS: stop unused estimator thread 0...
[ 1421.015659][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1421.515667][ T5278] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1421.974983][ T5278] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1422.425465][ T5278] 8021q: adding VLAN 0 to HW filter on device eth11
[ 1422.897653][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12
[ 1422.972254][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.367259][ T5278] 8021q: adding VLAN 0 to HW filter on device eth30