last executing test programs:

7m31.580480378s ago: executing program 2 (id=522):
r0 = fanotify_init(0x0, 0x0)
r1 = dup(r0)
write$nbd(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="6705669801000000000000000000000522b10115b9b3439b2c06335aff63727f9f6e5f"], 0x10)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x208008, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x6, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x1, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0x3, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x200000, 0x6, 0x0, 0x8, 0x1, 0x9, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x10, 0x0, 0xa, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1b, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x9, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0xfffff001, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x5, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x4, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x0, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x6, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x1, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x48, 0x10, 0xfffffff7, 0xfffff772, 0x9, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x3, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x7, 0x10000, 0x8001, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0x800, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0x8, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10010002, 0x1000, 0x7, 0x6, 0x6, 0x5, 0xfffffe00, 0x1, 0x1, 0x0, 0x7fffffff, 0x2, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0xffe, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0x9, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x75, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x6, 0x5, 0x1, 0x9, 0x8, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0xa, 0x3, 0x7, 0x8, 0x9, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0xffffffff, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0x7fff, 0x7, 0x405, 0x6, 0x6, 0x8001, 0x9, 0x8, 0x3, 0x87e, 0x6, 0xfffffe00, 0x1000, 0x5, 0x6, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xffff, 0xf28c, 0x7, 0x2, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x7fffffff, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x5, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x9, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xff, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0xfffffff6, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x2c, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x9, 0xe9ab, 0x3, 0x5, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0xb]})
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7m29.259291612s ago: executing program 2 (id=527):
prctl$PR_PAC_RESET_KEYS(0x36, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x4]}, &(0x7f0000000080)=0xa)

7m29.073328238s ago: executing program 2 (id=529):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "207d3d00000055c51b08700c1e0adb4f000000001200000000000900"})
r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0b45545, &(0x7f0000000040)=0x1000)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0x5, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001540)={'vxcan1\x00', <r6=>0x0})
connect$can_j1939(r5, &(0x7f0000001580)={0x1d, r6, 0x0, {0x1}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0}, &(0x7f00000001c0)=0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r14=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0)
r15 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r16=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r15, &(0x7f0000000540)={0x18, 0x110, 0xfa00, {r16, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1={0xfc, 0x1, '\x00', 0x2}, 0x9}, @in={0x2, 0x4e24, @empty}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r13, &(0x7f0000000440)={0x7, 0x8, 0xfa00, {r16, 0x8}}, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xbc, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)

7m27.06572245s ago: executing program 2 (id=530):
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x100)
rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00')
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020)

7m26.474900215s ago: executing program 2 (id=534):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[], 0x678}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000)
r3 = socket$kcm(0xa, 0x2, 0x0)
socket(0x2, 0x80805, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000180)=0x2cf7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
sendmsg$sock(r3, 0x0, 0x0)

7m25.728839746s ago: executing program 2 (id=538):
syz_open_procfs(0x0, &(0x7f0000000480)='net/udp\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd3000fddbdf250700000008000300", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000043}, 0x20004014)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
r6 = getpgid(0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000404fe99437162f64b0ed6523cc16076b74adc118af1b5270695bc71ae039f5a83a4c616adf3805bcc13352406cacb9a7fa5fa16d767d4390b00babaf9018b67bee7ebd662a96d1cf5a872a443c89315f4f4a22e8338458bbc71c60af2f881a0b0009099a0011aa08883b1727a47ade5d96a938d945bb1d7532a54a4b1deb4b5a4dd7becb06daee978290bc9bf5bc70c764cc363c1b8779aa0a94129017c409af8f395c9b05db658638e48f801acf848f9d2f3ac9d667a8ab2cdab0d74c7a32ed9aefe0973d903fd9f62ae23f176a144ad9867ba7c9c4ca856107607f63", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf251400000008001c00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004084}, 0xc0c4)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r0, 0xc10d46634827f699, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r9, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
io_setup(0x2, &(0x7f0000000000)=<r10=>0x0)
eventfd(0x0)
io_submit(r10, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/psched\x00')
pread64(r11, &(0x7f0000000380)=""/31, 0x1f, 0x100)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002a25c640b0070700c617000000010902240001000000000904aa000274ce91000905030100021f03080905050110"], 0x0)

7m25.553094379s ago: executing program 32 (id=538):
syz_open_procfs(0x0, &(0x7f0000000480)='net/udp\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002e80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd3000fddbdf250700000008000300", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20000043}, 0x20004014)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
r6 = getpgid(0x0)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000404fe99437162f64b0ed6523cc16076b74adc118af1b5270695bc71ae039f5a83a4c616adf3805bcc13352406cacb9a7fa5fa16d767d4390b00babaf9018b67bee7ebd662a96d1cf5a872a443c89315f4f4a22e8338458bbc71c60af2f881a0b0009099a0011aa08883b1727a47ade5d96a938d945bb1d7532a54a4b1deb4b5a4dd7becb06daee978290bc9bf5bc70c764cc363c1b8779aa0a94129017c409af8f395c9b05db658638e48f801acf848f9d2f3ac9d667a8ab2cdab0d74c7a32ed9aefe0973d903fd9f62ae23f176a144ad9867ba7c9c4ca856107607f63", @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf251400000008001c00", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004084}, 0xc0c4)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x58, r0, 0xc10d46634827f699, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff15, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x400c)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0)
write$rfkill(r9, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8)
mremap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
io_setup(0x2, &(0x7f0000000000)=<r10=>0x0)
eventfd(0x0)
io_submit(r10, 0x0, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/psched\x00')
pread64(r11, &(0x7f0000000380)=""/31, 0x1f, 0x100)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002a25c640b0070700c617000000010902240001000000000904aa000274ce91000905030100021f03080905050110"], 0x0)

2m34.671952942s ago: executing program 3 (id=1477):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$uac1(0x2, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x44, &(0x7f0000000440)={0x5, 0xf, 0x44, 0x1, [@generic={0x3f, 0x10, 0x2, "97e5ceba5a71b62855ac0869da7f62a94b5ec0a766d4e5d42e9864f1bfa38c1ab565b61f133e63fd471a0a3db3aaa73d44fcb3cdc8eca0643d73a51d"}]}})
syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000700)={0x24, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000005c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x7, 0xb8, {0xb8, 0xf, "b4e91bf21c4c19fb58035fc4ed8e07eb209fe403d834ce2b80aa5cc8d6aee566075c5e5b68a2b5ae0add381d2a003c623c895a8d2aa2a29c7f8c00ab3793f1ef9ff6cb8d6d4dd7a82d09d3c9dbd5486389f439eac266cfa06c93eb2c0f970ea40e33cbabd3f6bf02ca43b02938473ffe28840dc2c1104fd09751b687bae784a32ee1c3a69e1afee827ae1ee5ce755fda152b06d26481e609d7f9b066d5d30fe77244e7c6a28431eea82b9e303844229db4bc46adc0f5"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f00000001c0)={0x0, 0xc, 0x85, "ea867ee0d237236afa396a0df66d3d48a8ee816caa45cb93d9bfba34aed548e66be23d3bb5d0a9ddd4caa2e03943e48c8817d40201868944823912563c4a0a1396a400f4a89f359e81f9df5a8398004aeda46a2c5d5b456fbaf6a0b75b086763fc4ac5fb4dd4e1d24491af6e9f6ae7e2a003d697fae9847409887f38618eb30bf2dab86827"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x47}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x1f}, &(0x7f0000000400)={0x20, 0x80, 0x1c, {0x0, 0xf801, 0xa5d, 0x3, 0xbf, 0x8, 0x8, 0xc, 0x337a, 0x5, 0x5, 0x101}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x10}, &(0x7f0000000500)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000540)={0x20, 0x87, 0x2, 0x4}, &(0x7f00000005c0)={0x20, 0x89, 0x2}})
syz_usb_disconnect(r0)
syz_usb_control_io$hid(r0, &(0x7f00000009c0)={0x24, &(0x7f00000008c0)={0x20, 0xb, 0x33, {0x33, 0x0, "faad506960d853f95460e9f984d95ca1c4f133055af84d73058f3d8a724f9ca887f6d539f5585db29514b725993b28773b"}}, &(0x7f0000000900)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "c9941be58628206f95b847740680d54854002695d42491ef3b4dd7"}}, &(0x7f0000000940)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "12b051ca"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x3, 0x1, {0x22, 0xcea}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000a00)={0x0, 0xa, 0x32, "6af68bc7bd5772c73d3838f08487281f87b1373ca9c0787b19b657724cfb1a814dba2d7fecdd061bb162971956dfd532730f"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x7b}, &(0x7f0000000ac0)={0x20, 0x1, 0xde, "57916b0cc092d62508a7a4cd0b8d0021ba35524f614f013a2627ceef03c2acfc4b2309bb336e703f89d201eb2f7bb6ab15a5a5fc8ebcaa294d6b91084b9d0c896d0a630db39b475b3537d29bcc485d00aee62d82f49c7aa5c88c63936d421b3ea5c755a00d5d3a8eae9c85d2720676080b1efaf4a3b2ca164f01d7f5208fa7abe6be607041f550742b068466d25bdacd37d5cb7e45127f5bb02466cf67f0924f7d6f60899620ce260ddf5290e0162b9bafb30e17848c0df1366244a5acdf9cd63e48bfcf9a4e29b0c0176de03f5c00ebd25f09d8e3016df6cf422a70f7a7"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0x2}})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffff7f}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x70}}, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, r2, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x62}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x80)

2m30.678008951s ago: executing program 3 (id=1488):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r2 = syz_io_uring_setup(0xce, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x8008}}) (async)
io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0)
read$char_usb(r1, &(0x7f0000000200)=""/73, 0x49) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1380, &(0x7f0000000100)=ANY=[]) (async)
r5 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5})
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
ioctl(r5, 0x8b2a, &(0x7f0000000040)) (async)
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0)

2m29.050054791s ago: executing program 3 (id=1494):
r0 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000440), 0x0, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r1, r0}, &(0x7f0000000280)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'streebog512-generic\x00'}, 0x0, 0x30})

2m28.995315975s ago: executing program 3 (id=1495):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x0, 0x25dfdbff, {0xa, 0x10, 0x20, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20040044)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x8cff, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

2m28.561541149s ago: executing program 3 (id=1500):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1, 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0)
write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x50, 0x0, 0x0, 0x5}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0xffffffffffffffda, 0x5, {0x1, 0xfffffffffffffffd, 0x8001, 0x7fffffff, 0x0, 0x2, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc000, 0x3, r2, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

2m26.095814335s ago: executing program 3 (id=1506):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x1})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x93)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x4606, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x5, 0x58, 0x0, r7})

2m10.992437867s ago: executing program 33 (id=1506):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r0, 0xc01064c4, &(0x7f0000000100)={&(0x7f00000000c0)=[r2], 0x1})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x93)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x4606, &(0x7f0000000000))
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], 0x0, 0x5, 0x58, 0x0, r7})

2m0.933550915s ago: executing program 1 (id=1593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0xec, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x94, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0xeb}, @NFTA_LOG_PREFIX={0x13, 0x2, 0x1, 0x0, '/dev/sequencer\x00'}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m58.684040469s ago: executing program 1 (id=1597):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = getpid()
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz0\x00', 0x401}, 0x3, 0x20000000, 0x6, r5, 0x7, 0x3, 'syz0\x00', &(0x7f0000000280)=['0\x14[&$\x00', '\x00\xe1\x11\x0f\xd3\xaf', '{-[+-\x00', '\x00', '*\x00', '/dev/vim2m\x00', '/dev/comedi0\x00'], 0x2d})
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$inet6(r11, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x44, 0x105, 0x2008, 0x2, 0x2009, 0x1, 0x89, 0x2, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]})

1m56.66482979s ago: executing program 1 (id=1602):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000140)})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0xfff3, 0x10}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0xd}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000002c0)={0x21b9, &(0x7f0000000140)=[{0x0, 0x9, 0x3, 0x9}, {0x6, 0x4, 0x80, 0x9}, {0x8, 0x9, 0x9}, {0xa7, 0xa, 0x4, 0x6}, {0xffff, 0x4, 0x2b, 0x8}, {0x8, 0x5, 0x1, 0x1}, {0x4, 0x4, 0x2, 0x1}]})
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fsopen(&(0x7f0000000040)='cramfs\x00', 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x3fd682, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00003aca19dcd9f061943d4d3a6dc3a6d3b9b0b839385daaee3c4010e08e3f67f679b63dd4240ea2ed0f957551ab988aa08791b7ed5ffa577f78fb84661816433c9298ea65d6ad24d7fa5dada73419256bcd", @ANYRES16=r7, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8044)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x24000000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()

1m52.219352318s ago: executing program 1 (id=1614):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x8001)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101402, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101402, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x4, 0x1, 0x0, 0x3, 0x10, 0x1, 0x2, 0x0, 0x6, 0x0, 0x2, 0x0, 0x23}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2002c1, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2002c1, 0x0)
r4 = dup(0xffffffffffffffff)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x8080000, 0x1000, 0xfffffffc})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffb, 0x0, 0x9, 0x9, 0x8, 0x0, 0x3}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffb, 0x0, 0x9, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
fanotify_init(0x40, 0x40000)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r5, 0x6, 0xe, 0x0, &(0x7f0000000140)=0x1c)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x3}) (async)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x3})
ioctl$USBDEVFS_BULK(r4, 0xc0105502, 0x0) (async)
ioctl$USBDEVFS_BULK(r4, 0xc0105502, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='aufs\x00', 0x418, 0x0)
socket(0x10, 0x803, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000d9fb0000000000d0ed000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x80)

1m50.025549627s ago: executing program 1 (id=1627):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) (fail_nth: 3)

1m49.161666407s ago: executing program 1 (id=1632):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sync()
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
read$eventfd(r6, &(0x7f0000000100), 0x8)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, <r7=>0x0], &(0x7f0000000280), 0x2, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r7, r7], &(0x7f0000000180)=[0x31], 0x0, 0xff})

1m34.060092561s ago: executing program 34 (id=1632):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sync()
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r6 = ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
read$eventfd(r6, &(0x7f0000000100), 0x8)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, <r7=>0x0], &(0x7f0000000280), 0x2, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0xf], &(0x7f0000000340)=[r7, r7], &(0x7f0000000180)=[0x31], 0x0, 0xff})

4.789348449s ago: executing program 4 (id=2079):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x8, 0x7fffffff}]})
r5 = inotify_init1(0x0)
cachestat(r5, 0x0, &(0x7f0000000080), 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r6=>0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
socket$nl_netfilter(0x10, 0x3, 0xc)

4.591601839s ago: executing program 7 (id=2083):
unshare(0x28000600)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)

4.409189756s ago: executing program 7 (id=2085):
socket(0x2d, 0x2, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

4.205497646s ago: executing program 7 (id=2089):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0x8000451b, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3)
ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f)
read$dsp(r3, &(0x7f0000000300)=""/79, 0x4f)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
r6 = dup(r5)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, <r7=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={<r8=>0x0, 0x10, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000480)={r8, 0xfffffff7}, 0x8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff2, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x800}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0)

3.795738464s ago: executing program 5 (id=2092):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x3, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x3, 0x0, 0xfff9, {[@mss={0x2, 0x4, 0x1ff}]}}}}}}}, 0x0)

3.794723737s ago: executing program 0 (id=2093):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

3.666141948s ago: executing program 5 (id=2095):
r0 = socket$inet6(0xa, 0x3, 0x5)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0801"], 0x108}}], 0x2, 0xc040)

3.455210802s ago: executing program 5 (id=2098):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000340)={0xb40e, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r2, 0x4)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
syz_usb_connect(0x0, 0x3b, &(0x7f00000004c0)=ANY=[], 0x0)

3.44370806s ago: executing program 0 (id=2099):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_misc(r1, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r2 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
close(0x3)

3.066481384s ago: executing program 4 (id=2100):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0xfffffeff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021000000000805000100"], 0x4c}}, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff)
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0)
r8 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000002300)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r8, r9, 0x6f)
r10 = add_key$fscrypt_provisioning(0x0, &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r8)
keyctl$KEYCTL_MOVE(0x1e, r10, r8, 0xfffffffffffffffb, 0x1)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x5}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x104)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff)

2.922517098s ago: executing program 7 (id=2101):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r5, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0x4, 0x2000000000000003, 0x5], 0x80a0000, 0x4284})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2.393132656s ago: executing program 5 (id=2102):
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x40000c0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2a242, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001400030500008000ffdbdf25020751ff", @ANYRES32=r4, @ANYBLOB="080002007f00000108000400e000000208"], 0x30}, 0x1, 0x0, 0x0, 0xc090}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

2.297679602s ago: executing program 7 (id=2103):
waitid(0x2, 0x0, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @private=0xa010102}}, 0x0, 0x0, 0x7, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e22, @rand_addr=0x64010100}}, 0x0, 0x0, 0x1, 0x0, "698e86252c563a2eb894ac1de863c527984bfa5ff139aeeef086eed112e6f0ffba88c7d0888990f99dc2416c1cbccf99d18464a65c3587c97aee9217b992893cebfc606ada5e14e782e63da22a6fe97d"}, 0xd8)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x0, 0x0, "f6458f5dce812b9bef6dfd6a024e48c070287c1a02ff37122221178c5eb9fefc9712655b257de87936d391a75e740d2875bd0814b73c57aaf87eb5a05188b46a2f53f1a865528508f3585c3857199fa4"}, 0xd8)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000100)={{r4}, 0x7, 0x7fff, 0x6})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
sendmsg$alg(0xffffffffffffffff, 0x0, 0x48051)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140), 0x4)
r5 = inotify_init()
inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e)

2.28735651s ago: executing program 5 (id=2104):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001)
r2 = syz_open_procfs(0x0, 0x0)
read$FUSE(r2, &(0x7f00000051c0)={0x2020}, 0x2020)
pread64(r2, 0x0, 0x0, 0xadc)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2$watch_queue(&(0x7f0000002240), 0x80)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0xa, &(0x7f0000000680)={0x0, 0x34b, 0x800, 0x2, 0x2d}, &(0x7f0000000080), &(0x7f0000000300))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})

2.196990276s ago: executing program 6 (id=2105):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0})

2.149634076s ago: executing program 6 (id=2106):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x700)

1.964145055s ago: executing program 4 (id=2107):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3d67d9ad, 0x7, 0x72aa, 0x1, 0x1, 0x7fffffff, 0xf7}, &(0x7f0000000380)=0x9c)

1.620518176s ago: executing program 6 (id=2108):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_int(r0, 0x1, 0x1, 0x0, &(0x7f0000000000))

1.457481569s ago: executing program 6 (id=2109):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x5)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0xbf0}}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000140), 0x200007, 0x48cc82)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000380)={0x3ff, 0x1, 0x0, "eef1b7de005bd152f35ed734fc000000000000000000000000000000004000", 0x43353039})
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040))
lchown(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)

1.309044988s ago: executing program 4 (id=2110):
r0 = io_uring_setup(0x2ebc, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

989.82959ms ago: executing program 4 (id=2111):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0, 0x7ff}, 0x8)

885.501733ms ago: executing program 7 (id=2112):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55)
close(r0)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r3 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000004000000040000000700000000000000", @ANYBLOB="00000189a8b74f9445318df0d22c3ff49d8c0b3c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xde9, r5, 0x1000000}, 0x38)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r6 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
r7 = open(0x0, 0x64842, 0x389b0d52417bb201)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x41)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0x4})
pwritev2(r7, 0x0, 0x0, 0x7000, 0x0, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

885.283539ms ago: executing program 4 (id=2113):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x10, 0x5, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x64040, 0xd0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10)
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xf, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @str='-.&\x00'}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x18557f, 0x0)
socket$inet(0x2, 0x2, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = gettid()
process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)

577.254415ms ago: executing program 0 (id=2114):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x2c0400d2)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)

418.484435ms ago: executing program 5 (id=2115):
syz_open_dev$video4linux(&(0x7f0000000280), 0x6, 0x462000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
semctl$GETPID(0x0, 0x2, 0xb, 0x0)
stat(0x0, 0x0)
mq_open(&(0x7f00000004c0)=' \x01 \x00\x00\x00\x00\x0f\x00\x00\x00\x00\xd0\xe3\xac\x88\xc1s\xc5\xec\xa5O\xa2\xf3\"\x88p\"k/K\x99\x147~H\x0f,\x86\xad\xa3\xc0J\v\x1a&\xf0\\\xb8\xcf\xad\xae\x93J\xe7\xcd,\xeb\xef\xee\x93\a\xc51\xd6\x98\x13\xf2\xe8\xe8hY\xd7\x03.\xac\x16H\xcb[,0\x8b\xa0\x83\x84\xb66\xff\xdc\xfe\xb9%\xf7\xdeQ\v\xbe$\xa1\xc8\x97\x9b\xba\n\xd1\x14*\xac\x84\t\xe93qE\x8f_\xcb\xeap\x0f\\;\xb7\x1c\x03\x03\xbc\xa3\xcc\xbe\x03\xb3$\x95\xb4\xd9\xca$%_\x1b{\xfa~y\xba\xf5I\xbar)\n\x93\xbe\a6\xf8&\xbe-\xb2\xf2\xa5|Jh\x15,\\(=t\xa8\xe3\xe3\xf8!B[\xa8\x1bz\x83i\xa2\x1e\xb4V\xc7\xc0\x00P,\x81x\x7f\xc6\x05~\x9e\xa9\x97<2C\x13\xc9\x01N\xfa\x97\\<\xbc\xb6<\xb5\xc4.\xcaX4%fn|\x00'/237, 0x40, 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000280)={0x6})
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000000c0)={0xa3, 0xd, 0x4, 0xfe, 0xe0, 0xfeff, 0x0})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x2f)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioprio_set$uid(0x0, r6, 0x2000)
r7 = getegid()
mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x40018, &(0x7f0000000340)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'fd/3\x00'}}]}})
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe)

263.997819ms ago: executing program 0 (id=2116):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x883e}, @val={0x2, 0x0, 0x9, 0x7, 0x0, 0xf}, @ipv6=@gre_packet={0x3, 0x6, "316596", 0x44, 0x2f, 0x0, @local, @mcast1, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x7, 0x1, 0x1, 0x2, 0x7, 0x1}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x1, 0x2, 0x6, 0x2, 0x0, 0x2, 0x5, 0x2}, 0x2, {0x7, 0x200, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}, 0x7a)

209.254602ms ago: executing program 0 (id=2117):
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x89\xf0\x9e\b\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd0\xac\x01\x9b\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x8)
fsetxattr$security_capability(r1, &(0x7f0000000040), &(0x7f0000000100)=@v2={0x2000000, [{0xffffffff, 0x1}, {0x0, 0x1}]}, 0x14, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
pipe(&(0x7f0000019480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="c23a", 0x2}], 0x1, 0x3)
ioctl$UI_END_FF_UPLOAD(r3, 0x406055c9, &(0x7f0000000400)={0x10, 0x757, {0x56, 0x8, 0x12, {0x81}, {0x3, 0x4}, @cond=[{0x3, 0xff, 0x4, 0x7, 0x309, 0x5}, {0x2, 0x6, 0xfff9, 0x3, 0x7, 0xa46e}]}, {0x52, 0x3, 0xed8, {0x0, 0x800}, {0xae, 0x721e}, @const={0x3edc, {0x6, 0x7, 0x2, 0x8}}}})
close(r4)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x2, {0x1}}, 0x18)
splice(r3, 0x0, r4, 0x0, 0x10500, 0x0)
pwrite64(r2, &(0x7f0000000400), 0x0, 0x9a)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000001c0)={0x4, 0x4, 0x4, {0x1, @pix={0x2, 0x0, 0x34325842, 0x0, 0xad, 0x40002, 0x8, 0xdfc, 0x1, 0x4, 0x2, 0x2}}, 0x9})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000c8fd00de12178c81c5b60000002000000010000000000087810acbce5f7736b278fa5022aafe0078af0f12008bd0c820263d8266eda95414e9d626b5ca975c7d43c25e1445c9413b316cc2406f58bb7db1253f01b3dffee787bf51c37d653780b1f5510026e42876aad49bcb75e166c080a5f3689dd06a1ef940def74ac8315daf30f93cd940ef4d1b4f0fcac946a99fb3321d3a40cd0cd17e5fce15fe2af223e1882b2870d2ec799f32b620a7e9e580faa2ff2967c51c08b003326d5ce0508ff9cde91ae3678b54788b16dbb0d155"], 0x48)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newsa={0x160, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0x2}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffe}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2b, 0x70bd25, 0x70bd2d, 0x70bd2d, 0x6, [0x57054dd1]}}]}, 0x160}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, 0x0, &(0x7f0000000140)=""/164}, 0x1c)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0)

9.305735ms ago: executing program 0 (id=2118):
keyctl$set_reqkey_keyring(0xe, 0x4)
request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)='g\x19k!\xf3\xa9\xf6&\x008\r\x86\xfch(\xe6\xa1', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f00000013c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x8000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r2, 0x2a)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
rseq(0x0, 0x4b, 0x0, 0x0)
r3 = add_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)="25543a44ffd654f1dc78b6f334a4dc84b539556f4337bcb0718b6aef8896b6ce0af198c3e028480eecb5f5f59eceb879787aa2837d6a6e5451dd744e113e5295aef4845ccf2a7b9d3f73a0628d18ae43cdf0657c255b976bc87f386dce3ad53beabee8947a30cb94dfe954b8e3e2c2c0fff454115d82563e1ddd3750b01091669c3571f37b5badcb10a2ddabaf5ff8b97429974c72219d34635778c480046ec9c62bb093f9a8f5461cd75a3a97b8939710cb4801a6ba4e9a92a715c4e7df0c68f349a8e3f44daf0f6ae249d67e64c42f6692e3df768b72ec6e738fff60c3696dc547f221ccb0300af124c9bb141eef96c907f20e2706291fbb1d740b604a7826610c8330dbce72ed157e73104550fafd9aba7f8eb4c3243fb4260979a0e41c5b5477843a3920765f5e1299f0f0e0586e9546a26dade07c5eccab78beddb672e5e06668e8e5eccedc0a1e0efb0b716d1494ae55e05de70cf786a406a21bb4e30105df8198c9e71c095ec0fe750d1d3d59483e4acb839687cfbc5a30617b9b48e4eb2ff08387ff12305cd1bdde08bcf7394276e05a4e798f552954e98926b7c3361f89feba4bb76db4740a6fbefed1334d83e6e1698ac4bfe27c7a178e3b1054fae2ab3de6c2e437e0f24546a2bba60984b4afbe666ce8c75cc028b4690a814060ff519206687408d015cef3be3361cddeaa3cd59b23e346a163ac63ab9f562c5afc95c8a3f828b8b87781e80a19f10809155ce7caf36385aa7616b26366593b3e8e829381913e6caf206b98dc80d8132f284c4fc59894cd3dbbb4e8e942b9492301f8a77abf729c0c1aa1134011519d7bf42e3d09260d334611e659f18a213c9268cff355b7b1d9e86f3c973a46f839983b5b4ec5cf85978d94c8af870cc4eb484be1022bf4cca57384b24fcf2f3414c05e8db36deef554640ed01fce1c5a52a62ec6d3b084ca17cfc8cab677a2d4fb902684052315e2223534ac783df9d40d1d0c6c7b5b9a56589ecbd033fb71fed054ef37bd9b68182355bd2a96f7b34d0ca5ba26a239c119b4d8ff9ed463c8033ab48a969d042706a86c288e9373c2a22b94095acfce4418296279bee7fa6432ee3c2545966f5e46c34a5f8d45d0ea2559fb53be40dc17a373f08cbfed30c72a89a1d071610a0d032bda22af6bf89fe945d8771a6d1c75c89fbe61856ffc073150122af407cf81e99257298fac738a8978fe87785f18d899fb49c584f69f42851ed74de75da818dbf18d0f78b6381e63538e0fbf9687e646e5f6a02eb8a0676432818eee4eaf0c702b711ffc702d86a219f427c675985abdd25e831dcc2b3f8a6ee65583a6309891c19e73ce6cd22c85d5006fa81dcf0b31ec81f63321855a372e565c5637fff1212515f9fc32ae96b9e2bc84e0bb449a7b497f267a089eb4ab864f1c9a80f1b3516edd2ce828fa1b8c39593e8851e8bb95ba1c76974d9145f5f0ae7beac45a9303fba5dd914d230bb82dd0e8632b58549626b590a62f0176f3aa0eab1124acc4dfff34194129f8b2078b88f26378c97e15d440a8166d9e5a6dc8ef144cb691ffbb6a026bc5310e53348c4da7f298fff839a10ad81199c66593928e5b6f42537c5e43725f77e75cf87ec3ac59e169eee6848b11f9a755371031937cda5e852e1cb383a1aa8818fb59b087347a36690e22a87d4513323d817f231d0e2364d09ca68e04e444dc0f574c7c1dd7b649d85ee1717930db0b09b3ca651d105bbd6dec55a2be8149a5ba2d4a467f7a375e812bcc9695a9c748cc61e3aa7a414a374eaa3aeedf5850464925f90652b415ef4a05bbcb2136a7e25fcace161c5fde43ac66cbdecbefc8eed546665213fc1af6465eb0eba2c776108dbe21db0d1c08a5fe937177ece4df279de34e839964344d4ae6c578b7fed3eda4f2fbecbc161f9067a0cf2681fcce3b8930418502d24ae41bfaaa281ee4c052bf95414170b1923e62f646bb8401971ee283ebbe8fe54c9b4b5af7f04ed0314da8af87811f941ebaeb76f2125faec0659ff521550a0a97487bfaf7bb72e4271a851f2daac3b1288105eaf7b4ffa6d5c0a6c70bf822a586827da936a1d7c9693b7b51dd6b536bbe14f1f13ad2ff88a9914328171ef32cd0f24554333a995faf024522917dc80e68860e8d9cf808b5a638765203fc9fa107bfd0a8670c4c62751d7189af68eda738bc1fe2967c69940514b58c4fa4168c08fb13b797b75fc122ea74307e94a96f5351f63780d5019bc4a8bf2478049891fcc3ea980ebaf7125fe8c6518ed4d2b5ffb53ffe383455e3e7fbe8bf7e3446fa9e707822358a42f8941bcdce2631347dbd0e3eaefea6cefb760d76cb4e6e125915bd96b68c6c7015a7c71f587796cd3af770470f39f62567125b455ab7130a12f79684698bc75208c42e04fa63e9451f574dda7ab662bdddaa5829d853b9f76ba4c080fe2499bfd8b86e860b5a9e867d14c8d6f9077a143741519774cfa118ad4c2803d876c6e3f92fffc8535aaa9ace8b56216108b7dc43e7c7fd9fd319b14244d1953035193e1be8e3baf576210ac306d85c77366cf1903f8474be05cd3fa3f1111b015410ad449f0fc87ff16cb5724a76e868595639a867dd18bf77fe0ee1ced57dc2ce167fc9e4900aa2cff345e2c94a6d2486ee124859a80dc057e189e8a44abbfaca596bfdc647c6b6d69b94253e4bd64400017a0be66a623321392e4e74036cee9aa06d450b03cc98a75c8a1aff1351072e7851503d45aa6edb10fb028742570d88f0f5f855b64e4147732929a25e3654900dc421434e5e458065bb9003724884a3d4477e3069ee6a1ac46b89a906b6c6b9a99b56f79af272cae984d2186022cdea564a4684e9001ff6ef353667389ef5ead575a45ecff4e9a964b531170650181c7a9c035e6de72a4996cad9c44abc8de535c013db8eaac5ed99c79046838192180e355acbbad651295938feb7e20255d3549957d6e338df9de59986658fca1ba2f3b6e8abacffaa3c400c7768dc6319bad7cb25015ae30e9e6e944da299f3d431d3518865cb31bd284588c1a4c42d527734ee70127bd3155bed279c2051026efc5fc39cf65b9ae0c8caa881a06a3bedc49b3c31eeca28459c3fee87dde9ac60c2268bb03804973942aec6fab7c7408f41ded4dcf43d76cc758d6ec8991b816cdfd305583c111d8476b4e2789e4120472a72d0bd8ca6353dd82c1d804740bd43332abf431d17f2690898237b43606f5bc40fbe5ca1ca43b83200022dcdeca12abc3ddd39d262c957d3ef830c7ff281067bda58465c87463be440026f994548e126a40e7881619a05637316db591c7c890c2d4577ab632fa6f341068526babb791bb74dc9569f36928a38b424dc86f0d2d37f379db0a84cd2c3ed825049fd0c9933f8f3b308bc505930a8319a26fe1029412264900cda89378a68e87ad2bfc5816225788e80dafbc582115f711309b95cc535082a7a0e1a12ded7ac77571e2d0a03436520c1f96cf738e221b7d24a0e334ed56ee55945c4ee1acc966b4572c10be9acdc9a24baf44d680ab3ac13705f816d59dfecc39e453ebea503577c0b30bbe898b7dbc1583edc9963461d949848ecbb857bfc88c885ce7a049aabbd9a6df84cb9071313ef0b8b2c5b2aa58c03403237815e218830a74abc8f7f867fc87725dbc25888b04af260004fcaac764f0c028ac2fb061273d365efe8462f3b7be966df5773c960ab82259628786ebdc5b0a64e905bab994b89e0f73f69cc2b2d9e0d4d6f82950b98d395698ec6479a058af2cef30bce42b3823ef2f739781ea7912938767c304ae32bb391c367a05dd51599d5fc7c4f71b8ba98ab1b97c501dd255c4f7b1db3d77ab85652eb4f1453ba38e8e1ce68677ba5070b66cd30c351c51f40069f5dd3b08b03ed33a38e3a2f72c4393fd71dee16f7d04f3a90a7d4fe15df5be130f6d5475d7f0e096727a3c2b7f8f45724c9a5a6e99edb1b87eb230640f90a124735b3001f01c87c40fe5172fe2aaed62096fc508abc81199a24c4c10d701f053cd99b33a5b51efe9f081dc8a00fa297ab80e52fe587cb8c1ecf12ec3492402d4905181d05dcdcfd1363898fabd7ae769db41494a464b5269856455b5fef6de42cca2e0e63a25ccf7b4be9bead331ae8a5b5de1d51d3b7d66cfd5f8ce3e7b197dd6c8d30ddb9e6b109d392949b309d567dee28937a891ef498488e5b184e315023c5d3eea84b44d06040744bf2b0f8db8619ce5c234d7b44d53b981160536be1d4827123ccff38b4986856c162ef60626a306aad3ac38d551c1d61faf5f3275eb7659dc911bc53619a01baddb871a491e95b70e362705ee5b5de7ec2f0c1fb38bc458b9e13e1d6bd3d3fbe6e157347e0802c8ff9c50e1c9412ac43c43409135bb2bbbab745d7248ccc473834218fdd79e4299c3a78e473c401f78429f85bf73a4f86423d6ec1212fd33b63ab35204ec5a8468de1a3d357e097be2024fda324687db1c8049f309011503ee2499b9127ee424e535eb6ad5feb4f02cab135d20edc412e65290fb1d406a11873af98e5717392e37f010443a8cef8380e0e7e0210f5c9474fd3169f1f476d0605530bbf9dc1acce5f1e778842843a2c6ba1e900fd675e1b24662fb9b60a0a1cd69e9c52225feda3c524a50af22fee1086fe538c27d7df9a7b4ed9ed5451bdbc7a360f8ec923db07d65684aa686ff85f03980314c01fae9d32eb9cb9c24934c93139fad8a3caa123c131a61e47a4ee0091838e557ae73e54dd1bfcb242c0234ddcb6896d48eb78a0d1b2889511b433a0454d137d710e6fb971fab986eddaeba5b93c21edb21b04f52d2bdb4adda91af742a3a4403396fa5c47ade26b5097dfe9311e4eab7a44fe7a0252c021492a3514fff0b9bb9764c8de81f814d4abfff46dca6ac0d76ab95d265e4ab1db3ef2d6b405a742d912bb78ab0184dee140bb3181c8bae52c78aea9dedbf438cbc5b89eb262654378a3c98cdaddc2c0d458bdcf23eb18d504e8a31c3c39753ae78f230769a9b9854dea00cb7ad4a2dd8cbcfb0280a4212ef0e2a5c5072ef5d7f8e2ec994b18938540dfece9aef57fa1c87ac8b06daaf549fbf047397df9563818fd9885cddb918c65ba774d12478d30ded3df0c44c2f373efb8e517a90117de8a085edd8447d1a9b0cc0050166ae36fdbf6acb6ee7efdbfb80e5a69e09dd36b186ca3b86a67a9fd1d256e619094400db2081ae8d8665717ec20b3c38a550cbbff00634323ae662862072c00b931472ae5ad15716d48218097357b8d6518f9dc8799adf67896c3c6b812b9409f64cc0bd20a112d395f3ac8909eba02068ca45835c1d87952a6c55e0a94f55f71e27b24c8dc15f780fcfdf66a67e617e039936f20c0a7bf9ad421ebe4e129d1816548270eee313b7b19429ef7c17ce34a7cd8e5865ab434118f23233fe5acec15db4494f7404ff39f9f235322028bbb48cd6d08e44cb5f41b0f94f546634e635de4290fef2207b45b6b77e4afc5a71b1237ed97220ec1ef9342157f9bc6987f92f7da0532dcc51b58ba576073d4a807276cee8dd74bee0bb986811280d8bdf89ccc398c2d62a16deaa36182a0e8c69222c13a5f5456f61a7a5cf4ac92d45f07a0a552befdbf23b020d937d4704d7fcdd16cb9dc3c9ae0b5b7bb5c9ef1a5a535fe60d280ca628452b0b4b8b078d416ae6dcb4016e97b25096fdd047bfb27991749b36f0fa8cca1c1ab71f571d94e937061c4a39c6df2", 0xfdc, 0xfffffffffffffffb)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read(r5, &(0x7f0000001300)=""/112, 0x70)
read$FUSE(r4, &(0x7f00000093c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2022012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000069fa6b079a848a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r9, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)={0x1f0, 0x0, 0x6, [{{0x6, 0x3, 0x6, 0x6, 0xeeeb, 0x3, {0x6, 0xc, 0x8, 0xa, 0xff, 0xfffffffffffffff9, 0x2, 0x1, 0x7d, 0xc000, 0x6, r7, r8, 0xe, 0x3}}, {0x5, 0x0, 0x7, 0xfffff001, 'user_id'}}, {{0x1, 0x3, 0x5, 0x2c, 0x2, 0x10001, {0x5, 0x9, 0x4, 0x1000, 0xfb, 0x38, 0xc, 0x2b0000, 0x9, 0x1000, 0x3, r7, r8, 0x7, 0xc56}}, {0x6, 0x71ac, 0x1, 0xfd, '%'}}, {{0x9, 0x1, 0x7, 0x7, 0xf97, 0x5, {0x5, 0x5, 0xc7eb, 0x6, 0x8d0, 0xffffffff7fffffff, 0x7, 0x1, 0xfffffffa, 0x1000, 0x6, r7, r8, 0x4, 0x6}}, {0x4, 0x100, 0x5, 0x5, '@{].\xd9'}}]}, 0x0, 0x0, 0x0})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r3)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

9.036616ms ago: executing program 6 (id=2119):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^](*\r\\!\x00', &(0x7f0000000500)='{:\'@-\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a40)='^,/\x00', &(0x7f0000000a80)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f00000002c0)='\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='(\xed\xef(.(\\-]\x00', &(0x7f0000000340)="0f", 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0)

0s ago: executing program 6 (id=2120):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x16f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@hopopts={{0x14, 0x29, 0x32, {0xff}}}], 0x14}}], 0x2, 0x0)

kernel console output (not intermixed with test programs):

.305380][T12188] RDX: 00002000000006c0 RSI: 00000000c0d05640 RDI: 0000000000000003
[  576.305390][T12188] RBP: 00007fd29582f090 R08: 0000000000000000 R09: 0000000000000000
[  576.305405][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  576.305415][T12188] R13: 00007fd294c16038 R14: 00007fd294c15fa0 R15: 00007ffc001fa3a8
[  576.305438][T12188]  </TASK>
[  576.805074][T12195] fuse: root generation should be zero
[  576.880541][ T5804] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  577.315153][   T29] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  577.355770][   T29] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  577.433576][T12209] fido_id[12209]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  577.498470][ T5870] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  577.745634][ T5870] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  577.754769][ T5870] usb 1-1: config 1 has no interface number 0
[  577.780278][   T29] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[  577.919423][ T5870] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  577.952593][ T5870] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  577.966703][ T5870] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  578.082542][T12213] FAULT_INJECTION: forcing a failure.
[  578.082542][T12213] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  578.107076][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  578.119953][ T5870] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  578.129081][   T29] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  578.130620][T12213] CPU: 0 UID: 0 PID: 12213 Comm: syz.1.1627 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  578.130645][T12213] Tainted: [L]=SOFTLOCKUP
[  578.130650][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  578.130658][T12213] Call Trace:
[  578.130664][T12213]  <TASK>
[  578.130670][T12213]  dump_stack_lvl+0x100/0x190
[  578.130698][T12213]  should_fail_ex.cold+0x5/0xa
[  578.130718][T12213]  _copy_from_user+0x2e/0xd0
[  578.130736][T12213]  _autofs_dev_ioctl+0x11c/0x870
[  578.130752][T12213]  ? __fget_files+0x215/0x3d0
[  578.130773][T12213]  ? hook_file_ioctl_common+0x146/0x410
[  578.130790][T12213]  ? __pfx__autofs_dev_ioctl+0x10/0x10
[  578.130809][T12213]  ? selinux_file_ioctl+0x139/0x290
[  578.130829][T12213]  ? selinux_file_ioctl+0xb4/0x290
[  578.130853][T12213]  autofs_dev_ioctl+0x1a/0x30
[  578.130867][T12213]  ? __pfx_autofs_dev_ioctl+0x10/0x10
[  578.130881][T12213]  __x64_sys_ioctl+0x18e/0x210
[  578.130902][T12213]  do_syscall_64+0x106/0xf80
[  578.130921][T12213]  ? clear_bhb_loop+0x40/0x90
[  578.130939][T12213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.130955][T12213] RIP: 0033:0x7f6b84f9bf79
[  578.130968][T12213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.130983][T12213] RSP: 002b:00007f6b85e58028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  578.130999][T12213] RAX: ffffffffffffffda RBX: 00007f6b85215fa0 RCX: 00007f6b84f9bf79
[  578.131009][T12213] RDX: 00002000000019c0 RSI: 00000000c018937e RDI: 0000000000000003
[  578.131018][T12213] RBP: 00007f6b85e58090 R08: 0000000000000000 R09: 0000000000000000
[  578.131033][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.131042][T12213] R13: 00007f6b85216038 R14: 00007f6b85215fa0 R15: 00007ffdebc2e538
[  578.131063][T12213]  </TASK>
[  578.321639][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.329625][ T5870] usb 1-1: Product: syz
[  578.340159][ T5870] usb 1-1: Manufacturer: syz
[  578.344757][ T5870] usb 1-1: SerialNumber: syz
[  578.380369][T12206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  578.523620][ T5804] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  578.533920][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  578.561708][   T29] usb 5-1: config 0 descriptor??
[  578.570794][T12211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  578.599973][T12206] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  578.832099][ T5870] sierra_net 1-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  579.124079][   T29] elan 0003:04F3:0755.001F: unknown main item tag 0x0
[  579.155391][   T29] elan 0003:04F3:0755.001F: item fetching failed at offset 3/5
[  579.163215][ T5870] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71
[  579.170626][ T5870] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71
[  579.178750][   T29] elan 0003:04F3:0755.001F: Hid Parse failed
[  579.185567][   T29] elan 0003:04F3:0755.001F: probe with driver elan failed with error -22
[  579.196747][ T5870] sierra_net 1-1:1.7 wwan0: Submit SYNC failed -71
[  579.204881][ T5870] sierra_net 1-1:1.7 wwan0: Send SYNC failed, status -71
[  579.222708][   T29] usb 5-1: USB disconnect, device number 52
[  579.233168][ T5870] usb 1-1: USB disconnect, device number 39
[  579.247935][ T5870] sierra_net 1-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.0-1, Sierra Wireless USB-to-WWAN Modem
[  579.302414][ T5870] sierra_net 1-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  579.829560][T12244] FAULT_INJECTION: forcing a failure.
[  579.829560][T12244] name failslab, interval 1, probability 0, space 0, times 0
[  579.846553][T12244] CPU: 0 UID: 0 PID: 12244 Comm: syz.6.1635 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  579.846580][T12244] Tainted: [L]=SOFTLOCKUP
[  579.846586][T12244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  579.846595][T12244] Call Trace:
[  579.846601][T12244]  <TASK>
[  579.846607][T12244]  dump_stack_lvl+0x100/0x190
[  579.846638][T12244]  should_fail_ex.cold+0x5/0xa
[  579.846661][T12244]  should_failslab+0xc2/0x120
[  579.846686][T12244]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  579.846707][T12244]  ? alloc_empty_file+0x55/0x1c0
[  579.846724][T12244]  ? __pfx_stack_trace_save+0x10/0x10
[  579.846750][T12244]  alloc_empty_file+0x55/0x1c0
[  579.846768][T12244]  path_openat+0xe8/0x31a0
[  579.846793][T12244]  ? kasan_save_stack+0x3f/0x50
[  579.846813][T12244]  ? kasan_save_stack+0x30/0x50
[  579.846833][T12244]  ? kasan_save_track+0x14/0x30
[  579.846853][T12244]  ? __kasan_slab_alloc+0x89/0x90
[  579.846876][T12244]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  579.846896][T12244]  ? do_getname+0x35/0x390
[  579.846913][T12244]  ? do_sys_openat2+0xc5/0x1e0
[  579.846931][T12244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.846953][T12244]  ? __pfx_path_openat+0x10/0x10
[  579.846988][T12244]  do_file_open+0x20e/0x430
[  579.847015][T12244]  ? __pfx_do_file_open+0x10/0x10
[  579.847057][T12244]  ? alloc_fd+0x476/0x790
[  579.847084][T12244]  ? do_getname+0x191/0x390
[  579.847105][T12244]  do_sys_openat2+0x10d/0x1e0
[  579.847123][T12244]  ? __pfx_do_sys_openat2+0x10/0x10
[  579.847139][T12244]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  579.847164][T12244]  ? __fget_files+0x21f/0x3d0
[  579.847194][T12244]  __x64_sys_openat+0x12d/0x210
[  579.847212][T12244]  ? __pfx___x64_sys_openat+0x10/0x10
[  579.847228][T12244]  ? ksys_write+0x1ac/0x250
[  579.847259][T12244]  do_syscall_64+0x106/0xf80
[  579.847283][T12244]  ? clear_bhb_loop+0x40/0x90
[  579.847305][T12244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.847322][T12244] RIP: 0033:0x7fe716b9bf79
[  579.847337][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.847353][T12244] RSP: 002b:00007fe7179b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  579.847371][T12244] RAX: ffffffffffffffda RBX: 00007fe716e15fa0 RCX: 00007fe716b9bf79
[  579.847382][T12244] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  579.847393][T12244] RBP: 00007fe7179b2090 R08: 0000000000000000 R09: 0000000000000000
[  579.847403][T12244] R10: 0000000000000042 R11: 0000000000000246 R12: 0000000000000001
[  579.847414][T12244] R13: 00007fe716e16038 R14: 00007fe716e15fa0 R15: 00007ffebb595c08
[  579.847438][T12244]  </TASK>
[  580.657744][T12256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1639'.
[  580.780259][T12160] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  580.946448][T12160] usb 7-1: config 1 has an invalid interface number: 188 but max is 0
[  580.956529][T12160] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  580.967494][T12160] usb 7-1: config 1 has no interface number 0
[  580.973902][T12160] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  580.987814][T12160] usb 7-1: config 1 interface 188 has no altsetting 0
[  581.003041][T12160] usb 7-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[  581.013579][T12160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.025152][T12160] usb 7-1: Product: syz
[  581.029400][T12160] usb 7-1: Manufacturer: syz
[  581.034508][T12160] usb 7-1: SerialNumber: syz
[  582.695491][T12271] binder: 12265:12271 ioctl 400c620e 200000000240 returned -22
[  583.295592][T12270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1643'.
[  583.400249][T12160] usb 7-1: unknown interface protocol 0xc1, assuming v1
[  583.414731][T12160] usb 7-1: 188:0 : does not exist
[  583.591279][T12160] usb 7-1: USB disconnect, device number 2
[  583.678390][T12276] ubi31: attaching mtd0
[  583.685674][T12276] ubi31 error: ubi_attach_mtd_dev: bad VID header (4014870) or data offsets (4014934)
[  584.344241][T12291] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1650'.
[  586.107243][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'.
[  586.134823][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1656'.
[  586.159962][T12317] gretap0: entered promiscuous mode
[  586.180159][T12317] gretap0: entered allmulticast mode
[  586.212569][   T29] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  586.347397][T12332] forcing mempool usage for bio_alloc_bioset+0x392/0x850
[  586.398001][T12330] syzkaller0: entered promiscuous mode
[  586.432131][   T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  586.455793][T12330] syzkaller0: entered allmulticast mode
[  586.461772][   T29] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  586.480261][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.679745][T12330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  586.754456][   T29] usb 1-1: config 0 descriptor??
[  586.804703][T12313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  587.254292][   T29] elan 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  587.498626][T12344] IPVS: length: 11 != 8
[  588.454172][T12313] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1654'.
[  588.463628][   T29] usb 1-1: reset full-speed USB device number 40 using dummy_hcd
[  589.280881][   T24] usb 1-1: USB disconnect, device number 40
[  590.123297][T12376] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1669'.
[  590.460229][   T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  590.626227][   T24] usb 7-1: config 1 has an invalid interface number: 188 but max is 0
[  590.647851][   T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  590.693929][   T24] usb 7-1: config 1 has no interface number 0
[  590.704154][   T24] usb 7-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  590.718097][   T24] usb 7-1: config 1 interface 188 has no altsetting 0
[  590.783343][   T24] usb 7-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[  590.807723][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.837518][   T24] usb 7-1: Product: syz
[  590.846603][   T24] usb 7-1: Manufacturer: syz
[  590.847445][ T5871] libceph: connect (1)[c::]:6789 error -101
[  590.852819][   T24] usb 7-1: SerialNumber: syz
[  590.869196][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  591.132204][ T5871] libceph: connect (1)[c::]:6789 error -101
[  591.192514][ T5871] libceph: mon0 (1)[c::]:6789 connect error
[  591.290311][   T29] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  591.950476][   T29] usb 6-1: Using ep0 maxpacket: 32
[  591.964470][ T1586] libceph: connect (1)[c::]:6789 error -101
[  591.975857][   T29] usb 6-1: unable to get BOS descriptor or descriptor too short
[  591.985682][ T1586] libceph: mon0 (1)[c::]:6789 connect error
[  591.999429][   T29] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  592.017756][   T29] usb 6-1: config 0 has no interface number 0
[  592.043072][   T29] usb 6-1: config 0 interface 11 has no altsetting 0
[  592.070037][   T29] usb 6-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=13.a1
[  592.073897][T12408] cramfs: block size(16384) > page size(4096) not supported by filesystem
[  592.094128][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.112908][   T29] usb 6-1: Product: syz
[  592.119608][   T29] usb 6-1: Manufacturer: syz
[  592.133956][   T29] usb 6-1: SerialNumber: syz
[  592.152344][   T29] usb 6-1: config 0 descriptor??
[  592.257587][ T1586] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[  592.282068][ T1586] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  592.380667][   T29] HFC-S_USB 6-1:0.11: probe with driver HFC-S_USB failed with error -5
[  592.421457][T12392] ceph: No mds server is up or the cluster is laggy
[  592.470324][ T9951] block nbd3: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 180 seconds
[  592.481296][ T9951] block nbd3: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 180 seconds
[  592.494262][ T9951] block nbd3: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 180 seconds
[  592.505757][ T9951] block nbd3: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 180 seconds
[  592.520256][T12421] netlink: 'syz.0.1680': attribute type 4 has an invalid length.
[  592.566688][   T29] usb 6-1: USB disconnect, device number 31
[  593.284854][   T24] usb 7-1: unknown interface protocol 0xc1, assuming v1
[  593.302098][   T24] usb 7-1: 188:0 : does not exist
[  593.432863][   T24] usb 7-1: USB disconnect, device number 3
[  593.482091][ T5955] udevd[5955]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  593.984397][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  594.005475][T12450] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1685'.
[  594.017086][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  594.026673][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  594.035462][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  594.044567][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  594.814969][T12448] chnl_net:caif_netlink_parms(): no params data found
[  594.909409][T12442] 9p: Bad value for 'rfdno'
[  594.989282][T12442] No control pipe specified
[  595.063484][T12448] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.112607][T12448] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.139846][T12448] bridge_slave_0: entered allmulticast mode
[  595.192237][T12448] bridge_slave_0: entered promiscuous mode
[  595.220990][T12448] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.252901][T12448] bridge0: port 2(bridge_slave_1) entered disabled state
[  595.293479][T12448] bridge_slave_1: entered allmulticast mode
[  595.382859][T12448] bridge_slave_1: entered promiscuous mode
[  595.535254][T12448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  595.546899][T12448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  595.578316][T12448] team0: Port device team_slave_0 added
[  595.613587][T12448] team0: Port device team_slave_1 added
[  595.679026][T12448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  595.722353][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  595.766290][T12448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  595.917686][T12448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.151638][ T5127] Bluetooth: hci6: command tx timeout
[  596.337063][T12448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  596.364051][T12448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.488209][T12448] hsr_slave_0: entered promiscuous mode
[  596.494433][T12448] hsr_slave_1: entered promiscuous mode
[  596.506875][T12448] debugfs: 'hsr0' already exists in 'hsr'
[  596.513676][T12448] Cannot create hsr debugfs directory
[  597.521632][T12448] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  597.602041][T12448] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  597.611125][T12512] random: crng reseeded on system resumption
[  597.723960][T12512] FAULT_INJECTION: forcing a failure.
[  597.723960][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.752901][T12448] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  597.795222][T12512] CPU: 1 UID: 0 PID: 12512 Comm: syz.6.1697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  597.795252][T12512] Tainted: [L]=SOFTLOCKUP
[  597.795258][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  597.795268][T12512] Call Trace:
[  597.795273][T12512]  <TASK>
[  597.795281][T12512]  dump_stack_lvl+0x100/0x190
[  597.795313][T12512]  should_fail_ex.cold+0x5/0xa
[  597.795334][T12512]  _copy_from_user+0x2e/0xd0
[  597.795353][T12512]  simple_write_to_buffer+0xcb/0x170
[  597.795380][T12512]  snapshot_write+0x14b/0x240
[  597.795407][T12512]  ? __pfx_snapshot_write+0x10/0x10
[  597.795431][T12512]  ? bpf_lsm_file_permission+0x9/0x10
[  597.795454][T12512]  ? security_file_permission+0x76/0x210
[  597.795481][T12512]  ? rw_verify_area+0xce/0x6d0
[  597.795503][T12512]  ? __pfx_snapshot_write+0x10/0x10
[  597.795526][T12512]  vfs_writev+0x5ea/0xe10
[  597.795555][T12512]  ? __pfx_vfs_writev+0x10/0x10
[  597.795579][T12512]  ? find_held_lock+0x2b/0x80
[  597.795615][T12512]  ? __fget_files+0x21f/0x3d0
[  597.795646][T12512]  ? do_writev+0x13e/0x340
[  597.795666][T12512]  do_writev+0x13e/0x340
[  597.795687][T12512]  ? __pfx_do_writev+0x10/0x10
[  597.795715][T12512]  do_syscall_64+0x106/0xf80
[  597.795736][T12512]  ? clear_bhb_loop+0x40/0x90
[  597.795758][T12512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.795776][T12512] RIP: 0033:0x7fe716b9bf79
[  597.795791][T12512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.795806][T12512] RSP: 002b:00007fe7179b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  597.795823][T12512] RAX: ffffffffffffffda RBX: 00007fe716e15fa0 RCX: 00007fe716b9bf79
[  597.795834][T12512] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003
[  597.795844][T12512] RBP: 00007fe7179b2090 R08: 0000000000000000 R09: 0000000000000000
[  597.795854][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.795864][T12512] R13: 00007fe716e16038 R14: 00007fe716e15fa0 R15: 00007ffebb595c08
[  597.795894][T12512]  </TASK>
[  597.813782][T12448] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  598.128145][T12518] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  598.161140][T12518] overlayfs: missing 'lowerdir'
[  598.180975][T12515] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  598.232613][ T5127] Bluetooth: hci6: command tx timeout
[  598.328991][T12448] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.349462][T12448] 8021q: adding VLAN 0 to HW filter on device team0
[  598.389151][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[  598.396294][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[  598.469488][   T78] bridge0: port 2(bridge_slave_1) entered blocking state
[  598.476650][   T78] bridge0: port 2(bridge_slave_1) entered forwarding state
[  598.533319][T12537] netlink: 'syz.0.1701': attribute type 10 has an invalid length.
[  598.566973][T12448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  598.587473][T12538] netlink: 'syz.0.1701': attribute type 10 has an invalid length.
[  598.595416][T12538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1701'.
[  598.690212][   T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  598.767608][T12538] batadv0: entered promiscuous mode
[  598.780186][T12538] batadv0: entered allmulticast mode
[  598.891922][T12538] bond0: (slave batadv0): Releasing backup interface
[  598.916735][   T29] usb 7-1: config 0 has no interfaces?
[  598.945094][   T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  598.987019][   T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  599.030567][ T5871] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  599.039935][   T29] usb 7-1: SerialNumber: syz
[  599.056889][   T29] usb 7-1: config 0 descriptor??
[  599.193919][ T5871] usb 6-1: Using ep0 maxpacket: 32
[  599.230563][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  599.337401][T12532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.337604][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  599.367009][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  599.380227][T12538] bridge0: port 3(batadv0) entered blocking state
[  599.386877][T12538] bridge0: port 3(batadv0) entered disabled state
[  599.455755][T12532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.464496][ T5871] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  599.473586][   T10] usb 1-1: Using ep0 maxpacket: 16
[  599.481053][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.506404][   T10] usb 1-1: config 157 has an invalid interface number: 148 but max is 0
[  599.520579][   T10] usb 1-1: config 157 has no interface number 0
[  599.543017][ T5871] usb 6-1: config 0 descriptor??
[  599.553577][   T10] usb 1-1: config 157 interface 148 has no altsetting 0
[  599.569963][ T5871] hub 6-1:0.0: USB hub found
[  599.579243][   T10] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  599.588729][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.598546][   T10] usb 1-1: Product: syz
[  599.625390][   T30] audit: type=1400 audit(1771134354.400:768): avc:  denied  { sys_module } for  pid=12448 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  599.649805][   T10] usb 1-1: Manufacturer: syz
[  599.659955][   T10] usb 1-1: SerialNumber: syz
[  599.769045][ T5871] hub 6-1:0.0: config failed, can't read hub descriptor (err -90)
[  600.372860][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  600.372873][ T5127] Bluetooth: hci6: command tx timeout
[  600.387779][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  600.398831][ T5871] usbhid 6-1:0.0: can't add hid device: -71
[  600.414718][ T5871] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  600.453544][ T5871] usb 6-1: USB disconnect, device number 32
[  600.579132][T12448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  600.980166][T12160] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  601.236428][ T1586] usb 7-1: USB disconnect, device number 4
[  601.265156][T12160] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  601.417992][T12160] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  601.450246][T12160] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  601.461586][T12160] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  601.493668][T12160] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  601.515248][T12160] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  601.533287][T12160] usb 5-1: Product: syz
[  601.539437][T12448] veth0_vlan: entered promiscuous mode
[  601.545481][T12160] usb 5-1: Manufacturer: syz
[  601.567177][T12160] cdc_wdm 5-1:1.0: skipping garbage
[  601.574108][T12448] veth1_vlan: entered promiscuous mode
[  601.580190][T12160] cdc_wdm 5-1:1.0: skipping garbage
[  601.590545][T12160] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  601.610705][T12448] veth0_macvtap: entered promiscuous mode
[  601.636787][T12448] veth1_macvtap: entered promiscuous mode
[  601.757405][T12448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  601.793878][T12448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  601.814234][  T468] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  601.823759][  T468] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  601.894032][  T468] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  601.905138][  T468] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  602.561093][ T5127] Bluetooth: hci6: command tx timeout
[  602.649033][   T10] usb 1-1: USB disconnect, device number 41
[  602.669348][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.669400][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.809009][  T468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  602.818821][  T468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.990167][   T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  603.337579][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  603.393129][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.401330][   T10] usb 1-1: Product: syz
[  603.410198][   T10] usb 1-1: Manufacturer: syz
[  603.414875][   T10] usb 1-1: SerialNumber: syz
[  603.431519][   T10] usb 1-1: config 0 descriptor??
[  603.460719][   T10] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  603.657613][   T10] sonixb 1-1:0.0: Error reading register 00: -71
[  603.664068][   T30] audit: type=1400 audit(1771134358.430:769): avc:  denied  { getopt } for  pid=12568 comm="syz.0.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  603.694828][   T10] usb 1-1: USB disconnect, device number 42
[  603.994052][  T793] usb 5-1: USB disconnect, device number 53
[  604.112672][   T30] audit: type=1400 audit(1771134358.890:770): avc:  denied  { append } for  pid=12596 comm="syz.4.1716" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  604.207518][T12601] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  604.397077][T12611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1718'.
[  604.581153][ T5871] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  604.720310][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  604.812066][ T5871] usb 6-1: config 1 has an invalid interface number: 188 but max is 0
[  604.820519][ T5871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  604.831065][ T5871] usb 6-1: config 1 has no interface number 0
[  604.844682][ T5871] usb 6-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  604.883170][ T5871] usb 6-1: config 1 interface 188 has no altsetting 0
[  604.906112][   T10] usb 5-1: config 0 has no interfaces?
[  604.921176][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  604.940177][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  604.948487][   T10] usb 5-1: SerialNumber: syz
[  604.955412][ T5871] usb 6-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[  604.964799][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.977476][ T5871] usb 6-1: Product: syz
[  604.984870][   T10] usb 5-1: config 0 descriptor??
[  604.991922][ T5871] usb 6-1: Manufacturer: syz
[  604.997924][ T5871] usb 6-1: SerialNumber: syz
[  605.220661][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.241771][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.235476][ T1586] usb 5-1: USB disconnect, device number 54
[  607.297978][   T30] audit: type=1400 audit(1771134362.070:771): avc:  denied  { remount } for  pid=12629 comm="syz.6.1726" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  607.307296][T12630] option changes via remount are deprecated (pid=12629 comm=syz.6.1726)
[  607.380066][ T5871] usb 6-1: unknown interface protocol 0xc1, assuming v1
[  607.394822][ T5871] usb 6-1: 188:0 : does not exist
[  608.160729][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1728'.
[  608.598749][ T5871] usb 6-1: USB disconnect, device number 33
[  609.944641][T12675] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  611.200174][   T29] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  611.208362][T12683] FAULT_INJECTION: forcing a failure.
[  611.208362][T12683] name failslab, interval 1, probability 0, space 0, times 0
[  611.359366][T12683] CPU: 1 UID: 0 PID: 12683 Comm: syz.7.1741 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  611.359396][T12683] Tainted: [L]=SOFTLOCKUP
[  611.359402][T12683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  611.359412][T12683] Call Trace:
[  611.359418][T12683]  <TASK>
[  611.359424][T12683]  dump_stack_lvl+0x100/0x190
[  611.359456][T12683]  should_fail_ex.cold+0x5/0xa
[  611.359479][T12683]  should_failslab+0xc2/0x120
[  611.359505][T12683]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  611.359526][T12683]  ? alloc_empty_file+0x55/0x1c0
[  611.359544][T12683]  ? __pfx_stack_trace_save+0x10/0x10
[  611.359570][T12683]  alloc_empty_file+0x55/0x1c0
[  611.359590][T12683]  path_openat+0xe8/0x31a0
[  611.359615][T12683]  ? kasan_save_stack+0x3f/0x50
[  611.359636][T12683]  ? kasan_save_stack+0x30/0x50
[  611.359657][T12683]  ? kasan_save_track+0x14/0x30
[  611.359678][T12683]  ? __kasan_slab_alloc+0x89/0x90
[  611.359700][T12683]  ? kmem_cache_alloc_noprof+0x241/0x6e0
[  611.359720][T12683]  ? do_getname+0x35/0x390
[  611.359737][T12683]  ? do_sys_openat2+0xc5/0x1e0
[  611.359755][T12683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.359782][T12683]  ? __pfx_path_openat+0x10/0x10
[  611.359817][T12683]  do_file_open+0x20e/0x430
[  611.359848][T12683]  ? __pfx_do_file_open+0x10/0x10
[  611.359892][T12683]  ? alloc_fd+0x476/0x790
[  611.359921][T12683]  ? do_getname+0x191/0x390
[  611.359942][T12683]  do_sys_openat2+0x10d/0x1e0
[  611.359960][T12683]  ? __pfx_do_sys_openat2+0x10/0x10
[  611.359977][T12683]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  611.360004][T12683]  ? __fget_files+0x21f/0x3d0
[  611.360032][T12683]  __x64_sys_openat+0x12d/0x210
[  611.360051][T12683]  ? __pfx___x64_sys_openat+0x10/0x10
[  611.360070][T12683]  ? ksys_write+0x1ac/0x250
[  611.360099][T12683]  do_syscall_64+0x106/0xf80
[  611.360119][T12683]  ? clear_bhb_loop+0x40/0x90
[  611.360139][T12683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.360156][T12683] RIP: 0033:0x7f974ed9bf79
[  611.360171][T12683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  611.360188][T12683] RSP: 002b:00007f974fc9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  611.360205][T12683] RAX: ffffffffffffffda RBX: 00007f974f015fa0 RCX: 00007f974ed9bf79
[  611.360217][T12683] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  611.360228][T12683] RBP: 00007f974fc9e090 R08: 0000000000000000 R09: 0000000000000000
[  611.360238][T12683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.360248][T12683] R13: 00007f974f016038 R14: 00007f974f015fa0 R15: 00007fff95738e88
[  611.360271][T12683]  </TASK>
[  611.980209][   T29] usb 1-1: Using ep0 maxpacket: 16
[  612.113128][   T29] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  612.130364][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.134686][   T30] audit: type=1400 audit(1771134366.910:772): avc:  denied  { name_bind } for  pid=12690 comm="syz.7.1744" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  612.150143][   T29] usb 1-1: Product: syz
[  612.232206][   T29] usb 1-1: Manufacturer: syz
[  612.236799][   T29] usb 1-1: SerialNumber: syz
[  612.299961][   T29] usb 1-1: config 0 descriptor??
[  612.319441][   T29] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  612.351156][   T29] usb 1-1: Detected FT232H
[  612.352683][   T30] audit: type=1400 audit(1771134367.130:773): avc:  denied  { bind } for  pid=12695 comm="syz.6.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  612.530874][   T29] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  612.558612][   T29] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  612.568451][   T29] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  612.589231][   T29] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  612.619469][   T29] usb 1-1: USB disconnect, device number 43
[  612.646006][   T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  612.676174][   T29] ftdi_sio 1-1:0.0: device disconnected
[  612.964074][   T30] audit: type=1400 audit(1771134367.740:774): avc:  denied  { append } for  pid=12705 comm="syz.6.1750" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  612.996295][T12706] random: crng reseeded on system resumption
[  613.435671][ T1586] kernel read not supported for file /media6 (pid: 1586 comm: kworker/0:2)
[  614.334955][T12731] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1755'.
[  615.101029][T12747] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  615.441884][T12755] netlink: 'syz.0.1763': attribute type 1 has an invalid length.
[  615.748224][ T1586] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  615.803831][T12755] 8021q: adding VLAN 0 to HW filter on device bond3
[  615.911065][ T1586] usb 6-1: Using ep0 maxpacket: 16
[  615.986859][T12770] syzkaller0: entered promiscuous mode
[  615.995234][T12770] syzkaller0: entered allmulticast mode
[  616.005159][ T1586] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  616.023904][T12771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  616.029279][ T1586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.063727][ T1586] usb 6-1: Product: syz
[  616.067911][ T1586] usb 6-1: Manufacturer: syz
[  616.087993][T12771] all: renamed from bridge_slave_1 (while UP)
[  616.091491][ T1586] usb 6-1: SerialNumber: syz
[  616.110794][   T30] audit: type=1400 audit(1771134370.880:775): avc:  denied  { ioctl } for  pid=12763 comm="syz.6.1767" path="socket:[47350]" dev="sockfs" ino=47350 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  616.156522][ T1586] usb 6-1: config 0 descriptor??
[  616.175876][ T1586] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  616.205240][ T1586] usb 6-1: Detected FT232H
[  616.543343][   T24] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  616.840167][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  616.863691][   T24] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  616.888727][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.915875][   T24] usb 5-1: config 0 descriptor??
[  616.930397][T12782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  617.129859][ T5871] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  617.356231][ T5871] usb 1-1: Using ep0 maxpacket: 16
[  617.363846][ T5871] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  617.375309][ T5871] usb 1-1: config 0 has no interface number 0
[  617.385239][ T5871] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  617.400536][   T24] elan 0003:04F3:0755.0022: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  617.422880][ T5871] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  617.443312][ T5871] usb 1-1: config 0 interface 41 has no altsetting 0
[  617.460640][ T5871] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  617.472243][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.489169][ T5871] usb 1-1: Product: syz
[  617.499286][ T5871] usb 1-1: Manufacturer: syz
[  617.507728][ T5871] usb 1-1: SerialNumber: syz
[  617.528640][ T5871] usb 1-1: config 0 descriptor??
[  617.577230][T12794] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  617.594573][T12794] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  617.831771][T12794] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  617.842181][T12794] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  617.917041][T12782] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1771'.
[  618.015001][T12799] IPVS: length: 11 != 8
[  618.045226][T10262] usb 5-1: USB disconnect, device number 55
[  618.129905][ T1586] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  618.139434][ T1586] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  618.153120][ T1586] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  618.166007][ T1586] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  618.185435][ T1586] usb 6-1: USB disconnect, device number 34
[  618.238366][ T1586] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  618.263756][ T1586] ftdi_sio 6-1:0.0: device disconnected
[  618.730821][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  618.737190][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  618.887987][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.930497][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.069597][ T5871] sr9700 1-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, 5a:ec:36:90:de:3f
[  619.093312][ T5871] usb 1-1: USB disconnect, device number 44
[  619.100973][ T5871] sr9700 1-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet
[  619.356347][T12819] FAULT_INJECTION: forcing a failure.
[  619.356347][T12819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  619.378205][T12819] CPU: 0 UID: 0 PID: 12819 Comm: syz.6.1782 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  619.378235][T12819] Tainted: [L]=SOFTLOCKUP
[  619.378241][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  619.378251][T12819] Call Trace:
[  619.378257][T12819]  <TASK>
[  619.378264][T12819]  dump_stack_lvl+0x100/0x190
[  619.378295][T12819]  should_fail_ex.cold+0x5/0xa
[  619.378318][T12819]  _copy_from_user+0x2e/0xd0
[  619.378337][T12819]  kvm_arch_vm_ioctl+0x27a/0x18d0
[  619.378362][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378388][T12819]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  619.378417][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378447][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378476][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378507][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378546][T12819]  ? is_bpf_text_address+0x8a/0x1a0
[  619.378568][T12819]  ? bpf_ksym_find+0x128/0x1c0
[  619.378593][T12819]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  619.378616][T12819]  ? is_bpf_text_address+0x94/0x1a0
[  619.378637][T12819]  ? kernel_text_address+0x8d/0x100
[  619.378656][T12819]  ? __kernel_text_address+0xd/0x30
[  619.378673][T12819]  ? unwind_get_return_address+0x59/0xa0
[  619.378694][T12819]  ? arch_stack_walk+0xa6/0xf0
[  619.378721][T12819]  ? tomoyo_path_number_perm+0x46d/0x580
[  619.378743][T12819]  ? stack_trace_save+0x8e/0xc0
[  619.378762][T12819]  ? __pfx_stack_trace_save+0x10/0x10
[  619.378782][T12819]  ? stack_depot_save_flags+0x27/0x9d0
[  619.378803][T12819]  ? __lock_acquire+0x4a5/0x2630
[  619.378835][T12819]  ? tomoyo_path_number_perm+0x46d/0x580
[  619.378857][T12819]  ? kasan_save_stack+0x3f/0x50
[  619.378878][T12819]  ? kasan_save_stack+0x30/0x50
[  619.378898][T12819]  ? kasan_save_track+0x14/0x30
[  619.378918][T12819]  ? kasan_save_free_info+0x3b/0x70
[  619.378936][T12819]  ? __kasan_slab_free+0x5f/0x80
[  619.378961][T12819]  kvm_vm_ioctl+0x1564/0x4080
[  619.378991][T12819]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  619.379025][T12819]  ? tomoyo_path_number_perm+0x46d/0x580
[  619.379049][T12819]  ? kasan_quarantine_put+0x104/0x240
[  619.379070][T12819]  ? lockdep_hardirqs_on+0x78/0x100
[  619.379092][T12819]  ? find_held_lock+0x2b/0x80
[  619.379112][T12819]  ? tomoyo_path_number_perm+0x28f/0x580
[  619.379133][T12819]  ? tomoyo_path_number_perm+0x28f/0x580
[  619.379159][T12819]  ? tomoyo_path_number_perm+0x188/0x580
[  619.379183][T12819]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  619.379214][T12819]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  619.379237][T12819]  ? do_vfs_ioctl+0x226/0x13e0
[  619.379259][T12819]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  619.379281][T12819]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  619.379314][T12819]  ? __fget_files+0x215/0x3d0
[  619.379338][T12819]  ? hook_file_ioctl_common+0x146/0x410
[  619.379362][T12819]  ? selinux_file_ioctl+0x139/0x290
[  619.379386][T12819]  ? selinux_file_ioctl+0xb4/0x290
[  619.379412][T12819]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  619.379433][T12819]  __x64_sys_ioctl+0x18e/0x210
[  619.379457][T12819]  do_syscall_64+0x106/0xf80
[  619.379477][T12819]  ? clear_bhb_loop+0x40/0x90
[  619.379498][T12819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.379516][T12819] RIP: 0033:0x7fe716b9bf79
[  619.379531][T12819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.379548][T12819] RSP: 002b:00007fe7179b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  619.379565][T12819] RAX: ffffffffffffffda RBX: 00007fe716e15fa0 RCX: 00007fe716b9bf79
[  619.379576][T12819] RDX: 0000200000000600 RSI: 000000004048aec9 RDI: 0000000000000004
[  619.379587][T12819] RBP: 00007fe7179b2090 R08: 0000000000000000 R09: 0000000000000000
[  619.379597][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.379607][T12819] R13: 00007fe716e16038 R14: 00007fe716e15fa0 R15: 00007ffebb595c08
[  619.379630][T12819]  </TASK>
[  621.079429][T12839] overlayfs: missing 'lowerdir'
[  621.508120][   T30] audit: type=1400 audit(1771134376.280:776): avc:  denied  { connect } for  pid=12846 comm="syz.6.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  621.580544][   T30] audit: type=1400 audit(1771134376.310:777): avc:  denied  { ioctl } for  pid=12845 comm="syz.5.1792" path="/dev/input/mouse0" dev="devtmpfs" ino=924 ioctlcmd=0x708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  622.074880][T12849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1791'.
[  622.370250][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  622.570755][ T9951] block nbd3: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 210 seconds
[  622.581493][ T9951] block nbd3: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 210 seconds
[  622.590685][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1797'.
[  622.593219][ T9951] block nbd3: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 210 seconds
[  622.612465][ T9951] block nbd3: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 210 seconds
[  622.643390][   T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  622.662222][   T24] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  622.687519][   T30] audit: type=1400 audit(1771134377.460:778): avc:  denied  { accept } for  pid=12861 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  622.727886][   T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  622.993530][   T24] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  623.055668][   T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  623.066294][   T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  623.074417][   T24] usb 7-1: Product: syz
[  623.078719][   T24] usb 7-1: Manufacturer: syz
[  623.270389][   T29] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  623.490408][   T29] usb 5-1: device descriptor read/64, error -71
[  623.513283][   T24] cdc_wdm 7-1:1.0: skipping garbage
[  623.585970][   T24] cdc_wdm 7-1:1.0: skipping garbage
[  623.603163][   T24] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  623.761421][   T29] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  623.960458][   T29] usb 5-1: device descriptor read/64, error -71
[  624.071143][   T29] usb usb5-port1: attempt power cycle
[  624.302313][T12877] : entered promiscuous mode
[  624.380202][   T30] audit: type=1400 audit(1771134379.030:779): avc:  denied  { ioctl } for  pid=12874 comm="syz.5.1802" path="socket:[47646]" dev="sockfs" ino=47646 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  624.690197][   T29] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  625.321535][   T29] usb 5-1: device descriptor read/8, error -71
[  625.610342][   T29] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  625.680656][   T29] usb 5-1: device descriptor read/8, error -71
[  625.787971][   T30] audit: type=1804 audit(1771134380.560:780): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1805" name="/newroot/375/file1" dev="fuse" ino=1 res=1 errno=0
[  625.810413][T12890] FAULT_INJECTION: forcing a failure.
[  625.810413][T12890] name failslab, interval 1, probability 0, space 0, times 0
[  625.810560][   T29] usb usb5-port1: unable to enumerate USB device
[  625.823932][T12890] CPU: 0 UID: 0 PID: 12890 Comm: syz.0.1805 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  625.823956][T12890] Tainted: [L]=SOFTLOCKUP
[  625.823962][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  625.823971][T12890] Call Trace:
[  625.823977][T12890]  <TASK>
[  625.823983][T12890]  dump_stack_lvl+0x100/0x190
[  625.824012][T12890]  should_fail_ex.cold+0x5/0xa
[  625.824033][T12890]  should_failslab+0xc2/0x120
[  625.824055][T12890]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  625.824074][T12890]  ? do_epoll_ctl+0x2434/0x36a0
[  625.824094][T12890]  do_epoll_ctl+0x2434/0x36a0
[  625.824118][T12890]  ? __pfx_do_epoll_ctl+0x10/0x10
[  625.824131][T12890]  ? find_held_lock+0x2b/0x80
[  625.824150][T12890]  ? __might_fault+0xc5/0x140
[  625.824167][T12890]  ? __might_fault+0xc5/0x140
[  625.824193][T12890]  ? __x64_sys_epoll_ctl+0x15c/0x1e0
[  625.824207][T12890]  __x64_sys_epoll_ctl+0x15c/0x1e0
[  625.824223][T12890]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  625.824245][T12890]  do_syscall_64+0x106/0xf80
[  625.824264][T12890]  ? clear_bhb_loop+0x40/0x90
[  625.824284][T12890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.824300][T12890] RIP: 0033:0x7fb6cbd9bf79
[  625.824314][T12890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.824329][T12890] RSP: 002b:00007fb6c9ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  625.824345][T12890] RAX: ffffffffffffffda RBX: 00007fb6cc015fa0 RCX: 00007fb6cbd9bf79
[  625.824355][T12890] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  625.824364][T12890] RBP: 00007fb6c9ff6090 R08: 0000000000000000 R09: 0000000000000000
[  625.824373][T12890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.824383][T12890] R13: 00007fb6cc016038 R14: 00007fb6cc015fa0 R15: 00007ffcc4e83da8
[  625.824404][T12890]  </TASK>
[  626.162412][   T24] usb 7-1: USB disconnect, device number 5
[  626.941987][ T5127] Bluetooth: Frame is too long (len 88, expected len 68)
[  626.950982][ T5127] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  626.957623][ T5127] Bluetooth: Wrong link type (-22)
[  626.964245][ T5127] Bluetooth: Unknown BR/EDR signaling command 0x0f
[  626.971031][ T5127] Bluetooth: Wrong link type (-22)
[  626.976519][ T5127] Bluetooth: hci5: link tx timeout
[  626.983205][ T5127] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  627.046410][T12914] FAULT_INJECTION: forcing a failure.
[  627.046410][T12914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  627.173091][T12914] CPU: 1 UID: 0 PID: 12914 Comm: syz.0.1808 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  627.173121][T12914] Tainted: [L]=SOFTLOCKUP
[  627.173127][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  627.173138][T12914] Call Trace:
[  627.173144][T12914]  <TASK>
[  627.173151][T12914]  dump_stack_lvl+0x100/0x190
[  627.173184][T12914]  should_fail_ex.cold+0x5/0xa
[  627.173207][T12914]  _copy_from_user+0x2e/0xd0
[  627.173228][T12914]  rose_rt_ioctl+0xd6/0x2550
[  627.173259][T12914]  ? __pfx_rose_rt_ioctl+0x10/0x10
[  627.173293][T12914]  ? bpf_lsm_capable+0x9/0x10
[  627.173318][T12914]  ? security_capable+0x80/0x260
[  627.173342][T12914]  rose_ioctl+0x491/0x7d0
[  627.173363][T12914]  ? __pfx_rose_ioctl+0x10/0x10
[  627.173381][T12914]  ? tomoyo_path_number_perm+0x188/0x580
[  627.173412][T12914]  sock_do_ioctl+0x118/0x280
[  627.173438][T12914]  ? __pfx_sock_do_ioctl+0x10/0x10
[  627.173468][T12914]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  627.173500][T12914]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[  627.173532][T12914]  sock_ioctl+0x599/0x6b0
[  627.173558][T12914]  ? __pfx_sock_ioctl+0x10/0x10
[  627.173582][T12914]  ? hook_file_ioctl_common+0x146/0x410
[  627.173607][T12914]  ? selinux_file_ioctl+0x139/0x290
[  627.173631][T12914]  ? selinux_file_ioctl+0xb4/0x290
[  627.173657][T12914]  ? __pfx_sock_ioctl+0x10/0x10
[  627.173682][T12914]  __x64_sys_ioctl+0x18e/0x210
[  627.173706][T12914]  do_syscall_64+0x106/0xf80
[  627.173727][T12914]  ? clear_bhb_loop+0x40/0x90
[  627.173748][T12914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.173766][T12914] RIP: 0033:0x7fb6cbd9bf79
[  627.173781][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.173798][T12914] RSP: 002b:00007fb6c9ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  627.173816][T12914] RAX: ffffffffffffffda RBX: 00007fb6cc015fa0 RCX: 00007fb6cbd9bf79
[  627.173827][T12914] RDX: 0000200000000380 RSI: 000000000000890b RDI: 000000000000000a
[  627.173838][T12914] RBP: 00007fb6c9ff6090 R08: 0000000000000000 R09: 0000000000000000
[  627.173849][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.173859][T12914] R13: 00007fb6cc016038 R14: 00007fb6cc015fa0 R15: 00007ffcc4e83da8
[  627.173884][T12914]  </TASK>
[  627.769399][T12926] FAULT_INJECTION: forcing a failure.
[  627.769399][T12926] name failslab, interval 1, probability 0, space 0, times 0
[  627.804092][T12926] CPU: 0 UID: 0 PID: 12926 Comm: syz.6.1816 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  627.804121][T12926] Tainted: [L]=SOFTLOCKUP
[  627.804128][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  627.804138][T12926] Call Trace:
[  627.804146][T12926]  <TASK>
[  627.804153][T12926]  dump_stack_lvl+0x100/0x190
[  627.804187][T12926]  should_fail_ex.cold+0x5/0xa
[  627.804210][T12926]  should_failslab+0xc2/0x120
[  627.804236][T12926]  kmem_cache_alloc_noprof+0x7b/0x6e0
[  627.804258][T12926]  ? do_getname+0x35/0x390
[  627.804277][T12926]  ? strncpy_from_user+0x19d/0x2d0
[  627.804298][T12926]  do_getname+0x35/0x390
[  627.804320][T12926]  __x64_sys_renameat2+0xd9/0x140
[  627.804341][T12926]  do_syscall_64+0x106/0xf80
[  627.804363][T12926]  ? clear_bhb_loop+0x40/0x90
[  627.804385][T12926]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.804403][T12926] RIP: 0033:0x7fe716b9bf79
[  627.804422][T12926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.804438][T12926] RSP: 002b:00007fe7179b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  627.804457][T12926] RAX: ffffffffffffffda RBX: 00007fe716e15fa0 RCX: 00007fe716b9bf79
[  627.804468][T12926] RDX: ffffffffffffff9c RSI: 0000200000000a00 RDI: ffffffffffffff9c
[  627.804480][T12926] RBP: 00007fe7179b2090 R08: 0000000000000002 R09: 0000000000000000
[  627.804489][T12926] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001
[  627.804500][T12926] R13: 00007fe716e16038 R14: 00007fe716e15fa0 R15: 00007ffebb595c08
[  627.804523][T12926]  </TASK>
[  628.318993][T12933] FAULT_INJECTION: forcing a failure.
[  628.318993][T12933] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.333798][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.0.1819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.333817][T12933] Tainted: [L]=SOFTLOCKUP
[  628.333821][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  628.333828][T12933] Call Trace:
[  628.333832][T12933]  <TASK>
[  628.333837][T12933]  dump_stack_lvl+0x100/0x190
[  628.333859][T12933]  should_fail_ex.cold+0x5/0xa
[  628.333874][T12933]  _copy_from_iter+0x1f4/0x1690
[  628.333890][T12933]  ? __pfx__copy_from_iter+0x10/0x10
[  628.333904][T12933]  ? sock_has_perm+0x258/0x2f0
[  628.333918][T12933]  ? __pfx_sock_has_perm+0x10/0x10
[  628.333934][T12933]  hci_sock_sendmsg+0x4a1/0x2620
[  628.333950][T12933]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  628.333966][T12933]  sock_write_iter+0x566/0x610
[  628.333983][T12933]  ? __pfx_sock_write_iter+0x10/0x10
[  628.334004][T12933]  ? bpf_lsm_file_permission+0x9/0x10
[  628.334019][T12933]  ? security_file_permission+0x76/0x210
[  628.334037][T12933]  ? rw_verify_area+0xce/0x6d0
[  628.334052][T12933]  vfs_write+0x6ac/0x1070
[  628.334068][T12933]  ? __pfx_sock_write_iter+0x10/0x10
[  628.334085][T12933]  ? __pfx_vfs_write+0x10/0x10
[  628.334099][T12933]  ? find_held_lock+0x2b/0x80
[  628.334121][T12933]  ksys_write+0x1f8/0x250
[  628.334136][T12933]  ? __pfx_ksys_write+0x10/0x10
[  628.334155][T12933]  do_syscall_64+0x106/0xf80
[  628.334169][T12933]  ? clear_bhb_loop+0x40/0x90
[  628.334183][T12933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.334195][T12933] RIP: 0033:0x7fb6cbd9bf79
[  628.334205][T12933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.334216][T12933] RSP: 002b:00007fb6c9ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  628.334227][T12933] RAX: ffffffffffffffda RBX: 00007fb6cc015fa0 RCX: 00007fb6cbd9bf79
[  628.334234][T12933] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004
[  628.334241][T12933] RBP: 00007fb6c9ff6090 R08: 0000000000000000 R09: 0000000000000000
[  628.334247][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.334254][T12933] R13: 00007fb6cc016038 R14: 00007fb6cc015fa0 R15: 00007ffcc4e83da8
[  628.334267][T12933]  </TASK>
[  628.731669][   T30] audit: type=1804 audit(1771134383.510:781): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1817" name="/newroot/375/file1" dev="fuse" ino=1 res=1 errno=0
[  629.030176][ T5804] Bluetooth: hci5: command 0x0406 tx timeout
[  629.441338][ T5804] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  629.451077][ T5804] Bluetooth: hci3: Injecting HCI hardware error event
[  629.463128][ T5804] Bluetooth: hci3: hardware error 0x00
[  630.005419][T10262] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  630.163437][ T5871] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  630.200576][T10262] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  630.240174][T10262] usb 5-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  630.251080][T10262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  630.260049][T10262] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  630.288359][T10262] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  630.297699][T10262] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  630.307879][T10262] usb 5-1: Product: syz
[  630.312173][T10262] usb 5-1: Manufacturer: syz
[  630.328955][T10262] cdc_wdm 5-1:1.0: skipping garbage
[  630.334290][T10262] cdc_wdm 5-1:1.0: skipping garbage
[  630.339605][T10262] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  630.349145][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  630.362720][ T5871] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  630.401038][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.445816][ T5871] usb 1-1: config 0 descriptor??
[  630.467093][T12947] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  630.560329][T12958] openvswitch: netlink: Flow actions attr not present in new flow.
[  630.894640][ T5871] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  631.013785][   T30] audit: type=1400 audit(1771134385.790:782): avc:  denied  { override_creds } for  pid=12961 comm="syz.7.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  631.542313][T12947] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1824'.
[  631.997759][T12947] IPVS: length: 11 != 8
[  632.322769][ T5804] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  632.865923][T10262] usb 1-1: USB disconnect, device number 45
[  633.155144][   T29] usb 5-1: USB disconnect, device number 60
[  633.208089][T12995] FAULT_INJECTION: forcing a failure.
[  633.208089][T12995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  633.240680][T12995] CPU: 0 UID: 0 PID: 12995 Comm: syz.7.1835 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  633.240711][T12995] Tainted: [L]=SOFTLOCKUP
[  633.240717][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  633.240733][T12995] Call Trace:
[  633.240740][T12995]  <TASK>
[  633.240747][T12995]  dump_stack_lvl+0x100/0x190
[  633.240780][T12995]  should_fail_ex.cold+0x5/0xa
[  633.240803][T12995]  _copy_from_user+0x2e/0xd0
[  633.240823][T12995]  bpf_test_init.isra.0+0xaf/0x100
[  633.240846][T12995]  bpf_prog_test_run_skb+0x489/0x3230
[  633.240874][T12995]  ? find_held_lock+0x2b/0x80
[  633.240894][T12995]  ? __fget_files+0x215/0x3d0
[  633.240927][T12995]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  633.240952][T12995]  ? fput+0x79/0x100
[  633.240971][T12995]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  633.240993][T12995]  __sys_bpf+0x1725/0x4b90
[  633.241013][T12995]  ? __pfx___sys_bpf+0x10/0x10
[  633.241038][T12995]  ? proc_fail_nth_write+0x9f/0x220
[  633.241057][T12995]  ? find_held_lock+0x2b/0x80
[  633.241083][T12995]  ? find_held_lock+0x2b/0x80
[  633.241102][T12995]  ? ksys_write+0x190/0x250
[  633.241134][T12995]  ? __mutex_unlock_slowpath+0x15c/0x790
[  633.241157][T12995]  ? __fget_files+0x215/0x3d0
[  633.241195][T12995]  ? fput+0x79/0x100
[  633.241211][T12995]  ? ksys_write+0x1ac/0x250
[  633.241232][T12995]  ? __pfx_ksys_write+0x10/0x10
[  633.241258][T12995]  __x64_sys_bpf+0x7b/0xc0
[  633.241275][T12995]  ? lockdep_hardirqs_on+0x78/0x100
[  633.241296][T12995]  do_syscall_64+0x106/0xf80
[  633.241316][T12995]  ? clear_bhb_loop+0x40/0x90
[  633.241338][T12995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  633.241355][T12995] RIP: 0033:0x7f974ed9bf79
[  633.241371][T12995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  633.241387][T12995] RSP: 002b:00007f974fc9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  633.241404][T12995] RAX: ffffffffffffffda RBX: 00007f974f015fa0 RCX: 00007f974ed9bf79
[  633.241416][T12995] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[  633.241427][T12995] RBP: 00007f974fc9e090 R08: 0000000000000000 R09: 0000000000000000
[  633.241437][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  633.241447][T12995] R13: 00007f974f016038 R14: 00007f974f015fa0 R15: 00007fff95738e88
[  633.241472][T12995]  </TASK>
[  634.140452][T13010] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1841'.
[  634.167303][T13010] veth0_macvtap: left promiscuous mode
[  634.189809][T13011] netlink: 'syz.6.1841': attribute type 5 has an invalid length.
[  634.310559][   T29] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  634.429978][T13014] FAULT_INJECTION: forcing a failure.
[  634.429978][T13014] name failslab, interval 1, probability 0, space 0, times 0
[  634.442888][T13014] CPU: 0 UID: 0 PID: 13014 Comm: syz.5.1842 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  634.442916][T13014] Tainted: [L]=SOFTLOCKUP
[  634.442923][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  634.442933][T13014] Call Trace:
[  634.442939][T13014]  <TASK>
[  634.442946][T13014]  dump_stack_lvl+0x100/0x190
[  634.442979][T13014]  should_fail_ex.cold+0x5/0xa
[  634.443001][T13014]  ? input_ff_create+0x60/0x310
[  634.443027][T13014]  should_failslab+0xc2/0x120
[  634.443052][T13014]  __kmalloc_noprof+0xe0/0x850
[  634.443080][T13014]  input_ff_create+0x60/0x310
[  634.443110][T13014]  uinput_ioctl_handler.isra.0+0x70c/0x1d10
[  634.443142][T13014]  ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10
[  634.443171][T13014]  ? preempt_schedule_irq+0x7b/0x90
[  634.443196][T13014]  ? irqentry_exit+0x180/0x670
[  634.443216][T13014]  ? lockdep_hardirqs_on+0x78/0x100
[  634.443237][T13014]  ? irqentry_exit+0x180/0x670
[  634.443269][T13014]  ? __pfx_uinput_ioctl+0x10/0x10
[  634.443297][T13014]  __x64_sys_ioctl+0x18e/0x210
[  634.443322][T13014]  do_syscall_64+0x106/0xf80
[  634.443342][T13014]  ? clear_bhb_loop+0x40/0x90
[  634.443364][T13014]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  634.443382][T13014] RIP: 0033:0x7f1211b9bf79
[  634.443397][T13014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  634.443413][T13014] RSP: 002b:00007f1212a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  634.443430][T13014] RAX: ffffffffffffffda RBX: 00007f1211e16090 RCX: 00007f1211b9bf79
[  634.443441][T13014] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[  634.443451][T13014] RBP: 00007f1212a06090 R08: 0000000000000000 R09: 0000000000000000
[  634.443461][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  634.443471][T13014] R13: 00007f1211e16128 R14: 00007f1211e16090 R15: 00007ffdaa5a6e48
[  634.443496][T13014]  </TASK>
[  634.646896][   T29] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  634.658358][   T29] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  634.742911][   T29] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  634.831680][   T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  634.958127][T13020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1845'.
[  635.075981][T13023] netlink: 'syz.6.1846': attribute type 27 has an invalid length.
[  635.111097][T10262] IPVS: starting estimator thread 0...
[  635.222743][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.310924][   T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  635.360217][T13024] IPVS: using max 45 ests per chain, 108000 per kthread
[  635.436863][   T29] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  636.986373][   T29] usb 5-1: USB disconnect, device number 61
[  637.190809][T10262] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  637.255353][ T5804] Bluetooth: hci5: SCO packet for unknown connection handle 201
[  637.260647][T13041] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.1851'.
[  637.490986][ T5871] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  637.500144][T10262] usb 6-1: Using ep0 maxpacket: 16
[  637.507535][T10262] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  637.515920][T10262] usb 6-1: config 0 has no interface number 0
[  637.526483][T10262] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  637.542043][T10262] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  637.603096][T10262] usb 6-1: config 0 interface 41 has no altsetting 0
[  637.659877][ T5871] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  637.673048][T10262] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  637.700442][ T5871] usb 7-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  637.710777][T10262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.718737][T10262] usb 6-1: Product: syz
[  637.723366][ T5871] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  637.733282][T10262] usb 6-1: Manufacturer: syz
[  637.737977][T10262] usb 6-1: SerialNumber: syz
[  637.747628][T13045] FAULT_INJECTION: forcing a failure.
[  637.747628][T13045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  637.761112][ T5871] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  637.775618][T10262] usb 6-1: config 0 descriptor??
[  637.781334][T13033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  637.788812][T13033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  637.796023][ T5871] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  637.802152][T13045] CPU: 1 UID: 0 PID: 13045 Comm: syz.4.1852 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  637.802177][T13045] Tainted: [L]=SOFTLOCKUP
[  637.802182][T13045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  637.802192][T13045] Call Trace:
[  637.802198][T13045]  <TASK>
[  637.802205][T13045]  dump_stack_lvl+0x100/0x190
[  637.802233][T13045]  should_fail_ex.cold+0x5/0xa
[  637.802254][T13045]  _copy_from_user+0x2e/0xd0
[  637.802272][T13045]  sctp_getsockopt_peer_addr_info+0xc6/0x460
[  637.802297][T13045]  ? __pfx_sctp_getsockopt_peer_addr_info+0x10/0x10
[  637.802334][T13045]  ? sctp_getsockopt+0x2d6/0x7100
[  637.802359][T13045]  sctp_getsockopt+0x8ad/0x7100
[  637.802385][T13045]  ? find_held_lock+0x2b/0x80
[  637.802412][T13045]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  637.802429][T13045]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  637.802446][T13045]  ? __pfx_sctp_getsockopt+0x10/0x10
[  637.802470][T13045]  ? avc_has_perm_noaudit+0x145/0x3b0
[  637.802489][T13045]  ? avc_has_perm+0x135/0x1e0
[  637.802506][T13045]  ? __pfx_avc_has_perm+0x10/0x10
[  637.802525][T13045]  ? __lock_acquire+0x4a5/0x2630
[  637.802550][T13045]  ? sock_has_perm+0x258/0x2f0
[  637.802575][T13045]  ? find_held_lock+0x2b/0x80
[  637.802593][T13045]  ? __might_fault+0xc5/0x140
[  637.802610][T13045]  ? __might_fault+0xc5/0x140
[  637.802635][T13045]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  637.802657][T13045]  do_sock_getsockopt+0x259/0x3d0
[  637.802679][T13045]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  637.802710][T13045]  __sys_getsockopt+0x148/0x260
[  637.802734][T13045]  ? __x64_sys_getsockopt+0xbd/0x160
[  637.802749][T13045]  __x64_sys_getsockopt+0xbd/0x160
[  637.802765][T13045]  ? do_syscall_64+0x95/0xf80
[  637.802783][T13045]  ? lockdep_hardirqs_on+0x78/0x100
[  637.802802][T13045]  do_syscall_64+0x106/0xf80
[  637.802819][T13045]  ? clear_bhb_loop+0x40/0x90
[  637.802838][T13045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  637.802854][T13045] RIP: 0033:0x7fd29499bf79
[  637.802867][T13045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.802882][T13045] RSP: 002b:00007fd29580e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  637.802898][T13045] RAX: ffffffffffffffda RBX: 00007fd294c16090 RCX: 00007fd29499bf79
[  637.802908][T13045] RDX: 000000000000000f RSI: 0000000000000084 RDI: 0000000000000006
[  637.802917][T13045] RBP: 00007fd29580e090 R08: 0000200000000100 R09: 0000000000000000
[  637.802926][T13045] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001
[  637.802935][T13045] R13: 00007fd294c16128 R14: 00007fd294c16090 R15: 00007ffc001fa3a8
[  637.802957][T13045]  </TASK>
[  638.078089][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  638.086223][ T5871] usb 7-1: Product: syz
[  638.095418][ T5871] usb 7-1: Manufacturer: syz
[  638.131274][ T5871] cdc_wdm 7-1:1.0: skipping garbage
[  638.136630][ T5871] cdc_wdm 7-1:1.0: skipping garbage
[  638.145844][ T5871] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  638.272045][T13033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  638.279277][T13033] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  638.580184][   T29] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  638.580798][T13050] blktrace: Concurrent blktraces are not allowed on nullb0
[  638.730299][   T29] usb 1-1: Using ep0 maxpacket: 8
[  638.801850][   T29] usb 1-1: config 6 has an invalid interface number: 2 but max is 0
[  638.801869][   T29] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  638.801881][   T29] usb 1-1: config 6 has no interface number 0
[  638.801898][   T29] usb 1-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  638.803584][   T29] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  638.803608][   T29] usb 1-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[  638.803628][   T29] usb 1-1: Product: syz
[  638.803641][   T29] usb 1-1: Manufacturer: syz
[  638.803655][   T29] usb 1-1: SerialNumber: syz
[  638.808179][   T29] hso 1-1:6.2: Failed to find INT IN ep
[  638.908990][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.909316][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.949151][T10262] sr9700 6-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, de:f3:11:92:3f:05
[  638.951132][T10262] usb 6-1: USB disconnect, device number 35
[  638.961612][T10262] sr9700 6-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet
[  639.023762][   T30] audit: type=1400 audit(1771134393.800:783): avc:  denied  { ioctl } for  pid=13046 comm="syz.0.1853" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  639.030561][T13047] vivid-000: disconnect
[  639.031613][T13046] vivid-000: reconnect
[  639.032119][ T5871] usb 1-1: USB disconnect, device number 46
[  639.348125][T13060] openvswitch: netlink: IP tunnel dst address not specified
[  639.699459][ T5804] Bluetooth: hci5: hcon ffff88802a66c000 sent 3 < count 7
[  640.441898][ T5871] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  640.768889][ T5871] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  640.983186][ T5871] usb 6-1: config 0 has no interface number 0
[  641.005103][ T5871] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  641.025396][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.046066][ T5871] usb 6-1: Product: syz
[  641.052833][   T29] usb 7-1: USB disconnect, device number 6
[  641.063319][ T5871] usb 6-1: Manufacturer: syz
[  641.078276][ T5871] usb 6-1: SerialNumber: syz
[  641.096008][ T5871] usb 6-1: config 0 descriptor??
[  641.321947][ T5871] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  641.369505][T13098] FAULT_INJECTION: forcing a failure.
[  641.369505][T13098] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  641.382747][T13098] CPU: 0 UID: 0 PID: 13098 Comm: syz.4.1868 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  641.382774][T13098] Tainted: [L]=SOFTLOCKUP
[  641.382781][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  641.382792][T13098] Call Trace:
[  641.382798][T13098]  <TASK>
[  641.382805][T13098]  dump_stack_lvl+0x100/0x190
[  641.382837][T13098]  should_fail_ex.cold+0x5/0xa
[  641.382861][T13098]  _copy_from_iter+0x1f4/0x1690
[  641.382882][T13098]  ? lockdep_hardirqs_on+0x78/0x100
[  641.382904][T13098]  ? irqentry_exit+0x180/0x670
[  641.382926][T13098]  ? __pfx__copy_from_iter+0x10/0x10
[  641.382951][T13098]  ? skb_set_owner_w+0x335/0x780
[  641.382973][T13098]  hci_sock_sendmsg+0x4a1/0x2620
[  641.382998][T13098]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  641.383021][T13098]  ? sock_write_iter+0x3c8/0x610
[  641.383047][T13098]  sock_write_iter+0x566/0x610
[  641.383073][T13098]  ? __pfx_sock_write_iter+0x10/0x10
[  641.383105][T13098]  ? write_comp_data+0x2b/0x90
[  641.383129][T13098]  ? rw_verify_area+0xce/0x6d0
[  641.383152][T13098]  vfs_write+0x6ac/0x1070
[  641.383175][T13098]  ? __pfx_sock_write_iter+0x10/0x10
[  641.383201][T13098]  ? __pfx_vfs_write+0x10/0x10
[  641.383222][T13098]  ? find_held_lock+0x2b/0x80
[  641.383259][T13098]  ksys_write+0x1f8/0x250
[  641.383281][T13098]  ? __pfx_ksys_write+0x10/0x10
[  641.383311][T13098]  do_syscall_64+0x106/0xf80
[  641.383331][T13098]  ? clear_bhb_loop+0x40/0x90
[  641.383353][T13098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  641.383371][T13098] RIP: 0033:0x7fd29499bf79
[  641.383386][T13098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  641.383403][T13098] RSP: 002b:00007fd29580e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  641.383421][T13098] RAX: ffffffffffffffda RBX: 00007fd294c16090 RCX: 00007fd29499bf79
[  641.383433][T13098] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005
[  641.383444][T13098] RBP: 00007fd29580e090 R08: 0000000000000000 R09: 0000000000000000
[  641.383455][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  641.383465][T13098] R13: 00007fd294c16128 R14: 00007fd294c16090 R15: 00007ffc001fa3a8
[  641.383490][T13098]  </TASK>
[  641.692434][   T29] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  641.695285][ T5871] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  641.716261][ T5871] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  641.730131][ T5871] usb 6-1: media controller created
[  641.850762][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  641.862127][   T29] usb 7-1: Using ep0 maxpacket: 16
[  641.881590][   T29] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  641.882575][ T5871] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  642.089734][   T29] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  642.092030][ T5871] usb 6-1: USB disconnect, device number 36
[  642.200168][   T29] usb 7-1: config 0 has no interface number 0
[  642.226428][   T29] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  642.235912][   T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.247923][   T29] usb 7-1: Product: syz
[  642.252311][   T29] usb 7-1: Manufacturer: syz
[  642.257025][   T29] usb 7-1: SerialNumber: syz
[  642.282463][   T29] usb 7-1: config 0 descriptor??
[  642.352633][   T29] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e8)
[  642.360006][   T29] uvcvideo 7-1:0.105: No valid video chain found.
[  642.534840][   T29] usb 7-1: USB disconnect, device number 7
[  642.751511][T13122] FAULT_INJECTION: forcing a failure.
[  642.751511][T13122] name failslab, interval 1, probability 0, space 0, times 0
[  642.764316][T13122] CPU: 0 UID: 0 PID: 13122 Comm: syz.5.1875 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  642.764343][T13122] Tainted: [L]=SOFTLOCKUP
[  642.764348][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  642.764355][T13122] Call Trace:
[  642.764360][T13122]  <TASK>
[  642.764364][T13122]  dump_stack_lvl+0x100/0x190
[  642.764385][T13122]  should_fail_ex.cold+0x5/0xa
[  642.764400][T13122]  should_failslab+0xc2/0x120
[  642.764417][T13122]  __kmalloc_node_noprof+0xe6/0x850
[  642.764432][T13122]  ? alloc_slab_obj_exts+0x4e/0x1c0
[  642.764446][T13122]  alloc_slab_obj_exts+0x4e/0x1c0
[  642.764459][T13122]  __memcg_slab_post_alloc_hook+0x24a/0x9a0
[  642.764480][T13122]  ? kasan_save_track+0x14/0x30
[  642.764496][T13122]  kmem_cache_alloc_node_noprof+0x53f/0x6f0
[  642.764511][T13122]  ? __alloc_skb+0x140/0x710
[  642.764526][T13122]  __alloc_skb+0x140/0x710
[  642.764536][T13122]  ? __alloc_skb+0x5b7/0x710
[  642.764547][T13122]  ? __pfx___alloc_skb+0x10/0x10
[  642.764560][T13122]  ? irqentry_exit+0x180/0x670
[  642.764577][T13122]  alloc_skb_with_frags+0xe0/0x810
[  642.764593][T13122]  ? find_held_lock+0x2b/0x80
[  642.764606][T13122]  ? avc_has_perm_noaudit+0x11e/0x3b0
[  642.764621][T13122]  sock_alloc_send_pskb+0x801/0x980
[  642.764633][T13122]  ? avc_has_perm_noaudit+0x145/0x3b0
[  642.764648][T13122]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  642.764658][T13122]  ? selinux_socket_getpeersec_dgram+0x1a4/0x380
[  642.764674][T13122]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[  642.764691][T13122]  ? is_bpf_text_address+0x94/0x1a0
[  642.764710][T13122]  unix_stream_sendmsg+0x3f4/0x1310
[  642.764729][T13122]  ? irqentry_exit+0x180/0x670
[  642.764744][T13122]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  642.764766][T13122]  ? ____sys_sendmsg+0x86b/0xc30
[  642.764783][T13122]  ____sys_sendmsg+0xa54/0xc30
[  642.764801][T13122]  ? __pfx_____sys_sendmsg+0x10/0x10
[  642.764824][T13122]  ___sys_sendmsg+0x190/0x1e0
[  642.764842][T13122]  ? __pfx____sys_sendmsg+0x10/0x10
[  642.764859][T13122]  ? ksys_write+0x12a/0x250
[  642.764890][T13122]  __sys_sendmsg+0x170/0x220
[  642.764903][T13122]  ? __pfx___sys_sendmsg+0x10/0x10
[  642.764925][T13122]  do_syscall_64+0x106/0xf80
[  642.764938][T13122]  ? clear_bhb_loop+0x40/0x90
[  642.764952][T13122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  642.764964][T13122] RIP: 0033:0x7f1211b9bf79
[  642.764974][T13122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  642.764985][T13122] RSP: 002b:00007f1212a06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  642.764996][T13122] RAX: ffffffffffffffda RBX: 00007f1211e16090 RCX: 00007f1211b9bf79
[  642.765003][T13122] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004
[  642.765010][T13122] RBP: 00007f1212a06090 R08: 0000000000000000 R09: 0000000000000000
[  642.765016][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  642.765023][T13122] R13: 00007f1211e16128 R14: 00007f1211e16090 R15: 00007ffdaa5a6e48
[  642.765037][T13122]  </TASK>
[  643.923422][ T5870] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  644.430192][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  644.444423][ T5870] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  644.459483][ T5870] usb 6-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config
[  644.476184][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  644.477379][T13143] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1883'.
[  644.494891][ T5870] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  644.515691][ T5870] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  644.533005][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  644.553503][ T5870] usb 6-1: Product: syz
[  644.559803][ T5870] usb 6-1: Manufacturer: syz
[  644.581699][   T24] usb 5-1: device descriptor read/64, error -71
[  644.588642][ T5870] cdc_wdm 6-1:1.0: skipping garbage
[  644.595409][ T5870] cdc_wdm 6-1:1.0: skipping garbage
[  644.602121][ T5870] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  645.260751][   T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  645.420155][   T24] usb 5-1: device descriptor read/64, error -71
[  645.541033][   T24] usb usb5-port1: attempt power cycle
[  645.900298][   T24] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  645.973373][   T24] usb 5-1: device descriptor read/8, error -71
[  646.380330][   T24] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  646.410707][   T24] usb 5-1: device descriptor read/8, error -71
[  646.541793][   T24] usb usb5-port1: unable to enumerate USB device
[  646.607803][T12160] usb 6-1: USB disconnect, device number 37
[  646.630235][T10262] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  646.701495][T13184] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  646.831054][T10262] usb 7-1: Using ep0 maxpacket: 16
[  647.091598][T13191] FAULT_INJECTION: forcing a failure.
[  647.091598][T13191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  647.104852][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.5.1897 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  647.104880][T13191] Tainted: [L]=SOFTLOCKUP
[  647.104887][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  647.104897][T13191] Call Trace:
[  647.104904][T13191]  <TASK>
[  647.104911][T13191]  dump_stack_lvl+0x100/0x190
[  647.104944][T13191]  should_fail_ex.cold+0x5/0xa
[  647.104968][T13191]  _copy_from_iter+0x1f4/0x1690
[  647.104992][T13191]  ? __asan_memset+0x23/0x50
[  647.105014][T13191]  ? __pfx__copy_from_iter+0x10/0x10
[  647.105033][T13191]  ? __pfx___alloc_skb+0x10/0x10
[  647.105062][T13191]  netlink_sendmsg+0x808/0xda0
[  647.105091][T13191]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.105122][T13191]  sock_write_iter+0x566/0x610
[  647.105149][T13191]  ? __pfx_sock_write_iter+0x10/0x10
[  647.105173][T13191]  ? lockdep_hardirqs_on+0x78/0x100
[  647.105206][T13191]  ? vfs_write+0x225/0x1070
[  647.105233][T13191]  vfs_write+0x6ac/0x1070
[  647.105256][T13191]  ? __pfx_sock_write_iter+0x10/0x10
[  647.105288][T13191]  ? __pfx_vfs_write+0x10/0x10
[  647.105310][T13191]  ? find_held_lock+0x2b/0x80
[  647.105347][T13191]  ksys_write+0x1f8/0x250
[  647.105371][T13191]  ? __pfx_ksys_write+0x10/0x10
[  647.105401][T13191]  do_syscall_64+0x106/0xf80
[  647.105422][T13191]  ? clear_bhb_loop+0x40/0x90
[  647.105444][T13191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.105463][T13191] RIP: 0033:0x7f1211b9bf79
[  647.105479][T13191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.105495][T13191] RSP: 002b:00007f12129e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  647.105512][T13191] RAX: ffffffffffffffda RBX: 00007f1211e16180 RCX: 00007f1211b9bf79
[  647.105523][T13191] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000005
[  647.105534][T13191] RBP: 00007f12129e5090 R08: 0000000000000000 R09: 0000000000000000
[  647.105545][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.105555][T13191] R13: 00007f1211e16218 R14: 00007f1211e16180 R15: 00007ffdaa5a6e48
[  647.105577][T13191]  </TASK>
[  647.109293][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  647.516380][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  647.527367][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  647.570512][T10262] usb 7-1: config 0 interface 0 has no altsetting 0
[  647.621012][T10262] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  647.640200][T10262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.659262][T10262] usb 7-1: Product: syz
[  647.670211][T10262] usb 7-1: Manufacturer: syz
[  647.688674][T10262] usb 7-1: SerialNumber: syz
[  647.701136][T10262] usb 7-1: config 0 descriptor??
[  647.940590][T10262] usb 7-1: Can not set alternate setting to 1, error: -71
[  647.950137][T10262] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71
[  647.958673][T13196] 8021q: VLANs not supported on wg0
[  647.974559][T10262] usb 7-1: USB disconnect, device number 8
[  648.644833][T13193] ip6t_rpfilter: unknown options
[  648.750177][   T29] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  648.850241][T10262] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  648.902443][   T29] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  648.963316][   T29] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  649.042161][   T29] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  649.060725][T10262] usb 7-1: Using ep0 maxpacket: 16
[  649.064889][   T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.106462][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  649.137609][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  649.179538][T10262] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  649.219888][T10262] usb 7-1: config 0 interface 0 has no altsetting 0
[  649.247363][T13201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  649.251693][T10262] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  649.299188][   T29] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  649.316275][T10262] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.348225][T10262] usb 7-1: Product: syz
[  649.371729][T10262] usb 7-1: Manufacturer: syz
[  649.476004][T10262] usb 7-1: SerialNumber: syz
[  649.503265][T10262] usb 7-1: config 0 descriptor??
[  649.992925][T10262] usb 7-1: can't set config #0, error -71
[  650.024039][T10262] usb 7-1: USB disconnect, device number 9
[  650.074036][T13213] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  650.420965][T13224] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  650.591008][T10262] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  650.792072][T10262] usb 5-1: Using ep0 maxpacket: 16
[  650.800241][T13229] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1909'.
[  650.813283][T10262] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  650.911619][T10262] usb 5-1: config 0 has no interface number 0
[  650.947369][T10262] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  650.958162][ T5871] usb 1-1: USB disconnect, device number 47
[  650.983221][T10262] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  651.049132][T10262] usb 5-1: config 0 interface 41 has no altsetting 0
[  651.078493][T10262] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  651.087944][T10262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  651.102474][T10262] usb 5-1: Product: syz
[  651.117363][T10262] usb 5-1: Manufacturer: syz
[  651.129733][T10262] usb 5-1: SerialNumber: syz
[  651.137247][T10262] usb 5-1: config 0 descriptor??
[  651.166473][T13222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  651.175938][T13222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  651.228674][T13229] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  651.648885][T13235] FAULT_INJECTION: forcing a failure.
[  651.648885][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  651.662196][T13235] CPU: 1 UID: 0 PID: 13235 Comm: syz.0.1910 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  651.662230][T13235] Tainted: [L]=SOFTLOCKUP
[  651.662236][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  651.662246][T13235] Call Trace:
[  651.662253][T13235]  <TASK>
[  651.662260][T13235]  dump_stack_lvl+0x100/0x190
[  651.662291][T13235]  should_fail_ex.cold+0x5/0xa
[  651.662314][T13235]  _copy_from_user+0x2e/0xd0
[  651.662334][T13235]  copy_msghdr_from_user+0x9f/0x4f0
[  651.662363][T13235]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  651.662392][T13235]  ? rcu_is_watching+0x12/0xc0
[  651.662411][T13235]  ? ___sys_recvmsg+0x177/0x1a0
[  651.662434][T13235]  ? kfree+0x2ec/0x6b0
[  651.662456][T13235]  ___sys_recvmsg+0xdd/0x1a0
[  651.662482][T13235]  ? __pfx____sys_recvmsg+0x10/0x10
[  651.662521][T13235]  ? __pfx___might_resched+0x10/0x10
[  651.662545][T13235]  do_recvmmsg+0x301/0x760
[  651.662574][T13235]  ? __pfx_do_recvmmsg+0x10/0x10
[  651.662598][T13235]  ? ksys_write+0x190/0x250
[  651.662620][T13235]  ? ksys_write+0x190/0x250
[  651.662647][T13235]  ? __mutex_unlock_slowpath+0x15c/0x790
[  651.662678][T13235]  ? __fget_files+0x21f/0x3d0
[  651.662708][T13235]  __x64_sys_recvmmsg+0x22a/0x280
[  651.662731][T13235]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  651.662760][T13235]  do_syscall_64+0x106/0xf80
[  651.662780][T13235]  ? clear_bhb_loop+0x40/0x90
[  651.662802][T13235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  651.662819][T13235] RIP: 0033:0x7fb6cbd9bf79
[  651.662833][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  651.662850][T13235] RSP: 002b:00007fb6c9fb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  651.662868][T13235] RAX: ffffffffffffffda RBX: 00007fb6cc016180 RCX: 00007fb6cbd9bf79
[  651.662880][T13235] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000005
[  651.662891][T13235] RBP: 00007fb6c9fb4090 R08: 0000000000000000 R09: 0000000000000000
[  651.662901][T13235] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001
[  651.662912][T13235] R13: 00007fb6cc016218 R14: 00007fb6cc016180 R15: 00007ffcc4e83da8
[  651.662936][T13235]  </TASK>
[  651.885681][T13222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  651.900817][T13222] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  652.341316][   T30] audit: type=1400 audit(1771134407.110:784): avc:  denied  { getopt } for  pid=13239 comm="syz.0.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  652.727570][   T30] audit: type=1400 audit(1771134407.210:785): avc:  denied  { mount } for  pid=13237 comm="syz.5.1911" name="/" dev="rpc_pipefs" ino=50507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1
[  652.730915][ T9951] block nbd3: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 240 seconds
[  652.761720][ T9951] block nbd3: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 240 seconds
[  652.791499][ T9951] block nbd3: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 240 seconds
[  652.805749][ T9951] block nbd3: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 240 seconds
[  652.904719][T13246] input: syz0 as /devices/virtual/input/input38
[  653.173796][T13236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.211032][T13236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.305852][T10262] sr9700 5-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 1e:7e:7b:e6:ab:01
[  653.361260][T10262] usb 5-1: USB disconnect, device number 66
[  653.371672][T13255] FAULT_INJECTION: forcing a failure.
[  653.371672][T13255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.376762][T10262] sr9700 5-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet
[  653.703681][T13255] CPU: 1 UID: 0 PID: 13255 Comm: syz.0.1915 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  653.703701][T13255] Tainted: [L]=SOFTLOCKUP
[  653.703705][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  653.703712][T13255] Call Trace:
[  653.703716][T13255]  <TASK>
[  653.703721][T13255]  dump_stack_lvl+0x100/0x190
[  653.703742][T13255]  should_fail_ex.cold+0x5/0xa
[  653.703757][T13255]  _copy_from_iter+0x1f4/0x1690
[  653.703771][T13255]  ? __asan_memset+0x23/0x50
[  653.703785][T13255]  ? __pfx__copy_from_iter+0x10/0x10
[  653.703797][T13255]  ? __pfx___alloc_skb+0x10/0x10
[  653.703814][T13255]  netlink_sendmsg+0x808/0xda0
[  653.703832][T13255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  653.703846][T13255]  ? __might_fault+0x20/0x140
[  653.703864][T13255]  ____sys_sendmsg+0xa54/0xc30
[  653.703882][T13255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  653.703904][T13255]  ___sys_sendmsg+0x190/0x1e0
[  653.703922][T13255]  ? __pfx____sys_sendmsg+0x10/0x10
[  653.703955][T13255]  __sys_sendmsg+0x170/0x220
[  653.703968][T13255]  ? __pfx___sys_sendmsg+0x10/0x10
[  653.703990][T13255]  do_syscall_64+0x106/0xf80
[  653.704004][T13255]  ? clear_bhb_loop+0x40/0x90
[  653.704018][T13255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.704029][T13255] RIP: 0033:0x7fb6cbd9bf79
[  653.704039][T13255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.704050][T13255] RSP: 002b:00007fb6c9ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  653.704061][T13255] RAX: ffffffffffffffda RBX: 00007fb6cc015fa0 RCX: 00007fb6cbd9bf79
[  653.704068][T13255] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  653.704075][T13255] RBP: 00007fb6c9ff6090 R08: 0000000000000000 R09: 0000000000000000
[  653.704081][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.704088][T13255] R13: 00007fb6cc016038 R14: 00007fb6cc015fa0 R15: 00007ffcc4e83da8
[  653.704102][T13255]  </TASK>
[  654.123255][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.140126][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.187569][T13266] FAULT_INJECTION: forcing a failure.
[  654.187569][T13266] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  654.236086][T13266] CPU: 1 UID: 0 PID: 13266 Comm: syz.7.1919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  654.236116][T13266] Tainted: [L]=SOFTLOCKUP
[  654.236122][T13266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  654.236132][T13266] Call Trace:
[  654.236138][T13266]  <TASK>
[  654.236145][T13266]  dump_stack_lvl+0x100/0x190
[  654.236177][T13266]  should_fail_ex.cold+0x5/0xa
[  654.236200][T13266]  _copy_from_iter+0x1f4/0x1690
[  654.236222][T13266]  ? __asan_memset+0x23/0x50
[  654.236244][T13266]  ? __pfx__copy_from_iter+0x10/0x10
[  654.236262][T13266]  ? __pfx___alloc_skb+0x10/0x10
[  654.236289][T13266]  netlink_sendmsg+0x808/0xda0
[  654.236316][T13266]  ? __pfx_netlink_sendmsg+0x10/0x10
[  654.236336][T13266]  ? __might_fault+0x20/0x140
[  654.236365][T13266]  ____sys_sendmsg+0xa54/0xc30
[  654.236392][T13266]  ? __pfx_____sys_sendmsg+0x10/0x10
[  654.236426][T13266]  ___sys_sendmsg+0x190/0x1e0
[  654.236452][T13266]  ? __pfx____sys_sendmsg+0x10/0x10
[  654.236507][T13266]  __sys_sendmsg+0x170/0x220
[  654.236533][T13266]  ? __pfx___sys_sendmsg+0x10/0x10
[  654.236568][T13266]  do_syscall_64+0x106/0xf80
[  654.236590][T13266]  ? clear_bhb_loop+0x40/0x90
[  654.236612][T13266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  654.236630][T13266] RIP: 0033:0x7f974ed9bf79
[  654.236642][T13266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  654.236656][T13266] RSP: 002b:00007f974fc9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  654.236673][T13266] RAX: ffffffffffffffda RBX: 00007f974f015fa0 RCX: 00007f974ed9bf79
[  654.236685][T13266] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  654.236695][T13266] RBP: 00007f974fc9e090 R08: 0000000000000000 R09: 0000000000000000
[  654.236705][T13266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  654.236715][T13266] R13: 00007f974f016038 R14: 00007f974f015fa0 R15: 00007fff95738e88
[  654.236737][T13266]  </TASK>
[  654.653334][ T5804] Bluetooth: hci5: SCO packet for unknown connection handle 0
[  655.190808][   T29] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  655.296710][ T5804] Bluetooth: hci6: unexpected event 0x04 length: 245 > 10
[  655.296739][ T5804] Bluetooth: unknown link type 48
[  655.309197][ T5804] Bluetooth: hci6: connection err: -111
[  655.388669][   T29] usb 1-1: unable to read config index 0 descriptor/start: -61
[  655.480156][   T29] usb 1-1: can't read configurations, error -61
[  655.486534][T10262] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  655.621508][   T29] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[  655.700881][T10262] usb 6-1: Using ep0 maxpacket: 8
[  655.714118][T10262] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  655.740957][T13309] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  655.759224][T10262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.806076][   T29] usb 1-1: unable to read config index 0 descriptor/start: -61
[  655.816939][T10262] pvrusb2: Hardware description: Terratec Grabster AV400
[  655.839722][T10262] pvrusb2: **********
[  655.844549][   T29] usb 1-1: can't read configurations, error -61
[  655.861925][T10262] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  655.883141][T10262] pvrusb2: Important functionality might not be entirely working.
[  655.898547][T10262] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  655.898569][   T29] usb usb1-port1: attempt power cycle
[  655.949137][T10262] pvrusb2: **********
[  655.997784][ T2335] pvrusb2: Invalid write control endpoint
[  656.100337][   T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  656.143881][ T2335] pvrusb2: Invalid write control endpoint
[  656.166549][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  656.183859][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  656.198350][T13295] FAULT_INJECTION: forcing a failure.
[  656.198350][T13295] name failslab, interval 1, probability 0, space 0, times 0
[  656.200912][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  656.300303][T13295] CPU: 1 UID: 0 PID: 13295 Comm: syz.5.1927 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.300334][T13295] Tainted: [L]=SOFTLOCKUP
[  656.300340][T13295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  656.300351][T13295] Call Trace:
[  656.300357][T13295]  <TASK>
[  656.300364][T13295]  dump_stack_lvl+0x100/0x190
[  656.300396][T13295]  should_fail_ex.cold+0x5/0xa
[  656.300425][T13295]  ? tomoyo_realpath_from_path+0xb6/0x690
[  656.300451][T13295]  should_failslab+0xc2/0x120
[  656.300477][T13295]  __kmalloc_noprof+0xe0/0x850
[  656.300504][T13295]  tomoyo_realpath_from_path+0xb6/0x690
[  656.300537][T13295]  tomoyo_path_number_perm+0x23c/0x580
[  656.300559][T13295]  ? tomoyo_path_number_perm+0x22e/0x580
[  656.300583][T13295]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  656.300631][T13295]  ? find_held_lock+0x2b/0x80
[  656.300652][T13295]  ? __fget_files+0x215/0x3d0
[  656.300677][T13295]  ? hook_file_ioctl_common+0x146/0x410
[  656.300701][T13295]  ? __fget_files+0x21f/0x3d0
[  656.300731][T13295]  security_file_ioctl+0xd3/0x230
[  656.300757][T13295]  __x64_sys_ioctl+0xb7/0x210
[  656.300782][T13295]  do_syscall_64+0x106/0xf80
[  656.300802][T13295]  ? clear_bhb_loop+0x40/0x90
[  656.300824][T13295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.300843][T13295] RIP: 0033:0x7f1211b9bf79
[  656.300858][T13295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.300875][T13295] RSP: 002b:00007f1212a27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  656.300893][T13295] RAX: ffffffffffffffda RBX: 00007f1211e15fa0 RCX: 00007f1211b9bf79
[  656.300904][T13295] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004
[  656.300915][T13295] RBP: 00007f1212a27090 R08: 0000000000000000 R09: 0000000000000000
[  656.300926][T13295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.300936][T13295] R13: 00007f1211e16038 R14: 00007f1211e15fa0 R15: 00007ffdaa5a6e48
[  656.300961][T13295]  </TASK>
[  656.300968][T13295] ERROR: Out of memory at tomoyo_realpath_from_path.
[  656.510762][   T29] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  656.518920][   T24] usb 7-1: Using ep0 maxpacket: 16
[  656.539702][ T2335] pvrusb2: Device being rendered inoperable
[  656.542237][   T29] usb 1-1: unable to read config index 0 descriptor/start: -61
[  656.555205][   T24] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  656.565899][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.582455][   T29] usb 1-1: can't read configurations, error -61
[  656.588756][T13295] pvrusb2: Attempted to execute control transfer when device not ok
[  656.602774][   T24] usb 7-1: Product: syz
[  656.610419][   T24] usb 7-1: Manufacturer: syz
[  656.624340][   T24] usb 7-1: SerialNumber: syz
[  656.635143][T10262] usb 6-1: USB disconnect, device number 38
[  656.650261][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  656.667923][   T24] usb 7-1: config 0 descriptor??
[  656.683142][   T24] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  656.705104][   T24] usb 7-1: Detected FT232H
[  656.714887][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  656.730248][   T29] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  656.735625][ T2335] pvrusb2: Attached sub-driver cx25840
[  656.753602][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  656.762369][   T29] usb 1-1: unable to read config index 0 descriptor/start: -61
[  656.764989][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  656.774894][   T29] usb 1-1: can't read configurations, error -61
[  656.792463][   T29] usb usb1-port1: unable to enumerate USB device
[  656.882976][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  656.891734][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  656.898972][   T24] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  656.909767][   T24] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  656.928752][   T24] usb 7-1: USB disconnect, device number 10
[  656.961336][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  656.976257][   T24] ftdi_sio 7-1:0.0: device disconnected
[  657.040200][   T29] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  657.189830][T13327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  657.290184][   T29] usb 5-1: Using ep0 maxpacket: 16
[  657.315199][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.376504][   T29] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  657.422334][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  657.443166][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  657.457463][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  657.471900][   T29] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  657.481072][   T29] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  657.489044][   T29] usb 5-1: Product: syz
[  657.493371][   T29] usb 5-1: SerialNumber: syz
[  657.499711][   T29] usb 5-1: config 0 descriptor??
[  657.507771][   T29] xbox_remote_probe: endpoint_in message size==0?
[  657.820142][T10262] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  657.944874][T13305] sch_fq: defrate 0 ignored.
[  657.967844][T12160] usb 5-1: USB disconnect, device number 67
[  658.064999][T10262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  658.133138][T10262] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  658.227572][T10262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  658.323856][T10262] usb 6-1: config 0 descriptor??
[  658.747097][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1937'.
[  658.897479][T10262] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor
[  658.960430][T10262] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0024/input/input39
[  659.082611][T10262] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  659.564937][   T24] usb 6-1: USB disconnect, device number 39
[  659.610163][T10262] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  659.782651][T10262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  659.797504][T10262] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  659.806878][T10262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  659.818994][T10262] usb 5-1: config 0 descriptor??
[  659.830814][T13349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  660.048568][T13357] netlink: 'syz.7.1941': attribute type 3 has an invalid length.
[  660.767800][T10262] elan 0003:04F3:0755.0025: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[  661.316048][T13368] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1939'.
[  661.396112][T13372] IPVS: length: 11 != 8
[  662.010249][T12160] usb 5-1: reset full-speed USB device number 68 using dummy_hcd
[  663.710163][   T29] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  663.731389][T10262] usb 5-1: USB disconnect, device number 68
[  663.988325][T13389] FAULT_INJECTION: forcing a failure.
[  663.988325][T13389] name failslab, interval 1, probability 0, space 0, times 0
[  664.001347][T13389] CPU: 1 UID: 0 PID: 13389 Comm: syz.4.1951 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  664.001375][T13389] Tainted: [L]=SOFTLOCKUP
[  664.001382][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  664.001393][T13389] Call Trace:
[  664.001399][T13389]  <TASK>
[  664.001406][T13389]  dump_stack_lvl+0x100/0x190
[  664.001438][T13389]  should_fail_ex.cold+0x5/0xa
[  664.001462][T13389]  should_failslab+0xc2/0x120
[  664.001488][T13389]  __kmalloc_cache_noprof+0x7a/0x6f0
[  664.001506][T13389]  ? copy_mount_options+0x55/0x190
[  664.001533][T13389]  copy_mount_options+0x55/0x190
[  664.001556][T13389]  __x64_sys_mount+0x1ab/0x310
[  664.001575][T13389]  ? __pfx___x64_sys_mount+0x10/0x10
[  664.001602][T13389]  do_syscall_64+0x106/0xf80
[  664.001623][T13389]  ? clear_bhb_loop+0x40/0x90
[  664.001645][T13389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.001663][T13389] RIP: 0033:0x7fd29499bf79
[  664.001680][T13389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  664.001697][T13389] RSP: 002b:00007fd2957ed028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  664.001715][T13389] RAX: ffffffffffffffda RBX: 00007fd294c16180 RCX: 00007fd29499bf79
[  664.001727][T13389] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  664.001738][T13389] RBP: 00007fd2957ed090 R08: 0000200000000240 R09: 0000000000000000
[  664.001749][T13389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  664.001759][T13389] R13: 00007fd294c16218 R14: 00007fd294c16180 R15: 00007ffc001fa3a8
[  664.001783][T13389]  </TASK>
[  664.217649][   T29] usb 1-1: Using ep0 maxpacket: 16
[  664.274667][   T29] usb 1-1: config 0 interface 0 altsetting 32 has an invalid descriptor for endpoint zero, skipping
[  664.294058][   T29] usb 1-1: config 0 interface 0 altsetting 32 has an endpoint descriptor with address 0xD7, changing to 0x87
[  664.308201][   T29] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  664.322463][   T29] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x87 has invalid wMaxPacketSize 0
[  664.332428][   T29] usb 1-1: config 0 interface 0 altsetting 32 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  664.346751][   T29] usb 1-1: config 0 interface 0 has no altsetting 0
[  664.365409][   T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  664.374743][   T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.385593][   T29] usb 1-1: Product: syz
[  664.389790][   T29] usb 1-1: Manufacturer: syz
[  664.434339][   T29] usb 1-1: SerialNumber: syz
[  664.475133][   T29] usb 1-1: config 0 descriptor??
[  664.501238][   T29] appledisplay 1-1:0.0: Submitting URB failed
[  664.508424][   T29] appledisplay 1-1:0.0: probe with driver appledisplay failed with error -5
[  665.910220][ T5804] Bluetooth: hci0: command 0x0406 tx timeout
[  665.910481][T13385] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  666.432430][   T29] usb 1-1: USB disconnect, device number 52
[  666.771561][T13385] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  666.787021][T13385] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  666.795679][T13385] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  666.818268][T13385] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  666.828152][T13385] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  666.846834][T13385] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  666.854845][T13385] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  666.869055][T13385] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  667.145705][   T29] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  667.473591][   T29] usb 5-1: Using ep0 maxpacket: 8
[  667.545870][   T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  667.556191][   T29] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  667.565349][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.587806][   T29] usb 5-1: config 0 descriptor??
[  667.993720][ T5804] Bluetooth: hci0: command 0x0406 tx timeout
[  668.303470][   T30] audit: type=1400 audit(1771134423.060:786): avc:  denied  { connect } for  pid=13471 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  668.358723][   T30] audit: type=1400 audit(1771134423.060:787): avc:  denied  { shutdown } for  pid=13471 comm="syz.6.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  668.581027][T13477] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1979'.
[  668.802661][   T30] audit: type=1400 audit(1771134423.560:788): avc:  denied  { setopt } for  pid=13485 comm="syz.5.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  668.871066][ T5127] Bluetooth: hci5: command 0x0406 tx timeout
[  668.877132][ T5127] Bluetooth: hci2: command 0x0406 tx timeout
[  668.883944][ T5804] Bluetooth: hci6: command 0x0c1a tx timeout
[  668.893813][   T29] usb 5-1: USB disconnect, device number 69
[  668.968822][T13492] team0: Device ipvlan1 failed to register rx_handler
[  670.155222][T13510] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1988'.
[  670.399620][T13513] loop8: detected capacity change from 0 to 7
[  670.413668][T13513] Dev loop8: unable to read RDB block 7
[  670.429430][T13513]  loop8: unable to read partition table
[  670.442412][T13513] loop8: partition table beyond EOD, truncated
[  670.458839][T13513] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  670.950771][ T5127] Bluetooth: hci2: command 0x0406 tx timeout
[  670.956804][ T5804] Bluetooth: hci6: command 0x0c1a tx timeout
[  670.962842][ T5127] Bluetooth: hci5: command 0x0406 tx timeout
[  671.026303][T13535] Invalid logical block size (7)
[  671.491763][   T30] audit: type=1400 audit(1771134426.180:789): avc:  denied  { read } for  pid=13537 comm="syz.6.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  672.262878][T13559] dummy0: entered promiscuous mode
[  672.319378][T13559] dummy0: left promiscuous mode
[  672.641613][   T30] audit: type=1400 audit(1771134427.390:790): avc:  denied  { append } for  pid=13544 comm="syz.0.2000" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  672.702897][   T30] audit: type=1400 audit(1771134427.410:791): avc:  denied  { map } for  pid=13544 comm="syz.0.2000" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  672.918446][   T30] audit: type=1400 audit(1771134427.410:792): avc:  denied  { execute } for  pid=13544 comm="syz.0.2000" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[  672.973993][T13570] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  673.089442][T13561] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2005'.
[  673.110346][ T5804] Bluetooth: hci6: command 0x0c1a tx timeout
[  673.120326][T13561] 0ªX¹¦À: renamed from caif0
[  673.129755][T13561] 0ªX¹¦À: entered allmulticast mode
[  673.143707][T13561] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  673.185306][T13578] pimreg: entered allmulticast mode
[  673.191753][T13578] pimreg: left allmulticast mode
[  674.046419][   T30] audit: type=1326 audit(1771134428.820:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13588 comm="syz.5.2015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1211b9bf79 code=0x0
[  674.119595][   T30] audit: type=1326 audit(1771134428.890:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716b9bf79 code=0x7ffc0000
[  674.163925][T13605] ptrace attach of "./syz-executor exec"[7988] was attempted by "./syz-executor exec"[13605]
[  674.429576][   T30] audit: type=1326 audit(1771134428.890:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716b9bf79 code=0x7ffc0000
[  674.459559][   T30] audit: type=1326 audit(1771134428.920:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fe716b9bf79 code=0x7ffc0000
[  674.505543][   T30] audit: type=1326 audit(1771134428.920:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716b9bf79 code=0x7ffc0000
[  674.630431][   T30] audit: type=1326 audit(1771134428.920:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13603 comm="syz.6.2017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe716b9bf79 code=0x7ffc0000
[  675.160353][T10262] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  675.330204][T10262] usb 1-1: Using ep0 maxpacket: 16
[  675.336712][T10262] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.347758][T10262] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  675.449671][T10262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.460489][T10262] usb 1-1: config 0 descriptor??
[  675.518952][T13631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2025'.
[  675.799324][   T30] audit: type=1400 audit(1771134430.570:799): avc:  denied  { read write } for  pid=13630 comm="syz.6.2025" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  675.827278][   T30] audit: type=1400 audit(1771134430.570:800): avc:  denied  { open } for  pid=13630 comm="syz.6.2025" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  675.873868][T10262] usbhid 1-1:0.0: can't add hid device: -71
[  675.887629][T10262] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  675.903374][T10262] usb 1-1: USB disconnect, device number 53
[  676.509261][T13651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2030'.
[  676.566140][T13649] kernel profiling enabled (shift: 63)
[  676.572810][T13649] profiling shift: 63 too large
[  677.410273][   T30] audit: type=1400 audit(1771134432.180:801): avc:  denied  { ioctl } for  pid=13660 comm="syz.5.2034" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  677.466643][T13667] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2034'.
[  678.479379][T13696] random: crng reseeded on system resumption
[  678.657670][   T30] audit: type=1400 audit(1771134433.420:802): avc:  denied  { read } for  pid=13704 comm="syz.0.2044" path="socket:[52324]" dev="sockfs" ino=52324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  678.871716][T13713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13713 comm=syz.0.2045
[  679.094331][T13716] syz_tun: entered allmulticast mode
[  679.144691][T13716] dvmrp6: entered allmulticast mode
[  680.154122][ T1294] ieee802154 phy0 wpan0: encryption failed: -22
[  680.161912][ T1294] ieee802154 phy1 wpan1: encryption failed: -22
[  680.300658][T13749] openvswitch: netlink: IP tunnel dst address not specified
[  680.486262][T13749] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  680.823832][T13764] C: renamed from team_slave_0 (while UP)
[  680.831179][T13764] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2062'.
[  681.535235][T13765] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2054'.
[  681.570423][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2054'.
[  681.720588][T12160] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  681.920136][T12160] usb 7-1: Using ep0 maxpacket: 16
[  681.927019][T12160] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  681.939962][T12160] usb 7-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  681.949086][T12160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.957206][T12160] usb 7-1: Product: syz
[  681.961366][T12160] usb 7-1: Manufacturer: syz
[  681.966082][T12160] usb 7-1: SerialNumber: syz
[  681.973037][T12160] usb 7-1: config 0 descriptor??
[  681.980873][T12160] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  681.987098][T12160] gspca_stv06xx: st6422 sensor detected
[  682.452203][T12160] STV06xx 7-1:0.0: probe with driver STV06xx failed with error -71
[  682.466368][T12160] usb 7-1: USB disconnect, device number 11
[  682.739273][T10262] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  682.921329][T10262] usb 6-1: config 1 has an invalid interface number: 148 but max is 0
[  682.929665][T10262] usb 6-1: config 1 has no interface number 0
[  682.936273][T10262] usb 6-1: config 1 interface 148 has no altsetting 0
[  682.954080][T10262] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a7a, bcdDevice=b3.5e
[  682.964003][T10262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.174503][T13814] netlink: 'syz.6.2082': attribute type 3 has an invalid length.
[  683.197729][T10262] usb 6-1: string descriptor 0 read error: -71
[  683.222775][T10262] usb 6-1: USB disconnect, device number 40
[  683.347617][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  683.347633][   T30] audit: type=1400 audit(1771134438.120:843): avc:  denied  { append } for  pid=13821 comm="syz.7.2085" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  683.352927][ T9951] block nbd3: Possible stuck request ffff888028218000: control (read@0,1024B). Runtime 270 seconds
[  683.389015][ T9951] block nbd3: Possible stuck request ffff888028218200: control (read@1024,1024B). Runtime 270 seconds
[  683.400032][ T9951] block nbd3: Possible stuck request ffff888028218400: control (read@2048,1024B). Runtime 270 seconds
[  683.411135][ T9951] block nbd3: Possible stuck request ffff888028218600: control (read@3072,1024B). Runtime 270 seconds
[  683.764268][T13834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2089'.
[  683.839104][   T30] audit: type=1400 audit(1771134438.530:844): avc:  denied  { getopt } for  pid=13825 comm="syz.7.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  684.164806][T13847] input: syz0 as /devices/virtual/input/input41
[  684.867454][ T5870] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  685.001869][   T30] audit: type=1400 audit(1771134439.760:845): avc:  denied  { execute } for  pid=13857 comm="syz.4.2100" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=51974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1
[  685.280896][ T5870] usb 1-1: Using ep0 maxpacket: 16
[  685.294742][ T5870] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  685.305038][ T5870] usb 1-1: config 0 has no interfaces?
[  685.326145][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  685.336076][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.344617][ T5870] usb 1-1: Product: syz
[  685.348860][ T5870] usb 1-1: Manufacturer: syz
[  685.359158][ T5870] usb 1-1: SerialNumber: syz
[  685.370728][ T5870] usb 1-1: config 0 descriptor??
[  685.579506][T13876] usb 1-1: USB disconnect, device number 54
[  685.671596][T13879] netlink: 'syz.7.2103': attribute type 6 has an invalid length.
[  685.681041][T13879] netlink: 'syz.7.2103': attribute type 6 has an invalid length.
[  686.539317][T13895] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2109'.
[  686.548426][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2109'.
[  687.206348][T13909] openvswitch: netlink: IP tunnel dst address not specified
[  687.221714][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'.
[  687.258361][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'.
[  687.830637][   T31] INFO: task syz.3.1506:11774 blocked for more than 144 seconds.
[  687.850442][   T31]       Tainted: G             L      syzkaller #0
[  687.905401][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.087579][   T31] task:syz.3.1506      state:D stack:26424 pid:11774 tgid:11769 ppid:5801   task_flags:0x400140 flags:0x00080002
[  688.100376][   T31] Call Trace:
[  688.125651][   T31]  <TASK>
[  688.226074][   T30] audit: type=1326 audit(1771134443.000:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.352933][   T31]  __schedule+0xfee/0x60e0
[  688.357450][   T30] audit: type=1326 audit(1771134443.040:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.357897][   T31]  ? __lock_acquire+0x4a5/0x2630
[  688.413473][   T31]  ? __pfx___schedule+0x10/0x10
[  688.418522][   T31]  ? find_held_lock+0x2b/0x80
[  688.423410][   T31]  ? schedule+0x2bf/0x390
[  688.428843][   T31]  schedule+0xdd/0x390
[  688.433246][   T31]  schedule_preempt_disabled+0x13/0x30
[  688.462310][   T31]  __mutex_lock+0xc9a/0x1b90
[  688.476517][   T30] audit: type=1326 audit(1771134443.040:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.559600][   T31]  ? bdev_open+0xa2/0xe40
[  688.565623][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  688.572575][   T31]  ? bd_prepare_to_claim+0x1e0/0x280
[  688.579358][   T31]  ? __pfx_bd_prepare_to_claim+0x10/0x10
[  688.585313][   T30] audit: type=1326 audit(1771134443.050:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.674990][   T31]  ? file_init_path+0x48e/0x670
[  688.683024][   T30] audit: type=1326 audit(1771134443.050:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.683051][   T31]  ? bdev_open+0xa2/0xe40
[  688.736370][   T31]  bdev_open+0xa2/0xe40
[  688.736413][   T30] audit: type=1326 audit(1771134443.060:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.771938][   T31]  ? iput+0x3a/0x40
[  688.776281][   T31]  bdev_file_open_by_dev+0x179/0x210
[  688.783166][   T31]  setup_bdev_super+0x385/0x730
[  688.788015][   T31]  get_tree_bdev_flags+0x363/0x620
[  688.793213][   T31]  ? __pfx_qnx4_fill_super+0x10/0x10
[  688.800120][   T31]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  688.805766][   T31]  ? cap_capable+0x107/0x460
[  688.810358][   T31]  ? bpf_lsm_capable+0x9/0x10
[  688.816030][   T31]  ? security_capable+0x80/0x260
[  688.821093][   T31]  vfs_get_tree+0x92/0x320
[  688.825506][   T31]  path_mount+0x7d0/0x23d0
[  688.830686][   T31]  ? __pfx_path_mount+0x10/0x10
[  688.836893][   T31]  ? lockdep_hardirqs_on+0x78/0x100
[  688.842162][   T31]  ? putname+0xb1/0x110
[  688.846295][   T31]  ? kmem_cache_free+0x124/0x6a0
[  688.851260][   T31]  ? __x64_sys_mount+0x293/0x310
[  688.856173][   T31]  __x64_sys_mount+0x293/0x310
[  688.861795][   T31]  ? __pfx___x64_sys_mount+0x10/0x10
[  688.867081][   T31]  ? kcov_ioctl+0x16a/0x720
[  688.871770][   T31]  do_syscall_64+0x106/0xf80
[  688.876339][   T31]  ? clear_bhb_loop+0x40/0x90
[  688.881130][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.887010][   T31] RIP: 0033:0x7fb25d79bf79
[  688.894393][   T31] RSP: 002b:00007fb25e680028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  688.903563][   T31] RAX: ffffffffffffffda RBX: 00007fb25da16180 RCX: 00007fb25d79bf79
[  688.911594][   T31] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080
[  688.919543][   T31] RBP: 00007fb25d8327e0 R08: 0000000000000000 R09: 0000000000000000
[  688.927796][   T31] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000
[  688.939290][   T31] R13: 00007fb25da16218 R14: 00007fb25da16180 R15: 00007fffb7b32af8
[  688.944637][   T30] audit: type=1326 audit(1771134443.060:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.970891][   T30] audit: type=1326 audit(1771134443.060:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  688.972062][   T31]  </TASK>
[  689.033859][   T31] 
[  689.033859][   T31] Showing all locks held in the system:
[  689.050124][   T31] 1 lock held by khungtaskd/31:
[  689.054979][   T31]  #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[  689.062203][   T30] audit: type=1326 audit(1771134443.060:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  689.127625][   T31] 2 locks held by getty/5562:
[  689.128737][   T30] audit: type=1326 audit(1771134443.060:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  689.133667][   T31]  #0: ffff888038c890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  689.166922][   T30] audit: type=1326 audit(1771134443.060:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13923 comm="syz.0.2118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6cbd9bf79 code=0x7ffc0000
[  689.177129][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500
[  689.217268][   T31] 3 locks held by kworker/0:5/5871:
[  689.222491][   T31]  #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920
[  689.232994][   T31]  #1: ffffc900043afd08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920
[  689.242515][   T31]  #2: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[  689.252617][   T31] 1 lock held by udevd/5953:
[  689.257189][   T31]  #0: ffff888028129358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40
[  689.266500][   T31] 2 locks held by syz.3.1506/11774:
[  689.272200][   T31]  #0: ffff8880277e40e0 (&type->s_umount_key#90/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20
[  689.282350][   T31]  #1: ffff888028129358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40
[  689.291627][   T31] 
[  689.294040][   T31] =============================================
[  689.294040][   T31] 
[  689.302450][   T31] NMI backtrace for cpu 0
[  689.302467][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  689.302489][   T31] Tainted: [L]=SOFTLOCKUP
[  689.302494][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  689.302504][   T31] Call Trace:
[  689.302510][   T31]  <TASK>
[  689.302517][   T31]  dump_stack_lvl+0x100/0x190
[  689.302546][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[  689.302564][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  689.302591][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[  689.302621][   T31]  sys_info+0x141/0x190
[  689.302645][   T31]  watchdog+0xd25/0x1050
[  689.302674][   T31]  ? __pfx_watchdog+0x10/0x10
[  689.302697][   T31]  ? __kthread_parkme+0x18c/0x230
[  689.302724][   T31]  ? kthread+0x13a/0x450
[  689.302738][   T31]  ? __pfx_watchdog+0x10/0x10
[  689.302758][   T31]  kthread+0x370/0x450
[  689.302773][   T31]  ? __pfx_kthread+0x10/0x10
[  689.302800][   T31]  ret_from_fork+0x754/0xd80
[  689.302819][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  689.302839][   T31]  ? __switch_to+0x7b4/0x1120
[  689.302861][   T31]  ? __pfx_kthread+0x10/0x10
[  689.302890][   T31]  ret_from_fork_asm+0x1a/0x30
[  689.302922][   T31]  </TASK>
[  689.302929][   T31] Sending NMI from CPU 0 to CPUs 1:
[  689.427604][    C1] NMI backtrace for cpu 1
[  689.427620][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  689.427639][    C1] Tainted: [L]=SOFTLOCKUP
[  689.427644][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  689.427652][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  689.427673][    C1] Code: a8 83 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3c 1d 00 fb f4 <e9> bc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[  689.427686][    C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246
[  689.427698][    C1] RAX: 00000000034ba3d7 RBX: ffff88801e6aa480 RCX: ffffffff8b8e4c75
[  689.427707][    C1] RDX: 0000000000000000 RSI: ffffffff8de6ce9d RDI: ffffffff8c1adfa0
[  689.427716][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795
[  689.427725][    C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd5490
[  689.427734][    C1] R13: 0000000000000001 R14: ffffffff90d92f10 R15: 0000000000000000
[  689.427743][    C1] FS:  0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000
[  689.427757][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  689.427766][    C1] CR2: 0000200000404030 CR3: 000000007c50e000 CR4: 00000000003526f0
[  689.427775][    C1] Call Trace:
[  689.427780][    C1]  <TASK>
[  689.427790][    C1]  default_idle+0x9/0x10
[  689.427806][    C1]  default_idle_call+0x6c/0xb0
[  689.427826][    C1]  do_idle+0x35b/0x4b0
[  689.427844][    C1]  ? __pfx_do_idle+0x10/0x10
[  689.427861][    C1]  cpu_startup_entry+0x4f/0x60
[  689.427877][    C1]  start_secondary+0x21d/0x2d0
[  689.427897][    C1]  ? __pfx_start_secondary+0x10/0x10
[  689.427917][    C1]  common_startup_64+0x13e/0x148
[  689.427938][    C1]  </TASK>
[  689.598868][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  689.605700][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  689.616344][   T31] Tainted: [L]=SOFTLOCKUP
[  689.620651][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  689.630679][   T31] Call Trace:
[  689.633932][   T31]  <TASK>
[  689.636837][   T31]  dump_stack_lvl+0x100/0x190
[  689.641494][   T31]  vpanic+0x552/0x970
[  689.645447][   T31]  ? __pfx_vpanic+0x10/0x10
[  689.649924][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[  689.656063][   T31]  panic+0xd1/0xe0
[  689.659776][   T31]  ? __pfx_panic+0x10/0x10
[  689.664168][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[  689.670299][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[  689.676444][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[  689.682573][   T31]  ? watchdog.cold+0x198/0x1ca
[  689.687310][   T31]  ? watchdog+0xd35/0x1050
[  689.691701][   T31]  watchdog.cold+0x1a9/0x1ca
[  689.696276][   T31]  ? __pfx_watchdog+0x10/0x10
[  689.700937][   T31]  ? __kthread_parkme+0x18c/0x230
[  689.705963][   T31]  ? kthread+0x13a/0x450
[  689.710184][   T31]  ? __pfx_watchdog+0x10/0x10
[  689.714841][   T31]  kthread+0x370/0x450
[  689.718884][   T31]  ? __pfx_kthread+0x10/0x10
[  689.723461][   T31]  ret_from_fork+0x754/0xd80
[  689.728029][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  689.733122][   T31]  ? __switch_to+0x7b4/0x1120
[  689.737779][   T31]  ? __pfx_kthread+0x10/0x10
[  689.742355][   T31]  ret_from_fork_asm+0x1a/0x30
[  689.747109][   T31]  </TASK>
[  689.750379][   T31] Kernel Offset: disabled
[  689.754678][   T31] Rebooting in 86400 seconds..