last executing test programs:

14m44.02784395s ago: executing program 32 (id=132):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/irq/default_smp_affinity\x00', 0x1, 0x0)
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x80, 0x0, 0x6}}, 0x14)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000100)=0x7fffffff, 0x4)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x5, 0x558, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000e40], 0x0, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x3, 0x7, 0x8914, 'vlan0\x00', 'veth0_to_team\x00', 'ip6gre0\x00', 'dvmrp0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff], @link_local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xe0, 0xe0, 0x118, [@stp={{'stp\x00', 0x0, 0x48}, {{0xe5, {0x0, 0xc5, 0x55, @multicast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x3ff, 0x40, 0x6, 0x0, @remote, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x313, 0x6, 0x7, 0x6, 0xf53, 0xfb40, 0xff, 0x5}, 0x8, 0x5c3}}}], [], @common=@dnat={'dnat\x00', 0x10, {{@random="f93deafad70a", 0xfffffffc}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x2, [{0x9, 0x0, 0x6004, 'pimreg0\x00', 'veth1_virt_wifi\x00', '\x00', 'team0\x00', @random="46aafcc3cd06", [0x0, 0x0, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xc0, [], [], @common=@log={'log\x00', 0x28, {{0xc4, "0eda5d467cde600e4b09dcbb068dfecb4c27ea8d6481ec1680a6cb53e5c4", 0xb}}}}, {0x5, 0x8, 0x4305, 'veth0_to_batadv\x00', 'bridge_slave_1\x00', 'wlan1\x00', 'pimreg\x00', @multicast, [0x0, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xe, 'system_u:object_r:logrotate_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x3, 0x1, 0xc, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', 'veth0\x00', 'veth0\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}}, {0x9, 0x21, 0x16, 'pimreg1\x00', 'batadv_slave_0\x00', 'virt_wifi0\x00', 'ip6erspan0\x00', @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @remote, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 0xffffffffffffffff}}}}]}]}, 0x5d0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, 0x0)
ioctl$DM_DEV_SUSPEND(r3, 0xc138fd06, &(0x7f0000000ac0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000c40), 0xffffffffffffffff)
r4 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="01002abd7000ffdbdf25050000000c0099000000000030000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000e80)={0x1f, 0xffff, 0x3}, 0x6)
write(r5, 0x0, 0x0)
write(r5, &(0x7f0000000ec0)="540000001200014000"/24, 0x18)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000f00), 0x2)
r7 = memfd_create(&(0x7f0000000f40)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\x00\x00\x00\x00/\x98|\x84\"xMW\x8d\xceM\x94j`23fP}\xf5/\x8e\x909`\xbd`\xf6(bg\x10\x00U\xf9!\x1b\x8b\x1b\xef\xfeZ9\xcd[\x9emA\xb6\xfbm&\xa9\x06!\xe5-\xa1\xddx\xf4z\xf4\xcc\xef\r\xae\xa3\x88\x1c+\xf9\xfe\xb8Sx\xfa\x83Ab\xee\xdd\x81r\x9ef\x17\x17\xd6\xff\al\x80\xa9Y\x1f;\v\xebJ+\x03\xd97\x16M\xef\xfcm\xe8*\x81_h\x03\x88\x17E\xfe\xc3F\xf3\x00@WR\xcf', 0x2)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000001000)={r7, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000001040)=0x7)
socket$kcm(0x29, 0x7, 0x0)
r9 = syz_open_dev$evdev(&(0x7f0000001080), 0x0, 0x0)
syz_usb_disconnect(r9)

13m26.702401183s ago: executing program 33 (id=517):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x12b001)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='ip6_vti0\x00', 0x10)
sendto$inet(r1, 0x0, 0x0, 0x48000, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000080)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "0d0767fcf850456f2290e729cf77f1", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "850f3d04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]})
socket$inet6(0xa, 0x80002, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xc, 0x6, 0xe30, 0x7ffe, "c2a0da871813beebb98f6cd3bde50363", 0x0, 0x8, 0x9, 0x42, 0x0, 0x4, 0xfc})

9m38.385787734s ago: executing program 5 (id=1363):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000180))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)
shutdown(r3, 0x1)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20800, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0xac1)
syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
ioctl$TCSBRKP(r4, 0x5425, 0x0)
write$tun(r0, &(0x7f0000000200)={@void, @void, @x25={0x2, 0x8, 0x13, "b9b7a6c0f3bfeb42eba68a97409e20bb05aebcb9517e19b7244a28ae15cef338b3d15659a5ed84b7dc5add15e6c71dadef3111b6229b5aa9f7a0ff3662f081c361e037ac"}}, 0x47)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x8008af26, &(0x7f0000000180)) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c044}, 0x4000) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async)
shutdown(r3, 0x1) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async)
sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) (async)
connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20800, 0x0) (async)
ioctl$TCSBRKP(r4, 0x5425, 0xac1) (async)
syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) (async)
ioctl$TCSBRKP(r4, 0x5425, 0x0) (async)
write$tun(r0, &(0x7f0000000200)={@void, @void, @x25={0x2, 0x8, 0x13, "b9b7a6c0f3bfeb42eba68a97409e20bb05aebcb9517e19b7244a28ae15cef338b3d15659a5ed84b7dc5add15e6c71dadef3111b6229b5aa9f7a0ff3662f081c361e037ac"}}, 0x47) (async)

9m37.277271699s ago: executing program 5 (id=1365):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x68, 0x9, 0x6, 0x201, 0x0, 0xf9ef, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}]}]}, 0x68}}, 0x0)

9m37.069024945s ago: executing program 5 (id=1366):
r0 = syz_open_dev$mtd(&(0x7f0000000140), 0x46, 0x1)
ioctl$OTPSELECT(r0, 0x80044d0d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000005c0)={0x0, 0x300, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4)

9m36.721822955s ago: executing program 5 (id=1367):
r0 = syz_open_dev$vbi(&(0x7f0000000240), 0x3, 0x2)
ppoll(&(0x7f0000000280)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000002c0)=0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a104000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x20044094)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000180)=""/97, &(0x7f0000000200)=0x61)
sendmsg$nl_generic(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000)

9m36.483183565s ago: executing program 5 (id=1369):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
r2 = socket(0x6, 0x1, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x9)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
writev(r1, &(0x7f0000000680)=[{&(0x7f0000000180)="1b7f385603321d26f484b2d5e3e8c3fd2d304fce0b0affd0fb6c5507c09540e17020aaa1cd197eaa034930c6b794dc837bbaf96a36f24817359b6367b5a2d1a840d8e58fdf5764ff53463cb462e0fe551c1f65bb6bf1a163760756da7e288136fa19f1427836b0ceb617a0d4fa5335843dfd8c1d7f137eefa1a26051483ea8cf12338551346504cb382048c74ffdc6cab416e1e3e3569444fd137359e1e17356019cceebfac5b5210ca375bad6402f83e8b3159260e20c93288f67dc25946df789f11485ff82f42fbdaf89b73668a7e7", 0xd0}, {&(0x7f0000000280)="535dcf0d61c0d068a6fa2cc5ec9d8fbbe9ab697cecc247d791c7357d578493f83955e1f67140fb60a0b4e0e02b6dc25e68698dd4b6860363f2fe7039bf8d377bbcca9668791cc389eb1777cda67dcc1a2e3a10f81c595cb2b9f6e75ab8f58688a84c305c2896b56a1dd4e7c8407a1390225712845beaf49ac00016da3a2f8108cf74cb3057c3493d33fa04f5dc", 0x8d}, {&(0x7f0000000340)="47f69bb4d95144efaaabdbdf076941b3be3f4b448090534b708620c77e10c278633da938e80b4452caa3c640c2973d30f9b21171d0526b1e5442fca946ea4a78db2d4695de65c59adfd7dde71b97e9280d0dd8939877d933eea8bd5f8783b674d33c4df7589c1548775cf12f64e8848a365b026403e447a59b25eb003a8bc1305c74bbc38204007e640736a1bf2a1b1f1fda8aed0288f71de1090c37744c020f97d88963f08fb43056c8708642f1afd9ba0ce43648092ed980b38e3129d104d3dd299bee5d7add0c780f1e2ecd19aedbc0112b962f0a3fe0fc9be8b888c696fa8c6838f782d8e64507ee5e29dd9637d644f3ad613cdc3e", 0xf7}, {&(0x7f0000000440)="5ee7f5ba68d70b0192f125db751e211cbe02230cd1ab0351f56caf46a74bb040ecbd4f2713e280d7bef548c9c019020462a342390a2caf5685c16e846fab076c746e809b7dcd0f501711c4178f2080344152c5655006e4cccfaa0ce5bc9f18075814e234882ba144bea74aaf18ad2d41dd429c840fd4f4e7bb3d98fafd6790b504c041986dd5bf9c60cd9c242d0ff498ecb6b4506da514b20800c096775a5f467b8da35bf90719e590acf9a5fdb2f421388f202762956f79e41c8b7ff79055", 0xbf}, {&(0x7f0000000500)="10340635d83c0114f4f792e510e85a76558b5e5830ac36fdaf2de38307a4d40bcb5cd597862a8d175876e1d1a83218403d1cbfcf4f6e5ea9387d3887fae7cf8a96a0f49f3fd2c763e83f40306a0af81e752c3624a2a2690c0de865613698e9657fef27ffe5134912", 0x68}, {&(0x7f0000000580)="6041979ba4b3d6afbc2eb033e78cfd33ddeeeacca31d55ca2c84c2dae1ab621e2fac1d47af9d01a44c42db816ed40e54c31a85291dd4a25d97fc8081a8fc50d5674bf4e75f7d23e8466aed883e379dfb88344e095c535ffd73119e20a349dd4cc70b56f6c7587fc86788d00d302008428152f14233a1ffc948d35a48e766853157323d2e97248c840615f2782823d2d8ec5bb280c012d69c35d2bd713cb9a1c76eed46199a5094bf3c90daa105f83b9d2e0bfbe9950216bbbbccec6fb901afac488b3e459335e77cf47111178f9f4f94c2dbb46a8d8d3f2b56a7d9d24f39ecae8e4f6a6e117b4679afac24090f6c1619c0e3f93c22f07900", 0xf8}], 0x6)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = epoll_create1(0x0)
r5 = fcntl$dupfd(r2, 0x0, r3)
r6 = socket(0x11, 0xa, 0x5)
ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8954, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000700)={0x20000004})
epoll_pwait(r4, &(0x7f0000000740)=[{}], 0x1, 0xffff7f90, &(0x7f0000000780)={[0x401]}, 0x8)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0x6004, 0x1)
r7 = open(&(0x7f00000009c0)='.\x00', 0x80, 0x28)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000a00)=0x10)
link(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='./file1\x00')
write(r2, &(0x7f0000000100)="240000001e005f0214f6ffff2084e29fe364593c2352bc835dfffffff80700000000006da340aefb613c75fa3d7e9063f0df72300ea6e2f18583859c35d609774501f7f57d7b9e9e3481fa1e7334f527bca661c541165ba47ba87352a8d61cc090c0f012769b0ea07304c0ecc725af50909dd18a4115", 0x76)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='ext2\x00', 0x0, 0x0)
r8 = openat(r7, &(0x7f0000000880)='./file2\x00', 0x24002, 0x10)
write(r8, &(0x7f00000008c0)='ses', 0x3)
r9 = syz_open_dev$audion(&(0x7f0000000900), 0x3, 0x1)
write$P9_RVERSION(r9, &(0x7f0000000940)=ANY=[], 0x15)
read$eventfd(r8, &(0x7f00000000c0), 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x1c0)
mkdirat(r8, &(0x7f0000000b00)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./file2\x00', 0x207)

9m35.348154447s ago: executing program 5 (id=1374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x11, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

9m23.694927234s ago: executing program 34 (id=1361):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "b3babd1f00d50a06015466aad8dce5de"}, 0x11, 0x1)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x112)
symlinkat(&(0x7f0000000480)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000001480)='./file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000001500)='./file0\x00', 0x24)
chmod(&(0x7f0000001540)='./file0\x00', 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
write(r1, &(0x7f00000001c0)='-294967295 -000000\\00 0\n', 0x18)
setns(0xc9, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
accept(r1, &(0x7f0000000280)=@x25, &(0x7f0000000340)=0x80)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15)
write$cgroup_int(r6, &(0x7f0000000000)=0xffffffffffffffff, 0x14)

9m19.568268506s ago: executing program 35 (id=1374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x11, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

5m47.266178364s ago: executing program 3 (id=2180):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000a00)="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", 0x237}, {&(0x7f0000001fc0)="05437c98b91b1455046f57b5fc913814bd03000000104eaea9c9d01a7838d859007067c10aa7352abbdf98e93463f389358ee6391ac9f3d86ec2529cfbc6be33c7", 0x41}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000180)=<r1=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000006c0)={"71c0558074b4fa65830b7c8068668b76", r1, 0x0, {0x7fffffff, 0x4}, {0x7fffffffffffffff, 0x5}, 0xd, [0x78, 0xffffffffffffffff, 0x7, 0x7f, 0xa396, 0x400, 0x800, 0x4, 0x819, 0x56, 0x401, 0x6, 0x8, 0x3, 0x80000000000, 0x6]})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x19, 0x0, &(0x7f0000000480))
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x10000000)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000080)={0x200000000000001}, 0x8)
sendto$inet6(r3, 0x0, 0x0, 0x40048c4, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @mcast2, 0x38}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x7, &(0x7f0000000300)=[{0x1, 0x0, 0x9d, 0x1}, {0x1, 0x4, 0x5, 0x5}, {0x4, 0x8, 0xbc, 0x1000}, {0xb, 0x6, 0x80, 0xf}, {0x3, 0x0, 0x6, 0x2}, {0x2, 0x8, 0x3, 0x1}, {0x13, 0x76, 0x6}]})
sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0xffffffffffffff0d, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5m47.080397797s ago: executing program 3 (id=2182):
r0 = socket(0x1, 0x800, 0x6) (async)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f0000000040)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x70)
fremovexattr(r2, &(0x7f0000000140)=@known='system.posix_acl_default\x00') (async)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00001ba000/0x2000)=nil, 0x2000, 0x10) (async)
sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a000b0049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52)

5m46.997770797s ago: executing program 3 (id=2184):
r0 = openat$comedi(0xffffff9c, &(0x7f0000010880)='/dev/comedi1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000108c0)={'comedi_bond\x00', [0x3, 0x8, 0x7fffffff, 0x9, 0x9002f, 0x9, 0xed, 0x890, 0x3, 0xfffffffc, 0x4, 0x1, 0x1033, 0x1000008, 0x4c, 0x40000009, 0xfff7ffa6, 0x3ff, 0x1ff, 0x9ea, 0x3, 0xb, 0x9, 0x101, 0x1, 0x990e, 0x5, 0x18, 0x2, 0x2000006, 0x77fd]})

5m46.930847654s ago: executing program 3 (id=2185):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r2 = socket(0xa, 0x3, 0xc7)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000780)='./file0\x00')
mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0\x00', 0x0, 0x21d000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x2f, 0x10, 0x10, 0x4, 0x0, @loopback, @private1, 0x10, 0x7800, 0x8, 0x3}})
pivot_root(&(0x7f0000000840)='./file0/../file0/../file0\x00', &(0x7f0000000880)='./file0\x00')
r3 = syz_open_procfs(0x0, &(0x7f00000008c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x78})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa4, r1, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x800}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000000}, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r5, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8dc11, 0x0, 0x0, {<r6=>0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '0\x00'}}})
arch_prctl$ARCH_SET_GS(0x1001, 0x0)
ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x81e10, 0x0, 0x0, @by_dev={r6}, [@clone={0x0, 0x3c00, 0x0, 0x78, 'clone\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '7', ' 1 no_discard_passdown'}}]})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2684ecbc", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000500070002000000"], 0x34}}, 0x0)

5m46.636360779s ago: executing program 3 (id=2186):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x4001af84, &(0x7f0000000200))
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000100)='27', 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x15e)
memfd_create(&(0x7f0000000140)='-&:{-\xaa]{\x00', 0x2)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)

5m46.289236053s ago: executing program 3 (id=2190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010003000000000001010000000000001c0001"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

5m45.81491313s ago: executing program 36 (id=2190):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x2, 0x0)
write(r2, &(0x7f0000000240)='1', 0x1)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010003000000000001010000000000001c0001"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

5m19.343416914s ago: executing program 8 (id=2282):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010003000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) (fail_nth: 8)

5m18.979538108s ago: executing program 8 (id=2283):
r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "178988b8", {0x1, 0x2, 0x4, 0x9, 0x22}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="c96faa7a2d620000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

5m15.818398755s ago: executing program 8 (id=2289):
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x1, 0x141000)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/195, 0xc3}, {&(0x7f0000000880)=""/56, 0x38}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000980)=""/4091, 0xffb}], 0x6}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x3f, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x10100, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000001a40), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000001a80)={0xf0f03f, 0x6e})
sendmmsg$inet(r2, &(0x7f0000001980)=[{{&(0x7f00000019c0)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x11, 0x34, 0x6}}], 0x18}}], 0x1, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fedbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800030303030303000008005a80040003"], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000041000501010003000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)

5m15.484776266s ago: executing program 8 (id=2291):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0)
close(0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
sendfile(r1, r1, &(0x7f00000000c0)=0x3d, 0xfffffffffffff786)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x32f603, 0x0)
syz_ublk_setup_io_uring(0x21, &(0x7f0000000200)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5, 0x0, r2}, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000140))

5m15.209596446s ago: executing program 8 (id=2292):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x8)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys_sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000900)='./sys_sec\x00', &(0x7f0000000940)='securityfs\x00', 0x0, 0x0)
rmdir(&(0x7f0000000000)='./sys_sec/tomoyo/domain_policy\x00')
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = socket(0x848000000015, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, &(0x7f0000000100))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080), 0x4e)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @loopback}], 0x10)
openat(0xffffffffffffff9c, &(0x7f0000000980)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m15.022938316s ago: executing program 8 (id=2293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="b1", 0x1}], 0x1}}], 0x1, 0x4000000)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0xeec}, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={<r2=>0x0, 0xeec}, &(0x7f0000000300)=0x8)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24eb6d9edc69c50868626e6379c527dc828e56ac1337abb0334fa02774ae17aa8a51c41a73335b016ba46bb1a32101fcab8a570d1713ff75c31c5605b25a7d0bc6f232c62876d52df766b5ccb52f4fbc1f20fde67707f0a853534b15781cc7a56eb8e42b0fdebbf892c4687895f9bf209ddf4b369203ab7b8170741dfd99b4e9800b91671da6dd0d3ecd4247d31694c3243e3d568f176621796e619e909a8b7a8b38a48bd27d1bb88783d1ef464f297a1cc0fd0a05a0dc331c95ccc21f5021e4986fca0c226abf728397bb0817efcff039fe42681e5e6e8d0323b815263290a5763f6c702fc01a282c0d879585d80732", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24eb6d9edc69c50868626e6379c527dc828e56ac1337abb0334fa02774ae17aa8a51c41a73335b016ba46bb1a32101fcab8a570d1713ff75c31c5605b25a7d0bc6f232c62876d52df766b5ccb52f4fbc1f20fde67707f0a853534b15781cc7a56eb8e42b0fdebbf892c4687895f9bf209ddf4b369203ab7b8170741dfd99b4e9800b91671da6dd0d3ecd4247d31694c3243e3d568f176621796e619e909a8b7a8b38a48bd27d1bb88783d1ef464f297a1cc0fd0a05a0dc331c95ccc21f5021e4986fca0c226abf728397bb0817efcff039fe42681e5e6e8d0323b815263290a5763f6c702fc01a282c0d879585d80732", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sg(&(0x7f0000000880), 0xa, 0x28102) (async)
r5 = syz_open_dev$sg(&(0x7f0000000880), 0xa, 0x28102)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x2205, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x24000810)
fcntl$dupfd(r1, 0x406, r5)
sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000780)={r2, 0x8, 0xe5, "f2ed2be47e33dc361a235e30eccf6ea71b9d8092627e6507c4570a8c82c80f474cde4c3e8563d2c616a8fed4d84d73433fce692c40aff0fac0e4205bb580bf5bd4daba901fc3f2cb0c7a60d1a69d42b14c3df86efc397bd9b42eeb3969a3a5225a3449f6025a1da4e20aa4f683116f9d4111aa3db6a5701c2601b056d3da57b74ef4acceffbe0cc4e07518e4e9519d38770e2d815e345fc036eb57767cc170e0b636ed5f1d7c3c772ea7a066641751974f017ecc5d1c43e5dede3877dde532e24f60bb50e084c9de7212ae2b7ee9112988919970711007d4443d27f65eb00bbea3607500c7"}, 0xed)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

5m13.815281289s ago: executing program 6 (id=2304):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x140, 0x0, 0x1}]})
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x200)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x8)
syz_usb_control_io(r3, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyACM0\x00', 0xc080, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./lower\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./mnt\x00', &(0x7f0000000480)='overlay\x00', 0x0, &(0x7f00000004c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
mount(0x0, &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='overlay\x00', 0x0, &(0x7f00000005c0)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
r6 = dup(0xffffffffffffffff)
r7 = socket$rds(0x15, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$rds(r7, 0x0, 0x0)
sendmsg$rds(r6, 0x0, 0x0)

5m12.089165637s ago: executing program 6 (id=2308):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)={0x40, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="000e75e6a0ee4670616701a3dca12a6f004d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

5m9.819855718s ago: executing program 6 (id=2315):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYBLOB="b746a0079f81833c439330942b7644622f18", @ANYRESOCT=0x0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x40)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x3, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004840)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
close_range(r3, r0, 0x2)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000004d40)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000002b40)={0x50, 0x0, r5, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
r6 = landlock_create_ruleset(&(0x7f0000000480)={0x120, 0xd, 0x1}, 0x30, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
landlock_restrict_self(r6, 0xe)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000004c0)={0x2, 0x0, @remote}, 0x3)
syz_fuse_handle_req(r4, &(0x7f0000002bc0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004c80)={0x20, 0x0, 0x3730, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r8, &(0x7f0000000400), 0x8)
setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, &(0x7f0000000440)=0x1, 0x4)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004cc0)='./file0\x00', 0xc5001, 0x186)
write$FUSE_IOCTL(r9, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x101142, 0xeaf9)
write(r3, &(0x7f0000000140)="4734c4", 0x3)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000edff00000000000400000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a32"], 0x68}}, 0x0)

5m6.761254892s ago: executing program 6 (id=2323):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1a48af61a797c4c3, 0x100)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x80)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x8})
r3 = open$dir(&(0x7f0000000280)='./file1\x00', 0x10483, 0x100)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockname(r7, 0x0, &(0x7f00000006c0))
bind$packet(r4, &(0x7f0000000600)={0x11, 0xc, r6, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000640)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x0)
write(r4, &(0x7f0000000680)="01", 0x1)
linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', r3, &(0x7f0000000140)='./file0/file1\x00', 0x0)
syz_usb_connect(0x0, 0xb6, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/2653], 0xa5d)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0500000900030000000000000000000000005e548c925c2591b4c05d9facc3b07bd6543c37fc3d395d8561e66be4861745fdb75834455612473ff031091f33b4c9456af26e9f9205b18fa9c6ca5be29f5c8622ed64d4e8c73387cd40739e9f0f503985f4f1b2bdd74aa178d928ca834683cb180132a52121275023babd3718777967f95f8a1af62aac82a72a95886cf6b247eff98df00fdb05bb660ef761f2b7a61c3e7509f6d388d7c7a44b6d9810803231228f5500ea1d8de4bdd20e0824c70e64a112231f2e604c96c2c355748874bf201d32925e3ebba2a06eae3090c2acac1b", @ANYRES32=r11, @ANYBLOB="0800050009000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)={0x34, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x34}}, 0x0)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r12, 0x623, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc040}, 0x0)

5m5.360703604s ago: executing program 6 (id=2330):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xd)
poll(&(0x7f0000000180)=[{r0}], 0x1, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
mount(0x0, &(0x7f0000000600)='./sys\x00', 0x0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="200f11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r2, &(0x7f0000000400)={0x24, &(0x7f0000000300)={0x0, 0x13, 0x23, {0x23, 0x1, "522e6d7c7c38c3a06ccd5526bdda157a8749bee1905d6f725654f38981acee6f9c"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000380)={0x0, 0x22, 0x17, {[@local=@item_012={0x2, 0x2, 0x7, "12d7"}, @local=@item_012={0x2, 0x2, 0x1, 'pJ'}, @main=@item_4={0x3, 0x0, 0xc, "d09e2670"}, @global=@item_4={0x3, 0x1, 0xb, "78119e21"}, @global=@item_012={0x1, 0x1, 0x2, 'o'}, @main=@item_4={0x3, 0x0, 0xc, "7b1bd224"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x65, 0x1, {0x22, 0x28b}}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x20, 0x1, 0xa2, "ec3801e08a20750186bb3d550fc5cd8fefe8248dc94db4c3ad15133389375545bf54757dd64731878ebc3881d39a200ba5970a060eaf014edd3921840e496d94abadbfd59ff702348e0b1753047e62701b042b0a112406cd2b2359fd7010f59ca88f932b39dc608fb2b005bc4857a1456fc443c809ce1f82560834977018a4b34e39329a4e8402776b4c733709f99bea8a027c9de17b8150996e9201acdbd8f5b257"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000580)={0x20, 0x1, 0x6a, "f1d745e936f6e1ffe4c1708159748ab835e783c665d9f01af6869fb479a8a065ae1b718a053535e6b8afbcbad1ac193c24f54f1b5e349038a7da249057fc26655eaefaed5201ddee01d48f1bf1b50450b6bea12a0f78666e92b048234f238d408a5b3fdca5c734ee61e7"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x25}})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0xb, 0x0, &(0x7f0000000040)={0xa, "93faec7a0c0d5de115f6f196aecbea121d22c74e8dd8510a8e75c37c4e76caedba"}})
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f00000000c0)={0x2500, {0x4, 0x3, 0x0, 0x10, 0x5a3}})
mkdirat(0xffffffffffffff9c, 0x0, 0x161)
r3 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000408106050000010000000109021900010100803209040000010a00000007058102"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000000840), 0x1c)
getsockopt$inet6_buf(r4, 0x29, 0x3d, 0x0, &(0x7f0000000880)=0x37)
mkdir(&(0x7f00000006c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000700)='./sys\x00', &(0x7f0000000780)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/class/tty/ttyS1/console\x00', 0x2, 0x0)
write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000800)={'team_slave_1', 0x32, 0x37}, 0xf)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

5m4.903554066s ago: executing program 6 (id=2331):
r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @multicast})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810000000800458c005800660000052f9078ac1414bbe00000020420880b000000030100080001f8f3b2ef242357bb6a220086dd080088be000000021af81900010000000000000e080022eb000000032f8070f4020000000000000000040a0d080065580000000110fbba330fed2caaa1354565a7bce8b7ea04a0e2b28f31e31c1a6fed32ecac0dff0e7cce1f7156acccba35394d478e984b46c566a7fb56dbd464587d94ce582421a7cb73174a95fea684986cc2ed2fda9909f002c3fbf3c8f88ecc1060128a686bd34b909a91dfa4338393e6839b84c82311850c629ae66f6f3c0130dd"], 0x6a)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x10002, 0x5)
write(r4, &(0x7f0000000100)='27', 0x2)
memfd_create(0x0, 0xe)
socket$alg(0x26, 0x5, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000800)='0', 0x1, 0xfffffffffffffffd)

5m3.495893322s ago: executing program 37 (id=2331):
r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000480)={0x1, [[0xffffffff, 0xffffffff, 0xffffffff, 0x4000001, 0xffffffff, 0xfffffffc, 0xffffffff, 0xffffffff], [0xfffffffb, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x2a5a, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x2})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @multicast})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb810000000800458c005800660000052f9078ac1414bbe00000020420880b000000030100080001f8f3b2ef242357bb6a220086dd080088be000000021af81900010000000000000e080022eb000000032f8070f4020000000000000000040a0d080065580000000110fbba330fed2caaa1354565a7bce8b7ea04a0e2b28f31e31c1a6fed32ecac0dff0e7cce1f7156acccba35394d478e984b46c566a7fb56dbd464587d94ce582421a7cb73174a95fea684986cc2ed2fda9909f002c3fbf3c8f88ecc1060128a686bd34b909a91dfa4338393e6839b84c82311850c629ae66f6f3c0130dd"], 0x6a)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x10002, 0x5)
write(r4, &(0x7f0000000100)='27', 0x2)
memfd_create(0x0, 0xe)
socket$alg(0x26, 0x5, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x200000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000800)='0', 0x1, 0xfffffffffffffffd)

4m59.257534536s ago: executing program 38 (id=2293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x801, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="b1", 0x1}], 0x1}}], 0x1, 0x4000000)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0xeec}, &(0x7f0000000300)=0x8) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={<r2=>0x0, 0xeec}, &(0x7f0000000300)=0x8)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24eb6d9edc69c50868626e6379c527dc828e56ac1337abb0334fa02774ae17aa8a51c41a73335b016ba46bb1a32101fcab8a570d1713ff75c31c5605b25a7d0bc6f232c62876d52df766b5ccb52f4fbc1f20fde67707f0a853534b15781cc7a56eb8e42b0fdebbf892c4687895f9bf209ddf4b369203ab7b8170741dfd99b4e9800b91671da6dd0d3ecd4247d31694c3243e3d568f176621796e619e909a8b7a8b38a48bd27d1bb88783d1ef464f297a1cc0fd0a05a0dc331c95ccc21f5021e4986fca0c226abf728397bb0817efcff039fe42681e5e6e8d0323b815263290a5763f6c702fc01a282c0d879585d80732", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24eb6d9edc69c50868626e6379c527dc828e56ac1337abb0334fa02774ae17aa8a51c41a73335b016ba46bb1a32101fcab8a570d1713ff75c31c5605b25a7d0bc6f232c62876d52df766b5ccb52f4fbc1f20fde67707f0a853534b15781cc7a56eb8e42b0fdebbf892c4687895f9bf209ddf4b369203ab7b8170741dfd99b4e9800b91671da6dd0d3ecd4247d31694c3243e3d568f176621796e619e909a8b7a8b38a48bd27d1bb88783d1ef464f297a1cc0fd0a05a0dc331c95ccc21f5021e4986fca0c226abf728397bb0817efcff039fe42681e5e6e8d0323b815263290a5763f6c702fc01a282c0d879585d80732", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sg(&(0x7f0000000880), 0xa, 0x28102) (async)
r5 = syz_open_dev$sg(&(0x7f0000000880), 0xa, 0x28102)
ioctl$SG_SET_FORCE_PACK_ID(r5, 0x2205, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x24000810)
fcntl$dupfd(r1, 0x406, r5)
sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c0012"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000780)={r2, 0x8, 0xe5, "f2ed2be47e33dc361a235e30eccf6ea71b9d8092627e6507c4570a8c82c80f474cde4c3e8563d2c616a8fed4d84d73433fce692c40aff0fac0e4205bb580bf5bd4daba901fc3f2cb0c7a60d1a69d42b14c3df86efc397bd9b42eeb3969a3a5225a3449f6025a1da4e20aa4f683116f9d4111aa3db6a5701c2601b056d3da57b74ef4acceffbe0cc4e07518e4e9519d38770e2d815e345fc036eb57767cc170e0b636ed5f1d7c3c772ea7a066641751974f017ecc5d1c43e5dede3877dde532e24f60bb50e084c9de7212ae2b7ee9112988919970711007d4443d27f65eb00bbea3607500c7"}, 0xed)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x48, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

1m51.944994583s ago: executing program 7 (id=3134):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
ioprio_set$pid(0x2, 0x0, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (fail_nth: 26)

1m51.515709469s ago: executing program 7 (id=3136):
r0 = fsopen(&(0x7f0000000280)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='source', &(0x7f00000003c0)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='source', &(0x7f0000000480)='%(,c\xbe\r\xcc:', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/failslab/task-filter\x00', 0x2, 0x0)
write(r1, &(0x7f00000005c0)='O', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write(r2, &(0x7f0000000140)='0', 0x1)
r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
futex_waitv(0x0, 0x0, 0x2000000, 0x0, 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
utimes(0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
mlock2(&(0x7f0000514000/0x3000)=nil, 0x3000, 0x9c60e3bbf432b41f)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x2, 0x0, 0x7, 0x2}, {0x34, 0x29, 0x0, 0xfffff00d}, {0x6, 0x80}]}, 0x10)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000300)={'8255\x00', [0x3f00, 0x5, 0x6, 0x7, 0x5, 0xfffffffe, 0x20000004, 0x4, 0xffe, 0x7fffffff, 0x6, 0x2, 0x404, 0x8, 0xfffc, 0x6, 0x5, 0x7ff, 0x100830, 0x8, 0x10000, 0x9, 0xc4f, 0x600, 0x2, 0x8001, 0x6f, 0x4000003, 0x0, 0x2, 0x106]})

1m51.263901567s ago: executing program 7 (id=3139):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x100000000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
close(r1)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001840)={0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff})
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e23, 0x4b7, @ipv4={'\x00', '\xff\xff', @remote}, 0xbb0}}, 0xdcf, 0x80, 0x9}, &(0x7f0000000200)=0x90)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000107000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000976000/0x3000)=nil, &(0x7f0000e90000/0x4000)=nil, &(0x7f0000853000/0x4000)=nil, &(0x7f0000280000/0x2000)=nil, &(0x7f00009c5000/0x3000)=nil, &(0x7f0000bda000/0x4000)=nil, &(0x7f0000e59000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00004ff000/0x3000)=nil, &(0x7f0000000380)="f7efb0a21327ae603046edd9d9932f5eef2bb630b60cd71aafb0a47a71520df39e1155909758a39b8e00aa84d14e76a999b84a1ade5e8e8a60ff711969c6a15e7221dc7a25cc9fe2bca5a604c3062b1c0ee6b8041651908ca558ae3be991ef4ec5799076cc440ee52c2e422c5cfd34eccb4bd2f98f8c60da2dc8e6cec6960bcaa2dc1c4ed10e483a", 0x88, r1}, 0x68)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6})
ioctl$sock_bt_hci(r4, 0x400448c9, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xf8, "07ac1264ee74920d40111ee59ff4b3b9bd8827aef8471cc23afa0ac31b519960ed4ab00d4532297ebe85d88f0ffdec7232d36d5110b94fc01d4ceb0a1e15a852fc3d0abb92ee402bf2c90f9f3c1ed122aef270879775f720397c0f43c9e624a07ba59be2da6c04cf4374596c8c6c4d3a94534944198a785b96b5b17ea1f728f2dfeaaea3f45d6ce4ee8f07ac1ec823c5e079064b8a3fff087b06637af9faf4dc78f2dea7e876481fa25690c4b3c999c85a749b0985573f1ef335a8b6a60404fe2738beaa83913817d693fee5ea19bd6d73bad6a30329db4a826f881c7d9f4502744338f24c4595b7cea41a1dda8e56e3f2333c0383c3295f"}, &(0x7f0000000340)=0x100)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001640))
fcntl$getown(r1, 0x9)
r5 = getpgrp(0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000001740)={0x0, 0xffff, 0x0, 0x0, r5})
fcntl$getownex(r1, 0x10, &(0x7f00000017c0))
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001800))
syz_clone3(&(0x7f00000016c0)={0x5da00980, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540), {0xa}, &(0x7f0000000580)=""/144, 0x90, &(0x7f0000000640)=""/4094, &(0x7f0000001840), 0x0, {r1}}, 0x58)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})

1m51.079598936s ago: executing program 7 (id=3142):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="e0fc45a7aa00378ef367dd7e1873b58944a28b077cb3392da5e47188f485515fa5f89af15a08a64d1eaab2f2f32d0778cdb2010f9a89aac5ec57", 0x3a}, {&(0x7f0000000140)="ccdaf17773ed17588fd7b0096df1741ed34966a7459b5d0ffeebf23e6e7e42e1e60eee59f10c67c5941566b167aa7e1077bd65a696a7296d72d9a32d08675aa412a39e3b", 0x44}, {&(0x7f00000002c0)="fbf3e2f0653d57ba9247faf449fceba9f80354eeffcae70cb69e5c379c01ce49a85db87f7fbfa3fadaea71d2949532aea3b82dcb3b277795df8acd78050bb66f37ce2b2e2e709081cb77a59e0333161c8c2e6e09e73cdb2d7539010e3feecc0bc5100ac2b8e2d77585c886aba0a2ded2f3ddf73f2a5238bebd9460228d0ec10916cd4bd5a211d8396a6ebc32a08e10d2aaa8624ea9508055388ea575e81097430cadeb58703aaf3b59403d0a3d72059c228361a077212de5d25bd8248d379b7e7ed38bbcd96599e52de374e872c0218747a58458a2ee194043bad6ec", 0xdc}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180}, 0x10) (async)
sendmsg(r0, &(0x7f0000000700)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x3, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="e0fc45a7aa00378ef367dd7e1873b58944a28b077cb3392da5e47188f485515fa5f89af15a08a64d1eaab2f2f32d0778cdb2010f9a89aac5ec57", 0x3a}, {&(0x7f0000000140)="ccdaf17773ed17588fd7b0096df1741ed34966a7459b5d0ffeebf23e6e7e42e1e60eee59f10c67c5941566b167aa7e1077bd65a696a7296d72d9a32d08675aa412a39e3b", 0x44}, {&(0x7f00000002c0)="fbf3e2f0653d57ba9247faf449fceba9f80354eeffcae70cb69e5c379c01ce49a85db87f7fbfa3fadaea71d2949532aea3b82dcb3b277795df8acd78050bb66f37ce2b2e2e709081cb77a59e0333161c8c2e6e09e73cdb2d7539010e3feecc0bc5100ac2b8e2d77585c886aba0a2ded2f3ddf73f2a5238bebd9460228d0ec10916cd4bd5a211d8396a6ebc32a08e10d2aaa8624ea9508055388ea575e81097430cadeb58703aaf3b59403d0a3d72059c228361a077212de5d25bd8248d379b7e7ed38bbcd96599e52de374e872c0218747a58458a2ee194043bad6ec", 0xdc}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x180}, 0x10)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001100000000", 0x39}], 0x1)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000780)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x3f8, 0x2, 0x70bd27, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x810)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='my_debugfs/asoc/components\x00', 0x0, 0x0)
read(r2, &(0x7f0000000b00), 0x400) (async)
read(r2, &(0x7f0000000b00), 0x400)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x88, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, '#/\\^'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x88}}, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='qnx4\x00', 0x200300, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', 0x1d7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000900)='./bus\x00', &(0x7f0000000940), 0x40, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000900)='./bus\x00', &(0x7f0000000940), 0x40, &(0x7f0000000980)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
umount2(&(0x7f00000009c0)='./file1/file0\x00', 0x0) (async)
umount2(&(0x7f00000009c0)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000a00)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x200)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000d7006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000500c58008000000"], 0x34}}, 0x0) (async)
sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000d7006700000008000300", @ANYRES32=r5, @ANYBLOB="0800c300741300000800c400010000000500c58008000000"], 0x34}}, 0x0)

1m50.96644263s ago: executing program 7 (id=3143):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_procfs$userns(0x0, &(0x7f00000001c0))
socket$key(0xf, 0x3, 0x2)
sendmmsg$unix(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [r1, r0, r0, r0]}}], 0x20, 0xc010}, 0xfd}], 0x1, 0x40000)

1m50.700132392s ago: executing program 7 (id=3144):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000280)="680000001800050602000000000000000a430000fe040001000000001400010120010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c000100123456789007000000000800200000000500090003000000", 0x68)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x14)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd})
read(r5, 0x0, 0x0)
write$nci(r0, 0x0, 0x14)

1m50.413743878s ago: executing program 39 (id=3144):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000280)="680000001800050602000000000000000a430000fe040001000000001400010120010db800a000000000000000000001080006000001000008000400010000000600150003000000200016800c000100123456789007000000000800200000000500090003000000", 0x68)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x14)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x802)
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x0, 0xd, 0x0, 0x5, 0xffffffff, 0xfffffffd})
read(r5, 0x0, 0x0)
write$nci(r0, 0x0, 0x14)

1m23.593668354s ago: executing program 9 (id=3254):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6)
ftruncate(r0, 0x200000)
pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be)
pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe)
pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00)
pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c)
pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23)
pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2)
ioctl$LOOP_SET_FD(r1, 0x4c00, r0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

1m23.484045241s ago: executing program 9 (id=3255):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x802, 0x165)
write(r0, &(0x7f0000000100)='100', 0x3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
listen(r2, 0x6)
sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x31, 0x9, 0x70bd25, 0x4000, {0x4}}, 0x14}, 0x3f, 0x0, 0x0, 0x1}, 0x4080040)

1m23.372882279s ago: executing program 9 (id=3256):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x50, r5, 0x1, 0x70bd25, 0x2, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0x24004080)
dup(r3)

1m23.317968548s ago: executing program 9 (id=3257):
syz_open_dev$vim2m(&(0x7f00000006c0), 0xfffffffffffffff7, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x8000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (fail_nth: 17)

1m23.162896391s ago: executing program 9 (id=3258):
r0 = syz_open_dev$vim2m(&(0x7f00000006c0), 0xfffffffffffffff7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000a00)={0x1, @pix={0x293, 0x4, 0x47524247, 0x5, 0x1001, 0x273, 0x2, 0x1, 0x1, 0x3, 0x0, 0x3}})
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x1, 0x0)
write(r2, &(0x7f0000000440)='force', 0x5)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
open(&(0x7f0000000300)='./file0\x00', 0x280400, 0x111)
ptrace(0x10, r3)
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000040)={&(0x7f0000000080)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000340)={&(0x7f0000000240)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad5610988", 0x90})
mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x8000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}})

1m22.845255405s ago: executing program 9 (id=3259):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x40840) (async)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_enable(r1, 0x0, 0xffffff01)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000940)={0x3, 0x2, 0x1, {0x7fff, 0x6, 0x8, 0x1a7}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f6, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x7800, 0x0, 0x0, 0x33d2, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x34, 0xd0, 0x0, 0x2, [0x0, 0x2, 0x6, 0x1, 0xa196, 0x7286, 0x7e69, 0x2, 0x9, 0x6, 0x45e, 0xdba]}, @timestamp={0x44, 0x10, 0x96, 0x0, 0x9, [0x0, 0x25, 0x3]}, @generic={0xc2, 0xa, "da102ab00a58e582"}]}}}}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000780)='fd/3\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045730, &(0x7f00000007c0)) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000900)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./security\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000009c0)='./security\x00', &(0x7f0000000a00)='securityfs\x00', 0x0, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./security/ima/policy\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a80)='measure #', 0xfffffffffffffdfb)
shutdown(r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0xa14000, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f0000000700)='./bus\x00') (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x18d042, 0x15)
read$FUSE(r7, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @empty}}, 0x5, 0x2, 0x0, 0x800000, 0xce02d5, 0x2}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe03, 0x5f1, 0x19, 0x2, 0x40, 0x6, 0x7}, &(0x7f0000000440)=0x9c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

1m7.601141267s ago: executing program 40 (id=3259):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x40840) (async)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$6lowpan_enable(r1, 0x0, 0xffffff01)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000940)={0x3, 0x2, 0x1, {0x7fff, 0x6, 0x8, 0x1a7}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}})
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f6, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000ac0)={'sit0\x00', 0x0, 0x7800, 0x0, 0x0, 0x33d2, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x34, 0xd0, 0x0, 0x2, [0x0, 0x2, 0x6, 0x1, 0xa196, 0x7286, 0x7e69, 0x2, 0x9, 0x6, 0x45e, 0xdba]}, @timestamp={0x44, 0x10, 0x96, 0x0, 0x9, [0x0, 0x25, 0x3]}, @generic={0xc2, 0xa, "da102ab00a58e582"}]}}}}})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000780)='fd/3\x00')
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x40045730, &(0x7f00000007c0)) (async)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000900)) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./security\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000009c0)='./security\x00', &(0x7f0000000a00)='securityfs\x00', 0x0, 0x0) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./security/ima/policy\x00', 0x1, 0x0)
write(r5, &(0x7f0000000a80)='measure #', 0xfffffffffffffdfb)
shutdown(r3, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0xa14000, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f0000000700)='./bus\x00') (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file2\x00', 0x18d042, 0x15)
read$FUSE(r7, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r6, @in={{0x2, 0x0, @empty}}, 0x5, 0x2, 0x0, 0x800000, 0xce02d5, 0x2}, 0x9c) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xe03, 0x5f1, 0x19, 0x2, 0x40, 0x6, 0x7}, &(0x7f0000000440)=0x9c) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0xbebc200}, 0x0)

9.852084264s ago: executing program 0 (id=3669):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x1, 0xffffffff000, 0x1, 0x6})

9.737149632s ago: executing program 0 (id=3671):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$apparmor_exec(r0, 0x0, 0x564)

9.712803225s ago: executing program 0 (id=3672):
rmdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='dyn'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/@cell/foo@sys\x00', 0x0, 0x0)
umount2(&(0x7f0000001040)='./mnt\x00', 0x8)
setns(r0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x38, 0xa, 0x0)
syz_usb_connect(0x0, 0x7a, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904010001010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0)
setsockopt(r2, 0x107, 0xaebc, &(0x7f0000001080)="00008634", 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r4=>0x0})
sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ll={0x11, 0x17, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000e00)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000e40)="f76e14895b4c948e303e1fe34234a0a92ecdc3beee7e2a71ef9514", 0x1b}], 0x3}, 0x20044000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000ec0)={0xe, 0x56544943, 0x1, @discrete={0xfffffff7, 0x2}})
sendmsg$sock(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@xdp={0x2c, 0x1, r4, 0x17}, 0x80, 0x0, 0x0, &(0x7f0000000280)}, 0x800)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000001140)={0x0, @adiantum, 0x0, @desc1})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x10001, 0x183)
ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f00000002c0)={0xb13, "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"})

6.616067502s ago: executing program 0 (id=3699):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000a40))
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008011)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect(r1, &(0x7f0000000000)=@isdn={0x22, 0x3, 0xfe, 0xf7, 0x4}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r3, &(0x7f0000004200)={'#! ', './proc/net/rpc/auth.rpcsec.context/channel', [{0x20, '/dev/ublk-control\x00'}, {}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '\x00'}, {0x20, 'tunl0\x00'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {}, {0x20, 'tunl0\x00'}], 0xa, "a72ca9dd4dd0c04972e976102babf2beff204a25581a8d458f97eb1355dce8ea1745a2e8855e1f13ee4d1f07c921acd1990e224e1f00f67ee0524004920958592a39a74eeaf5f9f79a6341320713e48fd1a427b199a70c270dae707209e3ae90ac66d66fe6ad278e6df4edaa11d3e168206540f68ea4884b4ad4393b0602307185b46beecb583e67363334d570097ed4c97a4ab511b3cb7c5ff0a669b295f55683dfb4431486e423718af17a7bfa0a29c6a99ec62c0846f091338704d7ab406b19219d75c6b7491ded175dc1d852dfbab9ce"}, 0x149)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000a80)=0x7, 0x2)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000004140))
mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x81000000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r5 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000600)=@new_dev={0x1, 0x4}}}, &(0x7f0000000640))
syz_open_dev$ublk_chdev(&(0x7f0000000680), r5, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
syz_usb_connect(0x2, 0x49b, &(0x7f0000004380)={{0x12, 0x1, 0x310, 0x7, 0x24, 0x6b, 0x40, 0x12d1, 0xb55d, 0xf4ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x489, 0x1, 0x6, 0x8, 0x0, 0x23, "", [{{0x9, 0x4, 0x79, 0x3, 0x10, 0xff, 0x5, 0x6a, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e0421962d5e4"}, {0x5, 0x24, 0x0, 0xcc07}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x6, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x7, 0x3, 0x5, 0x9, 0x90}]}], [{{0x9, 0x5, 0x8, 0x4, 0x20, 0x7c, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x5}]}}, {{0x9, 0x5, 0xc, 0x4, 0x410, 0x1, 0x3, 0xf1, [@generic={0xb1, 0x0, "821c0621fe882bf4d47338637b4b0e00423d746471fedd05e63ac9fd8a3eef15a50dbbacfd59018c5aeddd2c7373697b26f3de03c38ab2cf9780b722870030bc47d51eb013149fd5385c8ac5cb5f64118fbe2f85f48d7f26da1bbf9026b662126aae3bc220524974021ee546c960e63e5d6d2d057d6a1884282832e0cce97b282eba88d393df890168b4f0b62585f411380f8cf5c26cff414f2305a54c260db421b3f7f3d18fb16d724e37011fe18c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6b}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x6, 0x4, 0x5, [@generic={0x48, 0x5, "cb60f8d733254abbd83a39355dd75466e1aa5947387e6c5518c2f2446854c9493936fe377a2ac3ba2dd37d078ced4f08d07210c9e0695b0ba66c38ec558cd40bb7bf1982b2a9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xd255}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x8, 0x40, 0x9, [@generic={0x73, 0x4, "87a4b143cb498dc0c4c653c1ed7d5c4541b03de52665ab0929807c4c40f4e69446ef7bc7253cd8175137cbf876702bc4ae73eea995cd76d93dded061d70a98cfadf736f2ec151aea5570d0f175a6bf42982d692717f7979ffd0b7c62357f90576a1554bf5874a04bef13bbddf0f99ddc3c"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x4, 0x5, 0x2, [@generic={0xe2, 0x6, "5bb0b219c002f7d804f2c561c764ea17dcafb2c6aaa55d1bf2b48999ec275e42bfa3a30f4a894f8fb0a39f26701e1e6810d3dc74569d2b907a9fbd026f975630cc98b30c52f54a33a660d34c0c57ea8f018f5f3f124efb46f0c7098413ab63195097479af546526c6803515a6ab4c9e33d2f8c2f81f44451cea05c2b89f03495a4f38140adffbea2cb39fbb77be68431c6e3f2e111a9622b0dd63a1e205908af6aa2ba03409ca1030762792d93b3c4df30357eb47e89eedcb308bd62d0642e1108c6b11c9b0f77d597ab0d3536e6f8fb40d3d553bab8f1467f7e811ac55ab850"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa3, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x428, 0xff, 0x0, 0x1, [@generic={0x23, 0x22, "fd62e74576dd6d18d3dad5ef6efeb11fe0e68cff1c3d0a7701779af86817a7ac66"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x40, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x9, 0x0, 0xc}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x6}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf8, 0x6, 0x5, [@generic={0xf9, 0x9, "edd5b443de1510427f2474fb490a9d0e0b7af6d155cdfc993635e1b91ecae9ab4befaabdbd23c46ded61c766c6d1bb3e64fd71946c583d8b2e4f20994e3c101339a0fb8f25355eec03be556e816423d16f1e52e310715d6af7191b9fe6478787e84ef60949a548af7012292b0a20832e7036522e9d4c50cc29ad028dfacc2238c5782c1c99eff2a921d585522f49fa27d01e998c7f117225e876721f2e4e48ab091b41b55e51e1990e6baa849dd377f4394e21f5e1369e50a0dd87176ab4f6325a22d2b7227eecadd3d614bd3e9a02a104923ca350ffaa5d19d3484b2abf0f4644cddf94c1b6bcb4d6d27c2fa23ece5de5793ce9e3ac67"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x12, 0xb}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x2, 0x54, 0x5}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x0, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8e, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}]}}]}}]}}, &(0x7f0000004a40)={0xa, &(0x7f0000004840)={0xa, 0x6, 0x200, 0x8f, 0x7, 0x3, 0xff, 0x40}, 0x78, &(0x7f0000004880)={0x5, 0xf, 0x78, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x5, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x8, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x9, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x9, 0x88f, 0x4, [0xc0c0, 0xfe8000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x10, 0x6}, @generic={0x3a, 0x10, 0xa, "574d114d801645bc3b3dd557c1cd36726bcfdb91307651f2967d9da4134a6a5cfd2f872e04fe8e62dc1bf69bfc49114472266b9c2e6ab6"}]}, 0x3, [{0x6e, &(0x7f0000004900)=@string={0x6e, 0x3, "619f298923be5a6ba829e4ac263f5d7fe8dc6c88103875f89941370146e1e895900a3c459bdf1e3da33c4b6de9c6d1b223ad19456688df4347be95ed97bfcf842389938e625625cc64876bf454a7a4346c61f5e2fdb5860d1e26c5ff9b01932334edb1be95b6fa8529180846"}}, {0x7a, &(0x7f0000004980)=@string={0x7a, 0x3, "3c4dccce64a67411211ec65d0709cf5e5bf9352e0d4d5fb1417ca2b6d32b8a5bb91f51c029f0a0d45861070d15eebdbcb0a577fdad7fa0163a822b14a1e094df10518867ed6fdd7fc02af6d8384426602e026c3a520050f879e6cc24b805b601849c09d0bf10daec7fab259e3ee9642a17e68e209a30796b"}}, {0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0x41d}}]})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x2e, 0x4, 0x0, 0x2, 0xb8, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb33}, {@private=0xa010100, 0x6}, {@empty, 0x2}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x1}]}, @ssrr={0x89, 0x1b, 0xe4, [@broadcast, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xac, 0x3, 0x5, [{@broadcast, 0x8001}, {@multicast2, 0xfffffff7}, {@remote, 0x7}, {@private=0xa010100, 0x8000}, {@local, 0x73}]}, @cipso={0x86, 0x1f, 0x0, [{0x7, 0xb, "6d290da0a2de0715f0"}, {0x3, 0xe, "21730c29537cd0176e6f17e5"}]}, @lsrr={0x83, 0x7, 0x31, [@multicast2]}]}}}}})

3.203254204s ago: executing program 0 (id=3730):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64], 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, &(0x7f0000000340)={0x14, &(0x7f0000000480)={0x0, 0x3, 0x82, {0x82, 0x8, "d6a4ecd1411c4b9a650c35bf851bd45bbcf65028c84ecd8e0b120ac09e69905e6f67652e015708e3f7bc2798f6c4815f739c52081abf5c41350e5945a23f0e4bd4189b2d37b7a64fcd1d51fa22c4ea178f7c9a440ff9356d148e543c638c8236f4e1a9ba2a5637c212a056f7af0bf6dade459d0f91ceb341177a8080b21df2c0"}}, &(0x7f0000000280)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "954ea5b91ba3692dfd872a58c58ad388d32aa03d4282d08bf53ac340db70f1427b4355107d87b79d80f42a159ce2ca47f091cd6c72a16ead49ab78bacf78489978edcd83f5064808b94177fddb9af02b676de4b2e67591d4f8a42be5b582c9c0d7107737098a2ec46456efb8b4a56d95987483287b770249c3bea5014b"}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000380)={0x20, 0x0, 0xd8, "4a24a55966785ff79babaa056e20e5828eb2ee11cda06d2a0d660c044709c1ef39bdc83149563408a159c729b69b5c475a735127085b70bb06d7ad0a9ef2dee2c5f194dc5e85df688368185465ef0fad37b223b94e6efee43fe52d9b3a55df7ad9de11a84260471f231804602c8282b1f0c3bcec635b03721185c8e278685e9359796b17de4e84232ea6635ba14cd52aea080a7f4879c71410b9fac141967e21437f718cdeeed5b5316571217543821c75a60d24053f60bdeacd512b0e8cde3572a97c2f42ea307f55bc995a7ef7b3eac62c3574b8ffc81a"}, &(0x7f0000000fc0)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)})
setuid(0xee01)
setrlimit(0x8, &(0x7f0000000000)={0xffff, 0xfffffffffffffff9})
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f0000000940)={0x40, 0xf, 0x67, {0x67, 0x10, "8dc2a50e022c954ad6e7fe260913bb540f434b24289d3855dd232e2d07383ea6fa3418e6e7400b08e092756038033e10bb36604170375da0af932f633f0a01121765b7c074b951c57ba1c49e6705bced301a0fa4b2e3f9a82599b3c4c8f8cba68170c241d2"}}, &(0x7f00000009c0)=ANY=[@ANYBLOB="00230400000004030904"], &(0x7f0000000d00)={0x0, 0x22, 0x1d, {[@global=@item_4={0x3, 0x1, 0x6, "809dc48b"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_012={0x1, 0x0, 0x8, "f6"}, @local=@item_012={0x2, 0x2, 0x4, "8e52"}, @global=@item_012={0x1, 0x1, 0x5, "e5"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x1, 0x0, 0xa, "c0"}, @main=@item_4={0x3, 0x0, 0xa, "8d681ddd"}, @main=@item_4={0x3, 0x0, 0x1}, @local=@item_012={0x2, 0x2, 0x4, 'o/'}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x2, 0x1, {0x22, 0xd39}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000ac0)={0x20, 0x31, 0xcf, "43043a4ec6c3e21857ea1ab0d80870aece5b397febf1fc516c37adf359f7f8b33675c48b9585a51bb1b0ac51e84e1b422f5f045a1df915866366c33f8739591f28e682193be9dfdcdba745ea8541488f540f80d5a8f8d4f99a56afb93846cdcef4a52162fbfd01a694f2d148b992036c300d2725728351df7561bc93fb0dbf5d5b427ab890eaf692b05fa68e32b7d1930f3a1e903c79f8704f422fb14fc2fdbcfa6c3521dd15ba90ef40560eca0f79396d044b07d87c46e9787f74af01ff3f8b123f1058cfd0ee39e37645dbe04ce4"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0xfb}, &(0x7f0000000c40)={0x20, 0x1, 0x62, "928204e5fd2aaa12435bb2455b027094b4879191902c77e3c4684193a89d46029b0172a4ff6a582e18a2b74cd38df9f19c839fea114d4b0220e0079af4b4d1a250c838a6c808760e90acdcc69a2792216c12d729a3e7ef426d58124f9eb201eb9ff5"}, &(0x7f0000000cc0)={0x20, 0x3, 0x1, 0x92}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000a00)=ANY=[@ANYBLOB="e00000027f000700000000000a"], 0x18)
openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000e40)={0x14, &(0x7f0000000d40)={0x0, 0xf, 0xaf, {0xaf, 0x5, "42b29cd263be1aca07aa41c85e85b4f3883c15114fc25f4cc95e6d59e06f505eafe476da4752d01ed650fd6a389fe02bdb6af767c865148bf587a0eea5e31fe8959d0b738c1a4a34b1f4b0032a74531a266a1543ff94fcde2627e7a3cd58fd6b1c771442a173df6a23924b53656d68669acaedfea1ce0be8c7d2ac42f0e40d43901a4950ad9c7583c857df9e98a2bd3a1dc4bca209b1695bb92b4f8fad117cc6bb52b90c7fb7f802a93978796b"}}, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f40)={0x1c, &(0x7f0000000e80)={0x0, 0x0, 0x22, "1d29c53cb674943fa188c24d5ca3a887f399d27c6eec680c3584ae38512f8691d4bb"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x2}})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000d40), 0x600)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setns(0xc9, 0x0)
r3 = socket(0x1a, 0x2, 0x9)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0x8918, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)

3.010117614s ago: executing program 2 (id=3734):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069"], 0xe8}, 0x1, 0x0, 0x0, 0x881}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c)

2.865192749s ago: executing program 2 (id=3735):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0)
chdir(&(0x7f0000000680)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file7/file0\x00', 0x0)

2.382017276s ago: executing program 1 (id=3736):
rmdir(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt\x00', 0x1ff)
mount$afs(0x0, &(0x7f0000000f40)='./mnt\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='dyn'])
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/@cell/foo@sys\x00', 0x0, 0x0)
umount2(&(0x7f0000001040)='./mnt\x00', 0x8)
setns(r0, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x38, 0xa, 0x0)
syz_usb_connect(0x0, 0x7a, &(0x7f00000010c0)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904010001010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac0007058201000201090402"], 0x0)
setsockopt(r2, 0x107, 0xaebc, &(0x7f0000001080)="00008634", 0x4)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan1\x00', <r4=>0x0})
sendmsg(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ll={0x11, 0x17, r4, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="5401020001000000ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000e00)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6f", 0x35}, {&(0x7f0000000e40)="f76e14895b4c948e303e1fe34234a0a92ecdc3beee7e2a71ef9514", 0x1b}], 0x3}, 0x20044000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000ec0)={0xe, 0x56544943, 0x1, @discrete={0xfffffff7, 0x2}})
sendmsg$sock(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@xdp={0x2c, 0x1, r4, 0x17}, 0x80, 0x0, 0x0, &(0x7f0000000280)}, 0x800)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000001140)={0x0, @adiantum, 0x0, @desc1})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x10001, 0x183)
ioctl$HIDIOCGRDESC(r5, 0x90044802, &(0x7f00000002c0)={0xb13, "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"})

2.377287152s ago: executing program 2 (id=3737):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x29810, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x68, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '8191'}, 0x20, '16', 0x20, 'R', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]})

2.194598491s ago: executing program 2 (id=3739):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r0, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @loopback}, 0x10)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000a40))
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008011)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
connect(r1, &(0x7f0000000000)=@isdn={0x22, 0x3, 0xfe, 0xf7, 0x4}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r2, &(0x7f0000004200)={'#! ', './proc/net/rpc/auth.rpcsec.context/channel', [{0x20, '/dev/ublk-control\x00'}, {}, {0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, '\x00'}, {0x20, 'tunl0\x00'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {}, {0x20, 'tunl0\x00'}], 0xa, "a72ca9dd4dd0c04972e976102babf2beff204a25581a8d458f97eb1355dce8ea1745a2e8855e1f13ee4d1f07c921acd1990e224e1f00f67ee0524004920958592a39a74eeaf5f9f79a6341320713e48fd1a427b199a70c270dae707209e3ae90ac66d66fe6ad278e6df4edaa11d3e168206540f68ea4884b4ad4393b0602307185b46beecb583e67363334d570097ed4c97a4ab511b3cb7c5ff0a669b295f55683dfb4431486e423718af17a7bfa0a29c6a99ec62c0846f091338704d7ab406b19219d75c6b7491ded175dc1d852dfbab9ce"}, 0x149)
socket$phonet_pipe(0x23, 0x5, 0x2)
r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000004140))
mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xc, 0x13, 0xffffffffffffffff, 0x81000000)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0)
r4 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000600)=@new_dev={0x1, 0x4}}}, &(0x7f0000000640))
syz_open_dev$ublk_chdev(&(0x7f0000000680), r4, 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
syz_usb_connect(0x2, 0x49b, &(0x7f0000004380)={{0x12, 0x1, 0x310, 0x7, 0x24, 0x6b, 0x40, 0x12d1, 0xb55d, 0xf4ff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x489, 0x1, 0x6, 0x8, 0x0, 0x23, "", [{{0x9, 0x4, 0x79, 0x3, 0x10, 0xff, 0x5, 0x6a, 0x9, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "e0421962d5e4"}, {0x5, 0x24, 0x0, 0xcc07}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0x6, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x401, 0x7, 0x3, 0x5, 0x9, 0x90}]}], [{{0x9, 0x5, 0x8, 0x4, 0x20, 0x7c, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x5}]}}, {{0x9, 0x5, 0xc, 0x4, 0x410, 0x1, 0x3, 0xf1, [@generic={0xb1, 0x0, "821c0621fe882bf4d47338637b4b0e00423d746471fedd05e63ac9fd8a3eef15a50dbbacfd59018c5aeddd2c7373697b26f3de03c38ab2cf9780b722870030bc47d51eb013149fd5385c8ac5cb5f64118fbe2f85f48d7f26da1bbf9026b662126aae3bc220524974021ee546c960e63e5d6d2d057d6a1884282832e0cce97b282eba88d393df890168b4f0b62585f411380f8cf5c26cff414f2305a54c260db421b3f7f3d18fb16d724e37011fe18c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x6b}]}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x6, 0x4, 0x5, [@generic={0x48, 0x5, "cb60f8d733254abbd83a39355dd75466e1aa5947387e6c5518c2f2446854c9493936fe377a2ac3ba2dd37d078ced4f08d07210c9e0695b0ba66c38ec558cd40bb7bf1982b2a9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xd255}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x8, 0x40, 0x9, [@generic={0x73, 0x4, "87a4b143cb498dc0c4c653c1ed7d5c4541b03de52665ab0929807c4c40f4e69446ef7bc7253cd8175137cbf876702bc4ae73eea995cd76d93dded061d70a98cfadf736f2ec151aea5570d0f175a6bf42982d692717f7979ffd0b7c62357f90576a1554bf5874a04bef13bbddf0f99ddc3c"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x8, 0x4, 0x5, 0x2, [@generic={0xe2, 0x6, "5bb0b219c002f7d804f2c561c764ea17dcafb2c6aaa55d1bf2b48999ec275e42bfa3a30f4a894f8fb0a39f26701e1e6810d3dc74569d2b907a9fbd026f975630cc98b30c52f54a33a660d34c0c57ea8f018f5f3f124efb46f0c7098413ab63195097479af546526c6803515a6ab4c9e33d2f8c2f81f44451cea05c2b89f03495a4f38140adffbea2cb39fbb77be68431c6e3f2e111a9622b0dd63a1e205908af6aa2ba03409ca1030762792d93b3c4df30357eb47e89eedcb308bd62d0642e1108c6b11c9b0f77d597ab0d3536e6f8fb40d3d553bab8f1467f7e811ac55ab850"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa3, 0x3}]}}, {{0x9, 0x5, 0x0, 0x2, 0x428, 0xff, 0x0, 0x1, [@generic={0x23, 0x22, "fd62e74576dd6d18d3dad5ef6efeb11fe0e68cff1c3d0a7701779af86817a7ac66"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x7, 0x40, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x9, 0x0, 0xc}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xb, 0x6}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xf8, 0x6, 0x5, [@generic={0xf9, 0x9, "edd5b443de1510427f2474fb490a9d0e0b7af6d155cdfc993635e1b91ecae9ab4befaabdbd23c46ded61c766c6d1bb3e64fd71946c583d8b2e4f20994e3c101339a0fb8f25355eec03be556e816423d16f1e52e310715d6af7191b9fe6478787e84ef60949a548af7012292b0a20832e7036522e9d4c50cc29ad028dfacc2238c5782c1c99eff2a921d585522f49fa27d01e998c7f117225e876721f2e4e48ab091b41b55e51e1990e6baa849dd377f4394e21f5e1369e50a0dd87176ab4f6325a22d2b7227eecadd3d614bd3e9a02a104923ca350ffaa5d19d3484b2abf0f4644cddf94c1b6bcb4d6d27c2fa23ece5de5793ce9e3ac67"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x1}]}}, {{0x9, 0x5, 0x4, 0x10, 0x0, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x12, 0xb}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x2, 0x54, 0x5}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0x7, 0x7, 0x7}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x0, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8e, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x1}]}}]}}]}}]}}, &(0x7f0000004a40)={0xa, &(0x7f0000004840)={0xa, 0x6, 0x200, 0x8f, 0x7, 0x3, 0xff, 0x40}, 0x78, &(0x7f0000004880)={0x5, 0xf, 0x78, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x6, 0x5, 0xffff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x2, 0x8, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0xc, 0x9, 0x1}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x9, 0x88f, 0x4, [0xc0c0, 0xfe8000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0x10, 0x6}, @generic={0x3a, 0x10, 0xa, "574d114d801645bc3b3dd557c1cd36726bcfdb91307651f2967d9da4134a6a5cfd2f872e04fe8e62dc1bf69bfc49114472266b9c2e6ab6"}]}, 0x3, [{0x6e, &(0x7f0000004900)=@string={0x6e, 0x3, "619f298923be5a6ba829e4ac263f5d7fe8dc6c88103875f89941370146e1e895900a3c459bdf1e3da33c4b6de9c6d1b223ad19456688df4347be95ed97bfcf842389938e625625cc64876bf454a7a4346c61f5e2fdb5860d1e26c5ff9b01932334edb1be95b6fa8529180846"}}, {0x7a, &(0x7f0000004980)=@string={0x7a, 0x3, "3c4dccce64a67411211ec65d0709cf5e5bf9352e0d4d5fb1417ca2b6d32b8a5bb91f51c029f0a0d45861070d15eebdbcb0a577fdad7fa0163a822b14a1e094df10518867ed6fdd7fc02af6d8384426602e026c3a520050f879e6cc24b805b601849c09d0bf10daec7fab259e3ee9642a17e68e209a30796b"}}, {0x4, &(0x7f0000004a00)=@lang_id={0x4, 0x3, 0x41d}}]})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8, 0x20, 0x80000001, 0x9, {{0x2e, 0x4, 0x0, 0x2, 0xb8, 0x66, 0x0, 0x40, 0x4, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb33}, {@private=0xa010100, 0x6}, {@empty, 0x2}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x1}]}, @ssrr={0x89, 0x1b, 0xe4, [@broadcast, @rand_addr=0x64010102, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xac, 0x3, 0x5, [{@broadcast, 0x8001}, {@multicast2, 0xfffffff7}, {@remote, 0x7}, {@private=0xa010100, 0x8000}, {@local, 0x73}]}, @cipso={0x86, 0x1f, 0x0, [{0x7, 0xb, "6d290da0a2de0715f0"}, {0x3, 0xe, "21730c29537cd0176e6f17e5"}]}, @lsrr={0x83, 0x7, 0x31, [@multicast2]}]}}}}})

2.041078855s ago: executing program 4 (id=3740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', 0x0, &(0x7f0000000240)='ext4\x00', 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x1, 0xffffffff000, 0x1, 0x6})

2.027938322s ago: executing program 4 (id=3741):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x564)

1.876327126s ago: executing program 4 (id=3742):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.682638441s ago: executing program 4 (id=3743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069"], 0xe8}, 0x1, 0x0, 0x0, 0x881}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c)

1.339795634s ago: executing program 4 (id=3745):
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0)
mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r0, &(0x7f0000000740)=ANY=[], 0xfffffee2)

1.25494855s ago: executing program 4 (id=3746):
r0 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xc99, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
r4 = openat$panthor(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000600)={0x20004, <r8=>r6, 0x2})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000640)={<r9=>0x0, 0x0, r8})
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000680)={r9})
ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000006c0)={r9})
sendto$packet(r0, &(0x7f0000000080)="0b031260feffffff02005400f6a13bb1000000086086dd480300", 0x100a6, 0x0, &(0x7f00000000c0)={0x11, 0x86dd, r2}, 0x50)
r10 = memfd_create(&(0x7f0000000300)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd2\xd59\xe8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\xec\xdbXe&J \xe9\x16\x82\xe8=\x83\x88sN\x83N`\xf9\xec\xe1<r\xf8\xd56\xaf~Nh%\x14\xf4\x14\xa3\x88i\x05rR\x17\x1a\vz\x950#(Wy\xf2\xde\x82u\xa3c\x9ez7\x88\x15\xdbz\xd1\\\xb5&\xd1\xca\xcb\xc5Cd,\xc7~\xa3\x86\xee=\xae}\xeb\xe8N\x11\xef\xb2\xceP\xff\xed\xee\xd7x6}-y #W\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\x03\x00\x00\x00W\xb5;\xa6\xb4\'\'\x17\t\x00\x00\xaa\xe8\x81\xc0\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#0\xc4\x06h\x1f@\a\n=7\xeb2\xaa\x0e\xee\x03\xd1\xd4\xc2yT\x8a0\x06=\xe7R\x85\x02\xf3\x15\x99z0]\xc4\x04\xb0\xea^\xd9\x1e\xbf\xb6\xe9\x8a\xfe\xd9G\x82\x93\xbf,J}\xed\x06\x18\x86WQn`\xf1\x9b\xb5\x96\xfe\xcf\xeb\x9f\x87:me\x02\x90\xa2\x13O\x9a\xd6\xd0\x12\xf2$7\xb4\x8f\xfaal\xb8\xaaV>\xb16\xfb*\xf5\xd5\\\xa7\xebe\xbe\x9d\xd7\xf5\xb9<\xb2\xc4\xf9:\xef\xc0g\xc3\xb5\x7f\xc0\xcck.5=\xcc\x10Y\xad^*\x10\x00\x00\x00\x00\x00\x00\x00\x0e%\x84\x95bXy\x81;o\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9{b\xab\x91\x88\xba\xa5J\xfd\xd2\x96R\x06\xeeP\x0f\xb0\xad_\x0e\xf6\xe7k\xbf\x93)\x02yX\x91\xc0\xef\x10\xd2\xbd9\x87<[BKq\t*t\x9e\xf9\xa6\xb5\xda\tb\xcc%?\x14Y\x9b\x18nx\x19\x11\xb7\x9d~\xc5{O\xd0S\xbdi\xf8\"P>4\x05E|h?\x0f\xf5\xf8\x8c\xce\xebXN\xb7\xc0F\xbao\xf7\xab\xedO\x96\xa1(\n\x1e\xf9\xbe/\xe0\xe2^\xb0\xb6{\x1fdX\x100v\xab\xce\x05\x00i\x85\xf63\x05\b\xd8\xeb\xdf\x00\x00]N\xe1\x9di&\r\xd2pw\x85\vQ \x82v\x8a7\xb6\xf8\x1c\x8c\xf0\xaf\xfa\x17\xbeD\a\vM\x87\xc0Q\xd4\xd3\xc7I@Z\t\xa9\xf0\x9d4c\xb1^\xeeF\x96\xa1{OV\xe0\x1e#\xb3w\xc7\x87\xdd\'\xe1\xf7\'+s\x15\xeb\xb1D\x86\x93\x1e\xf9\xf1L\x0f\x9b7/\xd9D\x91\xc47hI\xbc\x13.@R\v\x00\x00\x00\x00\x00\x00\x00\xe2\xc8\xb2\x9bD\xb2P\xdc\xd4\xb1\xa50\x9f\x83~)\x9b7-\x80&r\xbc\xf6<p7\xaaS7\xb4\xcdtd\x81V|\xc6\x99\x81\x80\'\xf8\xb5\xe0\xd5\xddc\xc0i5\x9c\x06\x88\x8cb\xfb2\xbf\xa3\xb4\xceF\xd9\xc8\xdf\xfcw\"\xdcv\x8d\x83\x91\xacn[\xadj\xb1\x01\xfa\xc4i\'\xa0\x86\x12\xcd3l\x98v;@\x95\xa5\xa8/7\x03\xb2\x88\xa7\x00'/742, 0x4)
fallocate(r10, 0x41, 0x0, 0x200401)
fallocate(r10, 0x0, 0x0, 0x200401)

934.749411ms ago: executing program 1 (id=3747):
mount(&(0x7f00000005c0)=@filename='mtd0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000680)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000940)='./file7/file0\x00', 0x0)

895.252304ms ago: executing program 1 (id=3748):
ioctl$DM_TABLE_LOAD(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000640)={0x4, 0x0, 0x0, 0x1a0, 0x138, 0x1, 0x0, 0x29810, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@integrity={0x0, 0x1400, 0x0, 0x68, 'integrity\x00', {{@ram={'/dev/ram', 0x1}, 0x20, '8191'}, 0x20, '16', 0x20, 'R', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]})

795.265842ms ago: executing program 1 (id=3749):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000700)={0x9c0000, 0x101, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x99096f, 0x6, '\x00', @p_u32=0x0}}) (fail_nth: 10)

730.489947ms ago: executing program 1 (id=3750):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1b7)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', 0x0, 0x8410, 0x0)
r0 = open$dir(&(0x7f0000000280)='./mnt\x00', 0x0, 0x2)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000002c0)={0x1, 0xffffffff000, 0x1, 0x6})

288.560836ms ago: executing program 2 (id=3751):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x564)

34.256052ms ago: executing program 1 (id=3752):
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x1002, r0, 0x0)
write(r0, &(0x7f0000000040)='g', 0x1)
mount(&(0x7f00000003c0)=@filename='mtd0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='jffs2\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x4000, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r2, &(0x7f00000005c0)='27', 0x2)
socket$unix(0x1, 0x2, 0x0)
chdir(&(0x7f0000000600)='./file0\x00')
open(&(0x7f0000000640)='./bus\x00', 0xa23c6, 0x1c0)

33.772934ms ago: executing program 0 (id=3753):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf30000001400010069703667726574617030000000000000080002400000000209000200"], 0xe8}, 0x1, 0x0, 0x0, 0x881}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1})
write$tun(r1, &(0x7f0000000180)={@void, @val={0x1, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x2c, 0x0, @opaque="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"}}}, 0x4c)

0s ago: executing program 2 (id=3754):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0x8, 0x0, 0x180, 0x0, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffa, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

  syzkaller #0 PREEMPT(full) 
[  965.126115][T18778] Tainted: [L]=SOFTLOCKUP
[  965.126123][T18778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  965.126134][T18778] Call Trace:
[  965.126141][T18778]  <TASK>
[  965.126148][T18778]  dump_stack_lvl+0xe8/0x150
[  965.126200][T18778]  should_fail_ex+0x3eb/0x540
[  965.126230][T18778]  _copy_from_iter+0x1d3/0x1680
[  965.126254][T18778]  ? __might_fault+0xaf/0x130
[  965.126315][T18778]  ? _copy_from_iter+0x21b/0x1680
[  965.126345][T18778]  ? sock_alloc_send_pskb+0xc87/0xd90
[  965.126388][T18778]  ? __pfx__copy_from_iter+0x10/0x10
[  965.126423][T18778]  ? __pfx__copy_from_iter+0x10/0x10
[  965.126461][T18778]  copy_page_from_iter+0x219/0x2d0
[  965.126496][T18778]  skb_copy_datagram_from_iter+0x2f4/0x720
[  965.126567][T18778]  packet_sendmsg+0x390b/0x5330
[  965.126624][T18778]  ? __lock_acquire+0x747/0x2de0
[  965.126656][T18778]  ? __lock_acquire+0x747/0x2de0
[  965.126684][T18778]  ? __lock_acquire+0x747/0x2de0
[  965.126714][T18778]  ? kstrtouint+0x6e/0xe0
[  965.126749][T18778]  ? __pfx_packet_sendmsg+0x10/0x10
[  965.126781][T18778]  ? aa_sk_perm+0x6ff/0x8f0
[  965.126818][T18778]  ? rwsem_del_wake_waiter+0x40/0x2d0
[  965.126852][T18778]  ? __pfx_aa_sk_perm+0x10/0x10
[  965.126885][T18778]  ? aa_sock_msg_perm+0x144/0x210
[  965.126923][T18778]  ? apparmor_socket_sendmsg+0x98/0x360
[  965.126954][T18778]  ? __pfx_packet_sendmsg+0x10/0x10
[  965.126987][T18778]  sock_sendmsg_nosec+0x14e/0x190
[  965.127014][T18778]  __sys_sendto+0x408/0x5a0
[  965.127042][T18778]  ? ksys_write+0x1e6/0x270
[  965.127072][T18778]  ? __pfx___sys_sendto+0x10/0x10
[  965.127097][T18778]  ? __mutex_unlock_slowpath+0x731/0x900
[  965.127146][T18778]  ? fdget+0x1ac/0x250
[  965.127194][T18778]  ? __pfx_ksys_write+0x10/0x10
[  965.127228][T18778]  __x64_sys_sendto+0xde/0x100
[  965.127260][T18778]  do_syscall_64+0x166/0x520
[  965.127293][T18778]  ? trace_irq_disable+0x3b/0x140
[  965.127322][T18778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.127345][T18778]  ? clear_bhb_loop+0x70/0xc0
[  965.127374][T18778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  965.127396][T18778] RIP: 0033:0x7ff5bb79f559
[  965.127418][T18778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.127437][T18778] RSP: 002b:00007ff5bc5ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  965.127462][T18778] RAX: ffffffffffffffda RBX: 00007ff5bba25fa0 RCX: 00007ff5bb79f559
[  965.127479][T18778] RDX: 000000000000fce0 RSI: 0000200000000080 RDI: 0000000000000003
[  965.127494][T18778] RBP: 00007ff5bc5ed090 R08: 00002000000000c0 R09: 0000000000000014
[  965.127516][T18778] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002
[  965.127526][T18778] R13: 00007ff5bba26038 R14: 00007ff5bba25fa0 R15: 00007ffc91f49c28
[  965.127552][T18778]  </TASK>
[  965.635260][T18743] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  965.714650][T13908] usb 2-1: USB disconnect, device number 85
[  965.811844][ T5740] usb 3-1: reset high-speed USB device number 49 using dummy_hcd
[  965.874257][   T33] audit: type=1400 audit(1793416923.201:218): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  966.290131][T18806] rxe_eth0 speed is unknown, defaulting to 1000
[  966.546889][ T5740] usb 3-1: device descriptor read/64, error -71
[  966.687374][   T27] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  966.727035][T13292] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  966.786978][ T5740] usb 3-1: reset high-speed USB device number 49 using dummy_hcd
[  966.847471][   T27] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  966.849411][   T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  966.849469][   T27] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  966.849518][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.874412][   T27] usb 2-1: config 0 descriptor??
[  966.905640][T13292] usb 5-1: not running at top speed; connect to a high speed hub
[  966.905679][T13292] usb 5-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  966.943861][T13292] usb 5-1: config 6 has an invalid interface number: 121 but max is 0
[  966.943897][T13292] usb 5-1: config 6 has an invalid interface number: 135 but max is 0
[  966.943922][T13292] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  966.943945][T13292] usb 5-1: config 6 has no interface number 0
[  966.943963][T13292] usb 5-1: config 6 has no interface number 1
[  966.944031][T13292] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  966.944063][T13292] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  966.944093][T13292] usb 5-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  966.944123][T13292] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  966.944151][T13292] usb 5-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  966.944181][T13292] usb 5-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  966.944220][T13292] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  966.944244][T13292] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  966.944272][T13292] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  966.944297][T13292] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  966.944320][T13292] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  966.944350][T13292] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  966.944376][T13292] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  966.944405][T13292] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  966.944431][T13292] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  966.944460][T13292] usb 5-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  966.944490][T13292] usb 5-1: config 6 interface 121 has no altsetting 0
[  966.944510][T13292] usb 5-1: config 6 interface 135 has no altsetting 0
[  966.984034][T13292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.984119][T13292] usb 5-1: Product: Н
[  966.984161][T13292] usb 5-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  966.984228][T13292] usb 5-1: SerialNumber: syz
[  967.034458][   T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  967.248133][T18764] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  967.286585][T18826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  967.287175][T18826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  967.384273][ T7861] usb 3-1: USB disconnect, device number 49
[  967.489079][T13292] option 5-1:6.121: GSM modem (1-port) converter detected
[  967.617968][T18840] FAULT_INJECTION: forcing a failure.
[  967.617968][T18840] name failslab, interval 1, probability 0, space 0, times 0
[  967.618008][T18840] CPU: 0 UID: 0 PID: 18840 Comm: syz.2.3486 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  967.618039][T18840] Tainted: [L]=SOFTLOCKUP
[  967.618049][T18840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  967.618062][T18840] Call Trace:
[  967.618071][T18840]  <TASK>
[  967.618081][T18840]  dump_stack_lvl+0xe8/0x150
[  967.618121][T18840]  should_fail_ex+0x3eb/0x540
[  967.618159][T18840]  ? __alloc_skb+0x1db/0x7a0
[  967.618186][T18840]  should_failslab+0xa8/0x100
[  967.618218][T18840]  ? __alloc_skb+0x1db/0x7a0
[  967.618242][T18840]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  967.618267][T18840]  ? __alloc_skb+0x18d/0x7a0
[  967.618309][T18840]  ? __alloc_skb+0x1db/0x7a0
[  967.618342][T18840]  __alloc_skb+0x1db/0x7a0
[  967.618375][T18840]  netlink_ack+0x136/0xb30
[  967.618404][T18840]  ? hook_capable+0x1c3/0x5e0
[  967.618449][T18840]  netlink_rcv_skb+0x2a4/0x4a0
[  967.618476][T18840]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  967.618506][T18840]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  967.618544][T18840]  ? bpf_lsm_capable+0x9/0x20
[  967.618575][T18840]  ? security_capable+0x7e/0x2c0
[  967.618612][T18840]  nfnetlink_rcv+0x2b9/0x28c0
[  967.618643][T18840]  ? __dev_queue_xmit+0x29b/0x3920
[  967.618683][T18840]  ? __local_bh_enable_ip+0xd6/0x140
[  967.618712][T18840]  ? lockdep_hardirqs_on+0x7b/0x110
[  967.618746][T18840]  ? __dev_queue_xmit+0x29b/0x3920
[  967.618779][T18840]  ? __local_bh_enable_ip+0xd6/0x140
[  967.618806][T18840]  ? __dev_queue_xmit+0x29b/0x3920
[  967.618838][T18840]  ? __dev_queue_xmit+0x1efb/0x3920
[  967.618876][T18840]  ? __dev_queue_xmit+0x29b/0x3920
[  967.618917][T18840]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  967.618950][T18840]  ? __pfx___dev_queue_xmit+0x10/0x10
[  967.618994][T18840]  ? __copy_skb_header+0xa3/0x4a0
[  967.619027][T18840]  ? __asan_memcpy+0x40/0x70
[  967.619052][T18840]  ? __skb_clone+0x5c/0x760
[  967.619088][T18840]  ? __skb_clone+0x4a2/0x760
[  967.619126][T18840]  ? skb_clone+0x246/0x3a0
[  967.619162][T18840]  ? __netlink_deliver_tap+0x681/0x6e0
[  967.619187][T18840]  ? netlink_deliver_tap+0x2e/0x1b0
[  967.619217][T18840]  ? netlink_deliver_tap+0x2e/0x1b0
[  967.619242][T18840]  ? netlink_deliver_tap+0x2e/0x1b0
[  967.619271][T18840]  netlink_unicast+0x8ef/0xa80
[  967.619345][T18840]  netlink_sendmsg+0x7f0/0xb20
[  967.619374][T18840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.619404][T18840]  ? aa_sock_msg_perm+0x144/0x210
[  967.619439][T18840]  ? apparmor_socket_sendmsg+0x98/0x360
[  967.619470][T18840]  ? __pfx_netlink_sendmsg+0x10/0x10
[  967.619495][T18840]  sock_sendmsg_nosec+0x14e/0x190
[  967.619521][T18840]  ____sys_sendmsg+0x54e/0x850
[  967.619557][T18840]  ? __pfx_____sys_sendmsg+0x10/0x10
[  967.619596][T18840]  ? import_iovec+0x73/0xa0
[  967.619634][T18840]  ___sys_sendmsg+0x2a6/0x360
[  967.619661][T18840]  ? __lock_acquire+0x747/0x2de0
[  967.619691][T18840]  ? __pfx____sys_sendmsg+0x10/0x10
[  967.619758][T18840]  ? __fget_files+0x3a2/0x420
[  967.619783][T18840]  ? __fget_files+0x2a/0x420
[  967.619816][T18840]  __x64_sys_sendmsg+0x1b1/0x290
[  967.619846][T18840]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  967.619898][T18840]  do_syscall_64+0x166/0x520
[  967.619932][T18840]  ? trace_irq_disable+0x3b/0x140
[  967.619960][T18840]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.619981][T18840]  ? clear_bhb_loop+0x70/0xc0
[  967.620008][T18840]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  967.620030][T18840] RIP: 0033:0x7f9e4a59f559
[  967.620050][T18840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  967.620069][T18840] RSP: 002b:00007f9e4b47c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  967.620094][T18840] RAX: ffffffffffffffda RBX: 00007f9e4a825fa0 RCX: 00007f9e4a59f559
[  967.620110][T18840] RDX: 0000000000000000 RSI: 0000200000002940 RDI: 0000000000000003
[  967.620124][T18840] RBP: 00007f9e4b47c090 R08: 0000000000000000 R09: 0000000000000000
[  967.620137][T18840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  967.620150][T18840] R13: 00007f9e4a826038 R14: 00007f9e4a825fa0 R15: 00007ffcd2caad28
[  967.620183][T18840]  </TASK>
[  967.749399][T18229] usb 2-1: USB disconnect, device number 86
[  968.112334][T13292] usb 5-1: USB disconnect, device number 4
[  968.141649][T13292] option 5-1:6.121: device disconnected
[  968.349361][   T33] audit: type=1400 audit(1793416925.691:219): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  968.782549][T18857] Attempt to restore checkpoint with obsolete wellknown handles
[  969.185111][T18870] FAULT_INJECTION: forcing a failure.
[  969.185111][T18870] name failslab, interval 1, probability 0, space 0, times 0
[  969.185153][T18870] CPU: 1 UID: 0 PID: 18870 Comm: syz.4.3494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  969.185186][T18870] Tainted: [L]=SOFTLOCKUP
[  969.185195][T18870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  969.185210][T18870] Call Trace:
[  969.185219][T18870]  <TASK>
[  969.185230][T18870]  dump_stack_lvl+0xe8/0x150
[  969.185272][T18870]  should_fail_ex+0x3eb/0x540
[  969.185311][T18870]  should_failslab+0xa8/0x100
[  969.185347][T18870]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  969.185376][T18870]  ? __d_alloc+0x37/0x820
[  969.185402][T18870]  ? __d_alloc+0x37/0x820
[  969.185437][T18870]  __d_alloc+0x37/0x820
[  969.185471][T18870]  d_alloc_pseudo+0x21/0xc0
[  969.185502][T18870]  alloc_path_pseudo+0x107/0x220
[  969.185530][T18870]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  969.185556][T18870]  ? do_raw_spin_lock+0x12b/0x2f0
[  969.185599][T18870]  alloc_file_pseudo+0xa8/0x1e0
[  969.185627][T18870]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  969.185652][T18870]  ? _raw_spin_unlock+0x28/0x50
[  969.185702][T18870]  sock_alloc_file+0xb8/0x2e0
[  969.185743][T18870]  ? __sys_socket+0x12b/0x1b0
[  969.185771][T18870]  __sys_socket+0x13f/0x1b0
[  969.185801][T18870]  __x64_sys_socket+0x7a/0x90
[  969.185828][T18870]  do_syscall_64+0x166/0x520
[  969.185860][T18870]  ? trace_irq_disable+0x3b/0x140
[  969.185888][T18870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.185912][T18870]  ? clear_bhb_loop+0x70/0xc0
[  969.185941][T18870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.185965][T18870] RIP: 0033:0x7f6e459a0dc7
[  969.185988][T18870] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  969.186009][T18870] RSP: 002b:00007f6e46876f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  969.186036][T18870] RAX: ffffffffffffffda RBX: 00007f6e45c25fa0 RCX: 00007f6e459a0dc7
[  969.186054][T18870] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  969.186069][T18870] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  969.186084][T18870] R10: 0000200000000440 R11: 0000000000000286 R12: 0000000000000000
[  969.186100][T18870] R13: 00007f6e45c26038 R14: 00007f6e45c25fa0 R15: 00007ffca9b46528
[  969.186137][T18870]  </TASK>
[  969.202129][T18870] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3494'.
[  969.228817][T18870] gretap0: entered promiscuous mode
[  969.373048][T18871] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3494'.
[  969.468923][T18874] overlayfs: failed lookup in lower (newroot/40, name='file0', err=-40): overlapping layers
[  969.473064][T18871] 0��{X��: renamed from gretap0
[  969.497709][T18871] 0��{X��: left promiscuous mode
[  969.497739][T18871] 0��{X��: entered allmulticast mode
[  969.500309][T18871] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  969.734035][   T33] audit: type=1400 audit(1793416927.071:220): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  969.916415][   T32] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  970.065253][T18890] overlayfs: upper fs does not support tmpfile.
[  970.074710][   T32] usb 5-1: not running at top speed; connect to a high speed hub
[  970.074750][   T32] usb 5-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  970.081875][   T32] usb 5-1: config 6 has an invalid interface number: 121 but max is 0
[  970.081949][   T32] usb 5-1: config 6 has an invalid interface number: 135 but max is 0
[  970.082019][   T32] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  970.082077][   T32] usb 5-1: config 6 has no interface number 0
[  970.082128][   T32] usb 5-1: config 6 has no interface number 1
[  970.082314][   T32] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  970.082383][   T32] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  970.082458][   T32] usb 5-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  970.082535][   T32] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  970.082610][   T32] usb 5-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  970.082697][   T32] usb 5-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  970.082796][   T32] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  970.082896][   T32] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  970.082972][   T32] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  970.083069][   T32] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  970.083135][   T32] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  970.083205][   T32] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  970.083270][   T32] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  970.083345][   T32] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  970.083878][   T32] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  970.083955][   T32] usb 5-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  970.084039][   T32] usb 5-1: config 6 interface 121 has no altsetting 0
[  970.084092][   T32] usb 5-1: config 6 interface 135 has no altsetting 0
[  970.093849][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.093877][   T32] usb 5-1: Product: Н
[  970.093893][   T32] usb 5-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  970.093918][   T32] usb 5-1: SerialNumber: syz
[  970.448123][   T32] option 5-1:6.121: GSM modem (1-port) converter detected
[  970.541382][   T32] usb 5-1: USB disconnect, device number 5
[  970.563503][   T32] option 5-1:6.121: device disconnected
[  970.724270][T18899] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3506'.
[  970.930988][   T33] audit: type=1400 audit(1793416928.271:221): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  971.061934][T18913] FAULT_INJECTION: forcing a failure.
[  971.061934][T18913] name failslab, interval 1, probability 0, space 0, times 0
[  971.061976][T18913] CPU: 1 UID: 0 PID: 18913 Comm: syz.1.3512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  971.062009][T18913] Tainted: [L]=SOFTLOCKUP
[  971.062019][T18913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  971.062033][T18913] Call Trace:
[  971.062043][T18913]  <TASK>
[  971.062053][T18913]  dump_stack_lvl+0xe8/0x150
[  971.062103][T18913]  should_fail_ex+0x3eb/0x540
[  971.062145][T18913]  should_failslab+0xa8/0x100
[  971.062180][T18913]  __kmalloc_noprof+0xf9/0x710
[  971.062207][T18913]  ? tomoyo_encode+0x2ad/0x570
[  971.062238][T18913]  ? tomoyo_encode+0x2ad/0x570
[  971.062279][T18913]  tomoyo_encode+0x2ad/0x570
[  971.062318][T18913]  tomoyo_realpath_from_path+0x5fd/0x640
[  971.062364][T18913]  ? tomoyo_path_number_perm+0x219/0x5f0
[  971.062394][T18913]  tomoyo_path_number_perm+0x246/0x5f0
[  971.062427][T18913]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  971.062454][T18913]  ? __lock_acquire+0x747/0x2de0
[  971.062527][T18913]  ? __fget_files+0x2a/0x420
[  971.062561][T18913]  ? __fget_files+0x2a/0x420
[  971.062586][T18913]  ? __fget_files+0x2a/0x420
[  971.062618][T18913]  security_file_ioctl+0xc3/0x2a0
[  971.062648][T18913]  __se_sys_ioctl+0x47/0x170
[  971.062683][T18913]  do_syscall_64+0x166/0x520
[  971.062715][T18913]  ? trace_irq_disable+0x3b/0x140
[  971.062744][T18913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.062769][T18913]  ? clear_bhb_loop+0x70/0xc0
[  971.062797][T18913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.062821][T18913] RIP: 0033:0x7f8679f9f559
[  971.062842][T18913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  971.062862][T18913] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  971.062887][T18913] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[  971.062904][T18913] RDX: 0000200000000b80 RSI: 0000000040246f4c RDI: 0000000000000003
[  971.062920][T18913] RBP: 00007f867ae90090 R08: 0000000000000000 R09: 0000000000000000
[  971.062935][T18913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.062950][T18913] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  971.062987][T18913]  </TASK>
[  971.065466][T18913] ERROR: Out of memory at tomoyo_realpath_from_path.
[  971.524645][T18922] netlink: Conntrack attr has 8 unknown bytes
[  971.524695][T18922] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  971.663524][   T33] audit: type=1400 audit(1793416929.001:222): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  971.806754][ T5740] usb 2-1: new low-speed USB device number 87 using dummy_hcd
[  971.976596][ T5740] usb 2-1: device descriptor read/64, error -71
[  972.048001][T18229] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  972.200836][T18229] usb 5-1: not running at top speed; connect to a high speed hub
[  972.200881][T18229] usb 5-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  972.201909][T18229] usb 5-1: config 6 has an invalid interface number: 121 but max is 0
[  972.201938][T18229] usb 5-1: config 6 has an invalid interface number: 135 but max is 0
[  972.201963][T18229] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  972.201995][T18229] usb 5-1: config 6 has no interface number 0
[  972.202008][T18229] usb 5-1: config 6 has no interface number 1
[  972.202046][T18229] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  972.202068][T18229] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  972.202087][T18229] usb 5-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  972.202107][T18229] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  972.202128][T18229] usb 5-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  972.202148][T18229] usb 5-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  972.202176][T18229] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  972.202193][T18229] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  972.202213][T18229] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  972.202230][T18229] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  972.202247][T18229] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  972.202267][T18229] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  972.202285][T18229] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  972.202328][T18229] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  972.202354][T18229] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  972.202380][T18229] usb 5-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  972.202412][T18229] usb 5-1: config 6 interface 121 has no altsetting 0
[  972.202431][T18229] usb 5-1: config 6 interface 135 has no altsetting 0
[  972.205688][T18229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.205727][T18229] usb 5-1: Product: Н
[  972.205740][T18229] usb 5-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  972.205761][T18229] usb 5-1: SerialNumber: syz
[  972.254079][ T5740] usb 2-1: new low-speed USB device number 88 using dummy_hcd
[  972.470346][ T5740] usb 2-1: device descriptor read/64, error -71
[  972.550331][T18229] option 5-1:6.121: GSM modem (1-port) converter detected
[  972.576988][ T5740] usb usb2-port1: attempt power cycle
[  972.596186][T18229] usb 5-1: USB disconnect, device number 6
[  972.613882][T18229] option 5-1:6.121: device disconnected
[  972.836530][   T27] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  972.916540][ T5740] usb 2-1: new low-speed USB device number 89 using dummy_hcd
[  972.937100][ T5740] usb 2-1: device descriptor read/8, error -71
[  972.986450][   T27] usb 3-1: Using ep0 maxpacket: 32
[  972.987272][   T27] usb 3-1: New USB device found: idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  972.988422][   T27] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  972.988443][   T27] usb 3-1: config 0 has no interface number 0
[  972.988483][   T27] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  972.988504][   T27] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  972.988522][   T27] usb 3-1: config 0 interface 85 has no altsetting 0
[  972.990827][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.990848][   T27] usb 3-1: Product: syz
[  972.990859][   T27] usb 3-1: Manufacturer: syz
[  972.990871][   T27] usb 3-1: SerialNumber: syz
[  972.993318][   T27] usb 3-1: config 0 descriptor??
[  973.218053][ T5740] usb 2-1: new low-speed USB device number 90 using dummy_hcd
[  973.241060][ T5740] usb 2-1: device descriptor read/8, error -71
[  973.346924][ T5740] usb usb2-port1: unable to enumerate USB device
[  973.404050][T18944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  973.404768][T18944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  973.438448][T18944] input: syz0 as /devices/virtual/input/input102
[  973.487614][T18944] fuse: Bad value for 'fd'
[  973.495659][   T27] appletouch 3-1:0.85: Failed to request geyser raw mode
[  973.495904][   T27] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  973.524861][   T27] usb 3-1: USB disconnect, device number 50
[  973.712395][   T33] audit: type=1400 audit(1793416931.051:223): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  974.397433][T13909] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  974.600305][T13909] usb 5-1: not running at top speed; connect to a high speed hub
[  974.600349][T13909] usb 5-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  974.601870][T13909] usb 5-1: config 6 has an invalid interface number: 121 but max is 0
[  974.601912][T13909] usb 5-1: config 6 has an invalid interface number: 135 but max is 0
[  974.601937][T13909] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  974.601960][T13909] usb 5-1: config 6 has no interface number 0
[  974.601979][T13909] usb 5-1: config 6 has no interface number 1
[  974.602031][T13909] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  974.602062][T13909] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  974.602091][T13909] usb 5-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  974.602120][T13909] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  974.602150][T13909] usb 5-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  974.602180][T13909] usb 5-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  974.602219][T13909] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  974.602245][T13909] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  974.602274][T13909] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  974.602299][T13909] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  974.602324][T13909] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  974.602353][T13909] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  974.602378][T13909] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  974.602406][T13909] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  974.602432][T13909] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  974.602459][T13909] usb 5-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  974.602488][T13909] usb 5-1: config 6 interface 121 has no altsetting 0
[  974.602508][T13909] usb 5-1: config 6 interface 135 has no altsetting 0
[  974.606167][T13909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.606199][T13909] usb 5-1: Product: Н
[  974.606216][T13909] usb 5-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  974.606248][T13909] usb 5-1: SerialNumber: syz
[  974.642033][   T33] audit: type=1400 audit(1793416931.981:224): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  975.115631][T13909] option 5-1:6.121: GSM modem (1-port) converter detected
[  975.240412][T13909] usb 5-1: USB disconnect, device number 7
[  975.268858][T13909] option 5-1:6.121: device disconnected
[  975.295229][T13345] udevd[13345]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory
[  975.295362][T13345] udevd[13345]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory
[  975.600425][T19013] FAULT_INJECTION: forcing a failure.
[  975.600425][T19013] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  975.600461][T19013] CPU: 0 UID: 0 PID: 19013 Comm: syz.0.3548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.600490][T19013] Tainted: [L]=SOFTLOCKUP
[  975.600498][T19013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  975.600512][T19013] Call Trace:
[  975.600520][T19013]  <TASK>
[  975.600531][T19013]  dump_stack_lvl+0xe8/0x150
[  975.600568][T19013]  should_fail_ex+0x3eb/0x540
[  975.600606][T19013]  _copy_from_user+0x2d/0xb0
[  975.600628][T19013]  video_usercopy+0x359/0x1430
[  975.600666][T19013]  ? __pfx___video_do_ioctl+0x10/0x10
[  975.600701][T19013]  ? __pfx_video_usercopy+0x10/0x10
[  975.600747][T19013]  ? __fget_files+0x2a/0x420
[  975.600774][T19013]  ? __fget_files+0x2a/0x420
[  975.600801][T19013]  v4l2_ioctl+0x18d/0x1e0
[  975.600828][T19013]  ? __pfx_v4l2_ioctl+0x10/0x10
[  975.600855][T19013]  __se_sys_ioctl+0xfc/0x170
[  975.600890][T19013]  do_syscall_64+0x166/0x520
[  975.600923][T19013]  ? trace_irq_disable+0x3b/0x140
[  975.600952][T19013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.600976][T19013]  ? clear_bhb_loop+0x70/0xc0
[  975.601005][T19013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.601029][T19013] RIP: 0033:0x7ff5bb79f559
[  975.601050][T19013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.601071][T19013] RSP: 002b:00007ff5bc5ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  975.601096][T19013] RAX: ffffffffffffffda RBX: 00007ff5bba25fa0 RCX: 00007ff5bb79f559
[  975.601114][T19013] RDX: 0000200000000480 RSI: 00000000c0405610 RDI: 0000000000000006
[  975.601129][T19013] RBP: 00007ff5bc5ed090 R08: 0000000000000000 R09: 0000000000000000
[  975.601155][T19013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  975.601199][T19013] R13: 00007ff5bba26038 R14: 00007ff5bba25fa0 R15: 00007ffc91f49c28
[  975.601236][T19013]  </TASK>
[  975.892536][   T33] audit: type=1400 audit(1793416933.231:225): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137F189ECFE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D7141FD4BFEA647F8593260CC0BD723A4CCA81
[  975.909242][T19020] FAULT_INJECTION: forcing a failure.
[  975.909242][T19020] name failslab, interval 1, probability 0, space 0, times 0
[  975.909284][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.3552 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  975.909315][T19020] Tainted: [L]=SOFTLOCKUP
[  975.909325][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  975.909340][T19020] Call Trace:
[  975.909349][T19020]  <TASK>
[  975.909381][T19020]  dump_stack_lvl+0xe8/0x150
[  975.909423][T19020]  should_fail_ex+0x3eb/0x540
[  975.909465][T19020]  should_failslab+0xa8/0x100
[  975.909499][T19020]  __kmalloc_cache_noprof+0x9e/0x600
[  975.909527][T19020]  ? __kmalloc_cache_noprof+0x148/0x600
[  975.909552][T19020]  ? sctp_add_bind_addr+0x8c/0x370
[  975.909583][T19020]  ? sctp_add_bind_addr+0x8c/0x370
[  975.909622][T19020]  sctp_add_bind_addr+0x8c/0x370
[  975.909658][T19020]  sctp_copy_local_addr_list+0x31a/0x4e0
[  975.909694][T19020]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  975.909726][T19020]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  975.909761][T19020]  ? sctp_v6_is_any+0x64/0x80
[  975.909786][T19020]  ? sctp_copy_one_addr+0x93/0x360
[  975.909825][T19020]  sctp_bind_addr_copy+0xb3/0x3c0
[  975.909860][T19020]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  975.909893][T19020]  sctp_connect_new_asoc+0x2ff/0x6b0
[  975.909921][T19020]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  975.909955][T19020]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  975.909983][T19020]  ? security_sctp_bind_connect+0x7e/0x2c0
[  975.910014][T19020]  sctp_sendmsg+0x159b/0x2d00
[  975.910051][T19020]  ? kstrtouint+0x6e/0xe0
[  975.910080][T19020]  ? __pfx_sctp_sendmsg+0x10/0x10
[  975.910105][T19020]  ? lock_acquire+0x115/0x350
[  975.910162][T19020]  ? aa_sock_msg_perm+0xf5/0x210
[  975.910194][T19020]  ? sock_rps_record_flow+0x19/0x350
[  975.910229][T19020]  ? inet_sendmsg+0x298/0x320
[  975.910262][T19020]  ? __pfx_inet_sendmsg+0x10/0x10
[  975.910292][T19020]  sock_sendmsg_nosec+0x10f/0x190
[  975.910319][T19020]  __sys_sendto+0x408/0x5a0
[  975.910346][T19020]  ? ksys_write+0x1e6/0x270
[  975.910379][T19020]  ? __pfx___sys_sendto+0x10/0x10
[  975.910404][T19020]  ? __mutex_unlock_slowpath+0x731/0x900
[  975.910456][T19020]  ? fdget+0x1ac/0x250
[  975.910497][T19020]  ? __pfx_ksys_write+0x10/0x10
[  975.910533][T19020]  __x64_sys_sendto+0xde/0x100
[  975.910566][T19020]  do_syscall_64+0x166/0x520
[  975.910599][T19020]  ? trace_irq_disable+0x3b/0x140
[  975.910629][T19020]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.910652][T19020]  ? clear_bhb_loop+0x70/0xc0
[  975.910682][T19020]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.910706][T19020] RIP: 0033:0x7ff5bb79f559
[  975.910729][T19020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  975.910750][T19020] RSP: 002b:00007ff5bc5ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  975.910775][T19020] RAX: ffffffffffffffda RBX: 00007ff5bba25fa0 RCX: 00007ff5bb79f559
[  975.910792][T19020] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000003
[  975.910807][T19020] RBP: 00007ff5bc5ed090 R08: 00002000000003c0 R09: 000000000000001c
[  975.910823][T19020] R10: 0000000000065055 R11: 0000000000000246 R12: 0000000000000002
[  975.910837][T19020] R13: 00007ff5bba26038 R14: 00007ff5bba25fa0 R15: 00007ffc91f49c28
[  975.910875][T19020]  </TASK>
[  976.375587][T19018] VFS: Can't find a romfs filesystem on dev mtdblock0.
[  976.375587][T19018] 
[  976.569791][T19026] FAULT_INJECTION: forcing a failure.
[  976.569791][T19026] name failslab, interval 1, probability 0, space 0, times 0
[  976.569821][T19026] CPU: 1 UID: 0 PID: 19026 Comm: syz.1.3555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  976.569843][T19026] Tainted: [L]=SOFTLOCKUP
[  976.569850][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  976.569861][T19026] Call Trace:
[  976.569867][T19026]  <TASK>
[  976.569875][T19026]  dump_stack_lvl+0xe8/0x150
[  976.569906][T19026]  should_fail_ex+0x3eb/0x540
[  976.569936][T19026]  should_failslab+0xa8/0x100
[  976.569962][T19026]  __kmalloc_cache_noprof+0x9e/0x600
[  976.569982][T19026]  ? __kmalloc_cache_noprof+0x148/0x600
[  976.570000][T19026]  ? kvm_dev_ioctl+0xb74/0x1700
[  976.570015][T19026]  ? kvm_dev_ioctl+0xb74/0x1700
[  976.570036][T19026]  kvm_dev_ioctl+0xb74/0x1700
[  976.570066][T19026]  ? __fget_files+0x2a/0x420
[  976.570086][T19026]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  976.570105][T19026]  ? bpf_lsm_file_ioctl+0x9/0x20
[  976.570128][T19026]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  976.570144][T19026]  __se_sys_ioctl+0xfc/0x170
[  976.570170][T19026]  do_syscall_64+0x166/0x520
[  976.570195][T19026]  ? trace_irq_disable+0x3b/0x140
[  976.570216][T19026]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.570233][T19026]  ? clear_bhb_loop+0x70/0xc0
[  976.570256][T19026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.570273][T19026] RIP: 0033:0x7f8679f9f559
[  976.570289][T19026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  976.570303][T19026] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  976.570320][T19026] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[  976.570333][T19026] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000010
[  976.570343][T19026] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[  976.570353][T19026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  976.570363][T19026] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  976.570388][T19026]  </TASK>
[  976.847413][T13909] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  977.000800][T13909] usb 5-1: not running at top speed; connect to a high speed hub
[  977.000845][T13909] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[  977.002338][T13909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  977.002374][T13909] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  977.036592][T13909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.036626][T13909] usb 5-1: Product: syz
[  977.036643][T13909] usb 5-1: Manufacturer: syz
[  977.036659][T13909] usb 5-1: SerialNumber: syz
[  977.078611][T19031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  977.078767][T19031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  977.113005][   T33] audit: type=1400 audit(1793416934.451:226): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  977.209559][ T7861] usb 2-1: new full-speed USB device number 91 using dummy_hcd
[  977.233585][   T33] audit: type=1400 audit(1793416934.571:227): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  977.241151][T19049] FAULT_INJECTION: forcing a failure.
[  977.241151][T19049] name failslab, interval 1, probability 0, space 0, times 0
[  977.241257][T19049] CPU: 1 UID: 0 PID: 19049 Comm: syz.2.3563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  977.241351][T19049] Tainted: [L]=SOFTLOCKUP
[  977.241382][T19049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  977.241432][T19049] Call Trace:
[  977.241462][T19049]  <TASK>
[  977.241503][T19049]  dump_stack_lvl+0xe8/0x150
[  977.241613][T19049]  should_fail_ex+0x3eb/0x540
[  977.241722][T19049]  ? __pfx_lowpan_enable_set+0x10/0x10
[  977.241812][T19049]  should_failslab+0xa8/0x100
[  977.241939][T19049]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  977.242019][T19049]  __kmalloc_cache_noprof+0x9e/0x600
[  977.242097][T19049]  ? simple_attr_open+0x62/0x180
[  977.242163][T19049]  ? simple_attr_open+0x62/0x180
[  977.242236][T19049]  ? __pfx___debugfs_file_get+0x10/0x10
[  977.242312][T19049]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  977.242391][T19049]  ? __pfx_lowpan_enable_set+0x10/0x10
[  977.242478][T19049]  ? __pfx_lowpan_enable_get+0x10/0x10
[  977.242575][T19049]  simple_attr_open+0x62/0x180
[  977.242649][T19049]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  977.242746][T19049]  open_proxy_open+0x2ff/0x480
[  977.242837][T19049]  ? __pfx_open_proxy_open+0x10/0x10
[  977.242904][T19049]  do_dentry_open+0x80e/0x1360
[  977.243038][T19049]  vfs_open_consume+0x4a/0x350
[  977.243127][T19049]  ? path_openat+0x16e1/0x20f0
[  977.243214][T19049]  path_openat+0x16fc/0x20f0
[  977.243346][T19049]  do_file_open+0x23e/0x4a0
[  977.243444][T19049]  ? __pfx_do_file_open+0x10/0x10
[  977.243595][T19049]  ? _raw_spin_unlock+0x28/0x50
[  977.243674][T19049]  ? alloc_fd+0x6af/0x760
[  977.243771][T19049]  do_sys_openat2+0x115/0x200
[  977.243829][T19049]  ? __se_sys_futex+0x3a8/0x450
[  977.243927][T19049]  ? __pfx_do_sys_openat2+0x10/0x10
[  977.243998][T19049]  ? rcu_is_watching+0x16/0xb0
[  977.244097][T19049]  __x64_sys_openat+0x138/0x170
[  977.244189][T19049]  do_syscall_64+0x166/0x520
[  977.244278][T19049]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.244337][T19049]  ? clear_bhb_loop+0x70/0xc0
[  977.244413][T19049]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  977.244476][T19049] RIP: 0033:0x7f9e4a59f559
[  977.244550][T19049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  977.244590][T19049] RSP: 002b:00007f9e4b47c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  977.244663][T19049] RAX: ffffffffffffffda RBX: 00007f9e4a825fa0 RCX: 00007f9e4a59f559
[  977.244707][T19049] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  977.244751][T19049] RBP: 00007f9e4a636b20 R08: 0000000000000000 R09: 0000000000000000
[  977.244793][T19049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  977.244828][T19049] R13: 00007f9e4a826038 R14: 00007f9e4a825fa0 R15: 00007ffcd2caad28
[  977.244924][T19049]  </TASK>
[  977.413838][T13909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  977.413915][T13909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  977.413938][T13909] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  977.729412][ T7861] usb 2-1: not running at top speed; connect to a high speed hub
[  977.729453][ T7861] usb 2-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  977.785247][ T7861] usb 2-1: config 6 has an invalid interface number: 121 but max is 0
[  977.785281][ T7861] usb 2-1: config 6 has an invalid interface number: 135 but max is 0
[  977.785305][ T7861] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  977.785329][ T7861] usb 2-1: config 6 has no interface number 0
[  977.785347][ T7861] usb 2-1: config 6 has no interface number 1
[  977.785422][ T7861] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  977.785453][ T7861] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  977.785484][ T7861] usb 2-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  977.785558][ T7861] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  977.785589][ T7861] usb 2-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  977.785620][ T7861] usb 2-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  977.785669][ T7861] usb 2-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  977.785695][ T7861] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  977.785724][ T7861] usb 2-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  977.785750][ T7861] usb 2-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  977.785775][ T7861] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  977.785803][ T7861] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  977.785828][ T7861] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  977.785855][ T7861] usb 2-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  977.785880][ T7861] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  977.785908][ T7861] usb 2-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  977.785938][ T7861] usb 2-1: config 6 interface 121 has no altsetting 0
[  977.785958][ T7861] usb 2-1: config 6 interface 135 has no altsetting 0
[  977.907465][ T7861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.907501][ T7861] usb 2-1: Product: Н
[  977.907519][ T7861] usb 2-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  977.907545][ T7861] usb 2-1: SerialNumber: syz
[  977.955186][T13909] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  978.104554][T13909] usb 5-1: USB disconnect, device number 8
[  978.305870][ T7861] option 2-1:6.121: GSM modem (1-port) converter detected
[  978.353627][ T7861] usb 2-1: USB disconnect, device number 91
[  978.371935][ T7861] option 2-1:6.121: device disconnected
[  978.636508][T13292] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  978.667606][   T33] audit: type=1400 audit(1793416936.001:228): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  978.719630][   T33] audit: type=1400 audit(1793416936.061:229): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137F189ECFE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D7141FD4BFEA647F8593260CC0BD723A4CCA81
[  978.794729][T13292] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  978.855784][T13292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  978.855960][T13292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.926232][T13292] usb 3-1: config 0 descriptor??
[  979.072511][T19077] jffs2: notice: (19077) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  979.201256][T13292] usbhid 3-1:0.0: can't add hid device: -71
[  979.201377][T13292] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  979.226582][T13292] usb 3-1: USB disconnect, device number 51
[  979.662158][T19100] dlm: non-version read from control device 8224
[  979.663253][T19098] FAULT_INJECTION: forcing a failure.
[  979.663253][T19098] name failslab, interval 1, probability 0, space 0, times 0
[  979.663289][T19098] CPU: 1 UID: 0 PID: 19098 Comm: syz.1.3578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  979.663333][T19098] Tainted: [L]=SOFTLOCKUP
[  979.663343][T19098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  979.663358][T19098] Call Trace:
[  979.663367][T19098]  <TASK>
[  979.663377][T19098]  dump_stack_lvl+0xe8/0x150
[  979.663419][T19098]  should_fail_ex+0x3eb/0x540
[  979.663458][T19098]  ? __pfx_lowpan_enable_set+0x10/0x10
[  979.663494][T19098]  should_failslab+0xa8/0x100
[  979.663526][T19098]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  979.663561][T19098]  __kmalloc_cache_noprof+0x9e/0x600
[  979.663590][T19098]  ? simple_attr_open+0x62/0x180
[  979.663612][T19098]  ? simple_attr_open+0x62/0x180
[  979.663635][T19098]  ? __pfx___debugfs_file_get+0x10/0x10
[  979.663661][T19098]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  979.663691][T19098]  ? __pfx_lowpan_enable_set+0x10/0x10
[  979.663725][T19098]  ? __pfx_lowpan_enable_get+0x10/0x10
[  979.663756][T19098]  simple_attr_open+0x62/0x180
[  979.663782][T19098]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  979.663818][T19098]  open_proxy_open+0x2ff/0x480
[  979.663846][T19098]  ? __pfx_open_proxy_open+0x10/0x10
[  979.663871][T19098]  do_dentry_open+0x80e/0x1360
[  979.663913][T19098]  vfs_open_consume+0x4a/0x350
[  979.663987][T19098]  ? path_openat+0x16e1/0x20f0
[  979.664017][T19098]  path_openat+0x16fc/0x20f0
[  979.664086][T19098]  do_file_open+0x23e/0x4a0
[  979.664130][T19098]  ? __pfx_do_file_open+0x10/0x10
[  979.664182][T19098]  ? _raw_spin_unlock+0x28/0x50
[  979.664218][T19098]  ? alloc_fd+0x6af/0x760
[  979.664255][T19098]  do_sys_openat2+0x115/0x200
[  979.664277][T19098]  ? __se_sys_futex+0x3a8/0x450
[  979.664328][T19098]  ? __pfx_do_sys_openat2+0x10/0x10
[  979.664358][T19098]  ? rcu_is_watching+0x16/0xb0
[  979.664402][T19098]  __x64_sys_openat+0x138/0x170
[  979.664431][T19098]  do_syscall_64+0x166/0x520
[  979.664465][T19098]  ? trace_irq_disable+0x3b/0x140
[  979.664494][T19098]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.664517][T19098]  ? clear_bhb_loop+0x70/0xc0
[  979.664552][T19098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  979.664575][T19098] RIP: 0033:0x7f8679f9f559
[  979.664598][T19098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  979.664621][T19098] RSP: 002b:00007f867ae6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  979.664648][T19098] RAX: ffffffffffffffda RBX: 00007f867a226090 RCX: 00007f8679f9f559
[  979.664666][T19098] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  979.664681][T19098] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[  979.664695][T19098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  979.664709][T19098] R13: 00007f867a226128 R14: 00007f867a226090 R15: 00007ffc082322f8
[  979.664749][T19098]  </TASK>
[  979.769832][T13292] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  979.777065][ T4957] Bluetooth: hci3: command 0x0406 tx timeout
[  980.004660][T13292] usb 3-1: New USB device found: idVendor=046d, idProduct=c539, bcdDevice=0.00
[  980.005811][T13292] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  980.005845][T13292] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  980.005873][T13292] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  980.005902][T13292] usb 3-1: config 0 interface 0 has no altsetting 0
[  980.005936][T13292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.078733][T13292] usb 3-1: config 0 descriptor??
[  980.282486][   T33] audit: type=1400 audit(1793416937.621:230): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  980.515150][T13292] logitech-djreceiver 0003:046D:C539.0049: hidraw0: USB HID v0.00 Keyboard [HID 046d:c539] on usb-dummy_hcd.2-1/input0
[  980.730893][T19061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  980.735752][T19061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  980.959589][ T7861] usb 3-1: USB disconnect, device number 52
[  981.186480][   T32] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  981.337357][   T32] usb 2-1: New USB device found: idVendor=05ac, idProduct=0241, bcdDevice=0.40
[  981.338927][   T32] usb 2-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30
[  981.338963][   T32] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[  981.338984][   T32] usb 2-1: config 1 interface 0 has no altsetting 0
[  981.340763][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.340783][   T32] usb 2-1: Product: syz
[  981.340795][   T32] usb 2-1: Manufacturer: syz
[  981.340806][   T32] usb 2-1: SerialNumber: syz
[  981.563826][T19127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.565733][T19127] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.596709][T19131] jffs2: notice: (19131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  981.646525][   T32] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input103
[  981.650672][ T4991] bcm5974 2-1:1.0: could not read from device
[  981.674896][ T4991] bcm5974 2-1:1.0: could not read from device
[  981.682653][ T4991] bcm5974 2-1:1.0: could not read from device
[  981.685204][ T4991] bcm5974 2-1:1.0: could not read from device
[  981.705430][   T32] usb 2-1: USB disconnect, device number 92
[  981.796223][   T33] audit: type=1400 audit(1793416939.131:231): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  982.197873][   T33] audit: type=1400 audit(1793416939.541:232): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  982.422759][T19146] FAULT_INJECTION: forcing a failure.
[  982.422759][T19146] name failslab, interval 1, probability 0, space 0, times 0
[  982.422799][T19146] CPU: 1 UID: 0 PID: 19146 Comm: syz.4.3594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  982.422832][T19146] Tainted: [L]=SOFTLOCKUP
[  982.422841][T19146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  982.422856][T19146] Call Trace:
[  982.422867][T19146]  <TASK>
[  982.422878][T19146]  dump_stack_lvl+0xe8/0x150
[  982.422919][T19146]  should_fail_ex+0x3eb/0x540
[  982.422958][T19146]  ? __pfx_lowpan_enable_set+0x10/0x10
[  982.422994][T19146]  should_failslab+0xa8/0x100
[  982.423027][T19146]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  982.423061][T19146]  __kmalloc_cache_noprof+0x9e/0x600
[  982.423090][T19146]  ? simple_attr_open+0x62/0x180
[  982.423116][T19146]  ? simple_attr_open+0x62/0x180
[  982.423147][T19146]  ? __pfx___debugfs_file_get+0x10/0x10
[  982.423174][T19146]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  982.423207][T19146]  ? __pfx_lowpan_enable_set+0x10/0x10
[  982.423240][T19146]  ? __pfx_lowpan_enable_get+0x10/0x10
[  982.423272][T19146]  simple_attr_open+0x62/0x180
[  982.423298][T19146]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  982.423335][T19146]  open_proxy_open+0x2ff/0x480
[  982.423363][T19146]  ? __pfx_open_proxy_open+0x10/0x10
[  982.423389][T19146]  do_dentry_open+0x80e/0x1360
[  982.423437][T19146]  vfs_open_consume+0x4a/0x350
[  982.423472][T19146]  ? path_openat+0x16e1/0x20f0
[  982.423505][T19146]  path_openat+0x16fc/0x20f0
[  982.423556][T19146]  do_file_open+0x23e/0x4a0
[  982.423602][T19146]  ? __pfx_do_file_open+0x10/0x10
[  982.423657][T19146]  ? _raw_spin_unlock+0x28/0x50
[  982.423688][T19146]  ? alloc_fd+0x6af/0x760
[  982.423726][T19146]  do_sys_openat2+0x115/0x200
[  982.423750][T19146]  ? __se_sys_futex+0x3a8/0x450
[  982.423786][T19146]  ? __pfx_do_sys_openat2+0x10/0x10
[  982.423816][T19146]  ? rcu_is_watching+0x16/0xb0
[  982.423854][T19146]  __x64_sys_openat+0x138/0x170
[  982.423884][T19146]  do_syscall_64+0x166/0x520
[  982.423919][T19146]  ? trace_irq_disable+0x3b/0x140
[  982.423948][T19146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.423972][T19146]  ? clear_bhb_loop+0x70/0xc0
[  982.424003][T19146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.424027][T19146] RIP: 0033:0x7f6e4599f559
[  982.424049][T19146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  982.424069][T19146] RSP: 002b:00007f6e46878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  982.424095][T19146] RAX: ffffffffffffffda RBX: 00007f6e45c25fa0 RCX: 00007f6e4599f559
[  982.424113][T19146] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  982.424130][T19146] RBP: 00007f6e45a36b20 R08: 0000000000000000 R09: 0000000000000000
[  982.424145][T19146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  982.424160][T19146] R13: 00007f6e45c26038 R14: 00007f6e45c25fa0 R15: 00007ffca9b46528
[  982.424197][T19146]  </TASK>
[  983.490723][   T33] audit: type=1400 audit(1793416940.831:233): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  983.547077][T19166] jffs2: notice: (19166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  983.806424][   T32] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  983.956740][   T32] usb 3-1: Using ep0 maxpacket: 16
[  983.963789][   T32] usb 3-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  983.966169][   T32] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  983.966207][   T32] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  983.966232][   T32] usb 3-1: config 0 interface 0 has no altsetting 0
[  983.967410][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.024264][   T32] usb 3-1: config 0 descriptor??
[  984.077168][T19180] FAULT_INJECTION: forcing a failure.
[  984.077168][T19180] name failslab, interval 1, probability 0, space 0, times 0
[  984.077217][T19180] CPU: 1 UID: 0 PID: 19180 Comm: syz.0.3607 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  984.077252][T19180] Tainted: [L]=SOFTLOCKUP
[  984.077262][T19180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  984.077277][T19180] Call Trace:
[  984.077286][T19180]  <TASK>
[  984.077296][T19180]  dump_stack_lvl+0xe8/0x150
[  984.077337][T19180]  should_fail_ex+0x3eb/0x540
[  984.077375][T19180]  ? __pfx_lowpan_enable_set+0x10/0x10
[  984.077412][T19180]  should_failslab+0xa8/0x100
[  984.077447][T19180]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  984.077480][T19180]  __kmalloc_cache_noprof+0x9e/0x600
[  984.077509][T19180]  ? simple_attr_open+0x62/0x180
[  984.077533][T19180]  ? simple_attr_open+0x62/0x180
[  984.077559][T19180]  ? __pfx___debugfs_file_get+0x10/0x10
[  984.077584][T19180]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  984.077614][T19180]  ? __pfx_lowpan_enable_set+0x10/0x10
[  984.077646][T19180]  ? __pfx_lowpan_enable_get+0x10/0x10
[  984.077676][T19180]  simple_attr_open+0x62/0x180
[  984.077703][T19180]  ? __pfx_lowpan_enable_fops_open+0x10/0x10
[  984.077738][T19180]  open_proxy_open+0x2ff/0x480
[  984.077766][T19180]  ? __pfx_open_proxy_open+0x10/0x10
[  984.077791][T19180]  do_dentry_open+0x80e/0x1360
[  984.077840][T19180]  vfs_open_consume+0x4a/0x350
[  984.077873][T19180]  ? path_openat+0x16e1/0x20f0
[  984.077906][T19180]  path_openat+0x16fc/0x20f0
[  984.077956][T19180]  do_file_open+0x23e/0x4a0
[  984.077992][T19180]  ? __pfx_do_file_open+0x10/0x10
[  984.078043][T19180]  ? _raw_spin_unlock+0x28/0x50
[  984.078071][T19180]  ? alloc_fd+0x6af/0x760
[  984.078107][T19180]  do_sys_openat2+0x115/0x200
[  984.078129][T19180]  ? __se_sys_futex+0x3a8/0x450
[  984.078163][T19180]  ? __pfx_do_sys_openat2+0x10/0x10
[  984.078205][T19180]  ? rcu_is_watching+0x16/0xb0
[  984.078242][T19180]  __x64_sys_openat+0x138/0x170
[  984.078269][T19180]  do_syscall_64+0x166/0x520
[  984.078301][T19180]  ? trace_irq_disable+0x3b/0x140
[  984.078329][T19180]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.078351][T19180]  ? clear_bhb_loop+0x70/0xc0
[  984.078379][T19180]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  984.078401][T19180] RIP: 0033:0x7ff5bb79f559
[  984.078422][T19180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  984.078441][T19180] RSP: 002b:00007ff5bc5cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  984.078462][T19180] RAX: ffffffffffffffda RBX: 00007ff5bba26090 RCX: 00007ff5bb79f559
[  984.078477][T19180] RDX: 0000000000000002 RSI: 00002000000004c0 RDI: ffffffffffffff9c
[  984.078490][T19180] RBP: 00007ff5bb836b20 R08: 0000000000000000 R09: 0000000000000000
[  984.078502][T19180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  984.078514][T19180] R13: 00007ff5bba26128 R14: 00007ff5bba26090 R15: 00007ffc91f49c28
[  984.078542][T19180]  </TASK>
[  984.582016][   T32] hid_parser_main: 15 callbacks suppressed
[  984.582046][   T32] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0
[  984.582078][   T32] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0
[  984.582106][   T32] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0
[  984.582132][   T32] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0
[  984.582159][   T32] mcp2221 0003:04D8:00DD.004A: unknown main item tag 0x0
[  984.583667][   T32] mcp2221 0003:04D8:00DD.004A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  984.628983][   T11] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[  984.759599][   T33] audit: type=1400 audit(1793416942.101:234): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  984.783552][ T7861] usb 3-1: USB disconnect, device number 53
[  984.890680][   T11] usb 2-1: not running at top speed; connect to a high speed hub
[  984.890715][   T11] usb 2-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  984.904230][   T11] usb 2-1: config 6 has an invalid interface number: 121 but max is 0
[  984.904318][   T11] usb 2-1: config 6 has an invalid interface number: 135 but max is 0
[  984.904407][   T11] usb 2-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  984.904429][   T11] usb 2-1: config 6 has no interface number 0
[  984.904445][   T11] usb 2-1: config 6 has no interface number 1
[  984.904510][   T11] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  984.904543][   T11] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  984.904573][   T11] usb 2-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  984.904602][   T11] usb 2-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  984.904631][   T11] usb 2-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  984.904657][   T11] usb 2-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  984.904696][   T11] usb 2-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  984.904719][   T11] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  984.904748][   T11] usb 2-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  984.904775][   T11] usb 2-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  984.904801][   T11] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  984.904831][   T11] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  984.904857][   T11] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  984.904897][   T11] usb 2-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  984.904922][   T11] usb 2-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  984.904950][   T11] usb 2-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  984.904980][   T11] usb 2-1: config 6 interface 121 has no altsetting 0
[  984.905000][   T11] usb 2-1: config 6 interface 135 has no altsetting 0
[  984.956073][   T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.956158][   T11] usb 2-1: Product: Н
[  984.956208][   T11] usb 2-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  984.957207][   T11] usb 2-1: SerialNumber: syz
[  985.221998][T19190] jffs2: notice: (19190) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  985.429040][   T11] option 2-1:6.121: GSM modem (1-port) converter detected
[  985.529252][   T11] usb 2-1: USB disconnect, device number 93
[  985.557082][   T11] option 2-1:6.121: device disconnected
[  985.687827][T19202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3621'.
[  986.113156][   T33] audit: type=1400 audit(1793416943.451:235): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  986.249010][T19222] batadv_slave_1: entered promiscuous mode
[  986.656918][T19221] batadv_slave_1: left promiscuous mode
[  986.691606][T19232] jffs2: notice: (19232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  987.142871][   T33] audit: type=1400 audit(1793416944.481:236): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  987.217671][   T32] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  987.398973][   T32] usb 3-1: not running at top speed; connect to a high speed hub
[  987.399017][   T32] usb 3-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  987.400210][   T32] usb 3-1: config 6 has an invalid interface number: 121 but max is 0
[  987.400240][   T32] usb 3-1: config 6 has an invalid interface number: 135 but max is 0
[  987.400264][   T32] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  987.400288][   T32] usb 3-1: config 6 has no interface number 0
[  987.400306][   T32] usb 3-1: config 6 has no interface number 1
[  987.400362][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  987.400392][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  987.400421][   T32] usb 3-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  987.400448][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  987.400478][   T32] usb 3-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  987.400508][   T32] usb 3-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  987.400551][   T32] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  987.400576][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  987.400606][   T32] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  987.400632][   T32] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  987.400657][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  987.400687][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  987.400713][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  987.400744][   T32] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  987.400770][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  987.400799][   T32] usb 3-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  987.400830][   T32] usb 3-1: config 6 interface 121 has no altsetting 0
[  987.400850][   T32] usb 3-1: config 6 interface 135 has no altsetting 0
[  987.403239][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  987.403268][   T32] usb 3-1: Product: Н
[  987.403285][   T32] usb 3-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  987.403312][   T32] usb 3-1: SerialNumber: syz
[  987.769219][   T32] option 3-1:6.121: GSM modem (1-port) converter detected
[  987.836370][   T32] usb 3-1: USB disconnect, device number 54
[  987.866885][   T32] option 3-1:6.121: device disconnected
[  987.999564][T19260] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3642'.
[  988.086381][T19269] jffs2: notice: (19269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  988.505907][T19282] af_packet: tpacket_rcv: packet too big, clamped from 8 to 4294967272. macoff=96
[  988.556434][T13909] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  988.709588][T13909] usb 5-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00
[  988.712083][T13909] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  988.712162][T13909] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  988.712217][T13909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.766791][T13909] snd-ua101 5-1:1.1: invalid bNumEndpoints
[  988.766828][T13909] snd-ua101 5-1:1.0: invalid num_altsetting
[  988.825895][T19292] jffs2: notice: (19292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  988.965991][   T32] usb 5-1: USB disconnect, device number 9
[  989.100481][T19298] tmpfs: Unknown parameter 'mpolprefer'
[  989.416899][T13909] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  989.588834][T13909] usb 3-1: not running at top speed; connect to a high speed hub
[  989.588878][T13909] usb 3-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  989.593486][T13909] usb 3-1: config 6 has an invalid interface number: 121 but max is 0
[  989.593517][T13909] usb 3-1: config 6 has an invalid interface number: 135 but max is 0
[  989.593542][T13909] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  989.593565][T13909] usb 3-1: config 6 has no interface number 0
[  989.593584][T13909] usb 3-1: config 6 has no interface number 1
[  989.593638][T13909] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  989.593678][T13909] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  989.593707][T13909] usb 3-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  989.593736][T13909] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  989.593767][T13909] usb 3-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  989.593797][T13909] usb 3-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  989.593839][T13909] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  989.593866][T13909] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  989.593895][T13909] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  989.593921][T13909] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  989.593946][T13909] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  989.593975][T13909] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  989.594001][T13909] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  989.594030][T13909] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  989.594055][T13909] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  989.594084][T13909] usb 3-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  989.594114][T13909] usb 3-1: config 6 interface 121 has no altsetting 0
[  989.594134][T13909] usb 3-1: config 6 interface 135 has no altsetting 0
[  989.845890][T13909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.845933][T13909] usb 3-1: Product: Н
[  989.845953][T13909] usb 3-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  989.845987][T13909] usb 3-1: SerialNumber: syz
[  989.989182][T19317] jffs2: notice: (19317) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  990.155863][T13909] option 3-1:6.121: GSM modem (1-port) converter detected
[  990.212719][T13909] usb 3-1: USB disconnect, device number 55
[  990.227091][T13909] option 3-1:6.121: device disconnected
[  990.841284][T19351] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  991.043202][T19357] jffs2: notice: (19357) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  991.576789][   T11] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  991.586583][T13292] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  991.660574][T19379] jffs2: notice: (19379) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  991.730468][   T11] usb 5-1: not running at top speed; connect to a high speed hub
[  991.730506][   T11] usb 5-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  991.731538][   T11] usb 5-1: config 6 has an invalid interface number: 121 but max is 0
[  991.731565][   T11] usb 5-1: config 6 has an invalid interface number: 135 but max is 0
[  991.731590][   T11] usb 5-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  991.731613][   T11] usb 5-1: config 6 has no interface number 0
[  991.731631][   T11] usb 5-1: config 6 has no interface number 1
[  991.731686][   T11] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  991.731714][   T11] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  991.731744][   T11] usb 5-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  991.731772][   T11] usb 5-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  991.731802][   T11] usb 5-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  991.731831][   T11] usb 5-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  991.731871][   T11] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  991.731896][   T11] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  991.731924][   T11] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  991.731950][   T11] usb 5-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  991.731985][   T11] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  991.732015][   T11] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  991.732040][   T11] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  991.732069][   T11] usb 5-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  991.732096][   T11] usb 5-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  991.732125][   T11] usb 5-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  991.732156][   T11] usb 5-1: config 6 interface 121 has no altsetting 0
[  991.732176][   T11] usb 5-1: config 6 interface 135 has no altsetting 0
[  991.734367][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.734394][   T11] usb 5-1: Product: Н
[  991.734411][   T11] usb 5-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  991.734438][   T11] usb 5-1: SerialNumber: syz
[  991.787780][T13292] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40
[  991.879638][T13292] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  991.879673][T13292] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  991.999288][T13292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.999322][T13292] usb 3-1: Product: syz
[  991.999338][T13292] usb 3-1: Manufacturer: syz
[  991.999355][T13292] usb 3-1: SerialNumber: syz
[  992.102711][   T11] option 5-1:6.121: GSM modem (1-port) converter detected
[  992.166686][   T11] usb 5-1: USB disconnect, device number 10
[  992.185824][   T11] option 5-1:6.121: device disconnected
[  992.691646][T13292] usb 3-1: cannot find UAC_HEADER
[  992.701212][T19387] jffs2: notice: (19387) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  992.819396][T13292] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  992.823755][T13292] usb 3-1: USB disconnect, device number 56
[  992.876593][T13345] udevd[13345]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  992.974861][   T33] audit: type=1326 audit(1793416950.311:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19395 comm="syz.1.3692" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8679f9f559 code=0x0
[  993.002871][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  993.002936][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  993.044028][T19400] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3694'.
[  993.204948][T19402] overlay: ./file0 is not a directory
[  993.213797][T19402] libceph: resolve '.�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[  993.318182][T19406] syz.2.3696: attempt to access beyond end of device
[  993.318182][T19406] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192
[  993.392113][T19406] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO)
[  993.392145][T19406] device-mapper: ioctl: error adding target to table
[  993.504473][T19412] jffs2: notice: (19412) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  993.815722][T19425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3703'.
[  993.984554][T19429] FAULT_INJECTION: forcing a failure.
[  993.984554][T19429] name failslab, interval 1, probability 0, space 0, times 0
[  993.984593][T19429] CPU: 0 UID: 0 PID: 19429 Comm: syz.1.3705 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  993.984644][T19429] Tainted: [L]=SOFTLOCKUP
[  993.984656][T19429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  993.984670][T19429] Call Trace:
[  993.984679][T19429]  <TASK>
[  993.984690][T19429]  dump_stack_lvl+0xe8/0x150
[  993.984730][T19429]  should_fail_ex+0x3eb/0x540
[  993.984771][T19429]  should_failslab+0xa8/0x100
[  993.984806][T19429]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  993.984834][T19429]  ? __d_alloc+0x37/0x820
[  993.984859][T19429]  ? __d_alloc+0x37/0x820
[  993.984893][T19429]  __d_alloc+0x37/0x820
[  993.984927][T19429]  d_alloc+0x4b/0x190
[  993.984955][T19429]  ? lookup_one_qstr_excl+0xc4/0x360
[  993.984987][T19429]  lookup_one_qstr_excl+0xd8/0x360
[  993.985015][T19429]  ? lookup_noperm_common+0x245/0x430
[  993.985045][T19429]  start_dirop+0x5c/0x90
[  993.985071][T19429]  simple_start_creating+0xcc/0x110
[  993.985101][T19429]  ? __pfx_simple_start_creating+0x10/0x10
[  993.985144][T19429]  debugfs_start_creating+0xca/0x1b0
[  993.985179][T19429]  __debugfs_create_file+0x6f/0x400
[  993.985207][T19429]  debugfs_create_file_full+0x3f/0x60
[  993.985235][T19429]  kvm_arch_create_vcpu_debugfs+0x41/0x150
[  993.985265][T19429]  kvm_create_vcpu_debugfs+0x146/0x1c0
[  993.985302][T19429]  ? __pfx_kvm_create_vcpu_debugfs+0x10/0x10
[  993.985336][T19429]  ? kvm_arch_vcpu_put+0x61c/0x910
[  993.985371][T19429]  ? vcpu_put+0x69/0x90
[  993.985401][T19429]  ? kvm_arch_vcpu_postcreate+0x109/0x140
[  993.985430][T19429]  kvm_vm_ioctl_create_vcpu+0x6e4/0x9f0
[  993.985463][T19429]  ? __se_sys_ioctl+0x47/0x170
[  993.985503][T19429]  ? __pfx_kvm_vm_ioctl_create_vcpu+0x10/0x10
[  993.985550][T19429]  kvm_vm_ioctl+0x442/0xcb0
[  993.985587][T19429]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  993.985637][T19429]  ? kasan_quarantine_put+0xbb/0x1f0
[  993.985676][T19429]  ? tomoyo_path_number_perm+0x219/0x5f0
[  993.985707][T19429]  ? tomoyo_path_number_perm+0x219/0x5f0
[  993.985740][T19429]  ? do_vfs_ioctl+0x116f/0x1530
[  993.985774][T19429]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  993.985819][T19429]  ? do_futex+0x3e7/0x4e0
[  993.985874][T19429]  ? __fget_files+0x2a/0x420
[  993.985903][T19429]  ? __fget_files+0x2a/0x420
[  993.985929][T19429]  ? __fget_files+0x2a/0x420
[  993.985960][T19429]  ? bpf_lsm_file_ioctl+0x9/0x20
[  993.985990][T19429]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  993.986024][T19429]  __se_sys_ioctl+0xfc/0x170
[  993.986058][T19429]  do_syscall_64+0x166/0x520
[  993.986091][T19429]  ? trace_irq_disable+0x3b/0x140
[  993.986120][T19429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.986144][T19429]  ? clear_bhb_loop+0x70/0xc0
[  993.986179][T19429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  993.986202][T19429] RIP: 0033:0x7f8679f9f559
[  993.986229][T19429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  993.986248][T19429] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  993.986272][T19429] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[  993.986288][T19429] RDX: 0000000000000003 RSI: 000000000000ae41 RDI: 0000000000000004
[  993.986302][T19429] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[  993.986315][T19429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  993.986328][T19429] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  993.986365][T19429]  </TASK>
[  994.391361][T19435] syz.4.3706: attempt to access beyond end of device
[  994.391361][T19435] ram9: rw=2048, sector=8191, nr_sectors = 8 limit=8192
[  994.442036][T19435] device-mapper: table: 248:15: integrity: Error reading superblock (-EIO)
[  994.442067][T19435] device-mapper: ioctl: error adding target to table
[  994.605276][T19443] jffs2: notice: (19443) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  994.706035][T19448] jffs2: notice: (19448) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  994.883827][T19456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3714'.
[  995.060425][T19462] syz.1.3716: attempt to access beyond end of device
[  995.060425][T19462] ram3: rw=2048, sector=8191, nr_sectors = 8 limit=8192
[  995.156823][T19462] device-mapper: table: 248:27: integrity: Error reading superblock (-EIO)
[  995.156856][T19462] device-mapper: ioctl: error adding target to table
[  995.189536][T13909] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  995.236502][   T11] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  995.337569][T13909] usb 5-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80
[  995.338542][T13909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.338566][T13909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  995.338595][T13909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.340968][T13909] usb 5-1: config 0 descriptor??
[  995.395203][   T11] usb 3-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00
[  995.401886][   T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  995.402213][   T11] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  995.402416][   T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.453927][   T11] snd-ua101 3-1:1.1: invalid bNumEndpoints
[  995.453981][   T11] snd-ua101 3-1:1.0: invalid num_altsetting
[  995.585674][T19477] jffs2: notice: (19477) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  995.671488][   T11] usb 3-1: USB disconnect, device number 57
[  995.672048][T19480] FAULT_INJECTION: forcing a failure.
[  995.672048][T19480] name failslab, interval 1, probability 0, space 0, times 0
[  995.672097][T19480] CPU: 1 UID: 0 PID: 19480 Comm: syz.1.3721 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  995.672130][T19480] Tainted: [L]=SOFTLOCKUP
[  995.672140][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  995.672154][T19480] Call Trace:
[  995.672164][T19480]  <TASK>
[  995.672174][T19480]  dump_stack_lvl+0xe8/0x150
[  995.672214][T19480]  should_fail_ex+0x3eb/0x540
[  995.672265][T19480]  should_failslab+0xa8/0x100
[  995.672300][T19480]  __kmalloc_noprof+0xf9/0x710
[  995.672327][T19480]  ? tomoyo_encode+0x2ad/0x570
[  995.672360][T19480]  ? tomoyo_encode+0x2ad/0x570
[  995.672394][T19480]  ? __get_fs_type+0x21/0x280
[  995.672428][T19480]  tomoyo_encode+0x2ad/0x570
[  995.672469][T19480]  tomoyo_mount_permission+0x50d/0x9e0
[  995.672501][T19480]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  995.672544][T19480]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  995.672579][T19480]  ? kasan_save_track+0x4f/0x80
[  995.672659][T19480]  ? kasan_quarantine_put+0xbb/0x1f0
[  995.672690][T19480]  security_sb_mount+0xe4/0x320
[  995.672726][T19480]  path_mount+0xbc/0x1050
[  995.672755][T19480]  ? user_path_at+0xd4/0x160
[  995.672786][T19480]  __se_sys_mount+0x31d/0x420
[  995.672818][T19480]  ? __pfx___se_sys_mount+0x10/0x10
[  995.672851][T19480]  ? __x64_sys_mount+0x20/0xc0
[  995.672879][T19480]  do_syscall_64+0x166/0x520
[  995.672917][T19480]  ? trace_irq_disable+0x3b/0x140
[  995.672946][T19480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.672970][T19480]  ? clear_bhb_loop+0x70/0xc0
[  995.673000][T19480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.673023][T19480] RIP: 0033:0x7f8679f9f559
[  995.673044][T19480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.673062][T19480] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  995.673111][T19480] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[  995.673129][T19480] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000200000000880
[  995.673146][T19480] RBP: 00007f867ae90090 R08: 0000000000000000 R09: 0000000000000000
[  995.673160][T19480] R10: 0000000000800040 R11: 0000000000000246 R12: 0000000000000002
[  995.673173][T19480] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  995.673206][T19480]  </TASK>
[  995.939032][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939078][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939108][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939136][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939164][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939192][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.939220][T13909] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0
[  995.984763][T13909] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  996.091079][T13909] cp2112 0003:10C4:EA90.004B: Part Number: 0x00 Device Version: 0x00
[  996.200093][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3724'.
[  996.344952][T19489] syz.2.3725: attempt to access beyond end of device
[  996.344952][T19489] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192
[  996.388293][T19489] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO)
[  996.388326][T19489] device-mapper: ioctl: error adding target to table
[  996.529664][T19497] FAULT_INJECTION: forcing a failure.
[  996.529664][T19497] name failslab, interval 1, probability 0, space 0, times 0
[  996.529701][T19497] CPU: 1 UID: 0 PID: 19497 Comm: syz.1.3727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  996.529731][T19497] Tainted: [L]=SOFTLOCKUP
[  996.529740][T19497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  996.529754][T19497] Call Trace:
[  996.529762][T19497]  <TASK>
[  996.529772][T19497]  dump_stack_lvl+0xe8/0x150
[  996.529810][T19497]  should_fail_ex+0x3eb/0x540
[  996.529850][T19497]  should_failslab+0xa8/0x100
[  996.529882][T19497]  __kmalloc_cache_node_noprof+0xa5/0x620
[  996.529920][T19497]  ? __kmalloc_noprof+0x1a6/0x710
[  996.529943][T19497]  ? __alloc_workqueue+0x7dc/0x21d0
[  996.529964][T19497]  ? __alloc_workqueue+0x7dc/0x21d0
[  996.529992][T19497]  __alloc_workqueue+0x7dc/0x21d0
[  996.530036][T19497]  alloc_workqueue_noprof+0xe3/0x210
[  996.530066][T19497]  ? __pfx_alloc_workqueue_noprof+0x10/0x10
[  996.530090][T19497]  ? __raw_spin_lock_init+0x45/0x100
[  996.530125][T19497]  ? __init_waitqueue_head+0xa8/0x150
[  996.530160][T19497]  hci_register_dev+0x216/0x8e0
[  996.530204][T19497]  vhci_create_device+0x409/0x6f0
[  996.530349][T19497]  vhci_write+0x3d1/0x4a0
[  996.530378][T19497]  vfs_write+0x612/0xba0
[  996.530415][T19497]  ? __pfx_vfs_write+0x10/0x10
[  996.530446][T19497]  ? __fget_files+0x3a2/0x420
[  996.530469][T19497]  ? __fget_files+0x2a/0x420
[  996.530497][T19497]  ? fdget+0x1ac/0x250
[  996.530527][T19497]  ksys_write+0x150/0x270
[  996.530556][T19497]  ? __pfx_ksys_write+0x10/0x10
[  996.530596][T19497]  do_syscall_64+0x166/0x520
[  996.530628][T19497]  ? trace_irq_disable+0x3b/0x140
[  996.530655][T19497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.530679][T19497]  ? clear_bhb_loop+0x70/0xc0
[  996.530707][T19497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  996.530730][T19497] RIP: 0033:0x7f8679f9f559
[  996.530752][T19497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  996.530770][T19497] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  996.530794][T19497] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[  996.530812][T19497] RDX: 0000000000000002 RSI: 0000200000000240 RDI: 0000000000000004
[  996.530827][T19497] RBP: 00007f867ae90090 R08: 0000000000000000 R09: 0000000000000000
[  996.530842][T19497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  996.530856][T19497] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  996.530894][T19497]  </TASK>
[  996.530966][T19497] Bluetooth: Can't register HCI device
[  996.853916][T19460] cp2112 0003:10C4:EA90.004B: Error starting transaction: -38
[  996.855453][T13909] cp2112 0003:10C4:EA90.004B: error reading lock byte: -71
[  996.886558][T13909] usb 5-1: USB disconnect, device number 11
[  996.960002][T19502] jffs2: notice: (19502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  997.180534][T19512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3734'.
[  997.840008][T19520] syz.2.3737: attempt to access beyond end of device
[  997.840008][T19520] ram5: rw=2048, sector=8191, nr_sectors = 8 limit=8192
[  997.895757][T19520] device-mapper: table: 248:0: integrity: Error reading superblock (-EIO)
[  997.895789][T19520] device-mapper: ioctl: error adding target to table
[  998.067843][T13292] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  998.161213][   T33] audit: type=1400 audit(1793416955.501:238): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137F189ECFE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19534 comm="syz.4.3741"
[  998.267269][T13292] usb 2-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00
[  998.268440][T13292] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  998.268519][T13292] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  998.268572][T13292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  998.316340][   T32] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  998.317921][T13292] snd-ua101 2-1:1.1: invalid bNumEndpoints
[  998.317943][T13292] snd-ua101 2-1:1.0: invalid num_altsetting
[  998.429891][T19539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3743'.
[  998.479465][   T32] usb 3-1: not running at top speed; connect to a high speed hub
[  998.479505][   T32] usb 3-1: New USB device found: idVendor=12d1, idProduct=b55d, bcdDevice=f4.ff
[  998.480489][   T32] usb 3-1: config 6 has an invalid interface number: 121 but max is 0
[  998.480517][   T32] usb 3-1: config 6 has an invalid interface number: 135 but max is 0
[  998.480541][   T32] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 1
[  998.480565][   T32] usb 3-1: config 6 has no interface number 0
[  998.480583][   T32] usb 3-1: config 6 has no interface number 1
[  998.480634][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xC has invalid maxpacket 1040, setting to 64
[  998.480664][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64
[  998.480692][   T32] usb 3-1: config 6 interface 121 altsetting 3 has an endpoint descriptor with address 0xCB, changing to 0x8B
[  998.480719][   T32] usb 3-1: config 6 interface 121 altsetting 3 endpoint 0x8B has invalid maxpacket 55288, setting to 64
[  998.480749][   T32] usb 3-1: config 6 interface 121 altsetting 3 has 5 endpoint descriptors, different from the interface descriptor's value: 16
[  998.480778][   T32] usb 3-1: too many endpoints for config 6 interface 135 altsetting 164: 177, using maximum allowed: 30
[  998.480817][   T32] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  998.480842][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x9 has invalid maxpacket 512, setting to 64
[  998.480869][   T32] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xC, skipping
[  998.480892][   T32] usb 3-1: config 6 interface 135 altsetting 164 has an invalid descriptor for endpoint zero, skipping
[  998.480915][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  998.480942][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x4 has invalid wMaxPacketSize 0
[  998.480967][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  998.480997][   T32] usb 3-1: config 6 interface 135 altsetting 164 has a duplicate endpoint with address 0xA, skipping
[  998.481023][   T32] usb 3-1: config 6 interface 135 altsetting 164 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  998.481051][   T32] usb 3-1: config 6 interface 135 altsetting 164 has 12 endpoint descriptors, different from the interface descriptor's value: 177
[  998.481079][   T32] usb 3-1: config 6 interface 121 has no altsetting 0
[  998.481099][   T32] usb 3-1: config 6 interface 135 has no altsetting 0
[  998.484596][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.484624][   T32] usb 3-1: Product: Н
[  998.484641][   T32] usb 3-1: Manufacturer: 䴼컌Ꙥᅴḡ巆इ廏拏⸵䴍녟籁뚢⯓宊Ᾱ쁑풠慘ഇ벽ꖰﵷ羭ᚠ舺ᐫ儐枈濭翝⫀䐸怦Ȯ㩬RⓌָƶ鲄퀉Ⴟꭿ鸥⩤₎゚歹
[  998.484670][   T32] usb 3-1: SerialNumber: syz
[  998.571724][ T5740] usb 2-1: USB disconnect, device number 94
[  998.862981][T19541] jffs2: notice: (19541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  998.929116][   T32] option 3-1:6.121: GSM modem (1-port) converter detected
[  998.979676][   T32] usb 3-1: USB disconnect, device number 58
[  998.999189][   T32] option 3-1:6.121: device disconnected
[  999.186568][   T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  999.328274][T19550] FAULT_INJECTION: forcing a failure.
[  999.328274][T19550] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  999.328309][T19550] CPU: 1 UID: 0 PID: 19550 Comm: syz.1.3749 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  999.328332][T19550] Tainted: [L]=SOFTLOCKUP
[  999.328338][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[  999.328348][T19550] Call Trace:
[  999.328358][T19550]  <TASK>
[  999.328365][T19550]  dump_stack_lvl+0xe8/0x150
[  999.328395][T19550]  should_fail_ex+0x3eb/0x540
[  999.328425][T19550]  _copy_to_user+0x31/0xb0
[  999.328443][T19550]  simple_read_from_buffer+0xe1/0x170
[  999.328466][T19550]  proc_fail_nth_read+0x1bb/0x230
[  999.328493][T19550]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  999.328521][T19550]  ? rw_verify_area+0x24a/0x4c0
[  999.328542][T19550]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  999.328567][T19550]  vfs_read+0x213/0xa80
[  999.328590][T19550]  ? __pfx___mutex_lock+0x10/0x10
[  999.328617][T19550]  ? __pfx_vfs_read+0x10/0x10
[  999.328638][T19550]  ? __fget_files+0x2a/0x420
[  999.328656][T19550]  ? __fget_files+0x3a2/0x420
[  999.328673][T19550]  ? __fget_files+0x2a/0x420
[  999.328694][T19550]  ? fdget+0x1ac/0x250
[  999.328718][T19550]  ksys_read+0x150/0x270
[  999.328740][T19550]  ? __pfx_ksys_read+0x10/0x10
[  999.328759][T19550]  ? __pfx_v4l2_ioctl+0x10/0x10
[  999.328788][T19550]  do_syscall_64+0x166/0x520
[  999.328814][T19550]  ? trace_irq_disable+0x3b/0x140
[  999.328834][T19550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.328850][T19550]  ? clear_bhb_loop+0x70/0xc0
[  999.328870][T19550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  999.328886][T19550] RIP: 0033:0x7f8679f5fd8e
[  999.328901][T19550] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  999.328916][T19550] RSP: 002b:00007f867ae8ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  999.328933][T19550] RAX: ffffffffffffffda RBX: 00007f867ae906c0 RCX: 00007f8679f5fd8e
[  999.328945][T19550] RDX: 000000000000000f RSI: 00007f867ae900a0 RDI: 0000000000000004
[  999.328955][T19550] RBP: 00007f867ae90090 R08: 0000000000000000 R09: 0000000000000000
[  999.328965][T19550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  999.328975][T19550] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[  999.329000][T19550]  </TASK>
[  999.336696][   T11] usb 5-1: Using ep0 maxpacket: 8
[  999.351011][   T11] usb 5-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  999.380949][   T11] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  999.380995][   T11] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  999.381036][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  999.381067][   T11] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  999.381095][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  999.381124][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  999.381154][   T11] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  999.381184][   T11] usb 5-1: config 168 interface 0 has no altsetting 0
[  999.395059][   T11] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  999.395102][   T11] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  999.395141][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  999.395172][   T11] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  999.395200][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  999.395229][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  999.395259][   T11] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  999.395288][   T11] usb 5-1: config 168 interface 0 has no altsetting 0
[  999.467276][   T11] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  999.467727][   T11] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  999.467771][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  999.467803][   T11] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  999.467838][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  999.467868][   T11] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  999.467897][   T11] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  999.467925][   T11] usb 5-1: config 168 interface 0 has no altsetting 0
[  999.592846][   T11] usb 5-1: string descriptor 0 read error: -22
[  999.593004][   T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.763407][   T11] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  999.924829][T19544] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543
[  999.947527][   T11] usb 5-1: USB disconnect, device number 12
[ 1000.001942][   T33] audit: type=1400 audit(1793416957.341:239): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137F189ECFE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331 pid=19555 comm="syz.2.3751"
[ 1000.163366][T19558] jffs2: notice: (19558) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[ 1000.197604][T19558] FAULT_INJECTION: forcing a failure.
[ 1000.197604][T19558] name failslab, interval 1, probability 0, space 0, times 0
[ 1000.197658][T19558] CPU: 1 UID: 0 PID: 19558 Comm: syz.1.3752 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1000.197691][T19558] Tainted: [L]=SOFTLOCKUP
[ 1000.197700][T19558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 1000.197716][T19558] Call Trace:
[ 1000.197727][T19558]  <TASK>
[ 1000.197738][T19558]  dump_stack_lvl+0xe8/0x150
[ 1000.197780][T19558]  should_fail_ex+0x3eb/0x540
[ 1000.197822][T19558]  should_failslab+0xa8/0x100
[ 1000.197855][T19558]  ? jffs2_do_new_inode+0x27/0x510
[ 1000.197879][T1
** replaying previous printk message **
[ 1000.197879][T19558]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1000.197905][T19558]  ? jffs2_do_new_inode+0x27/0x510
[ 1000.197930][T19558]  ? __pfx_from_kgid+0x10/0x10
[ 1000.197960][T19558]  jffs2_do_new_inode+0x27/0x510
[ 1000.197989][T19558]  jffs2_new_inode+0x45c/0xd20
[ 1000.198030][T19558]  ? __pfx_jffs2_new_inode+0x10/0x10
[ 1000.198055][T19558]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 1000.198078][T19558]  ? jffs2_create+0x21/0x320
[ 1000.198115][T19558]  jffs2_create+0x87/0x320
[ 1000.198150][T19558]  lookup_open+0xedc/0x1970
[ 1000.198208][T19558]  path_openat+0x70c/0x20f0
[ 1000.198259][T19558]  do_file_open+0x23e/0x4a0
[ 1000.198295][T19558]  ? __pfx_do_file_open+0x10/0x10
[ 1000.198349][T19558]  ? _raw_spin_unlock+0x28/0x50
[ 1000.198378][T19558]  ? alloc_fd+0x6af/0x760
[ 1000.198415][T19558]  do_sys_openat2+0x115/0x200
[ 1000.198438][T19558]  ? __se_sys_futex+0x3a8/0x450
[ 1000.198472][T19558]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1000.198502][T19558]  ? rcu_is_watching+0x16/0xb0
[ 1000.198539][T19558]  __x64_sys_open+0x11e/0x150
[ 1000.198567][T19558]  do_syscall_64+0x166/0x520
[ 1000.198611][T19558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.198635][T19558]  ? clear_bhb_loop+0x70/0xc0
[ 1000.198664][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.198687][T19558] RIP: 0033:0x7f8679f9f559
[ 1000.198709][T19558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.198729][T19558] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1000.198753][T19558] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[ 1000.198773][T19558] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000640
[ 1000.198789][T19558] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1000.198804][T19558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1000.198818][T19558] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[ 1000.198856][T19558]  </TASK>
[ 1000.202002][T19558] ==================================================================
[ 1000.202022][T19558] BUG: KASAN: slab-use-after-free in jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1000.202066][T19558] Read of size 4 at addr ffff88805a965c68 by task syz.1.3752/19558
[ 1000.202087][T19558] 
[ 1000.202104][T19558] CPU: 1 UID: 0 PID: 19558 Comm: syz.1.3752 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1000.202136][T19558] Tainted: [L]=SOFTLOCKUP
[ 1000.202145][T19558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 1000.202160][T19558] Call Trace:
[ 1000.202169][T19558]  <TASK>
[ 1000.202179][T19558]  dump_stack_lvl+0xe8/0x150
[ 1000.202213][T19558]  print_address_description+0x55/0x1e0
[ 1000.202251][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1000.202284][T19558]  print_report+0x58/0x70
[ 1000.202317][T19558]  kasan_report+0x117/0x150
[ 1000.202351][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1000.202389][T19558]  jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1000.202429][T19558]  jffs2_do_clear_inode+0x58/0x390
[ 1000.202454][T19558]  ? __pfx_jffs2_evict_inode+0x10/0x10
[ 1000.202482][T19558]  evict+0x624/0xb50
[ 1000.202518][T19558]  ? __pfx_evict+0x10/0x10
[ 1000.202550][T19558]  ? do_raw_spin_unlock+0xf5/0x200
[ 1000.202585][T19558]  ? _raw_spin_unlock+0x28/0x50
[ 1000.202623][T19558]  ? iput+0xb7f/0xf00
[ 1000.202651][T19558]  jffs2_new_inode+0x48a/0xd20
[ 1000.202686][T19558]  ? __pfx_jffs2_new_inode+0x10/0x10
[ 1000.202713][T19558]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 1000.202737][T19558]  ? jffs2_create+0x21/0x320
[ 1000.202771][T19558]  jffs2_create+0x87/0x320
[ 1000.202804][T19558]  lookup_open+0xedc/0x1970
[ 1000.202847][T19558]  path_openat+0x70c/0x20f0
[ 1000.202887][T19558]  do_file_open+0x23e/0x4a0
[ 1000.202919][T19558]  ? __pfx_do_file_open+0x10/0x10
[ 1000.202960][T19558]  ? _raw_spin_unlock+0x28/0x50
[ 1000.202989][T19558]  ? alloc_fd+0x6af/0x760
[ 1000.203018][T19558]  do_sys_openat2+0x115/0x200
[ 1000.203040][T19558]  ? __se_sys_futex+0x3a8/0x450
[ 1000.203074][T19558]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1000.203100][T19558]  ? rcu_is_watching+0x16/0xb0
[ 1000.203135][T19558]  __x64_sys_open+0x11e/0x150
[ 1000.203159][T19558]  do_syscall_64+0x166/0x520
[ 1000.203193][T19558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.203217][T19558]  ? clear_bhb_loop+0x70/0xc0
[ 1000.203244][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.203267][T19558] RIP: 0033:0x7f8679f9f559
[ 1000.203288][T19558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.203309][T19558] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1000.203335][T19558] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[ 1000.203352][T19558] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000640
[ 1000.203368][T19558] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1000.203383][T19558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1000.203397][T19558] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[ 1000.203425][T19558]  </TASK>
[ 1000.203434][T19558] 
[ 1000.203440][T19558] Allocated by task 9841:
[ 1000.203455][T19558]  kasan_save_track+0x3e/0x80
[ 1000.203480][T19558]  __kasan_slab_alloc+0x6c/0x80
[ 1000.203507][T19558]  kmem_cache_alloc_noprof+0x2b4/0x600
[ 1000.203527][T19558]  jffs2_scan_make_ino_cache+0x89/0x1d0
[ 1000.203551][T19558]  jffs2_scan_medium+0x2d23/0x7240
[ 1000.203572][T19558]  jffs2_do_mount_fs+0x775/0x22b0
[ 1000.203601][T19558]  jffs2_do_fill_super+0x555/0xc60
[ 1000.203626][T19558]  mtd_get_sb+0x195/0x420
[ 1000.203647][T19558]  get_tree_mtd+0x597/0x7d0
[ 1000.203665][T19558]  vfs_get_tree+0x92/0x2a0
[ 1000.203691][T19558]  do_new_mount+0x325/0xb00
[ 1000.203711][T19558]  __se_sys_mount+0x31d/0x420
[ 1000.203737][T19558]  do_syscall_64+0x166/0x520
[ 1000.203773][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.203794][T19558] 
[ 1000.203799][T19558] Freed by task 7717:
[ 1000.203810][T19558]  kasan_save_track+0x3e/0x80
[ 1000.203834][T19558]  kasan_save_free_info+0x40/0x50
[ 1000.203853][T19558]  __kasan_slab_free+0x5c/0x80
[ 1000.203878][T19558]  kmem_cache_free+0x182/0x650
[ 1000.203900][T19558]  jffs2_free_ino_caches+0xec/0x1c0
[ 1000.203929][T19558]  jffs2_put_super+0x6c/0x170
[ 1000.203954][T19558]  generic_shutdown_super+0x140/0x2d0
[ 1000.203976][T19558]  kill_mtd_super+0x23/0x70
[ 1000.203995][T19558]  jffs2_kill_sb+0x96/0xb0
[ 1000.204019][T19558]  deactivate_locked_super+0xbe/0x110
[ 1000.204039][T19558]  cleanup_mnt+0x204/0x2a0
[ 1000.204064][T19558]  task_work_run+0x1d9/0x260
[ 1000.204085][T19558]  exit_to_user_mode_loop+0x204/0x770
[ 1000.204109][T19558]  do_syscall_64+0x328/0x520
[ 1000.204139][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.204159][T19558] 
[ 1000.204165][T19558] The buggy address belongs to the object at ffff88805a965c40
[ 1000.204165][T19558]  which belongs to the cache jffs2_inode_cache of size 48
[ 1000.204184][T19558] The buggy address is located 40 bytes inside of
[ 1000.204184][T19558]  freed 48-byte region [ffff88805a965c40, ffff88805a965c70)
[ 1000.204207][T19558] 
[ 1000.204213][T19558] The buggy address belongs to the physical page:
[ 1000.204226][T19558] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a965400 pfn:0x5a965
[ 1000.204249][T19558] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[ 1000.204283][T19558] page_type: f5(slab)
[ 1000.204303][T19558] raw: 00fff00000000200 ffff88801df32b40 ffff88801ff92048 ffffea0000d265d0
[ 1000.204325][T19558] raw: ffff88805a965400 000000020040002e 00000000f5000000 0000000000000000
[ 1000.204337][T19558] page dumped because: kasan: bad access detected
[ 1000.204354][T19558] page_owner tracks the page as allocated
[ 1000.204363][T19558] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8169, tgid 8168 (syz.3.690), ts 224548408024
[ 1000.204399][T19558]  post_alloc_hook+0x1f9/0x250
[ 1000.204417][T19558]  get_page_from_freelist+0x220f/0x2280
[ 1000.204443][T19558]  __alloc_frozen_pages_noprof+0x1fe/0x410
[ 1000.204468][T19558]  allocate_slab+0x7d/0x5e0
[ 1000.204497][T19558]  refill_objects+0x2d5/0x350
[ 1000.204527][T19558]  __pcs_replace_empty_main+0x2c8/0x6c0
[ 1000.204556][T19558]  kmem_cache_alloc_noprof+0x394/0x600
[ 1000.204576][T19558]  jffs2_scan_make_ino_cache+0x89/0x1d0
[ 1000.204609][T19558]  jffs2_scan_medium+0x35ac/0x7240
[ 1000.204632][T19558]  jffs2_do_mount_fs+0x775/0x22b0
[ 1000.204655][T19558]  jffs2_do_fill_super+0x555/0xc60
[ 1000.204680][T19558]  mtd_get_sb+0x195/0x420
[ 1000.204699][T19558]  get_tree_mtd+0x597/0x7d0
[ 1000.204719][T19558]  vfs_get_tree+0x92/0x2a0
[ 1000.204745][T19558]  do_new_mount+0x325/0xb00
[ 1000.204764][T19558]  __se_sys_mount+0x31d/0x420
[ 1000.204786][T19558] page last free pid 8167 tgid 8166 ts 224539019142 stack trace:
[ 1000.204803][T19558]  __free_frozen_pages+0xc97/0xd90
[ 1000.204823][T19558]  tlb_finish_mmu+0x13e/0x220
[ 1000.204849][T19558]  exit_mmap+0x4b2/0xa40
[ 1000.204877][T19558]  __mmput+0x118/0x420
[ 1000.204900][T19558]  exit_mm+0x18e/0x240
[ 1000.204930][T19558]  do_exit+0x6a8/0x2360
[ 1000.204961][T19558]  do_group_exit+0x22d/0x2f0
[ 1000.204978][T19558]  get_signal+0x136a/0x1430
[ 1000.205003][T19558]  arch_do_signal_or_restart+0xbb/0x860
[ 1000.205034][T19558]  exit_to_user_mode_loop+0x10e/0x770
[ 1000.205058][T19558]  do_syscall_64+0x328/0x520
[ 1000.205087][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1000.205107][T19558] 
[ 1000.205112][T19558] Memory state around the buggy address:
[ 1000.205124][T19558]  ffff88805a965b00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc
[ 1000.205139][T19558]  ffff88805a965b80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc
[ 1000.205154][T19558] >ffff88805a965c00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc
[ 1000.205165][T19558]                                                           ^
[ 1000.205178][T19558]  ffff88805a965c80: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc
[ 1000.205193][T19558]  ffff88805a965d00: fa fb fb fb fb fb fc fc fa fb fb fb fb fb fc fc
[ 1000.205203][T19558] ==================================================================
[ 1000.276480][T19558] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1001.258454][T19558] CPU: 0 UID: 0 PID: 19558 Comm: syz.1.3752 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1001.269521][T19558] Tainted: [L]=SOFTLOCKUP
[ 1001.273879][T19558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026
[ 1001.283961][T19558] Call Trace:
[ 1001.287290][T19558]  <TASK>
[ 1001.290259][T19558]  vpanic+0x26f/0x710
[ 1001.294276][T19558]  panic+0xc5/0xd0
[ 1001.298028][T19558]  ? __pfx_panic+0x10/0x10
[ 1001.302472][T19558]  ? preempt_schedule_thunk+0x16/0x40
[ 1001.307906][T19558]  ? preempt_schedule_thunk+0x16/0x40
[ 1001.313333][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1001.319088][T19558]  check_panic_on_warn+0x89/0xb0
[ 1001.324069][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1001.329820][T19558]  end_report+0x73/0x170
[ 1001.334189][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1001.339956][T19558]  kasan_report+0x128/0x150
[ 1001.344601][T19558]  ? jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1001.350361][T19558]  jffs2_xattr_delete_inode+0x2c8/0x2d0
[ 1001.355954][T19558]  jffs2_do_clear_inode+0x58/0x390
[ 1001.361187][T19558]  ? __pfx_jffs2_evict_inode+0x10/0x10
[ 1001.366779][T19558]  evict+0x624/0xb50
[ 1001.370715][T19558]  ? __pfx_evict+0x10/0x10
[ 1001.375165][T19558]  ? do_raw_spin_unlock+0xf5/0x200
[ 1001.380382][T19558]  ? _raw_spin_unlock+0x28/0x50
[ 1001.385305][T19558]  ? iput+0xb7f/0xf00
[ 1001.389321][T19558]  jffs2_new_inode+0x48a/0xd20
[ 1001.394128][T19558]  ? __pfx_jffs2_new_inode+0x10/0x10
[ 1001.399450][T19558]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 1001.405211][T19558]  ? jffs2_create+0x21/0x320
[ 1001.409871][T19558]  jffs2_create+0x87/0x320
[ 1001.414330][T19558]  lookup_open+0xedc/0x1970
[ 1001.418971][T19558]  path_openat+0x70c/0x20f0
[ 1001.423528][T19558]  do_file_open+0x23e/0x4a0
[ 1001.428069][T19558]  ? __pfx_do_file_open+0x10/0x10
[ 1001.433151][T19558]  ? _raw_spin_unlock+0x28/0x50
[ 1001.438133][T19558]  ? alloc_fd+0x6af/0x760
[ 1001.442502][T19558]  do_sys_openat2+0x115/0x200
[ 1001.447297][T19558]  ? __se_sys_futex+0x3a8/0x450
[ 1001.452194][T19558]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1001.457595][T19558]  ? rcu_is_watching+0x16/0xb0
[ 1001.462402][T19558]  __x64_sys_open+0x11e/0x150
[ 1001.467204][T19558]  do_syscall_64+0x166/0x520
[ 1001.471958][T19558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.478055][T19558]  ? clear_bhb_loop+0x70/0xc0
[ 1001.482798][T19558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1001.488726][T19558] RIP: 0033:0x7f8679f9f559
[ 1001.493167][T19558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1001.512978][T19558] RSP: 002b:00007f867ae90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 1001.521444][T19558] RAX: ffffffffffffffda RBX: 00007f867a225fa0 RCX: 00007f8679f9f559
[ 1001.529479][T19558] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000640
[ 1001.537520][T19558] RBP: 00007f867a036b20 R08: 0000000000000000 R09: 0000000000000000
[ 1001.545525][T19558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1001.553549][T19558] R13: 00007f867a226038 R14: 00007f867a225fa0 R15: 00007ffc082322f8
[ 1001.561569][T19558]  </TASK>
[ 1001.565222][T19558] Kernel Offset: disabled
[ 1001.569565][T19558] Rebooting in 86400 seconds..