last executing test programs:

1m49.994356352s ago: executing program 3 (id=45):
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
fstat(0xffffffffffffffff, 0x0)
waitid(0x2, 0x0, 0xffffffffffffffff, 0x40000000, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r1, 0x1, 0x123, 0x234}, 0x14}}, 0x0)
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
lseek(r6, 0x3, 0x6)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000500)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xadac, 0x8, 0x3, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}, <r10=>0xffffffffffffffff}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
inotify_rm_watch(r10, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0x4, 0x5}})
socket$inet_udp(0x2, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r11 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r11, 0xc0844123, 0xfffffffffffffffd)
ioctl$XFS_IOC_INUMBERS(r11, 0x80405880, &(0x7f00000003c0)={{0x5, 0x2, 0x1, 0x10001, 0x81f}, [{0x3, 0xf4, 0x4, 0xf0}, {0xf, 0x3ff, 0xc, 0x3}]})

1m49.482252827s ago: executing program 3 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f5, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x100, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0xfffff000, 0x1c, 0x5, 0x4, 0x5, 0x0, 0xfffffffe, 0x400007, 0x7, 0x2, 0x3, 0x1ff, 0x65884919, 0x7ff, 0x6, 0x1, 0xc, 0x3, 0x80000000, 0x9, 0x2, 0x6, 0x8b6, 0xb0e5, 0x5, 0x0, 0x0, 0xfff, 0x1, 0x5, 0x9]})
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r1, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000")
inotify_add_watch(r1, &(0x7f0000000040)='./dev\x00', 0x1)
ioctl(r1, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01")

1m49.200279704s ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="00fbf50208de47b8ff9d6748d0cfe067ceecce19a1e77cea838f4d9195d502fe050ff6605669d6842b3a7aef92e027d0453e1988ccacd5ba002aca94aa808af5cb373490bb10c8fa90171c08da573a9cca85a0b80705fef230286f98f73ed4e7077b50abb79fb4100455e18848eac17d76e553985400302bac2c326fb79951b48423c8909c0a7d172b398ca2aa26e3b1d68cb540a447c833e8f96d7de6f80db6cbedd4106deb1c76f8f7e2e88745582f9775328d376d394bc4965264f6e3019684b847e28a0f5203219d6d0012b648271939e53d9a12b41134c5117b8d2b06a2553e79c954bd08d07453998ca1825566732ad06c6a2bf331a6ec79c62e0ee9992583e485f2a677aaf8fdc87884c717bd4c2e5ffc721228ef75e65c39f63db9b78cf767ea57aea0226be630dc3e0c8ef614240a599ab6cc911562b027b7f20603603ec99a8097dfd43ca1ad44a7e89e1683f7162b738fbbb7b8b14739e974d6b689b18a76748d9d812d77aa09bae974fcd6dde55074a39036a4df8596cab7187310aab101fe818276a9fa831e3adcdd91c90e710e8a6ab5369a8bf021d7c26340463b98f132d3d7a913c85125a2bf0e606667214aad84b3edac14e2a21ac7c6f8d2155904b32a92aa379228c8cbd52e9b97f577158e383950e76811ae48c088a31a36c67a1147d84a1ce0dff9ad71e97786e399544a08595b00af374f673883e39c5466e4417e85134854835deb9cafcfef92e68107bf98bd97d5e15193b5cbf0e806688559e58df6f5fa663cbb0f5b94976f3d6355fe2023b1458c5fb1cb72fe8c7a5a476eb251879b20add33df597ae1e488f5e3b6c3f89b28459ace10f316fe6635ee41741a95c35bd99c4236d0424481f878c757a9d94e184e1808ee623efec69bd0d20b9e2aabf71b7805f07bbd10a1f2b3bf6cab9b706650a4b18cbf4fa9aa365abab55ef56efa29a83304c79613646ef91ef1407ead2d93d796cd93a4e2754ca680636a615efe8ae51e3c7246a0686001513cdc7f4f9678aaeaab9384d5a3ad49ca5dff707003e411c5bc764c4ef908cb0d9e231b9f620012ed430dc34ac4214c3c781f3c9180ffb15268cb741a41f97019c454b3a1967559c486f51d089e4ee60000398ceb36c6c7871c14cb2ba5b05d6f308dcdde42acd4403970ef7c1bb0675f367c2b1b1d2103892215dcf95774ad22de20732e5285de7c47362e4f87414e6dce2278fbd3202cd8104b21637877bfcde73f9cd7e9d4560d1f740311e4291f68f02dd25901caf0adf3b169d"], 0x3f5, 0x0)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000")
ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01")

1m49.015857347s ago: executing program 3 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0)
ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) (fail_nth: 3)

1m48.602919685s ago: executing program 3 (id=54):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@keyring)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001600))
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x106}, 0x1c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32, @ANYBLOB="36d55e5b50830220d268fd359087dbf66c7524a1199571aa57f0cad169254ae425233ea386df94a3b3a53e4d76b70db9e9f0692c2dc873c6efc468cc630a62a5aba89844461595d877fbccad2f7b70f0508861f0cf163ba88d6bcefdaa2e27e43e03ccab8fdfb3c335b5256d157b8dd5bdc9fbe17b311f0850936dfaa59af4425d7dc86526c368af4df27b9c7cb5baf4dd8ae2130450a2dbf2a7445c9d4abd47c66cd58610dc629abfd6d013e686e47bfa47", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="3e3653375c903cb9ffc74db5bb82a48fc8ee47fd2c0de40cb69c708b673aa5414f35c1"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_clone3(&(0x7f0000000480)={0x40b80480, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x2801, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)

1m47.443711309s ago: executing program 0 (id=57):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xf0}, @l2cap_cid_signaling={{0xec}, [@l2cap_info_req={{0xa, 0x0, 0x2}, {0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0xb86}}, @l2cap_conf_req={{0x4, 0x3, 0x17}, {0xe, 0x6, [@l2cap_conf_mtu={0x1, 0x2, 0x9}, @l2cap_conf_mtu={0x1, 0x2, 0x6}, @l2cap_conf_mtu={0x1, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0xb}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_create_chan_req={{0xc, 0x5, 0x5}, {0x2, 0x9, 0x4}}, @l2cap_conn_rsp={{0x3, 0x8, 0x8}, {0x8, 0x5, 0xe696, 0x8}}, @l2cap_info_rsp={{0xb, 0x7, 0xa0}, {0x0, 0xfffd, "528941ba34bf5a99e0f97349588dd3df77fe4f59f7d49fbd299a9ccb9ebf193b6e4b1844c976a98adf2887e87b150f9cbec85aa9a756198a8d1a987deac4e7766f5c24d6f643163e4eaa2b6248067e045e0829a83c7952308ec7431fb39d40090f11290bdfcb878a64c9877ccb4009a0fc7db5953b65777faeccd3e610e9b978c3795deec83a3f75d823ca97b20f4505cd182519efe9c35d2813ca14"}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0xd, 0x5, 0x8, 0x1000}}]}}, 0xf5)
syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@any, 0xe3}}}, 0xa)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x10, r0, 0x21a22000)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f00000001c0))
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000005c0)={{<r1=>r0, &(0x7f0000000200)='/dev/sequencer\x00', 0xc0040, &(0x7f0000000240)={@_ha_fsid={[0xbc76, 0x8]}, {0x2, 0x5, 0x9, 0x10000000000}}, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x7}, 0x2, &(0x7f0000000580)=[{0x1, 0x6, &(0x7f0000000300)='\x00', &(0x7f0000000340)="427461f23fa217f5f071df19c729461530ec52933f03b1c091363159179a202ed1e0b2b7f4425aac3958bcc1103f85e2a2db9ae23b362603133904852d8e8a7d74b483549e559bdc335d6c1ecbbef61105055eacc89929b8eb11ad75ffe520772c98b726778820f9f3890c6c44100f848325f380350621fb22df9aff4942df8e81ac5bdeaa597d9e1e0479915be77dd556f03116eb2bee0647f880b03c5ecbc4cc8de8dca59c7f0208ef614e9cdaa07c6ebde823a2f2e013671f4adf8c8d007d109cd940aa0e18ae75c20f3633ea2c5090da857915b53dd2bdddf475104b824b61", 0xe1}, {0x3, 0xffff, &(0x7f0000000440)='-\x00', &(0x7f0000000480)="3f61397f7852063ccadd029dbc92872ef9c4404013b7733116733a3a4800b0683db4c18e30f85536745f59f962fc1d1f2b39a80d4b40f5d5637ad77937cb41815cf229241ca338809ba9b9981eb0218ae051665c3f838a8c96b325b12ed5842d1ddffbe6fbac27dbd0201de5d1e6372d62b135b651b715fc62d60d68fe2fa62554f4e00473c6e4078a6c724c5f33f50d29eb92d4eee004165b05a771951f3bd26d47b22c757b52256ce3d5b46e5459aa9cb88243e230cb1364dae346d95f87c6f686c2f04058143f2264467cdfd0aca4a1c58a2323cbc9a0818ea56b4ce9f4c07be3fa2d4df61196377f44a51e9f35ff", 0xf0, 0x2}]})
write$usbip_server(r1, &(0x7f0000000640)=@ret_unlink={{0x4, 0x0, 0x0, 0x1, 0x83f}, {0x5}}, 0x30)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_vhci(&(0x7f0000000680)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x75}, "e5770cdaa9dfca63c6242bb7042c9ddc1b92118edd64a82c01e34eb8f86adfe164b1c758cb0e771f7441320059fa4a481a2a89300b8e06e4d4c704a6f1876db17281c8d84af1f99caf6dd92886a36d789c220d50da00c2d66df0000d707810e9e9edf4e767106851362a33b7bf1ff27100d18e4c9c"}, 0x79)
syz_usbip_server_init(0x5)
sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x40000)
syz_emit_vhci(&(0x7f0000000800)=@HCI_EVENT_PKT={0x4, @hci_ev_phy_link_complete={{0x40, 0x2}, {0x2, 0x1}}}, 0x5)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x130, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1a}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_NAT_DST={0xa0, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xfffffffc}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_LABELS_MASK={0x18, 0x17, [0x1, 0x9, 0xffff7596, 0x3ff, 0x10001]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffc2e5}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x24000400)
ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000a40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000})
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xcc, 0x0, 0x9394eee6f324c4e5, 0x70bd2a, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4008011)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000c40)={<r3=>0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x0, 0x5, 0xa5, 0x800, 0x4, 0x20, 0x9}, &(0x7f0000000d00)=0x9c)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000d40)={0x0, 0x27, 0x0, 0x10001, 0x4, 0x222013c9, 0x7, 0x5, r3}, &(0x7f0000000d80)=0x20)
mknod(&(0x7f0000000dc0)='./file0\x00', 0x1000, 0x2)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000e00)={{0x1, 0x1, 0x18, <r4=>r2, {0x9}}, './file0\x00'})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000e40)={[0x3, 0x2, 0x1, 0x9, 0x4, 0x4, 0x6, 0xfff, 0x7, 0x5, 0x9, 0x35, 0x9, 0x9, 0x4, 0x401], 0x0, 0x200000})
kexec_load(0x6eae, 0x4, &(0x7f0000001180)=[{&(0x7f0000000f00)="19a4e9484ea754c2eeb50b5869e37ad90908447c517db30c3bc01ae43f0070ac227caad842e4d5587cf9cfba51018465281421d7fefd84bb34c35a1214923d7b0accb02dc2a157306e49d9ce3d7b3daa05391455965ee3d1ca2778c39bbd5b01a28e1cf3e78d618f7b254893d24ece89e9264497b8f2e99506f358bf5f9b2de40eb4d2f4abadd6ac24da2dce144e39a12665e03840d46b39cddbe9823ea0736f60a533cfffa358076c944f56d8ed94f5fafa1719a4d93ea458069c6109f4dfc6f92e7b2609641958bbd78cf84ce410853eb9e803317926ca79aa1d69de4e6dd83941608b8181fa7576646c27542a124f83d10bd504e8281ada49", 0xfa, 0xfffffffffffffffb, 0x4d}, {&(0x7f0000001000)="3986329868348061dbf61f4b58f86ece41d66666ffa2b7f778612c4bbec0a287d9e27baf31146f335335c36b63a19b686e5c64", 0x33, 0x3, 0xb}, {&(0x7f0000001040)="c73e3a1fe2df96bfce50e7b07c46da5c3919c330e7a2b752f3cf21510a9ef89048e900bbe421946a34e06ce5e4960318a6b48e49ccd6e42c003a8475a9581c439ac24ed0637555c5fcfd5b8c7dfda35cedf9a6def74718d6168d78abdb85ab027b9f8c39ea", 0x65, 0x100000001, 0x9}, {&(0x7f00000010c0)="967c9f98280129ca5419f26b96bfbad4866e78399bb7101d6a486200469b6fcd09f93c388e726a31384ffbec1adb9e901ef2d5021763a9f2a1011645d1c899ce7262bf75f09bd883580522ff541e5ce02ea996b94aaa454cab7a3db1d206d85ad5f1c242d53cf945ac027f1d4a90119a37e4c7dd1513ef7cc2f8b09672760c702a98c78c85892dbc51f52e", 0x8b, 0x6, 0x4}], 0x320000)
sendmsg$key(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x2, 0x0, 0x0, 0x9, 0x1a, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x4, @mcast1, 0x95}, @in={0x2, 0x4e23, @multicast2}}, @sadb_key={0x4, 0x9, 0x90, 0x0, "a6c6c7e45a35f21e0f2be20f09be577629f4"}, @sadb_sa={0x2, 0x1, 0x4d5, 0xfc, 0x1, 0xc5, 0x3, 0x20000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x7}, @sadb_x_sec_ctx={0x6, 0x18, 0x1, 0x75, 0x23, "6626e7b688125c9349717708ddc2a0a46e4c3d5de9254b4f536bea95ef9cfddf61a3ac"}, @sadb_lifetime={0x4, 0x4, 0xdb, 0x1, 0x80000001, 0x239}]}, 0xd0}}, 0x40000)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000)
write$usbip_server(r1, &(0x7f0000001380)=@ret_unlink={{0x4, 0x5, 0x0, 0x8e041d994e0cbad7, 0x2f}, {0x6}}, 0x30)
syz_emit_vhci(&(0x7f00000013c0)=@HCI_SCODATA_PKT={0x3, {0xc8, 0xa7}, "8303f12ec69f4aa078ab71cfcb59f42286820a3371468416cc1100542c8921ecaa4a1c5164225ddc76854d88c6bd24d45dc970e41393db8f4114b741f961beaf785da6640931662c6af7af871287e5ed307cedad024ea05f29b0474a8bb153c5445b94764b8341e5830beb3eb099224cade30a65281f9b5f00e4f75b5f6a19a6c86f8f129a959a641d7b9465604bf04250f645ffcf68a28643c1fd7ad592cb340197cbab5a3dc6"}, 0xab)
read(r4, &(0x7f0000001480)=""/4096, 0x1000)
lsm_list_modules(&(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=0x28, 0x0)
ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000002500)={{0x2, 0x4e22, @remote}, {0x1, @remote}, 0x66, {0x2, 0x4e21, @multicast2}, 'pim6reg0\x00'})

1m46.478706043s ago: executing program 0 (id=60):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004)
socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
readv(r1, &(0x7f0000000740)=[{&(0x7f0000000140)=""/164, 0xa4}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601010000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500288537350d000300686173683a6d6163"], 0x5c}}, 0x4005800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socket$alg(0x26, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000001c0)={0x3, 0x7, {0x52, 0x8, 0x9, {0x1000, 0x10}, {0x4e, 0x9}, @rumble={0x400, 0x8001}}, {0x56, 0x4, 0x9, {0x6}, {0xd9, 0x9}, @period={0x4, 0x0, 0xfbff, 0xc, 0xfff, {0xfff4, 0xc, 0x6ce, 0x7}, 0x8, &(0x7f0000000140)=[0x7, 0x1, 0x9, 0x0, 0x0, 0x6, 0x1, 0xd3]}}})
socket$inet6_udp(0xa, 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r6)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1m46.446792706s ago: executing program 3 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', <r2=>0x0}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
name_to_handle_at(r5, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4)

1m45.353546949s ago: executing program 0 (id=66):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2})
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r3)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1035, {0x0, 0x0, 0x0, 0x0, 0x5}})
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001640)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_STATFS(r5, &(0x7f0000003700)={0x60, 0x0, r6, {{0x7, 0x1ba, 0x6, 0x3, 0x5, 0x0, 0x10000, 0x171e1e84}}}, 0x60)
r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6)
ftruncate(r7, 0x2000000)
fcntl$addseals(r7, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000000c0)={r7, 0x23, 0x0, 0x1000000})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7dedf9ba3cc63e9d1c3b9a8402f7d5b4caf", @ANYRES32=r9, @ANYBLOB="08001a20", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x840)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=r8, @ANYRES16=r8], 0x9c}}, 0x8800)

1m44.931942042s ago: executing program 0 (id=67):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev/mtdblock0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendto(r0, &(0x7f0000000000)="68000000310005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0)
lstat(&(0x7f0000000340)='./dev\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
quotactl_fd$Q_GETINFO(r0, 0x0, r1, &(0x7f00000005c0))
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
timer_create(0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, @thr={&(0x7f0000000380)="28e036aa90c53a7e1a89fd23bdeb04dd4d4d4f963442d230ed04c967496c308fafcf96206d7b6313d40218f773942aae730145fc21ad5f6edb18db8770a0e8416c39136e7c8ccbca9ea3aa13edb054f521e0e6e4456316f78b695ac444a509cedaf8c7b28f41cbd0a275cc343daf23ec93af0db15c5b29f770397e8668a31f1859511d4157", &(0x7f0000000480)="4f954adb297bdadcb59c1ad09b1bb4e254d5844c6579deebfa172afad3d5d65e4ed31830a555d1012238717633e356324ae9d23acb758e41bf5362d50fd312"}}, &(0x7f00000000c0)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = socket$kcm(0x23, 0x5, 0x0)
listen(r4, 0x800)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4)
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) (fail_nth: 3)
sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x80000)
read(0xffffffffffffffff, 0x0, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)

1m43.946563471s ago: executing program 0 (id=70):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@keyring)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001600))
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x106}, 0x1c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32, @ANYBLOB="36d55e5b50830220d268fd359087dbf66c7524a1199571aa57f0cad169254ae425233ea386df94a3b3a53e4d76b70db9e9f0692c2dc873c6efc468cc630a62a5aba89844461595d877fbccad2f7b70f0508861f0cf163ba88d6bcefdaa2e27e43e03ccab8fdfb3c335b5256d157b8dd5bdc9fbe17b311f0850936dfaa59af4425d7dc86526c368af4df27b9c7cb5baf4dd8ae2130450a2dbf2a7445c9d4abd47c66cd58610dc629abfd6d013e686e47bfa47", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="3e3653375c903cb9ffc74db5bb82a48fc8ee47fd2c0de40cb69c708b673aa5414f35c1"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_clone3(&(0x7f0000000480)={0x40b80480, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x2801, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)

1m40.546811119s ago: executing program 0 (id=80):
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000400002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000001000000116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0403220c"], 0x7) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async)
ioctl$EVIOCRMFF(r5, 0x41015500, &(0x7f0000000500)=0xfffffffb) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r4, 0x0, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) (async)
write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
r7 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r9, 0x7a6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r2) (async)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000140)={0xcf, 0xc1}, 0x2) (async)
sendmsg$sock(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)

1m40.020671596s ago: executing program 2 (id=83):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1, 0x4)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x8, @mcast1, 0x2}}, 0x7, 0x9b7e, 0x8, 0x4, 0x4}, &(0x7f00000001c0)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x2, 0xfde4, 0x7, 0x2, 0x80, 0x401, 0xc0}, 0x9c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000001000fc00000000000000000080546a9f000000000000100000000200200000000000f2a05a8cefcf903f171f438466a860d6bfd0df76a6dc7a469e75f8ccb6473596ca8ced78", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000ecea440000000000000000000000000000000000c3f4de82378d03f96be544d200000009000c"], 0xb8}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x45)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, <r4=>0x0}, &(0x7f0000000900)=0x14)
sendmsg$inet6(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)="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", 0xfe}, {&(0x7f0000000680)="14ac9589bc8a5c83af1fe0b12972a59f2512ef22c78418f33500fd613a8079e82fcb8adbd9a6ffc83350e2710fb393df6f870ee622614dbd43f1fa4bba6e34740ac474d40907597f315407244b31c13986f03eb061321c354d0c4b24f0e6e816f0fec9dabd0577918a923a3ee887d6bf162c43a401e17898b46886118e52c98ca462cf140591eb71180e587ba2a8162d59eab47d0d0449aa50d6d6b25fe539aa7955ddedbf1e106a2722ab61ab79547eb90b380459e3ac750cc6c91e933400d8652c1a38fa60c201933b906015", 0xcd}, {&(0x7f0000000780)="398f7d8d71f14a50b7f06f76f62824e8be100db6766320e34ff91e894ee4b6b60c4e9a0fd56e6f546354989ee593c83237434fbe0d1f222863dc7d28e6496801d198b4e4b0fb03810b9548bad213fad2d1f1600c45f18e6a5e8116e9ed07e17ed73c65987c02aa75327865ac6f6bf92cd347d1e2005186e3531b994147c133eb87e29c6db894d04f03ffda2d4a4a2602f9fe97890a972962a4d67a12e06eca874951295252bfde7e092e3c4d70555da8e31c16ccd151e1ca8e75ff7c3cfb453bd579f8dfd802dde2dbc22711a3a85640479d332f19710607", 0xd8}], 0x3, &(0x7f0000000940)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @remote}, r4}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}], 0x40}, 0x8000)
mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x1808441, 0x0)

1m39.175332412s ago: executing program 2 (id=84):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x26, 0x1, 0x0, 0x0, @binary="d0d4c292c54d4e968899aabb08004500001c00000000010100000101010102020202"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (fail_nth: 3)

1m38.826411295s ago: executing program 2 (id=85):
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f00000001c0))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x9900286f48d04206, 0x0)
utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000380)={0xd, 0x400, 0x0, 'queue0\x00', 0x8})
sendto$inet(r1, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
pipe(&(0x7f0000000280))
preadv(r4, 0x0, 0x0, 0x0, 0x1)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r7 = add_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$describe(0x6, r7, &(0x7f0000000140)=""/213, 0xd5)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000440)={@desc={0x1, 0x0, @desc2}, 0x7, r7, '\x00', @auto=[0x3f, 0x24, 0x27, 0x3f, 0x18, 0x1c, 0x23]})

1m37.599198778s ago: executing program 2 (id=86):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x6, 0x34325842, 0x1, @stepwise={0x4000002, 0x57, 0xec, 0xffffffff, 0x1000, 0x81}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/usb1/1-0:1.0/usb1-port1/disable\x00', 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2b, 'memory'}]}, 0x8)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', &(0x7f0000000140)={0x301102, 0x121, 0x22}, 0x18)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', &(0x7f00000006c0)={0x80000, 0x1, 0x2}, 0x18)
mknodat(r2, &(0x7f0000000380)='./dev/ttyS0\x00', 0x8000, 0x3)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x0)
recvfrom$unix(r5, &(0x7f0000000540)=""/220, 0xdc, 0x0, &(0x7f0000000640)=@file={0x0, './sys\x00'}, 0x6e)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f00000002c0)={0xa, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}, {0xaad, 0x0, 0x8}]})
mount$nfs4(&(0x7f00000000c0)='devtmpfs\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x81028, &(0x7f00000003c0)=ANY=[@ANYBLOB="646576746d706673002c7365636c6162656c2c61707072616973655f747970653d696d617369672c6673636f6e746578743d726f6f742c667363fdc6e0c8f4b77c7d686f6e746578743d73797361646d5f752c736d61636b6673726f6f743d2c7375626a5f757365723d646576746d706673002c00a554c0d2bdf83b422e122f10354b5d6b1fead54b140f3892861906b1e80cf47dd7c8b12af822cc47293ba3d46c66065108ea92373b77d1a9f6bf08d68bf55a"])
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x8002, 0x180)
ioctl$TCXONC(r7, 0x540a, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r7, 0x4008662c, &(0x7f00000002c0)={0x0, 0x0, "4233070fed31510f94a3a9cbef8ce7df"})

1m36.907039854s ago: executing program 2 (id=88):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@keyring)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001600))
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x106}, 0x1c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32, @ANYBLOB="36d55e5b50830220d268fd359087dbf66c7524a1199571aa57f0cad169254ae425233ea386df94a3b3a53e4d76b70db9e9f0692c2dc873c6efc468cc630a62a5aba89844461595d877fbccad2f7b70f0508861f0cf163ba88d6bcefdaa2e27e43e03ccab8fdfb3c335b5256d157b8dd5bdc9fbe17b311f0850936dfaa59af4425d7dc86526c368af4df27b9c7cb5baf4dd8ae2130450a2dbf2a7445c9d4abd47c66cd58610dc629abfd6d013e686e47bfa47", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="3e3653375c903cb9ffc74db5bb82a48fc8ee47fd2c0de40cb69c708b673aa5414f35c1"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_clone3(&(0x7f0000000480)={0x40b80480, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x2801, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)

1m34.5002755s ago: executing program 2 (id=89):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(r1, 0x0, 0x0, 0x0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m31.119046546s ago: executing program 32 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001380)={'wlan0\x00', <r2=>0x0}) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
name_to_handle_at(r5, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4)

1m26.115087064s ago: executing program 1 (id=97):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000140)=@keyring)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000001600))
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xbffffe, 0x1, 0x4000010, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x106}, 0x1c)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32, @ANYBLOB="36d55e5b50830220d268fd359087dbf66c7524a1199571aa57f0cad169254ae425233ea386df94a3b3a53e4d76b70db9e9f0692c2dc873c6efc468cc630a62a5aba89844461595d877fbccad2f7b70f0508861f0cf163ba88d6bcefdaa2e27e43e03ccab8fdfb3c335b5256d157b8dd5bdc9fbe17b311f0850936dfaa59af4425d7dc86526c368af4df27b9c7cb5baf4dd8ae2130450a2dbf2a7445c9d4abd47c66cd58610dc629abfd6d013e686e47bfa47", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESOCT, @ANYBLOB="3e3653375c903cb9ffc74db5bb82a48fc8ee47fd2c0de40cb69c708b673aa5414f35c1"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
socket$phonet(0x23, 0x2, 0x1)
syz_clone3(&(0x7f0000000480)={0x40b80480, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/forwarding\x00', 0x2801, 0x0)
write(r4, &(0x7f0000000200)='1', 0x1)

1m25.009751148s ago: executing program 33 (id=80):
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x1d) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000400002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b0200000001000000116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x180100, 0x0)
syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e0403220c"], 0x7) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r5)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async)
ioctl$EVIOCRMFF(r5, 0x41015500, &(0x7f0000000500)=0xfffffffb) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x4c, r4, 0x0, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x4c}}, 0x0) (async)
write$binfmt_script(r2, &(0x7f0000000380), 0x1000a) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
r7 = socket$inet6(0xa, 0x80002, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x6d91, 0x4)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r9, 0x7a6, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r2) (async)
setsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000140)={0xcf, 0xc1}, 0x2) (async)
sendmsg$sock(r7, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x10081, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040000)

1m21.798579342s ago: executing program 1 (id=99):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r1, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d) (async)
ioctl$BLKROGET(r1, 0x125e, &(0x7f00000000c0)) (async)
bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @none}, 0x8)
listen(r0, 0x5)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f0000000000), 0x8) (async)
listen(r2, 0x5)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x88, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x71, 0x6, "6f7db8a7fdce264fc48cbfdc443b327fea7681601d35f703e353ed7f0d314ae1894a1e37f5f26477f8a5f53ea92c6c4c21228e4a93013aad1973332842df695d36892304da66f10c2aac242ad035017e921473b0a4e18dc3a9617a5954c5baf6b49a2c20422f2474b01657d383"}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x150}, 0x1, 0x0, 0x0, 0x20048080}, 0x0)

1m21.574010344s ago: executing program 1 (id=100):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000040900000121f", 0x2e}], 0x1}, 0x40)

1m21.083558054s ago: executing program 1 (id=101):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0x0, 0x1, {0x4, 0x1}, {0x2a, 0xffff}, @cond=[{0x10, 0x10, 0xcf, 0x1, 0x1, 0x3}, {0x271e, 0x4, 0x1, 0x3f, 0xfffe, 0x7ff}]})
syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x842b01)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000200)='i8042', 0x5)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x200)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x3ff, 0xffffffff, 0x35315241, 0x5, 0x1, 0x273, 0xa, 0x5, 0x1, 0x3, 0x1, 0x3}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a8b018344"], 0x0}, 0x0)

1m18.990793274s ago: executing program 34 (id=89):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000300)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
preadv(r1, 0x0, 0x0, 0x0, 0x1)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m18.775501689s ago: executing program 1 (id=103):
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000480)={0x43563094, 0x1, @name="640b62063aa32b700375d0ae504d73aab6c3ecc8a04cf8f2e968541b7d8ef233"})
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0)
futex(0x0, 0x80, 0x2, 0x0, 0x0, 0x1)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x60000}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
syz_usb_connect(0x5, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100025e022d2099115268d56cd02d0301090212000100824007090499030009"], 0x0)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fedbdf25010002000900030073797a3000000000090001"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x4000080)
mount$9p_virtio(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={'trans=virtio,', {[{@cache_none}]}})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$midi(0x4, 0xad, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f80600b040000102030109029b00010107101709040000020103004d072401060007000b240300ef0207080308030924030202010109fe0f2403020504bf0ffb0dfe030307031124030302050b7103800200050909029c072401080007000624020109280724015e00070007240108000b0820000403090e25010af61c7639f804aaafea9209050b0308000c08010d2501098f030527b91887199b"], &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xc, 0x79, 0x9, 0xff, 0x8}, 0x91, &(0x7f0000000240)={0x5, 0xf, 0x91, 0x2, [@generic={0x78, 0x10, 0xa, "335aedbb09a2292577b489635894a306a6ecc116a5b1b5523544e406ccb98680708e03d86386c5b0a16e113408a4a5fa9afedd9294dd5cf36d728e44b910a07123ad243c0f38cc50d94b1762f9a112f8deff6c86da58b1b16edf4758e8d934dc20dea4a153a0d89dd1605d0403edeb77670c5fb7f7"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "153ae867040512af884d53c28497a474"}]}, 0x2, [{0xf9, &(0x7f0000000140)=@string={0xf9, 0x3, "ee6b0118fb09ff7a11393a7816101ff8267f3c866a04276b0f8e7b2f4bcf17c24e2ada27d88ca671428c847fe3a1da4e81cb4bb965902a576e45ce89b535ab14abe270918ea9bffd0a6978a95b2af9ab519739f5f77c20dc4a034c0d9a3eb45b5091c11014aad23e563b075844f2ccf5851c69a859d442f76103b6e6f23513af90da1647b6f933636225aa6d708144ab4e8c20254f819089ae68a5c028826481f334680748ee023b78580f375de24f170bc977c5f19202372c1828d3ebe828f6ecf138f4e78ac04aa3410118772576642876f4c1f847e3a570b873c315c88ab07a2aee1a95bc7fb3b4d2f5f0bff7d05039b62c4f6cfc6f"}}, {0xbc, &(0x7f0000000500)=ANY=[@ANYBLOB="bc039dcb99f0e16662817a1e35148a46899ca6a8a546d4993fc4147a6bfe70e31db72a137e69662f2b87d920e97844f40b89c2e20315e1def0d469d8e815b3e89eb8ba43702c2ddcff1f19b2f838df666eebd760c255607ca79d997a51ca078489b4cfd7454ab6e462100164ae8e183544f3cc3d19e1cef6c09133fd862db294a5cdec95a662b88ef07a2ed0f4333f1b63618c38599f696d9c4be4b971dc71e8edc67d3e117628316c6531d2daa2b6d46eb4355f47a9f3f285cc98ee2f98a3972d0b6211da5d2aedd005bcbf561fb57b2fc2a3b1576da1dc19bc8c292fd3ac4fe8a9b69584514518bdc42ce6e86542dc649f966c69d5f9"]}]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'ip6erspan0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x1e, 0x0, 0x10007f2e, 0x0, 0xfffffffb, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0x40, 0x8, 0x4000004, 0x6, 0x5, 0x0, 0xb, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})

1m17.586806915s ago: executing program 1 (id=104):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x800, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004035120382000101020301090248000201018032080b0002010120000904000001010120000924010002010001010904010001ff000000090581034000010000"], 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000a80)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045)
r5 = dup(r4)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f044})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r7, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)={0x14, 0x18, 0xa01, 0xfffffffc, 0x0, {0x8a}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000100)=0xffffffffffffffff)
fcntl$getflags(r8, 0xb)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m17.067057148s ago: executing program 35 (id=104):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2c)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom0\x00', 0x800, 0x0)
syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004035120382000101020301090248000201018032080b0002010120000904000001010120000924010002010001010904010001ff000000090581034000010000"], 0x0)
nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x10a, 0x2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000a80)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c", 0x28}], 0x1}, 0x8045)
r5 = dup(r4)
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000000)={0xf0f044})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
r6 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000040))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r7, 0x40047438, &(0x7f0000000040))
ioctl$PPPIOCCONNECT(r7, 0x4004743a, &(0x7f00000000c0))
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000028c0)={0x14, 0x18, 0xa01, 0xfffffffc, 0x0, {0x8a}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f0000000100)=0xffffffffffffffff)
fcntl$getflags(r8, 0xb)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

56.304647715s ago: executing program 6 (id=142):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00')
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_tables_matches\x00')
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x16, 0x1e, "4d61501d0100000000000000100000edffff7f0700000000000038ff0700"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fchdir(r1)
readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000020240)=""/226, 0xe2)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r3, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

52.215485235s ago: executing program 6 (id=157):
sendto(0xffffffffffffffff, &(0x7f0000000680)="680000003100eb750100000000000000000000005400018050000180097ea30e0001006761746500000000400002801800020000160000c40000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e80300000000000017eb9a5fac9bf09a7565f5cfb2e3ddd8fa7a40f46cbe3b7ffe8d6539954c2b85861714d2b5e9df37e397bb1f53d0e3c3f0a074422b5cdb7752d9a08dce6e9f924dd0a333e665fb35a761415ca6cdf03815cb2761831fc68884e97f24b1b5f8902d758bd45936841dc302ffef98", 0xd8, 0x44000, 0x0, 0x0)

51.779454579s ago: executing program 6 (id=160):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000000)=0xfffffff8, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2f, 0x0, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a1401002abd7000ffdb9e25080001000100000008003c"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24008040)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x140e, 0x100, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000}, 0x0)

51.383453408s ago: executing program 6 (id=163):
syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x3722, 0x10, 0x3, 0x85}, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000000)=""/22)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1c)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0)
r1 = inotify_init1(0x80800)
inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x430002d7)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000100)=""/1000, 0x3e8)
openat(r2, &(0x7f0000000143), 0x0, 0x0)
setns(0xc9, 0x0)
r3 = socket(0x2d, 0x2, 0x0)
setsockopt(r3, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4)
sendmsg(r3, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x80, 0x0}, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

51.187617666s ago: executing program 6 (id=165):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x78, 0x601, 0x70bd2d, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}]}, 0x18}], 0x1}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x10, 0x3fb, 0x2, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x800)
syz_usb_control_io(r1, 0x0, &(0x7f00000004c0)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="010f02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac1(0x3, 0x9f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0xfd, 0x40, 0xf7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xffff, 0x1, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x6, 0x81, 0xac, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0xfff, 0xd7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x1, 0x7, "", "d8"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0xe, 0x7, 0x81, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0xa, 0x58, {0x7, 0x25, 0x1, 0xc, 0x7, 0x10}}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x200, 0x2, 0x7, 0x4, 0x40, 0x4}, 0x40, &(0x7f00000003c0)={0x5, 0xf, 0x40, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x9, 0xf00, 0x1, [0xff0000, 0xf, 0xc0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x19, 0x4, 0x9, 0xf, 0x1ff, [0x1e, 0xff000f, 0xff3f3f, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x7, 0x4, 0x80}]}, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1801}}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002bbf70009cfdb7279c00000008000300", @ANYRES32=r6, @ANYBLOB="080005"], 0x24}}, 0x0)

50.507087779s ago: executing program 6 (id=171):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a00000004001ca1181402000511000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}, {&(0x7f0000001600)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

49.619489185s ago: executing program 36 (id=171):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a00000004001ca1181402000511000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}, {&(0x7f0000001600)="1cc4488d5e4ef24d4c6afe6d614da92c05fc9b73d35c5a528052", 0x1a}], 0x2, 0x0, 0x0, 0x7400}, 0x0)

39.564207442s ago: executing program 7 (id=213):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000a2f70000010203000000000b000000000a0000083c10010500010088df00002c00018014000300fe880000000000000000810114000400fc0200"/71], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000202020202020000080026006c090000240051802000009a05000200020000000800030001ac0f00090001"], 0x58}, 0x1, 0x0, 0x0, 0xf040}, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0f00"])
openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

39.38443719s ago: executing program 7 (id=214):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010200000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000074000000090a010400000000000000000200fffe08000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094300009802c0002801c0001800800014000000004080001400000000308000140000000030c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0x100}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880)

39.144751119s ago: executing program 7 (id=215):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000040900000121f", 0x2e}], 0x1}, 0x40) (fail_nth: 1)

38.9323007s ago: executing program 7 (id=216):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r2, 0x705, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x73}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000800)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0)

37.935573297s ago: executing program 7 (id=219):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001c400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0xfdff)

37.639179048s ago: executing program 7 (id=221):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @fda={0x66646185, 0x4, 0x0, 0x30}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9f6e, 0x2, 0xad99463ead2357be, 0xffffffffffffffff, 0x20000000)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x8083, 0x20, 0x0, 0x11a}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x431, 0x80000, 0x3, 0x2ed}, 0xffffffffffffffff, 0x0, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2ff, 0x2, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49c9, 0x2, 0x3, 0x3e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x530c, 0x4, 0x1, 0x1db}}], 0x4, &(0x7f00000014c0)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x3, 0x70b, 0x0, &(0x7f00000004c0)=@buf_1k="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"}}, &(0x7f0000001540))
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000015c0)=<r7=>0x0)
syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000001640)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001600)=@new_dev={0x3, 0x9ca, 0x0, 0x0, 0x1000, 0xffffffff, r7}}}, &(0x7f00000016c0))
r8 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r9, 0x406, r9)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

37.359250993s ago: executing program 37 (id=221):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @fda={0x66646185, 0x4, 0x0, 0x30}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9f6e, 0x2, 0xad99463ead2357be, 0xffffffffffffffff, 0x20000000)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x8083, 0x20, 0x0, 0x11a}, &(0x7f0000000240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x431, 0x80000, 0x3, 0x2ed}, 0xffffffffffffffff, 0x0, 0x0, <r5=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2ff, 0x2, 0x3, 0x8b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x49c9, 0x2, 0x3, 0x3e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x530c, 0x4, 0x1, 0x1db}}], 0x4, &(0x7f00000014c0)={0x2e, 0x1, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x3, 0x70b, 0x0, &(0x7f00000004c0)=@buf_1k="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"}}, &(0x7f0000001540))
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000015c0)=<r7=>0x0)
syz_ublk_add_dev(r3, r4, 0x0, r5, &(0x7f0000001640)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001600)=@new_dev={0x3, 0x9ca, 0x0, 0x0, 0x1000, 0xffffffff, r7}}}, &(0x7f00000016c0))
r8 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10)
setrlimit(0x7, &(0x7f0000000140)={0x4, 0x100})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
fcntl$dupfd(r9, 0x406, r9)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)

12.962269604s ago: executing program 4 (id=329):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0xc814)

12.691525935s ago: executing program 4 (id=331):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0x8, 0x88, {0x88, 0x10, "771ca5247fad2cc814ba6e2835274cb246bb94f33179dbc495fd0feb1c1d37a93541952bab37166c44065764c6dd55c2a431e7a28bb3cdcea1ccdde90b3a44bcf85c3d7dd65475a2c9bb70a47b8c27e3007add3e078801ab5342e141489134ca003d7216eb6d23f27e74c368cbe957d7736b60867970185ecb3e162fbddaa52dd16f675b04d1"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x16, 0x21, "4be1d66428d2def806f4a9e9349f74ef117e52a66a2c91894c362f3bb2735873ac"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x81, 0x2, "eacc"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a9"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "b8"}, &(0x7f0000000340)={0x20, 0x84, 0x3, "73e334"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "33621c"}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f00000008c0)=ANY=[@ANYBLOB="00171a00000053221fa792"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10.0273241s ago: executing program 5 (id=339):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0)
ioctl$VT_ACTIVATE(r1, 0x5606, 0x6)

9.266486516s ago: executing program 4 (id=343):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0)
bind$netlink(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x80003, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0)

8.879100656s ago: executing program 5 (id=345):
unshare(0x64000600)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
eventfd(0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r7=>0x0, '\x00', {0xffffffff, 0xffff, 0x11, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r10, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x4}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x4, 0x2, 0xfffffffd}}, 0x4, 0x0, 0xfe}})
r11 = dup(r9)
syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0x1, 0x2, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x40, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
r12 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r12, 0x0, 0x0)
syz_usb_control_io(r12, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r12, 0x81, 0x2, &(0x7f0000000100)="8102")
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x0, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f00000003c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x7, 0x6, "0d98c5", 0x1000, 0x2f, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, [@fragment={0x2b, 0x0, 0x92, 0x1, 0x0, 0x9, 0x65}]}}}}}}}}, 0x72)

6.453557135s ago: executing program 9 (id=353):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)="d84f7390", 0x4)
sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c)

6.327462334s ago: executing program 9 (id=354):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x800000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/fs/afs/cells\x00', 0x1, 0x0)
write(r3, &(0x7f0000000300)='add syz0 127.0.0.1+70031', 0x18)
mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0xd2, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000180)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$inet6(r6, 0x0, 0x16, 0x400c0, &(0x7f0000000040)={0xa, 0x4e24, 0xffffff7c, @empty, 0x7}, 0x1c)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)

6.153516573s ago: executing program 4 (id=355):
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0xc084}, 0x2000c1d4)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001640)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d7ffe199605000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES32=r1, @ANYRESOCT], 0x0)
ioctl$RTC_VL_CLR(r1, 0x7014)

5.602924617s ago: executing program 5 (id=356):
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bridge0/bridge/stp_state\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1J', 0x2)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
timerfd_create(0x4, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2b, 'io'}, {0x2b, 'net'}]}, 0x9)
write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000002010400000000000000000a004007a7fcc63f5d7018a05c4ce33ea65c358ba2ed21816954f721732c868a5976ecb2ac836b7ef270ff90a0cff3350a98c328cae8a8bb2461e58915ff7f464f9a373079422a08383f74cc2fc2c4ab702e78cc5e3b"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048890)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
userfaultfd(0x800)
r10 = dup(r8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r10, 0xc00864bf, &(0x7f0000000080))

5.147192509s ago: executing program 9 (id=357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x28b1, &(0x7f0000000480)={0x0, 0x5cfc, 0x800, 0xfffffffe, 0x12}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000003c0)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x48, 0x0, 0xffffffffffffffff, 0x2, 0x8001, 0x4, 0x0, 0x0, {0x86}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044094)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg(r5, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r5, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r5, &(0x7f00000005c0)={0x1, {&(0x7f0000002e40)=""/152, 0x98, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r5, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)
mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff)
mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff)
chdir(&(0x7f0000000040)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00')
mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001600)=ANY=[@ANYBLOB="01000000", @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf25070000000c0006000100000001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000052}, 0x4008)
sendmsg$sock(r4, &(0x7f0000000640)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @multicast1}, 0x3, 0x2, 0x0, 0x1}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000240)="5f62ee83e828ddf973de1368e46197e37cb664446bf3be5c037d4747af7002a1ed8347a4a6e5901eaeaf368026b1284a9291aeafaf5cd9ea8116127336e4f558d2538af62efa2d5105d514d65eb66326e10049f905301e55c366f7bc5683ba4a3c485d675fce88bfccc1655e83442fa89a199d", 0x73}, {&(0x7f0000000340)="0effb02e5d5c0554ff80af4c95e8a2f1d35357d91e6e81a953db69c7ff3098e87cf3614b5c2d3cadbf660916950f06d0d11b424004832929a983312971d98c8a080f660a276b9f06d58ce553f74f66bff6040ab20d5e789c3880b615b11fdb68e7921ba7551899", 0x67}, {&(0x7f0000000440)="4bfb53a828af37a77b2a723deb9ee289be83e135e57886846701aa0366b7429ae10371f06bedaf9c0ec1742346ffa4dd019047b4a6024e072754707e61fde9e60bbf85dfe186590c43e5bef3091483c706c91de302fb871ad30b0d6bcaa93ece67748381ddf2fef57edf59e23ceb634a32bd011a2a124d516490e60b45be279942282ef1ddc52e060759ba0b37570cd4", 0x90}], 0x3, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x232b}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @mark={{0x14, 0x1, 0x24, 0xffff6be3}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}], 0x78}, 0x40000)
mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff)
mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0)

4.656634411s ago: executing program 4 (id=358):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) (fail_nth: 6)

4.505706958s ago: executing program 9 (id=359):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000000000)={0xc, {"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", 0x1019}}, 0x1006)

4.167475625s ago: executing program 9 (id=360):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000900)={0x0, 0x9, 0x9c1}, &(0x7f0000000940)=0x8)
read$FUSE(0xffffffffffffffff, &(0x7f00000022c0)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
getresgid(&(0x7f0000004300), &(0x7f0000004340)=<r3=>0x0, &(0x7f0000004380))
fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000043c0)={{}, {}, [{0x2, 0x4, 0xee01}], {0x4, 0x1}, [{0x8, 0x7, r2}, {0x8, 0x5, r3}], {}, {0x20, 0x4}}, 0x3c, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'bridge0\x00', @local})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getgroups(0x7, &(0x7f0000000040)=[<r5=>0x0, 0xee00, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x0])
ioctl$TUNSETGROUP(r4, 0x400454ce, r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0x0)
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r8, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r6, &(0x7f0000000000)='./file0\x00', 0x4)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2)

3.703053823s ago: executing program 5 (id=361):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x28, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x8, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x2, 0x180, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1a19, 0xcd23, 0x1}, {0x6, 0x24, 0x1a, 0x7579, 0x21}, [@acm={0x4, 0x24, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xff, 0x8, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0xff, 0x78}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x6, 0x78, 0x6, 0x8, 0x1b}, 0xe9, &(0x7f0000000200)={0x5, 0xf, 0xe9, 0x2, [@generic={0xcc, 0x10, 0x4, "01c8766e6b8799bf3507acf02d473626494245c7c32898f410bb20759a92cee2c01183476c5d3c0b331c23ea88c5e3ea655cd08a24445b055ab57d4d1dceccd36b67d599b8b10e68fa4e83443d4db79fb17ecc339e9dd58222269500cf7d06ba6b424973c9ee2b1e1d8fa70e12e89f0ad2c40166b90af4b2e9970837b22ac5dce4e1f98cb2a2faf941922df4bf76ba2101099e1b313c873b4d041dd68118bb983f4d0c36c12c98eaf29b75fac739ac49b54c3c552c48f4488796c3b080bc0865581e345c584cbda176"}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x1, 0x0, 0x4, [0xc000, 0xff000f, 0x0]}]}, 0x2, [{0x35, &(0x7f0000000300)=@string={0x35, 0x3, "a956435e130bead6336d72921cd1828ad1b8a0a239a42a97c4e94194ad3afe8183e72f67cfaf1584f148a0fa2a9a91a6127134"}}, {0xfa, &(0x7f0000000340)=@string={0xfa, 0x3, "34ed39b99b9260ec12c3a140c58ff4506f117c3affbd11e6ac58fa018d97d1df441cb3e39974f89dc0b02b33311a4014fb811c376aeb6fc337b335b56662123cfd0b40fb83e4326d5ed97a18e28ed94eaa43f81aa27413dd88480180a4b1ba478d8973faae56f7b8ec109ff63b8cead1b53123d9550a5db9d0b0ebc958d3d62cc3897870263a63256064e750548994163adfa05c72c403efdaad25cd4f24e3765f1bfbaab003b4d5b465fcdbfa9d9dd71a391a996cc5d5017c3db3a11d0d2ff6be758cc99efb176917304fe690670616b1c04cb092b1c53ab5ca3ad2f42d831b82f18da58b7cccc4a2c806019ebf2c3813a3af358f00eec6"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'team_slave_0\x00', &(0x7f00000004c0)=@ethtool_eeprom={0xb, 0x80000001, 0x23, 0x67, "5e3ec7e4fa938463d4f2d4ab50f930f4fc0f8f8767e0203da07afd64a1a772c4b30614833ee7cf19383dc54f9d737e8db2f45f0db2606560b33b93e33489438a8333fd5677f2dfdfdcf646ec99d6d9919706d3ec3915658242f00cf5623d299ee9fee006167cb9"}})
r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120110010000004043554500000000000001090224000100009009090408fe01030003000921c100fe012228000905810300"], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x191)
mkdir(0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)={0x20, 0x22, 0x28, {0x28, 0xa, "c2631385269c2c3cbdeacc918d0fb74237cc6e442a52973661d6090055443800000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
splice(r2, &(0x7f0000000080)=0xc, r2, &(0x7f0000000480)=0x800, 0x8, 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x40000, 0x9)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r1, &(0x7f00000005c0)={0x14, &(0x7f0000000540)={0x40, 0x6, 0x37, {0x37, 0x33, "c28bca94015cb3a54aadc91350cbfefca1dcdaa50dc24b8eeb53b035e874a126eafdd8396e3bdcba097248699ca124d9cdc5447844"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000600)={0x0, 0xc, 0xf0, "0f243d2c39736fcbe57bff63573a7e22e5cc36de6f1ffcd947f26b31ff24e0370bab7f033057895830195822a1415c4ca3929e032f2dcb76fd42afff39f17f8c3a96d50904411c38e165e136c82b19c8cc330042bbc2f395f8e1d52f4013404fcd7c71323e53e66f52c2aa66d7f982aafd2610de6fc5fe759d3f0ba06a6842e7b6179311acad4eab12d79cd80156d06c83c35cbd09ef843c8cd3e2e119827a295a41fedaf15b0e3ac17749ce3ac3de550beabeb63dce7d85420df0fcfd2c4028621dc23a4ab35ef9618c51ae7ca8fdeeeff5664404fad342e04d2f6c5a6f66dfc980bbe718de1037269404704bd7edb2"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x72}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xe}})

3.702960511s ago: executing program 8 (id=362):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x200000000000000, 0x0)

3.647682291s ago: executing program 8 (id=363):
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff)
mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='127.0.0.1', 0x9)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='7', 0x1)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0)
write(r2, &(0x7f0000000300)='0', 0x1)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @multicast})
write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="001086dd0001090004000000a60c6eec00be00442ffffe8000200000000000000000000000aaff020000000000000000000000000001042088bee80300030c000800050086dd88a888be000000021609660501000000000089a8080022eb00020000200cf00802000000000000020004941308006558ffffffff"], 0xfd78)
write(r3, &(0x7f0000000380)='1', 0x1)
close(r3)
mkdir(&(0x7f0000000440)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x1, 0x0)
write(r5, &(0x7f00000004c0)='512', 0x3)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)="a3be49c2be761cb5abd946620756854b3adca8fe4169b1f8842af6be125365cd44cca056ca0266b297fd1a5f1a9815e21b6156e0f1e21961b2fa5241f0646e09e2ff8eee5101ef293eeb69bad5b0", 0x49)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0)
write(r7, &(0x7f00000005c0)='6', 0x1)

951.18092ms ago: executing program 9 (id=364):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000380)={&(0x7f0000000000)=0x7, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000340)})
clock_nanosleep(0x9, 0x0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x40000, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)
sendmsg$tipc(r0, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0)

950.857417ms ago: executing program 4 (id=365):
r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405f0500a800010102030109022e00010100a0320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x18)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x60008085)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d40000000001010400000000000000000a0000003c0001802c00018014000300fe80aafe8780000000000000000000aa14000400fc0100000000000000000000000000010c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa080007400000000020000d8014000400fe80000000000000000000000000002e080002007f000001140005800f00010073616e652d323030303000"], 0xd4}}, 0x0)
r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x474180, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040005}, 0x804)
write(r4, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet(r6, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81c0e00c86f0500194d27a5a42cf1235b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x4000084)
syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00')
write$char_usb(r5, &(0x7f0000000200)='U\x00\x00\x00\x00\x00\x00\x00', 0x8)

894.77901ms ago: executing program 8 (id=366):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c000180070001"], 0xa4}}, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = eventfd2(0x3, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x0, r2})

636.106746ms ago: executing program 8 (id=367):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
userfaultfd(0x801)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x9)
socket$key(0xf, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r6, 0x5}}, 0xfffffcda)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101002, 0x0)

378.308192ms ago: executing program 5 (id=368):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x1b8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x198, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0xfffffffd}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendto(r0, &(0x7f0000000100)="ad0f38a58f9cab0c1d101b6ae7553115540a23ab4a655e1bc664c955d0bcf14832da3f10220d99fa49824986e5c105", 0x2f, 0x0, &(0x7f0000000740)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e24, 0x1}}, 0x80)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000082000000040007000000040000000000000000000000020000000000"], 0x436300)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff)
write(r3, &(0x7f0000000700)='\x00\x00\x00\b\x00'/20, 0x14)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000008c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x40)
sendmsg$NFT_BATCH(r3, &(0x7f0000001f40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000d80)=""/4101, 0x1005}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/67, 0x43}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})

259.950525ms ago: executing program 8 (id=369):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = memfd_create(&(0x7f00000005c0)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x10\x00\x00\x00\x00\x00\x00\x00\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x981q\xcc%\x98\xa0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb4vDI\xc8\x91\x87\x1fuYG7}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x8e\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xcaBH\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xcd,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x0e\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xb9\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfct\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\xfd\x9d\x18\xba\xaf\xfc\xa4\xa9\x98\xa4\x8fjJ\x7f\x9a\x13\xd8\xd7K\n9m\f5\xeb\x00\'{n\x00\x8f*\xc7o\'\xb7\x1a\xe3\xf1\xc3\xd5\x8b\xb8\xb2f\xce\x82\xd9\a\x93\xd2\xccj\xc5F\xfe`\x9f\x17YU\xdd\x80D~\x15Wj\x01\xb8\xe3\xe4\xb3\xd7\"\xc9\x1b2\xda\xfb\xb8#A}y,\x8f\xcb\x92e\x90\x94 \xde!\xb7:A~N\x03\xd5\xc7|\xfd_\x99\xe3\xa5\xf3l\xda\x91\xe0?\xc7\xd6R\x19~\xec=u3\xdf\xf5\xa17\xa0\xaa\x98\xd3:\x93\xe6\x9f\xf0@\xf5\\\xe1\f\xd5\x03\xc68', 0x7)
fcntl$addseals(r0, 0x409, 0xe)
ftruncate(r0, 0x8000000)
r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x9, 0xbde, 0xb, 0xe4}})

59.049596ms ago: executing program 5 (id=370):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20030b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r4=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$cont(0x7, r7, 0x7, 0x80)
r8 = dup(r6)
syz_ublk_setup_queues(r8, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x3, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x2, 0xa3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='8'], 0x138}}, 0x0)

0s ago: executing program 8 (id=371):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1000})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0)
write(r3, &(0x7f0000000280)="1528b8616b642e302e202e", 0xb)
syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "3ddc5b"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="000908f3205a5bda18e750d1346b6487cf8dcfdda85e5a7f4bb5d50a38410617c38aef0d077507991d3fbe1387a078ed290fe152db384d3b9978159029c5c572e0276d86880f5c224c7f01637a4039fb3ad1bcb43085f113836632f5ddd8fd03c36e466139ba44d8b365886de2240c75fe9002212719e4929bccd06f86a449a84ad3d6e8fe76ee86d515b8d5b9628da9445a712c10f52b34d43c0ff84235d1c3b2f96724bc87"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  160.639919][ T6668] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  160.639946][ T6668] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  160.639964][ T6668] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: ffffffffffffff9c
[  160.639981][ T6668] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  160.639996][ T6668] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001
[  160.640015][ T6668] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  160.640050][ T6668]  </TASK>
[  161.084570][   T30] snd-usb-audio 8-1:0.126: probe with driver snd-usb-audio failed with error -2
[  161.112310][ T6677] FAULT_INJECTION: forcing a failure.
[  161.112310][ T6677] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  161.135153][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.7.144 Not tainted syzkaller #0 PREEMPT(full) 
[  161.135189][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.135203][ T6677] Call Trace:
[  161.135214][ T6677]  <TASK>
[  161.135225][ T6677]  dump_stack_lvl+0xe8/0x150
[  161.135263][ T6677]  should_fail_ex+0x410/0x560
[  161.135307][ T6677]  prepare_alloc_pages+0x223/0x600
[  161.135353][ T6677]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  161.135397][ T6677]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  161.135603][ T6677]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  161.135641][ T6677]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  161.135681][ T6677]  ? __pfx_policy_nodemask+0x10/0x10
[  161.135703][ T6677]  ? __get_vm_area_node+0x155/0x2f0
[  161.135729][ T6677]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  161.135757][ T6677]  ? __vmalloc_node_noprof+0xc2/0x100
[  161.135788][ T6677]  __alloc_pages_noprof+0x10/0x100
[  161.135820][ T6677]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  161.135864][ T6677]  ? alloc_pages_noprof+0x140/0x2b0
[  161.135893][ T6677]  __kasan_populate_vmalloc+0xb7/0x1c0
[  161.135931][ T6677]  alloc_vmap_area+0xd1a/0x1420
[  161.135974][ T6677]  ? __pfx_alloc_vmap_area+0x10/0x10
[  161.136001][ T6677]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  161.136106][ T6677]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  161.136141][ T6677]  ? __get_vm_area_node+0x155/0x2f0
[  161.136176][ T6677]  __get_vm_area_node+0x200/0x2f0
[  161.136324][ T6677]  __vmalloc_node_range_noprof+0x343/0x1540
[  161.136371][ T6677]  ? copy_process+0x820/0x43e0
[  161.136477][ T6677]  ? percpu_ref_get_many+0x19/0x140
[  161.136515][ T6677]  ? __memcg_slab_post_alloc_hook+0x4d7/0xf80
[  161.136567][ T6677]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  161.136602][ T6677]  ? dup_task_struct+0x52/0xa00
[  161.136627][ T6677]  ? trace_kmem_cache_alloc+0x29/0xe0
[  161.136662][ T6677]  ? memcpy_and_pad+0x48/0x80
[  161.136697][ T6677]  __vmalloc_node_noprof+0xc2/0x100
[  161.136728][ T6677]  ? copy_process+0x820/0x43e0
[  161.136753][ T6677]  ? copy_process+0x820/0x43e0
[  161.136790][ T6677]  dup_task_struct+0x2c6/0xa00
[  161.136827][ T6677]  copy_process+0x820/0x43e0
[  161.136881][ T6677]  ? rcu_is_watching+0x16/0xb0
[  161.136910][ T6677]  ? __pfx_copy_process+0x10/0x10
[  161.136943][ T6677]  ? mutex_init_lockdep+0xdf/0x110
[  161.136968][ T6677]  vhost_task_create+0x1f9/0x380
[  161.137001][ T6677]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  161.137027][ T6677]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  161.137052][ T6677]  ? __pfx_vhost_task_create+0x10/0x10
[  161.137086][ T6677]  ? register_lock_class+0x31/0x2e0
[  161.137123][ T6677]  ? __pfx_vhost_task_fn+0x10/0x10
[  161.137163][ T6677]  ? kasan_quarantine_put+0xbb/0x1f0
[  161.137202][ T6677]  kvm_mmu_post_init_vm+0x147/0x2b0
[  161.137232][ T6677]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  161.137273][ T6677]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  161.137315][ T6677]  kvm_vcpu_ioctl+0xa61/0xfd0
[  161.137357][ T6677]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.137392][ T6677]  ? hook_file_ioctl+0x1f2/0x600
[  161.137457][ T6677]  ? __fget_files+0x2a/0x420
[  161.137488][ T6677]  ? __fget_files+0x2a/0x420
[  161.137510][ T6677]  ? __fget_files+0x3a2/0x420
[  161.137535][ T6677]  ? __fget_files+0x2a/0x420
[  161.137568][ T6677]  ? bpf_lsm_file_ioctl+0x9/0x20
[  161.137598][ T6677]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.137634][ T6677]  __se_sys_ioctl+0xfc/0x170
[  161.137681][ T6677]  do_syscall_64+0x166/0x520
[  161.137703][ T6677]  ? trace_irq_disable+0x3b/0x140
[  161.137738][ T6677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.137764][ T6677]  ? clear_bhb_loop+0x70/0xc0
[  161.137795][ T6677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.137822][ T6677] RIP: 0033:0x7f2ba059e0d9
[  161.137848][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.137869][ T6677] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.137896][ T6677] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  161.137916][ T6677] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  161.137930][ T6677] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  161.137944][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.137957][ T6677] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  161.137992][ T6677]  </TASK>
[  161.148195][   T30] usb 8-1: USB disconnect, device number 3
[  161.204521][ T5767] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  161.312988][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  161.408772][ T5767] usb 7-1: device descriptor read/64, error -71
[  161.472560][ T6677] syz.7.144: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  161.473171][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.7.144 Not tainted syzkaller #0 PREEMPT(full) 
[  161.473245][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.473291][ T6677] Call Trace:
[  161.473325][ T6677]  <TASK>
[  161.473352][ T6677]  dump_stack_lvl+0xe8/0x150
[  161.473475][ T6677]  warn_alloc+0x24d/0x270
[  161.473575][ T6677]  ? lockdep_hardirqs_on+0x7b/0x110
[  161.473703][ T6677]  ? __pfx_warn_alloc+0x10/0x10
[  161.473801][ T6677]  ? kfree+0x1c5/0x650
[  161.473896][ T6677]  ? __get_vm_area_node+0x219/0x2f0
[  161.474009][ T6677]  __vmalloc_node_range_noprof+0x36b/0x1540
[  161.474104][ T6677]  ? percpu_ref_get_many+0x19/0x140
[  161.474207][ T6677]  ? __memcg_slab_post_alloc_hook+0x4d7/0xf80
[  161.474270][ T6677]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  161.474303][ T6677]  ? dup_task_struct+0x52/0xa00
[  161.474358][ T6677]  ? trace_kmem_cache_alloc+0x29/0xe0
[  161.474463][ T6677]  ? memcpy_and_pad+0x48/0x80
[  161.474625][ T6677]  __vmalloc_node_noprof+0xc2/0x100
[  161.474711][ T6677]  ? copy_process+0x820/0x43e0
[  161.474785][ T6677]  ? copy_process+0x820/0x43e0
[  161.474873][ T6677]  dup_task_struct+0x2c6/0xa00
[  161.474990][ T6677]  copy_process+0x820/0x43e0
[  161.475146][ T6677]  ? rcu_is_watching+0x16/0xb0
[  161.475199][ T6677]  ? __pfx_copy_process+0x10/0x10
[  161.475307][ T6677]  ? mutex_init_lockdep+0xdf/0x110
[  161.475395][ T6677]  vhost_task_create+0x1f9/0x380
[  161.475510][ T6677]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  161.475586][ T6677]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  161.475661][ T6677]  ? __pfx_vhost_task_create+0x10/0x10
[  161.475758][ T6677]  ? register_lock_class+0x31/0x2e0
[  161.475883][ T6677]  ? __pfx_vhost_task_fn+0x10/0x10
[  161.476032][ T6677]  ? kasan_quarantine_put+0xbb/0x1f0
[  161.476152][ T6677]  kvm_mmu_post_init_vm+0x147/0x2b0
[  161.476238][ T6677]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  161.476369][ T6677]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  161.476500][ T6677]  kvm_vcpu_ioctl+0xa61/0xfd0
[  161.476629][ T6677]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.476726][ T6677]  ? hook_file_ioctl+0x1f2/0x600
[  161.476879][ T6677]  ? __fget_files+0x2a/0x420
[  161.476970][ T6677]  ? __fget_files+0x2a/0x420
[  161.477053][ T6677]  ? __fget_files+0x3a2/0x420
[  161.477127][ T6677]  ? __fget_files+0x2a/0x420
[  161.477213][ T6677]  ? bpf_lsm_file_ioctl+0x9/0x20
[  161.477305][ T6677]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  161.477438][ T6677]  __se_sys_ioctl+0xfc/0x170
[  161.477556][ T6677]  do_syscall_64+0x166/0x520
[  161.477618][ T6677]  ? trace_irq_disable+0x3b/0x140
[  161.477714][ T6677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.477788][ T6677]  ? clear_bhb_loop+0x70/0xc0
[  161.477873][ T6677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.477995][ T6677] RIP: 0033:0x7f2ba059e0d9
[  161.478058][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.478119][ T6677] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  161.478193][ T6677] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  161.478252][ T6677] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  161.478292][ T6677] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  161.478340][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  161.478390][ T6677] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  161.478499][ T6677]  </TASK>
[  161.528727][   T10] usb 5-1: Using ep0 maxpacket: 8
[  161.546162][   T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  161.604767][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.641397][ T6677] Mem-Info:
[  161.641445][ T6677] active_anon:5693 inactive_anon:4 isolated_anon:0
[  161.641445][ T6677]  active_file:195 inactive_file:55861 isolated_file:0
[  161.641445][ T6677]  unevictable:0 dirty:59 writeback:0
[  161.641445][ T6677]  slab_reclaimable:10201 slab_unreclaimable:93305
[  161.641445][ T6677]  mapped:25283 shmem:533 pagetables:1217
[  161.641445][ T6677]  sec_pagetables:0 bounce:0
[  161.641445][ T6677]  kernel_misc_reclaimable:0
[  161.641445][ T6677]  free:1330641 free_pcp:11904 free_cma:0
[  161.641684][ T6677] Node 0 active_anon:22772kB inactive_anon:16kB active_file:780kB inactive_file:223240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:101132kB dirty:232kB writeback:0kB shmem:2132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11680kB pagetables:4764kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  161.641848][ T6677] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  161.642005][ T6677] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.642191][ T6677] lowmem_reserve[]: 0 2482 2484 2484 2484
[  161.642315][ T6677] Node 0 DMA32 free:1365532kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22772kB inactive_anon:16kB active_file:780kB inactive_file:223240kB unevictable:0kB writepending:232kB zspages:0kB present:3129332kB managed:2542440kB mlocked:0kB bounce:0kB free_pcp:47612kB local_pcp:27652kB free_cma:0kB
[  161.642492][ T6677] lowmem_reserve[]: 0 0 1 1 1
[  161.642599][ T6677] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  161.681885][ T6677] lowmem_reserve[]: 0 0 0 0 0
[  161.682043][ T6677] Node 1 Normal free:3941672kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  161.682242][ T6677] lowmem_reserve[]: 0 0 0 0 0
[  161.682343][ T6677] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  161.690696][ T6677] Node 0 DMA32: 1527*4kB (UME) 600*8kB (UME) 414*16kB (UM) 514*32kB (UM) 164*64kB (UME) 39*128kB (UM) 19*256kB (UME) 
[  161.767221][ T5767] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  161.883022][ T6677] 11*512kB (UM) 3*1024kB (UM) 4*2048kB (UME) 316*4096kB (UM) = 1365564kB
[  161.883250][ T6677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  161.883578][ T6677] Node 1 Normal: 2*4kB (UM) 6*8kB (UM) 7*16kB (UM) 10*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3941672kB
[  161.899257][ T6677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.899313][ T6677] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.899376][ T6677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  161.899422][ T6677] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  161.899474][ T6677] 56585 total pagecache pages
[  161.899498][ T6677] 0 pages in swap cache
[  161.899535][ T6677] Free swap  = 124996kB
[  161.899567][ T6677] Total swap = 124996kB
[  161.899600][ T6677] 2097051 pages RAM
[  161.899661][ T6677] 0 pages HighMem/MovableOnly
[  161.899691][ T6677] 429397 pages reserved
[  161.899722][ T6677] 0 pages cma reserved
[  162.016014][ T5767] usb 7-1: device descriptor read/64, error -71
[  162.143821][ T5767] usb usb7-port1: attempt power cycle
[  162.241707][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  162.241805][   T10] pvrusb2: **********
[  162.241828][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  162.241870][   T10] pvrusb2: Important functionality might not be entirely working.
[  162.241894][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  162.241928][   T10] pvrusb2: **********
[  162.569340][ T5767] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  162.602476][ T2363] pvrusb2: Invalid write control endpoint
[  162.630432][ T5767] usb 7-1: device descriptor read/8, error -71
[  162.723639][ T2246] usb 5-1: USB disconnect, device number 4
[  162.788242][ T2363] pvrusb2: Invalid write control endpoint
[  162.800091][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  162.813077][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  162.821273][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  162.821307][ T2363] pvrusb2: Device being rendered inoperable
[  162.841150][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  162.849090][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  162.866579][ T2363] pvrusb2: Attached sub-driver cx25840
[  162.870987][ T5767] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  162.885330][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  162.895914][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  162.908491][ T5767] usb 7-1: device descriptor read/8, error -71
[  163.013481][ T5767] usb usb7-port1: unable to enumerate USB device
[  163.119326][ T5278] 8021q: adding VLAN 0 to HW filter on device eth12
[  163.739961][ T6714] FAULT_INJECTION: forcing a failure.
[  163.739961][ T6714] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  163.741266][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.5.155 Not tainted syzkaller #0 PREEMPT(full) 
[  163.741299][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  163.741314][ T6714] Call Trace:
[  163.741325][ T6714]  <TASK>
[  163.741336][ T6714]  dump_stack_lvl+0xe8/0x150
[  163.741372][ T6714]  should_fail_ex+0x410/0x560
[  163.741412][ T6714]  prepare_alloc_pages+0x223/0x600
[  163.741452][ T6714]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  163.741491][ T6714]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  163.741530][ T6714]  ? __pfx_policy_nodemask+0x10/0x10
[  163.741559][ T6714]  ? __lock_acquire+0x6df/0x2e50
[  163.741596][ T6714]  alloc_pages_mpol+0x21e/0x390
[  163.741635][ T6714]  folio_alloc_mpol_noprof+0x39/0x160
[  163.741664][ T6714]  vma_alloc_folio_noprof+0xe1/0x1e0
[  163.741693][ T6714]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  163.741719][ T6714]  ? lock_acquire+0x115/0x350
[  163.741759][ T6714]  do_pte_missing+0x173a/0x34b0
[  163.741810][ T6714]  handle_mm_fault+0x1a53/0x3750
[  163.741848][ T6714]  ? handle_mm_fault+0xf1/0x3750
[  163.741907][ T6714]  ? __pfx_handle_mm_fault+0x10/0x10
[  163.741948][ T6714]  ? __lock_acquire+0x6df/0x2e50
[  163.741986][ T6714]  ? lock_mm_and_find_vma+0xa7/0x340
[  163.742019][ T6714]  do_user_addr_fault+0x746/0x1340
[  163.742069][ T6714]  exc_page_fault+0x6a/0xc0
[  163.742106][ T6714]  asm_exc_page_fault+0x26/0x30
[  163.742130][ T6714] RIP: 0010:__put_user_8+0xd/0x30
[  163.742166][ T6714] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 86 9c 03 00 90 90 90 90 90 90 90 90 90
[  163.742186][ T6714] RSP: 0018:ffffc9000322fd58 EFLAGS: 00050202
[  163.742208][ T6714] RAX: 0000000000000034 RBX: 0000000000000000 RCX: 0000200000000040
[  163.742224][ T6714] RDX: 00000000085a7cfd RSI: ffffffff8e80f0e9 RDI: ffffffff8c6edc80
[  163.742242][ T6714] RBP: ffffc9000322fee0 R08: 9400000000000000 R09: 0000000000000000
[  163.742258][ T6714] R10: 0000000000000000 R11: ffff888058e87678 R12: 0000200000000040
[  163.742274][ T6714] R13: ffff88807edf3288 R14: ffff88807edf3200 R15: 0000000000000000
[  163.742308][ T6714]  __se_sys_listns+0x1eb5/0x2780
[  163.742339][ T6714]  ? __se_sys_listns+0x1bca/0x2780
[  163.742379][ T6714]  ? __pfx___se_sys_listns+0x10/0x10
[  163.742410][ T6714]  ? ksys_write+0x242/0x270
[  163.742442][ T6714]  ? __pfx_ksys_write+0x10/0x10
[  163.742484][ T6714]  do_syscall_64+0x166/0x520
[  163.742504][ T6714]  ? trace_irq_disable+0x3b/0x140
[  163.742537][ T6714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.742561][ T6714]  ? clear_bhb_loop+0x70/0xc0
[  163.742597][ T6714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  163.742621][ T6714] RIP: 0033:0x7fd43af9e0d9
[  163.742650][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.742667][ T6714] RSP: 002b:00007fd43bddf028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d6
[  163.742689][ T6714] RAX: ffffffffffffffda RBX: 00007fd43b225fa0 RCX: 00007fd43af9e0d9
[  163.742706][ T6714] RDX: 00000000000f4240 RSI: 0000200000000040 RDI: 00002000000010c0
[  163.742723][ T6714] RBP: 00007fd43bddf090 R08: 0000000000000000 R09: 0000000000000000
[  163.742737][ T6714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  163.742752][ T6714] R13: 00007fd43b226038 R14: 00007fd43b225fa0 R15: 00007ffc653e9228
[  163.742788][ T6714]  </TASK>
[  164.098507][ T6716] Set syz1 is full, maxelem 256 reached
[  164.503656][ T2246] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  164.664655][ T2246] usb 8-1: Using ep0 maxpacket: 16
[  164.690392][ T2246] usb 8-1: unable to get BOS descriptor or descriptor too short
[  164.694259][ T2246] usb 8-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  164.729427][ T2246] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7
[  164.729494][ T2246] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26423, setting to 1024
[  164.729578][ T2246] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  164.775415][ T2246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.775477][ T2246] usb 8-1: Product: syz
[  164.775536][ T2246] usb 8-1: Manufacturer: syz
[  164.775558][ T2246] usb 8-1: SerialNumber: syz
[  164.827028][ T2246] usb 8-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  164.862931][ T2246] usb 8-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  164.984916][ T2246] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22
[  165.028691][   T30] usb 8-1: USB disconnect, device number 4
[  165.179950][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.276212][ T6739] jffs2: notice: (6739) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  165.793995][ T6753] syzkaller1: entered promiscuous mode
[  165.801335][ T6753] syzkaller1: entered allmulticast mode
[  165.858681][ T5278] 8021q: adding VLAN 0 to HW filter on device eth13
[  166.372432][   T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.421349][ T6765] FAULT_INJECTION: forcing a failure.
[  166.421349][ T6765] name failslab, interval 1, probability 0, space 0, times 0
[  166.421419][ T6765] CPU: 1 UID: 0 PID: 6765 Comm: syz.7.170 Not tainted syzkaller #0 PREEMPT(full) 
[  166.421446][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  166.421509][ T6765] Call Trace:
[  166.421543][ T6765]  <TASK>
[  166.421597][ T6765]  dump_stack_lvl+0xe8/0x150
[  166.421674][ T6765]  should_fail_ex+0x410/0x560
[  166.421788][ T6765]  should_failslab+0xa8/0x100
[  166.421862][ T6765]  __kmalloc_noprof+0xfe/0x720
[  166.421952][ T6765]  ? ieee80211_alloc_chanctx+0xcd/0x2f0
[  166.422053][ T6765]  ? ieee80211_alloc_chanctx+0xcd/0x2f0
[  166.422173][ T6765]  ieee80211_alloc_chanctx+0xcd/0x2f0
[  166.422279][ T6765]  ieee80211_link_reserve_chanctx+0xee6/0x12d0
[  166.422388][ T6765]  ? lock_acquire+0x115/0x350
[  166.422475][ T6765]  ? __pfx_ieee80211_link_reserve_chanctx+0x10/0x10
[  166.422596][ T6765]  ? __lock_acquire+0x6df/0x2e50
[  166.422712][ T6765]  ? __lock_acquire+0x6df/0x2e50
[  166.422835][ T6765]  ? trace_drv_return_int+0x80/0x1f0
[  166.422961][ T6765]  ? drv_pre_channel_switch+0x36c/0x670
[  166.423046][ T6765]  ieee80211_channel_switch+0x78b/0xcb0
[  166.423218][ T6765]  ? __pfx_ieee80211_channel_switch+0x10/0x10
[  166.423310][ T6765]  ? cfg80211_chandef_valid+0xa75/0xe60
[  166.423387][ T6765]  ? cfg80211_get_end_freq+0xff/0x1b0
[  166.423488][ T6765]  ? cfg80211_get_end_freq+0xff/0x1b0
[  166.423598][ T6765]  ? rcu_is_watching+0x16/0xb0
[  166.423662][ T6765]  ? cfg80211_reg_check_beaconing+0xcf3/0x11d0
[  166.423755][ T6765]  rdev_channel_switch+0xfc/0x290
[  166.423831][ T6765]  nl80211_channel_switch+0xb8a/0xe90
[  166.423939][ T6765]  ? __pfx_nl80211_channel_switch+0x10/0x10
[  166.424169][ T6765]  ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10
[  166.424266][ T6765]  ? __nla_parse+0x40/0x60
[  166.424349][ T6765]  ? nl80211_pre_doit+0x53d/0x890
[  166.424441][ T6765]  genl_family_rcv_msg_doit+0x233/0x340
[  166.424533][ T6765]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  166.424638][ T6765]  ? bpf_lsm_capable+0x9/0x20
[  166.424713][ T6765]  ? security_capable+0x7e/0x2c0
[  166.424815][ T6765]  genl_rcv_msg+0x614/0x7a0
[  166.424898][ T6765]  ? __pfx_genl_rcv_msg+0x10/0x10
[  166.424961][ T6765]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  166.425185][ T6765]  ? __pfx_nl80211_channel_switch+0x10/0x10
[  166.425270][ T6765]  ? __pfx_nl80211_post_doit+0x10/0x10
[  166.425351][ T6765]  ? __pfx_ref_tracker_free+0x10/0x10
[  166.425458][ T6765]  ? __asan_memcpy+0x40/0x70
[  166.425539][ T6765]  ? __skb_clone+0x5c/0x6c0
[  166.425683][ T6765]  netlink_rcv_skb+0x226/0x4a0
[  166.425801][ T6765]  ? __pfx_genl_rcv_msg+0x10/0x10
[  166.425885][ T6765]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  166.426035][ T6765]  ? down_read+0x2be/0x330
[  166.426127][ T6765]  genl_rcv+0x28/0x40
[  166.426190][ T6765]  netlink_unicast+0x7bd/0x940
[  166.426300][ T6765]  netlink_sendmsg+0x813/0xb40
[  166.426423][ T6765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.426542][ T6765]  ? apparmor_socket_sendmsg+0x98/0x360
[  166.426636][ T6765]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.426713][ T6765]  sock_sendmsg_nosec+0x13a/0x180
[  166.426828][ T6765]  ____sys_sendmsg+0x54e/0x850
[  166.426925][ T6765]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.427029][ T6765]  ? import_iovec+0x73/0xa0
[  166.427102][ T6765]  ___sys_sendmsg+0x2a5/0x360
[  166.427191][ T6765]  ? __lock_acquire+0x6df/0x2e50
[  166.427301][ T6765]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.427468][ T6765]  ? __fget_files+0x2a/0x420
[  166.427521][ T6765]  ? __fget_files+0x3a2/0x420
[  166.427626][ T6765]  __x64_sys_sendmsg+0x1b1/0x290
[  166.427711][ T6765]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  166.427840][ T6765]  do_syscall_64+0x166/0x520
[  166.427894][ T6765]  ? trace_irq_disable+0x3b/0x140
[  166.427977][ T6765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.428042][ T6765]  ? clear_bhb_loop+0x70/0xc0
[  166.428126][ T6765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  166.428195][ T6765] RIP: 0033:0x7f2ba059e0d9
[  166.428261][ T6765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  166.428315][ T6765] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  166.428391][ T6765] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  166.428435][ T6765] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003
[  166.428468][ T6765] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  166.428502][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  166.428543][ T6765] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  166.428662][ T6765]  </TASK>
[  167.024413][   T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.230386][ T6777] FAULT_INJECTION: forcing a failure.
[  167.230386][ T6777] name failslab, interval 1, probability 0, space 0, times 0
[  167.230466][ T6777] CPU: 1 UID: 0 PID: 6777 Comm: syz.5.174 Not tainted syzkaller #0 PREEMPT(full) 
[  167.230494][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  167.230508][ T6777] Call Trace:
[  167.230517][ T6777]  <TASK>
[  167.230528][ T6777]  dump_stack_lvl+0xe8/0x150
[  167.230562][ T6777]  should_fail_ex+0x410/0x560
[  167.230599][ T6777]  should_failslab+0xa8/0x100
[  167.230624][ T6777]  __kmalloc_noprof+0xfe/0x720
[  167.230655][ T6777]  ? tomoyo_encode+0x2ad/0x570
[  167.230690][ T6777]  ? tomoyo_encode+0x2ad/0x570
[  167.230730][ T6777]  tomoyo_encode+0x2ad/0x570
[  167.230773][ T6777]  tomoyo_realpath_from_path+0x5fa/0x640
[  167.230819][ T6777]  ? tomoyo_path_number_perm+0x219/0x5f0
[  167.230850][ T6777]  tomoyo_path_number_perm+0x246/0x5f0
[  167.230884][ T6777]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  167.230915][ T6777]  ? __lock_acquire+0x6df/0x2e50
[  167.230962][ T6777]  ? hook_file_ioctl+0x1f2/0x600
[  167.231014][ T6777]  ? __fget_files+0x2a/0x420
[  167.231043][ T6777]  ? __fget_files+0x2a/0x420
[  167.231068][ T6777]  ? __fget_files+0x3a2/0x420
[  167.231093][ T6777]  ? __fget_files+0x2a/0x420
[  167.231123][ T6777]  security_file_ioctl+0xc3/0x2a0
[  167.231155][ T6777]  __se_sys_ioctl+0x47/0x170
[  167.231191][ T6777]  do_syscall_64+0x166/0x520
[  167.231213][ T6777]  ? trace_irq_disable+0x3b/0x140
[  167.231254][ T6777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.231278][ T6777]  ? clear_bhb_loop+0x70/0xc0
[  167.231307][ T6777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.231330][ T6777] RIP: 0033:0x7fd43af9e0d9
[  167.231351][ T6777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  167.231371][ T6777] RSP: 002b:00007fd43bddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.231396][ T6777] RAX: ffffffffffffffda RBX: 00007fd43b225fa0 RCX: 00007fd43af9e0d9
[  167.231413][ T6777] RDX: 0000200000000080 RSI: 00000000c0cc5616 RDI: 0000000000000003
[  167.231429][ T6777] RBP: 00007fd43bddf090 R08: 0000000000000000 R09: 0000000000000000
[  167.231444][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.231458][ T6777] R13: 00007fd43b226038 R14: 00007fd43b225fa0 R15: 00007ffc653e9228
[  167.231493][ T6777]  </TASK>
[  167.237501][ T6777] ERROR: Out of memory at tomoyo_realpath_from_path.
[  167.497802][   T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.730437][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  167.744638][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  167.749586][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  167.752252][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  167.756236][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  167.817218][   T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.399291][ T5278] 8021q: adding VLAN 0 to HW filter on device eth14
[  168.496317][   T50] bridge_slave_1: left allmulticast mode
[  168.496390][   T50] bridge_slave_1: left promiscuous mode
[  168.497150][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.559113][   T50] bridge_slave_0: left allmulticast mode
[  168.559169][   T50] bridge_slave_0: left promiscuous mode
[  168.559827][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.786837][ T2246] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  168.813335][   T31] audit: type=1400 audit(1787163841.976:5): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=6812 comm="syz.4.182" name="unknown" offset=16
[  168.916008][   T31] audit: type=1326 audit(1787163842.086:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ea99e0d9 code=0x7ffc0000
[  168.919681][   T31] audit: type=1326 audit(1787163842.086:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27ea99e0d9 code=0x7ffc0000
[  168.929888][   T31] audit: type=1326 audit(1787163842.096:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f27ea95e90e code=0x7ffc0000
[  168.938386][   T31] audit: type=1326 audit(1787163842.106:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  168.940179][   T31] audit: type=1326 audit(1787163842.106:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  168.977033][ T2246] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  169.038408][ T2246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.038539][ T2246] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.038670][ T2246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.086751][ T2246] usb 6-1: config 0 descriptor??
[  169.095569][   T31] audit: type=1326 audit(1787163842.266:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  169.120581][   T31] audit: type=1326 audit(1787163842.266:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  169.177307][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  169.197265][   T31] audit: type=1326 audit(1787163842.366:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  169.225073][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  169.239644][   T50] bond0 (unregistering): Released all slaves
[  169.264398][   T31] audit: type=1326 audit(1787163842.436:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.4.182" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27ea99dd6b code=0x7ffc0000
[  169.324159][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  169.493226][   T10] usb 5-1: Using ep0 maxpacket: 8
[  169.505638][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  169.505789][   T10] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=44.07
[  169.553982][   T10] usb 5-1: config 1 has an invalid interface number: 8 but max is 0
[  169.554039][   T10] usb 5-1: config 1 has no interface number 0
[  169.554260][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  169.554415][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0x11, changing to 0x1
[  169.554493][   T10] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  169.554645][   T10] usb 5-1: config 1 interface 8 altsetting 7 has an endpoint descriptor with address 0xC1, changing to 0x81
[  169.554726][   T10] usb 5-1: config 1 interface 8 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.554856][   T10] usb 5-1: config 1 interface 8 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  169.554931][   T10] usb 5-1: config 1 interface 8 has no altsetting 0
[  169.605702][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.605876][   T10] usb 5-1: Product: syz
[  169.605891][   T10] usb 5-1: Manufacturer: syz
[  169.605905][   T10] usb 5-1: SerialNumber: syz
[  169.843699][ T5631] Bluetooth: hci0: command tx timeout
[  169.877668][ T2246] usbhid 6-1:0.0: can't add hid device: -71
[  169.878001][ T2246] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  169.913173][ T2246] usb 6-1: USB disconnect, device number 4
[  170.173888][   T50] hsr_slave_0: left promiscuous mode
[  170.189417][   T50] hsr_slave_1: left promiscuous mode
[  170.200725][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.200784][   T50] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.225615][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.225679][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.235950][ T5767] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  170.278177][   T50] veth1_macvtap: left promiscuous mode
[  170.278277][   T50] veth0_macvtap: left promiscuous mode
[  170.284706][   T50] veth1_vlan: left promiscuous mode
[  170.289399][   T50] veth0_vlan: left promiscuous mode
[  170.404109][ T5767] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  170.422505][ T5767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.422591][ T5767] usb 8-1: Product: syz
[  170.422611][ T5767] usb 8-1: Manufacturer: syz
[  170.437993][ T5767] usb 8-1: SerialNumber: syz
[  170.467689][ T5767] usb 8-1: config 0 descriptor??
[  170.500564][ T5767] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  170.605331][ T5767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  170.622255][ T5767] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  170.622566][ T5767] usb 8-1: media controller created
[  170.767205][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  171.014375][ T5767] DVB: Unable to find symbol mt352_attach()
[  171.030256][   T50] team0 (unregistering): Port device team_slave_1 removed
[  171.056714][   T50] team0 (unregistering): Port device team_slave_0 removed
[  171.152139][ T5767] DVB: Unable to find symbol nxt6000_attach()
[  171.152234][ T5767] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  171.189199][ T5767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input12
[  171.224919][ T5767] dvb-usb: schedule remote query interval to 1000 msecs.
[  171.224996][ T5767] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  171.231199][ T5767] dvb-usb: bulk message failed: -22 (7/0)
[  171.231354][ T5767] dvb-usb: bulk message failed: -22 (7/0)
[  171.471247][ T5278] 8021q: adding VLAN 0 to HW filter on device eth15
[  171.472624][ T6837] netlink: 168 bytes leftover after parsing attributes in process `syz.7.188'.
[  171.559128][ T5767] usb 8-1: USB disconnect, device number 5
[  171.809985][   T10] cxacru 5-1:1.8: usbatm_usb_probe: invalid endpoint 02!
[  171.810397][   T10] cxacru 5-1:1.8: probe with driver cxacru failed with error -22
[  171.840335][   T10] usb 5-1: USB disconnect, device number 5
[  171.896974][ T5767] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  171.922962][   T30] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  171.925128][ T5631] Bluetooth: hci0: command tx timeout
[  172.077071][   T30] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  172.092533][   T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.092606][   T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.092820][   T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.143153][   T30] usb 6-1: config 0 descriptor??
[  172.339795][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  172.372307][ T6858] program syz.5.191 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.502769][   T10] usb 5-1: Using ep0 maxpacket: 16
[  172.509193][   T10] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  172.565053][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.573290][   T10] usb 5-1: Product: syz
[  172.573343][   T10] usb 5-1: Manufacturer: syz
[  172.573365][   T10] usb 5-1: SerialNumber: syz
[  172.606449][   T30] arvo 0003:1E7D:30D4.0003: unknown main item tag 0x1
[  172.653812][   T30] arvo 0003:1E7D:30D4.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  172.703454][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.703991][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.704696][ T6787] bridge_slave_0: entered allmulticast mode
[  172.725499][ T6787] bridge_slave_0: entered promiscuous mode
[  172.736863][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.739577][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.740290][ T6787] bridge_slave_1: entered allmulticast mode
[  172.762396][ T6787] bridge_slave_1: entered promiscuous mode
[  172.800304][   T30] arvo 0003:1E7D:30D4.0003: couldn't init struct arvo_device
[  172.800385][   T30] arvo 0003:1E7D:30D4.0003: couldn't install keyboard
[  172.837010][   T10] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  172.869378][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  172.884164][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  172.902257][   T30] arvo 0003:1E7D:30D4.0003: probe with driver arvo failed with error -71
[  172.915368][   T10] usb 5-1: media controller created
[  172.940517][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.983973][   T30] usb 6-1: USB disconnect, device number 5
[  173.017483][ T6878] fido_id[6878]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  173.083208][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.107378][   T10] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  173.118264][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.304479][   T30] usb 5-1: USB disconnect, device number 6
[  173.319811][ T5278] 8021q: adding VLAN 0 to HW filter on device eth16
[  173.345307][ T6787] team0: Port device team_slave_0 added
[  173.365517][ T6787] team0: Port device team_slave_1 added
[  173.446693][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.446739][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.449595][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.499041][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.499099][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.499147][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.667451][ T6887] FAULT_INJECTION: forcing a failure.
[  173.667451][ T6887] name failslab, interval 1, probability 0, space 0, times 0
[  173.680520][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.7.195 Not tainted syzkaller #0 PREEMPT(full) 
[  173.680554][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  173.680569][ T6887] Call Trace:
[  173.680579][ T6887]  <TASK>
[  173.680589][ T6887]  dump_stack_lvl+0xe8/0x150
[  173.680625][ T6887]  should_fail_ex+0x410/0x560
[  173.680662][ T6887]  ? __alloc_skb+0x1db/0x7a0
[  173.680687][ T6887]  should_failslab+0xa8/0x100
[  173.680711][ T6887]  ? __alloc_skb+0x1db/0x7a0
[  173.680733][ T6887]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  173.680791][ T6887]  ? __alloc_skb+0x18d/0x7a0
[  173.680818][ T6887]  ? __alloc_skb+0x1db/0x7a0
[  173.680849][ T6887]  __alloc_skb+0x1db/0x7a0
[  173.680884][ T6887]  netlink_ack+0x136/0xb30
[  173.680930][ T6887]  netlink_rcv_skb+0x2a4/0x4a0
[  173.680964][ T6887]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  173.680995][ T6887]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  173.681044][ T6887]  ? bpf_lsm_capable+0x9/0x20
[  173.681072][ T6887]  ? security_capable+0x7e/0x2c0
[  173.681110][ T6887]  nfnetlink_rcv+0x2b9/0x28c0
[  173.681142][ T6887]  ? __dev_queue_xmit+0x29b/0x3820
[  173.681178][ T6887]  ? __local_bh_enable_ip+0xd6/0x140
[  173.681204][ T6887]  ? lockdep_hardirqs_on+0x7b/0x110
[  173.681244][ T6887]  ? __dev_queue_xmit+0x29b/0x3820
[  173.681274][ T6887]  ? __local_bh_enable_ip+0xd6/0x140
[  173.681299][ T6887]  ? __dev_queue_xmit+0x29b/0x3820
[  173.681329][ T6887]  ? __dev_queue_xmit+0x1edc/0x3820
[  173.681359][ T6887]  ? do_syscall_64+0x166/0x520
[  173.681379][ T6887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.681415][ T6887]  ? __dev_queue_xmit+0x29b/0x3820
[  173.681445][ T6887]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  173.681480][ T6887]  ? __pfx___dev_queue_xmit+0x10/0x10
[  173.681519][ T6887]  ? ref_tracker_free+0x689/0x830
[  173.681556][ T6887]  ? __pfx_ref_tracker_free+0x10/0x10
[  173.681591][ T6887]  ? __asan_memcpy+0x40/0x70
[  173.681620][ T6887]  ? __skb_clone+0x5c/0x6c0
[  173.681652][ T6887]  ? __skb_clone+0x449/0x6c0
[  173.681689][ T6887]  ? skb_clone+0x246/0x3a0
[  173.681720][ T6887]  ? __netlink_deliver_tap+0x811/0x860
[  173.681749][ T6887]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.681786][ T6887]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.681815][ T6887]  ? netlink_deliver_tap+0x2e/0x1b0
[  173.681850][ T6887]  netlink_unicast+0x7bd/0x940
[  173.681894][ T6887]  netlink_sendmsg+0x813/0xb40
[  173.681933][ T6887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.681973][ T6887]  ? apparmor_socket_sendmsg+0x18b/0x360
[  173.682017][ T6887]  ? __pfx_netlink_sendmsg+0x10/0x10
[  173.682047][ T6887]  sock_sendmsg_nosec+0x13a/0x180
[  173.682098][ T6887]  ____sys_sendmsg+0x54e/0x850
[  173.682132][ T6887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  173.682169][ T6887]  ? import_iovec+0x73/0xa0
[  173.682199][ T6887]  ___sys_sendmsg+0x2a5/0x360
[  173.682227][ T6887]  ? __lock_acquire+0x6df/0x2e50
[  173.682263][ T6887]  ? __pfx____sys_sendmsg+0x10/0x10
[  173.682327][ T6887]  ? __fget_files+0x2a/0x420
[  173.682353][ T6887]  ? __fget_files+0x3a2/0x420
[  173.682388][ T6887]  __x64_sys_sendmsg+0x1b1/0x290
[  173.682421][ T6887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  173.682472][ T6887]  do_syscall_64+0x166/0x520
[  173.682491][ T6887]  ? trace_irq_disable+0x3b/0x140
[  173.682522][ T6887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.682545][ T6887]  ? clear_bhb_loop+0x70/0xc0
[  173.682574][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.682596][ T6887] RIP: 0033:0x7f2ba059e0d9
[  173.682619][ T6887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.682638][ T6887] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  173.682662][ T6887] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  173.682679][ T6887] RDX: 0000000020000880 RSI: 0000200000000280 RDI: 0000000000000003
[  173.682693][ T6887] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  173.682707][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.682721][ T6887] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  173.682754][ T6887]  </TASK>
[  174.004521][ T5631] Bluetooth: hci0: command tx timeout
[  174.123353][ T6787] hsr_slave_0: entered promiscuous mode
[  174.130362][ T6787] hsr_slave_1: entered promiscuous mode
[  174.340395][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  174.437045][ T6898] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  174.736679][ T6911] FAULT_INJECTION: forcing a failure.
[  174.736679][ T6911] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  174.736736][ T6911] CPU: 0 UID: 0 PID: 6911 Comm: syz.4.201 Not tainted syzkaller #0 PREEMPT(full) 
[  174.736764][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  174.736779][ T6911] Call Trace:
[  174.736787][ T6911]  <TASK>
[  174.736797][ T6911]  dump_stack_lvl+0xe8/0x150
[  174.736832][ T6911]  should_fail_ex+0x410/0x560
[  174.736871][ T6911]  _copy_from_user+0x2d/0xb0
[  174.736894][ T6911]  ___sys_sendmsg+0x1c6/0x360
[  174.736929][ T6911]  ? __lock_acquire+0x6df/0x2e50
[  174.736976][ T6911]  ? __pfx____sys_sendmsg+0x10/0x10
[  174.737041][ T6911]  ? __fget_files+0x2a/0x420
[  174.737066][ T6911]  ? __fget_files+0x3a2/0x420
[  174.737102][ T6911]  __x64_sys_sendmsg+0x1b1/0x290
[  174.737135][ T6911]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  174.737184][ T6911]  do_syscall_64+0x166/0x520
[  174.737205][ T6911]  ? trace_irq_disable+0x3b/0x140
[  174.737236][ T6911]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.737258][ T6911]  ? clear_bhb_loop+0x70/0xc0
[  174.737284][ T6911]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.737307][ T6911] RIP: 0033:0x7f27ea99e0d9
[  174.737327][ T6911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.737347][ T6911] RSP: 002b:00007f27e8bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.737371][ T6911] RAX: ffffffffffffffda RBX: 00007f27eac25fa0 RCX: 00007f27ea99e0d9
[  174.737386][ T6911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  174.737400][ T6911] RBP: 00007f27e8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  174.737414][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.737427][ T6911] R13: 00007f27eac26038 R14: 00007f27eac25fa0 R15: 00007fff47936898
[  174.737459][ T6911]  </TASK>
[  175.079326][ T6915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.417869][ T6787] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  175.470613][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  175.478927][ T6787] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  175.531212][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  175.547832][ T6787] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  175.587651][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  175.595164][ T6787] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  175.620070][ T6787] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  175.630582][ T5278] 8021q: adding VLAN 0 to HW filter on device eth17
[  175.658564][ T6931] futex_wake_op: syz.5.208 tries to shift op by 144; fix this program
[  175.829708][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.882215][ T6787] 8021q: adding VLAN 0 to HW filter on device team0
[  175.911500][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.911746][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.933163][ T5706] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  175.965027][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.965274][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.076281][ T5631] Bluetooth: hci0: command tx timeout
[  176.094295][ T5706] usb 6-1: Invalid ep0 maxpacket: 16
[  176.124072][ T6947] syzkaller1: entered promiscuous mode
[  176.130184][ T6947] syzkaller1: entered allmulticast mode
[  176.232986][ T5706] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[  176.383117][ T5706] usb 6-1: Invalid ep0 maxpacket: 16
[  176.410396][ T5706] usb usb6-port1: attempt power cycle
[  176.758029][ T2246] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  176.803639][ T5706] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  176.842113][ T5706] usb 6-1: Invalid ep0 maxpacket: 16
[  176.932740][ T2246] usb 5-1: Using ep0 maxpacket: 16
[  176.943387][ T2246] usb 5-1: unable to get BOS descriptor or descriptor too short
[  176.952409][ T2246] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  176.964623][ T2246] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.977195][ T2246] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  176.999112][ T5706] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  177.010210][ T2246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.018824][ T2246] usb 5-1: Product: syz
[  177.018863][ T2246] usb 5-1: Manufacturer: syz
[  177.018895][ T2246] usb 5-1: SerialNumber: syz
[  177.040517][ T5706] usb 6-1: Invalid ep0 maxpacket: 16
[  177.041300][ T5706] usb usb6-port1: unable to enumerate USB device
[  177.225472][ T6965] syz.7.211 (6965) used greatest stack depth: 18088 bytes left
[  177.302209][ T2246] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  177.313177][ T2246] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  177.352531][ T6974] fuse: Bad value for 'group_id'
[  177.352587][ T6974] fuse: Bad value for 'group_id'
[  177.582922][ T5278] 8021q: adding VLAN 0 to HW filter on device eth18
[  177.601994][ T6982] FAULT_INJECTION: forcing a failure.
[  177.601994][ T6982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.615826][ T6982] CPU: 0 UID: 0 PID: 6982 Comm: syz.7.215 Not tainted syzkaller #0 PREEMPT(full) 
[  177.615860][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  177.615874][ T6982] Call Trace:
[  177.615882][ T6982]  <TASK>
[  177.615891][ T6982]  dump_stack_lvl+0xe8/0x150
[  177.615925][ T6982]  should_fail_ex+0x410/0x560
[  177.615962][ T6982]  _copy_from_user+0x2d/0xb0
[  177.615985][ T6982]  ___sys_sendmsg+0x1c6/0x360
[  177.616013][ T6982]  ? __lock_acquire+0x6df/0x2e50
[  177.616049][ T6982]  ? __pfx____sys_sendmsg+0x10/0x10
[  177.616111][ T6982]  ? __fget_files+0x2a/0x420
[  177.616136][ T6982]  ? __fget_files+0x3a2/0x420
[  177.616171][ T6982]  __x64_sys_sendmsg+0x1b1/0x290
[  177.616203][ T6982]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  177.616249][ T6982]  do_syscall_64+0x166/0x520
[  177.616269][ T6982]  ? trace_irq_disable+0x3b/0x140
[  177.616299][ T6982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.616321][ T6982]  ? clear_bhb_loop+0x70/0xc0
[  177.616348][ T6982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.616371][ T6982] RIP: 0033:0x7f2ba059e0d9
[  177.616392][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.616411][ T6982] RSP: 002b:00007f2ba1478028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  177.616435][ T6982] RAX: ffffffffffffffda RBX: 00007f2ba0825fa0 RCX: 00007f2ba059e0d9
[  177.616452][ T6982] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  177.616467][ T6982] RBP: 00007f2ba1478090 R08: 0000000000000000 R09: 0000000000000000
[  177.616482][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.616494][ T6982] R13: 00007f2ba0826038 R14: 00007f2ba0825fa0 R15: 00007ffd2d580968
[  177.616526][ T6982]  </TASK>
[  177.915565][ T2246] usb 5-1: USB disconnect, device number 7
[  178.040253][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  178.090203][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.450585][ T6988] netlink: 'syz.7.216': attribute type 83 has an invalid length.
[  178.812138][ T5713] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  178.841088][ T7011] process 'syz.5.218' launched '/dev/fd/7' with NULL argv: empty string added
[  178.905731][ T6787] veth0_vlan: entered promiscuous mode
[  178.942771][ T5713] usb 5-1: device descriptor read/64, error -71
[  179.026994][ T6787] veth1_vlan: entered promiscuous mode
[  179.087490][ T6787] veth0_macvtap: entered promiscuous mode
[  179.097844][ T6787] veth1_macvtap: entered promiscuous mode
[  179.127216][ T5278] 8021q: adding VLAN 0 to HW filter on device eth19
[  179.183037][ T5713] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  179.235364][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.333013][ T5713] usb 5-1: device descriptor read/64, error -71
[  179.411028][  T627] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.445388][ T5713] usb usb5-port1: attempt power cycle
[  179.494176][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.590332][   T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.590450][   T59] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.590607][   T59] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.618260][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.629300][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.633552][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.650110][ T5622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.661597][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  179.698507][ T6970] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.782538][  T627] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.807408][ T5713] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  179.824149][ T5713] usb 5-1: device descriptor read/8, error -71
[  179.993497][  T627] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.073532][ T5713] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  180.096422][ T5713] usb 5-1: device descriptor read/8, error -71
[  180.190864][ T7032] FAULT_INJECTION: forcing a failure.
[  180.190864][ T7032] name failslab, interval 1, probability 0, space 0, times 0
[  180.190967][ T7032] CPU: 1 UID: 0 PID: 7032 Comm: syz.5.223 Not tainted syzkaller #0 PREEMPT(full) 
[  180.190993][ T7032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  180.191059][ T7032] Call Trace:
[  180.191085][ T7032]  <TASK>
[  180.191117][ T7032]  dump_stack_lvl+0xe8/0x150
[  180.191232][ T7032]  should_fail_ex+0x410/0x560
[  180.191341][ T7032]  should_failslab+0xa8/0x100
[  180.191408][ T7032]  ? security_file_alloc+0x34/0x310
[  180.191481][ T7032]  kmem_cache_alloc_noprof+0xa1/0x600
[  180.191566][ T7032]  ? rcu_is_watching+0x16/0xb0
[  180.191629][ T7032]  ? security_file_alloc+0x34/0x310
[  180.191719][ T7032]  security_file_alloc+0x34/0x310
[  180.191800][ T7032]  init_file+0x90/0x2b0
[  180.191867][ T7032]  alloc_empty_file+0x74/0x1d0
[  180.191932][ T7032]  path_openat+0xa2/0x1d60
[  180.192033][ T7032]  ? __lock_acquire+0x6df/0x2e50
[  180.192150][ T7032]  do_file_open+0x23e/0x4a0
[  180.192239][ T7032]  ? __pfx_do_file_open+0x10/0x10
[  180.192386][ T7032]  ? _raw_spin_unlock+0x28/0x50
[  180.192471][ T7032]  ? alloc_fd+0x651/0x6c0
[  180.192582][ T7032]  do_sys_openat2+0x115/0x200
[  180.192662][ T7032]  ? __pfx_do_sys_openat2+0x10/0x10
[  180.192726][ T7032]  ? __fget_files+0x2a/0x420
[  180.192797][ T7032]  ? __fget_files+0x3a2/0x420
[  180.192864][ T7032]  ? __fget_files+0x2a/0x420
[  180.192949][ T7032]  __x64_sys_openat+0x138/0x170
[  180.193019][ T7032]  do_syscall_64+0x166/0x520
[  180.193072][ T7032]  ? trace_irq_disable+0x3b/0x140
[  180.193155][ T7032]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.193219][ T7032]  ? clear_bhb_loop+0x70/0xc0
[  180.193292][ T7032]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.193355][ T7032] RIP: 0033:0x7fd43af5e90e
[  180.193409][ T7032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  180.193464][ T7032] RSP: 002b:00007fd43bddd3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  180.193541][ T7032] RAX: ffffffffffffffda RBX: 00007fd43bddf6c0 RCX: 00007fd43af5e90e
[  180.193583][ T7032] RDX: 0000000000000002 RSI: 00007fd43b0343c6 RDI: ffffffffffffff9c
[  180.193624][ T7032] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000
[  180.193695][ T7032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800
[  180.193730][ T7032] R13: 00007fd43bdddbd0 R14: 000000000000006b R15: 00000000000000c0
[  180.193779][ T7032]  </TASK>
[  180.215641][ T5713] usb usb5-port1: unable to enumerate USB device
[  180.467582][  T627] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.532438][   T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.532493][   T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.688876][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.688928][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.832750][ T2246] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  180.967857][ T7051] loop0: detected capacity change from 0 to 2049
[  180.982971][ T2246] usb 6-1: Using ep0 maxpacket: 32
[  180.989019][ T2246] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  181.001852][ T2246] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.001910][ T2246] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  181.001956][ T2246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.046757][ T2246] usb 6-1: config 0 descriptor??
[  181.207282][  T627] bridge_slave_1: left allmulticast mode
[  181.207335][  T627] bridge_slave_1: left promiscuous mode
[  181.207605][  T627] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.233041][  T627] bridge_slave_0: left allmulticast mode
[  181.238920][  T627] bridge_slave_0: left promiscuous mode
[  181.239153][  T627] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.271124][ T7039] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  181.323220][ T2246] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  181.456634][ T2246] usb 9-1: device descriptor read/64, error -71
[  181.577297][  T627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.602133][  T627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.618570][  T627] bond0 (unregistering): Released all slaves
[  181.712741][ T2246] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  181.754978][ T5631] Bluetooth: hci1: command tx timeout
[  181.789070][ T5278] 8021q: adding VLAN 0 to HW filter on device eth20
[  181.863347][ T2246] usb 9-1: device descriptor read/64, error -71
[  181.973259][ T2246] usb usb9-port1: attempt power cycle
[  182.116096][ T7068] fuse: Bad value for 'fd'
[  182.129097][  T627] hsr_slave_0: left promiscuous mode
[  182.137090][  T627] hsr_slave_1: left promiscuous mode
[  182.146306][  T627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.146363][  T627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.156941][  T627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.157013][  T627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.190536][  T627] veth1_macvtap: left promiscuous mode
[  182.196529][  T627] veth0_macvtap: left promiscuous mode
[  182.202479][  T627] veth1_vlan: left promiscuous mode
[  182.208188][  T627] veth0_vlan: left promiscuous mode
[  182.314080][ T2246] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  182.335084][ T2246] usb 9-1: device descriptor read/8, error -71
[  182.467121][ T5631] Bluetooth: hci4: Malformed Event: 0x13
[  182.572745][ T2246] usb 9-1: new low-speed USB device number 5 using dummy_hcd
[  182.593410][ T2246] usb 9-1: device descriptor read/8, error -71
[  182.692131][ T7077] FAULT_INJECTION: forcing a failure.
[  182.692131][ T7077] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  182.692278][ T7077] CPU: 1 UID: 0 PID: 7077 Comm: syz.4.233 Not tainted syzkaller #0 PREEMPT(full) 
[  182.692304][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  182.692350][ T7077] Call Trace:
[  182.692383][ T7077]  <TASK>
[  182.692418][ T7077]  dump_stack_lvl+0xe8/0x150
[  182.692519][ T7077]  should_fail_ex+0x410/0x560
[  182.692631][ T7077]  _copy_to_user+0x31/0xb0
[  182.692698][ T7077]  simple_read_from_buffer+0xe1/0x170
[  182.692789][ T7077]  proc_fail_nth_read+0x1bb/0x230
[  182.692873][ T7077]  ? common_file_perm+0x20e/0x2b0
[  182.692972][ T7077]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  182.693047][ T7077]  ? rw_verify_area+0x24a/0x4c0
[  182.693137][ T7077]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  182.693209][ T7077]  vfs_read+0x213/0xa80
[  182.693296][ T7077]  ? __pfx___mutex_lock+0x10/0x10
[  182.693372][ T7077]  ? __pfx_vfs_read+0x10/0x10
[  182.693453][ T7077]  ? __fget_files+0x2a/0x420
[  182.693542][ T7077]  ? __fget_files+0x3a2/0x420
[  182.693609][ T7077]  ? __fget_files+0x2a/0x420
[  182.693699][ T7077]  ksys_read+0x150/0x270
[  182.693778][ T7077]  ? __pfx_ksys_read+0x10/0x10
[  182.693946][ T7077]  do_syscall_64+0x166/0x520
[  182.694016][ T7077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.694084][ T7077]  ? clear_bhb_loop+0x70/0xc0
[  182.694190][ T7077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.694255][ T7077] RIP: 0033:0x7f27ea95e90e
[  182.694311][ T7077] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  182.694365][ T7077] RSP: 002b:00007f27e8bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  182.694430][ T7077] RAX: ffffffffffffffda RBX: 00007f27e8bf66c0 RCX: 00007f27ea95e90e
[  182.694476][ T7077] RDX: 000000000000000f RSI: 00007f27e8bf60a0 RDI: 0000000000000004
[  182.694518][ T7077] RBP: 00007f27e8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  182.694553][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.694589][ T7077] R13: 00007f27eac26038 R14: 00007f27eac25fa0 R15: 00007fff47936898
[  182.694677][ T7077]  </TASK>
[  182.715615][ T2246] usb usb9-port1: unable to enumerate USB device
[  182.937544][  T627] team0 (unregistering): Port device team_slave_1 removed
[  182.981795][  T627] team0 (unregistering): Port device team_slave_0 removed
[  183.489261][ T7023] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.489394][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.489607][ T7023] bridge_slave_0: entered allmulticast mode
[  183.514385][ T7023] bridge_slave_0: entered promiscuous mode
[  183.535156][ T7023] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.546541][ T7023] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.547146][ T7023] bridge_slave_1: entered allmulticast mode
[  183.559774][ T7023] bridge_slave_1: entered promiscuous mode
[  183.745602][ T7023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  183.765441][ T5713] usb 6-1: USB disconnect, device number 10
[  183.802560][ T7023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.833140][ T5631] Bluetooth: hci1: command tx timeout
[  184.009405][ T7023] team0: Port device team_slave_0 added
[  184.031326][ T7023] team0: Port device team_slave_1 added
[  184.171093][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.176251][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.176289][ T7023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.230495][ T7023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.230541][ T7023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  184.230577][ T7023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.425326][ T7113] FAULT_INJECTION: forcing a failure.
[  184.425326][ T7113] name failslab, interval 1, probability 0, space 0, times 0
[  184.425386][ T7113] CPU: 1 UID: 0 PID: 7113 Comm: syz.5.240 Not tainted syzkaller #0 PREEMPT(full) 
[  184.425413][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  184.425427][ T7113] Call Trace:
[  184.425436][ T7113]  <TASK>
[  184.425447][ T7113]  dump_stack_lvl+0xe8/0x150
[  184.425482][ T7113]  should_fail_ex+0x410/0x560
[  184.425521][ T7113]  should_failslab+0xa8/0x100
[  184.425546][ T7113]  __kmalloc_noprof+0xfe/0x720
[  184.425577][ T7113]  ? tomoyo_encode+0x2ad/0x570
[  184.425611][ T7113]  ? tomoyo_encode+0x2ad/0x570
[  184.425652][ T7113]  tomoyo_encode+0x2ad/0x570
[  184.425693][ T7113]  tomoyo_realpath_from_path+0x5fa/0x640
[  184.425737][ T7113]  ? tomoyo_path_number_perm+0x219/0x5f0
[  184.425767][ T7113]  tomoyo_path_number_perm+0x246/0x5f0
[  184.425801][ T7113]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  184.425830][ T7113]  ? __lock_acquire+0x6df/0x2e50
[  184.425879][ T7113]  ? hook_file_ioctl+0x1f2/0x600
[  184.425929][ T7113]  ? __fget_files+0x2a/0x420
[  184.425959][ T7113]  ? __fget_files+0x2a/0x420
[  184.425982][ T7113]  ? __fget_files+0x3a2/0x420
[  184.426006][ T7113]  ? __fget_files+0x2a/0x420
[  184.426035][ T7113]  security_file_ioctl+0xc3/0x2a0
[  184.426063][ T7113]  __se_sys_ioctl+0x47/0x170
[  184.426098][ T7113]  do_syscall_64+0x166/0x520
[  184.426119][ T7113]  ? trace_irq_disable+0x3b/0x140
[  184.426150][ T7113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.426174][ T7113]  ? clear_bhb_loop+0x70/0xc0
[  184.426202][ T7113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.426226][ T7113] RIP: 0033:0x7fd43af9e0d9
[  184.426248][ T7113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  184.426267][ T7113] RSP: 002b:00007fd43bddf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  184.426291][ T7113] RAX: ffffffffffffffda RBX: 00007fd43b225fa0 RCX: 00007fd43af9e0d9
[  184.426318][ T7113] RDX: 0000200000000300 RSI: 000000000000541c RDI: 0000000000000003
[  184.426402][ T7113] RBP: 00007fd43bddf090 R08: 0000000000000000 R09: 0000000000000000
[  184.426453][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  184.426487][ T7113] R13: 00007fd43b226038 R14: 00007fd43b225fa0 R15: 00007ffc653e9228
[  184.426620][ T7113]  </TASK>
[  184.431803][ T7113] ERROR: Out of memory at tomoyo_realpath_from_path.
[  184.740108][ T7023] hsr_slave_0: entered promiscuous mode
[  184.747065][ T7023] hsr_slave_1: entered promiscuous mode
[  184.754813][ T7023] debugfs: 'hsr0' already exists in 'hsr'
[  184.760696][ T7023] Cannot create hsr debugfs directory
[  185.107696][ T5278] 8021q: adding VLAN 0 to HW filter on device eth21
[  185.223086][ T2246] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  185.284424][ T7131] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  185.333536][ T5769] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  185.374846][ T2246] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  185.385333][ T2246] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  185.385403][ T2246] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  185.385449][ T2246] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  185.385480][ T2246] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  185.385527][ T2246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.469942][ T7023] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  185.482145][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  185.491341][ T7023] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  185.506226][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  185.515421][ T7023] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  185.527778][ T5769] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  185.540996][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.546492][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  185.558668][ T7023] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  185.566441][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.566523][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.588636][ T7023] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  185.602439][ T5769] usb 5-1: config 0 descriptor??
[  185.744110][ T5713] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  185.783898][ T7023] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.826095][ T7023] 8021q: adding VLAN 0 to HW filter on device team0
[  185.842070][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.842359][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  185.868627][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.868842][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  185.904588][ T5713] usb 6-1: Using ep0 maxpacket: 8
[  185.906452][ T5713] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  185.923169][ T5631] Bluetooth: hci1: command tx timeout
[  185.935846][ T5713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.935908][ T5713] usb 6-1: Product: syz
[  185.935942][ T5713] usb 6-1: Manufacturer: syz
[  185.935996][ T5713] usb 6-1: SerialNumber: syz
[  185.964388][ T5713] usb 6-1: config 0 descriptor??
[  186.136215][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.150048][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.157249][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.167379][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.167449][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.167485][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.167518][ T5769] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  186.200214][ T5769] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  186.234671][ T5713] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  186.320534][ T5769] cp2112 0003:10C4:EA90.0004: Part Number: 0xDC Device Version: 0x5B
[  186.408786][ T2246] usb 9-1: USB disconnect, device number 6
[  186.481137][ T5278] 8021q: adding VLAN 0 to HW filter on device eth22
[  186.523959][ T5769] cp2112 0003:10C4:EA90.0004: error requesting SMBus config
[  186.540805][ T5769] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -5
[  186.621442][ T5713] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  186.651284][ T5713] usb 6-1: USB disconnect, device number 11
[  186.883052][ T2246] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  187.014515][ T7023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  187.042871][ T2246] usb 9-1: Using ep0 maxpacket: 16
[  187.049025][ T2246] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  187.063378][ T2246] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.063433][ T2246] usb 9-1: Product: syz
[  187.063472][ T2246] usb 9-1: Manufacturer: syz
[  187.063495][ T2246] usb 9-1: SerialNumber: syz
[  187.099861][ T2246] r8152-cfgselector 9-1: Unknown version 0x0000
[  187.106543][ T2246] r8152-cfgselector 9-1: config 0 descriptor??
[  187.532603][ T7191] FAULT_INJECTION: forcing a failure.
[  187.532603][ T7191] name failslab, interval 1, probability 0, space 0, times 0
[  187.533312][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.5.250 Not tainted syzkaller #0 PREEMPT(full) 
[  187.533342][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  187.533357][ T7191] Call Trace:
[  187.533366][ T7191]  <TASK>
[  187.533376][ T7191]  dump_stack_lvl+0xe8/0x150
[  187.533412][ T7191]  should_fail_ex+0x410/0x560
[  187.533449][ T7191]  ? __alloc_skb+0x1db/0x7a0
[  187.533475][ T7191]  should_failslab+0xa8/0x100
[  187.533499][ T7191]  ? __alloc_skb+0x1db/0x7a0
[  187.533522][ T7191]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  187.533552][ T7191]  ? __alloc_skb+0x18d/0x7a0
[  187.533578][ T7191]  ? __alloc_skb+0x1db/0x7a0
[  187.533614][ T7191]  __alloc_skb+0x1db/0x7a0
[  187.533650][ T7191]  nl80211_tx_mgmt+0xaac/0xf10
[  187.533675][ T7191]  ? netdev_run_todo+0xfda/0x1060
[  187.533717][ T7191]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  187.533739][ T7191]  ? __cfg80211_wdev_from_attrs+0x766/0x810
[  187.533768][ T7191]  ? __pfx_netdev_run_todo+0x10/0x10
[  187.533804][ T7191]  ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10
[  187.533848][ T7191]  ? nl80211_pre_doit+0x53d/0x890
[  187.533881][ T7191]  genl_family_rcv_msg_doit+0x233/0x340
[  187.533914][ T7191]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  187.533954][ T7191]  ? bpf_lsm_capable+0x9/0x20
[  187.533983][ T7191]  ? security_capable+0x7e/0x2c0
[  187.534023][ T7191]  genl_rcv_msg+0x614/0x7a0
[  187.534054][ T7191]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.534078][ T7191]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  187.534102][ T7191]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  187.534121][ T7191]  ? __pfx_nl80211_post_doit+0x10/0x10
[  187.534149][ T7191]  ? __pfx_ref_tracker_free+0x10/0x10
[  187.534184][ T7191]  ? __asan_memcpy+0x40/0x70
[  187.534213][ T7191]  ? __skb_clone+0x5c/0x6c0
[  187.534249][ T7191]  netlink_rcv_skb+0x226/0x4a0
[  187.534282][ T7191]  ? __pfx_genl_rcv_msg+0x10/0x10
[  187.534309][ T7191]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  187.534361][ T7191]  ? down_read+0x2be/0x330
[  187.534391][ T7191]  genl_rcv+0x28/0x40
[  187.534417][ T7191]  netlink_unicast+0x7bd/0x940
[  187.534459][ T7191]  netlink_sendmsg+0x813/0xb40
[  187.534501][ T7191]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.534543][ T7191]  ? apparmor_socket_sendmsg+0x98/0x360
[  187.534577][ T7191]  ? __pfx_netlink_sendmsg+0x10/0x10
[  187.534608][ T7191]  sock_sendmsg_nosec+0x13a/0x180
[  187.534648][ T7191]  ____sys_sendmsg+0x54e/0x850
[  187.534690][ T7191]  ? __pfx_____sys_sendmsg+0x10/0x10
[  187.534729][ T7191]  ? import_iovec+0x73/0xa0
[  187.534756][ T7191]  ___sys_sendmsg+0x2a5/0x360
[  187.534784][ T7191]  ? __lock_acquire+0x6df/0x2e50
[  187.534821][ T7191]  ? __pfx____sys_sendmsg+0x10/0x10
[  187.534889][ T7191]  ? __fget_files+0x2a/0x420
[  187.534916][ T7191]  ? __fget_files+0x3a2/0x420
[  187.534954][ T7191]  __x64_sys_sendmsg+0x1b1/0x290
[  187.534988][ T7191]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  187.535042][ T7191]  do_syscall_64+0x166/0x520
[  187.535062][ T7191]  ? trace_irq_disable+0x3b/0x140
[  187.535095][ T7191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.535119][ T7191]  ? clear_bhb_loop+0x70/0xc0
[  187.535148][ T7191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.535171][ T7191] RIP: 0033:0x7fd43af9e0d9
[  187.535194][ T7191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.535213][ T7191] RSP: 002b:00007fd43bddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  187.535239][ T7191] RAX: ffffffffffffffda RBX: 00007fd43b225fa0 RCX: 00007fd43af9e0d9
[  187.535257][ T7191] RDX: 0000000000000000 RSI: 0000200000000c00 RDI: 0000000000000003
[  187.535272][ T7191] RBP: 00007fd43bddf090 R08: 0000000000000000 R09: 0000000000000000
[  187.535286][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.535300][ T7191] R13: 00007fd43b226038 R14: 00007fd43b225fa0 R15: 00007ffc653e9228
[  187.535337][ T7191]  </TASK>
[  187.972008][   T25] r8152-cfgselector 9-1: USB disconnect, device number 7
[  187.994214][ T5631] Bluetooth: hci1: command tx timeout
[  188.090688][ T5278] 8021q: adding VLAN 0 to HW filter on device eth23
[  188.130652][ T2246] usb 5-1: USB disconnect, device number 12
[  188.151455][ T7023] veth0_vlan: entered promiscuous mode
[  188.205338][ T7023] veth1_vlan: entered promiscuous mode
[  188.311854][ T7023] veth0_macvtap: entered promiscuous mode
[  188.328982][ T7023] veth1_macvtap: entered promiscuous mode
[  188.378520][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.406656][ T7023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.495680][ T7208] warning: `syz.5.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  188.607387][ T6970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.607431][ T6970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  188.625823][   T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.626880][   T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.627042][   T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.627143][   T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.831547][  T627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  188.831592][  T627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.488634][ T7197] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  189.593000][ T5770] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  189.644635][ T7197] usb 10-1: not running at top speed; connect to a high speed hub
[  189.644711][ T7197] usb 10-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00
[  189.647116][ T5278] 8021q: adding VLAN 0 to HW filter on device eth24
[  189.652075][ T7197] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.705794][ T7197] hub 10-1:1.0: USB hub found
[  189.752736][ T5770] usb 9-1: Using ep0 maxpacket: 8
[  189.758498][ T5770] usb 9-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  189.769444][ T5770] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.769497][ T5770] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  189.769544][ T5770] usb 9-1: config 0 interface 0 has no altsetting 0
[  189.769585][ T5770] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.813741][   T25] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  189.824534][ T5770] usb 9-1: config 0 descriptor??
[  189.999541][ T7231] dvmrp0: entered allmulticast mode
[  190.007246][   T25] usb 6-1: unable to get BOS descriptor or descriptor too short
[  190.007454][   T25] usb 6-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1
[  190.038261][   T25] usb 6-1: config 160 has an invalid interface number: 168 but max is 0
[  190.038362][   T25] usb 6-1: config 160 has no interface number 0
[  190.038454][   T25] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84
[  190.038639][   T25] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024
[  190.038715][   T25] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024
[  190.038836][   T25] usb 6-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  190.038900][   T25] usb 6-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  190.039043][   T25] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  190.039125][   T25] usb 6-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89
[  190.039294][   T25] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11
[  190.039377][   T25] usb 6-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024
[  190.039529][   T25] usb 6-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64
[  190.039604][   T25] usb 6-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6
[  190.039737][   T25] usb 6-1: config 160 interface 168 has no altsetting 0
[  190.180390][   T25] usb 6-1: string descriptor 0 read error: -22
[  190.180968][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.218434][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.239443][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.257622][ T7240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  190.265103][ T7240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  190.280521][ T7240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  190.281074][ T7240] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  190.320132][   T25] io_edgeport 6-1:160.168: EPiC device converter detected
[  190.330153][   T25] usb 6-1:   detected
[  190.442074][ T7197] hub 10-1:1.0: config failed, can't read hub descriptor (err -22)
[  190.534834][   T25] usb 6-1: error in getting manufacturer descriptor: -71
[  190.538910][   T25] usb 6-1: error in getting boot descriptor: -71
[  190.538985][   T25] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 1 ports, email greg@kroah.com this information.
[  190.575452][   T25] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2
[  190.575534][   T25] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw
[  190.593756][ T7236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.618217][ T7197] usb 10-1: USB disconnect, device number 2
[  190.654254][ T7236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.806697][ T7259] fuse: Bad value for 'fd'
[  191.373256][ T7278] jffs2: notice: (7278) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  191.416666][ T7273] fuse: fd is not a fuse device
[  191.792786][ T7286] fuse: fd is not a fuse device
[  191.816464][ T5770] wacom 0003:056A:00E5.0005: hidraw0: USB HID v0.08 Joystick [HID 056a:00e5] on usb-dummy_hcd.8-1/input0
[  192.014252][ T7197] usb 9-1: USB disconnect, device number 8
[  192.210979][ T7294] FAULT_INJECTION: forcing a failure.
[  192.210979][ T7294] name failslab, interval 1, probability 0, space 0, times 0
[  192.211038][ T7294] CPU: 1 UID: 0 PID: 7294 Comm: syz.9.268 Not tainted syzkaller #0 PREEMPT(full) 
[  192.211064][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  192.211137][ T7294] Call Trace:
[  192.211169][ T7294]  <TASK>
[  192.211208][ T7294]  dump_stack_lvl+0xe8/0x150
[  192.211298][ T7294]  should_fail_ex+0x410/0x560
[  192.211394][ T7294]  ? dup_task_struct+0x52/0xa00
[  192.211482][ T7294]  should_failslab+0xa8/0x100
[  192.211547][ T7294]  ? dup_task_struct+0x52/0xa00
[  192.211619][ T7294]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  192.211711][ T7294]  ? dup_task_struct+0x52/0xa00
[  192.211797][ T7294]  dup_task_struct+0x52/0xa00
[  192.211861][ T7294]  ? _raw_spin_unlock_irq+0x23/0x50
[  192.211955][ T7294]  copy_process+0x820/0x43e0
[  192.212136][ T7294]  ? rcu_is_watching+0x16/0xb0
[  192.212194][ T7294]  ? __pfx_copy_process+0x10/0x10
[  192.212288][ T7294]  ? mutex_init_lockdep+0xdf/0x110
[  192.212362][ T7294]  vhost_task_create+0x1f9/0x380
[  192.212457][ T7294]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  192.212513][ T7294]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  192.212593][ T7294]  ? __pfx_vhost_task_create+0x10/0x10
[  192.212696][ T7294]  ? register_lock_class+0x31/0x2e0
[  192.212846][ T7294]  ? __pfx_vhost_task_fn+0x10/0x10
[  192.212954][ T7294]  ? kasan_quarantine_put+0xbb/0x1f0
[  192.213063][ T7294]  kvm_mmu_post_init_vm+0x147/0x2b0
[  192.213096][ T7294]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  192.213148][ T7294]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  192.213261][ T7294]  kvm_vcpu_ioctl+0xa61/0xfd0
[  192.213369][ T7294]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  192.213453][ T7294]  ? hook_file_ioctl+0x1f2/0x600
[  192.213608][ T7294]  ? __fget_files+0x2a/0x420
[  192.213681][ T7294]  ? __fget_files+0x2a/0x420
[  192.213752][ T7294]  ? __fget_files+0x3a2/0x420
[  192.213815][ T7294]  ? __fget_files+0x2a/0x420
[  192.213892][ T7294]  ? bpf_lsm_file_ioctl+0x9/0x20
[  192.213974][ T7294]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  192.214080][ T7294]  __se_sys_ioctl+0xfc/0x170
[  192.214178][ T7294]  do_syscall_64+0x166/0x520
[  192.214232][ T7294]  ? trace_irq_disable+0x3b/0x140
[  192.214316][ T7294]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.214379][ T7294]  ? clear_bhb_loop+0x70/0xc0
[  192.214452][ T7294]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.214514][ T7294] RIP: 0033:0x7fa2f819e0d9
[  192.214568][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  192.214685][ T7294] RSP: 002b:00007fa2f9029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  192.214756][ T7294] RAX: ffffffffffffffda RBX: 00007fa2f8425fa0 RCX: 00007fa2f819e0d9
[  192.214800][ T7294] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  192.214840][ T7294] RBP: 00007fa2f9029090 R08: 0000000000000000 R09: 0000000000000000
[  192.214874][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  192.214914][ T7294] R13: 00007fa2f8426038 R14: 00007fa2f8425fa0 R15: 00007ffcaf2e2958
[  192.215005][ T7294]  </TASK>
[  192.809432][ T7304] netlink: 'syz.9.270': attribute type 32 has an invalid length.
[  192.902814][  T189] usb 9-1: new full-speed USB device number 9 using dummy_hcd
[  192.946696][ T7310] tipc: Started in network mode
[  192.946756][ T7310] tipc: Node identity c6d15e94dd46, cluster identity 4711
[  192.947472][ T7310] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  192.967525][ T7309] tipc: Resetting bearer <eth:syzkaller0>
[  193.040909][ T7309] tipc: Disabling bearer <eth:syzkaller0>
[  193.054017][  T189] usb 9-1: not running at top speed; connect to a high speed hub
[  193.062038][  T189] usb 9-1: New USB device found, idVendor=0424, idProduct=5534, bcdDevice= 1.00
[  193.073275][  T189] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.113123][  T189] hub 9-1:1.0: USB hub found
[  193.315137][  T189] hub 9-1:1.0: config failed, can't read hub descriptor (err -22)
[  193.354161][  T189] usb 9-1: USB disconnect, device number 9
[  193.444513][ T7316] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[7318] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[7316]
[  193.649677][ T7321] jffs2: notice: (7321) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  193.910280][ T7327] syzkaller1: entered promiscuous mode
[  193.910336][ T7327] syzkaller1: entered allmulticast mode
[  194.417643][ T7352] FAULT_INJECTION: forcing a failure.
[  194.417643][ T7352] name failslab, interval 1, probability 0, space 0, times 0
[  194.433457][ T5706] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  194.442986][ T7352] CPU: 0 UID: 0 PID: 7352 Comm: syz.5.281 Not tainted syzkaller #0 PREEMPT(full) 
[  194.443018][ T7352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  194.443032][ T7352] Call Trace:
[  194.443042][ T7352]  <TASK>
[  194.443052][ T7352]  dump_stack_lvl+0xe8/0x150
[  194.443087][ T7352]  should_fail_ex+0x410/0x560
[  194.443120][ T7352]  ? __alloc_skb+0x1db/0x7a0
[  194.443142][ T7352]  should_failslab+0xa8/0x100
[  194.443163][ T7352]  ? __alloc_skb+0x1db/0x7a0
[  194.443184][ T7352]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  194.443212][ T7352]  ? __alloc_skb+0x18d/0x7a0
[  194.443235][ T7352]  ? __alloc_skb+0x1db/0x7a0
[  194.443272][ T7352]  __alloc_skb+0x1db/0x7a0
[  194.443301][ T7352]  netlink_ack+0x136/0xb30
[  194.443328][ T7352]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.443350][ T7352]  ? __pfx_tipc_nl_node_set_key+0x10/0x10
[  194.443376][ T7352]  ? __pfx_ref_tracker_free+0x10/0x10
[  194.443409][ T7352]  ? __asan_memcpy+0x40/0x70
[  194.443446][ T7352]  netlink_rcv_skb+0x2a4/0x4a0
[  194.443479][ T7352]  ? __pfx_genl_rcv_msg+0x10/0x10
[  194.443505][ T7352]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  194.443549][ T7352]  ? down_read+0x2be/0x330
[  194.443577][ T7352]  genl_rcv+0x28/0x40
[  194.443599][ T7352]  netlink_unicast+0x7bd/0x940
[  194.443640][ T7352]  netlink_sendmsg+0x813/0xb40
[  194.443705][ T7352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.443749][ T7352]  ? apparmor_socket_sendmsg+0x98/0x360
[  194.443778][ T7352]  ? __pfx_netlink_sendmsg+0x10/0x10
[  194.443807][ T7352]  sock_sendmsg_nosec+0x13a/0x180
[  194.443844][ T7352]  ____sys_sendmsg+0x54e/0x850
[  194.443877][ T7352]  ? __pfx_____sys_sendmsg+0x10/0x10
[  194.443913][ T7352]  ? import_iovec+0x73/0xa0
[  194.443937][ T7352]  ___sys_sendmsg+0x2a5/0x360
[  194.443963][ T7352]  ? __lock_acquire+0x6df/0x2e50
[  194.444002][ T7352]  ? __pfx____sys_sendmsg+0x10/0x10
[  194.444068][ T7352]  ? __fget_files+0x2a/0x420
[  194.444093][ T7352]  ? __fget_files+0x3a2/0x420
[  194.444128][ T7352]  __x64_sys_sendmsg+0x1b1/0x290
[  194.444161][ T7352]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  194.444213][ T7352]  do_syscall_64+0x166/0x520
[  194.444234][ T7352]  ? trace_irq_disable+0x3b/0x140
[  194.444266][ T7352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.444289][ T7352]  ? clear_bhb_loop+0x70/0xc0
[  194.444358][ T7352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.444383][ T7352] RIP: 0033:0x7fd43af9e0d9
[  194.444405][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.444425][ T7352] RSP: 002b:00007fd43bddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  194.444451][ T7352] RAX: ffffffffffffffda RBX: 00007fd43b225fa0 RCX: 00007fd43af9e0d9
[  194.444468][ T7352] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  194.444483][ T7352] RBP: 00007fd43bddf090 R08: 0000000000000000 R09: 0000000000000000
[  194.444498][ T7352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.444512][ T7352] R13: 00007fd43b226038 R14: 00007fd43b225fa0 R15: 00007ffc653e9228
[  194.444547][ T7352]  </TASK>
[  194.584699][ T7197] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  194.613052][ T5706] usb 9-1: Using ep0 maxpacket: 8
[  194.620108][ T5706] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  194.657461][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.657630][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  194.707478][ T5706] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  194.707568][ T5706] usb 9-1: Product: syz
[  194.707612][ T5706] usb 9-1: Manufacturer: syz
[  194.707658][ T5706] usb 9-1: SerialNumber: syz
[  194.769352][ T5706] usb 9-1: config 0 descriptor??
[  194.785083][ T7197] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  194.807827][ T7197] usb 5-1: config 0 has an invalid interface number: 194 but max is 0
[  194.807912][ T7197] usb 5-1: config 0 has no interface number 0
[  194.808030][ T7197] usb 5-1: config 0 interface 194 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  194.808110][ T7197] usb 5-1: config 0 interface 194 has no altsetting 0
[  194.865031][ T7197] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  194.865120][ T7197] usb 5-1: Product: syz
[  194.865170][ T7197] usb 5-1: Manufacturer: syz
[  194.865216][ T7197] usb 5-1: SerialNumber: syz
[  194.908114][ T7197] usb 5-1: config 0 descriptor??
[  195.058980][ T5706] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  195.127492][ T7197] ch341 5-1:0.194: ch341-uart converter detected
[  195.159389][ T7197] usb 5-1: failed to receive control message: -71
[  195.159582][ T7197] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  195.205147][ T7197] usb 5-1: USB disconnect, device number 13
[  195.234987][ T7197] ch341 5-1:0.194: device disconnected
[  195.514623][ T7355] usb 10-1: new low-speed USB device number 3 using dummy_hcd
[  195.679774][ T7355] usb 10-1: Invalid ep0 maxpacket: 32
[  195.812970][ T7355] usb 10-1: new low-speed USB device number 4 using dummy_hcd
[  195.946139][ T5706] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  195.974217][ T5706] usb 9-1: USB disconnect, device number 10
[  195.983657][ T7355] usb 10-1: Invalid ep0 maxpacket: 32
[  195.984151][ T7355] usb usb10-port1: attempt power cycle
[  196.037570][ T7392] kvm: user requested TSC rate below hardware speed
[  196.090255][ T7392] FAULT_INJECTION: forcing a failure.
[  196.090255][ T7392] name failslab, interval 1, probability 0, space 0, times 0
[  196.090319][ T7392] CPU: 0 UID: 0 PID: 7392 Comm: syz.4.286 Not tainted syzkaller #0 PREEMPT(full) 
[  196.090345][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  196.090358][ T7392] Call Trace:
[  196.090411][ T7392]  <TASK>
[  196.090438][ T7392]  dump_stack_lvl+0xe8/0x150
[  196.090582][ T7392]  should_fail_ex+0x410/0x560
[  196.090692][ T7392]  should_failslab+0xa8/0x100
[  196.090757][ T7392]  __kvmalloc_node_noprof+0x176/0x820
[  196.090854][ T7392]  ? __pfx___schedule+0x10/0x10
[  196.090939][ T7392]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[  196.091013][ T7392]  ? __kvm_mmu_topup_memory_cache+0x461/0x600
[  196.091121][ T7392]  __kvm_mmu_topup_memory_cache+0x461/0x600
[  196.091205][ T7392]  ? lock_acquire+0x115/0x350
[  196.091312][ T7392]  mmu_topup_memory_caches+0x21/0x170
[  196.091407][ T7392]  kvm_mmu_load+0x9d/0x21e0
[  196.091503][ T7392]  ? kvm_msr_allowed+0x9a/0x490
[  196.091628][ T7392]  ? kvm_lapic_sync_to_vapic+0x2b1/0x880
[  196.091694][ T7392]  ? apic_find_highest_vector+0x45/0x2d0
[  196.091791][ T7392]  ? __pfx_kvm_lapic_sync_to_vapic+0x10/0x10
[  196.091895][ T7392]  ? vmx_update_cr8_intercept+0x35d/0x570
[  196.092005][ T7392]  vcpu_run+0x4f68/0x79b0
[  196.092271][ T7392]  ? __pfx_vcpu_run+0x10/0x10
[  196.092368][ T7392]  ? lock_acquire+0x115/0x350
[  196.092496][ T7392]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  196.092602][ T7392]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  196.092695][ T7392]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  196.092793][ T7392]  kvm_vcpu_ioctl+0xa61/0xfd0
[  196.092903][ T7392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  196.092988][ T7392]  ? hook_file_ioctl+0x1f2/0x600
[  196.093131][ T7392]  ? __fget_files+0x2a/0x420
[  196.093206][ T7392]  ? __fget_files+0x2a/0x420
[  196.093285][ T7392]  ? __fget_files+0x3a2/0x420
[  196.093411][ T7392]  ? __fget_files+0x2a/0x420
[  196.093484][ T7392]  ? bpf_lsm_file_ioctl+0x9/0x20
[  196.093569][ T7392]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  196.093659][ T7392]  __se_sys_ioctl+0xfc/0x170
[  196.093765][ T7392]  do_syscall_64+0x166/0x520
[  196.093825][ T7392]  ? trace_irq_disable+0x3b/0x140
[  196.094030][ T7392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.094280][ T7392]  ? clear_bhb_loop+0x70/0xc0
[  196.094379][ T7392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.094454][ T7392] RIP: 0033:0x7f27ea99e0d9
[  196.094536][ T7392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.094596][ T7392] RSP: 002b:00007f27e8bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.094681][ T7392] RAX: ffffffffffffffda RBX: 00007f27eac25fa0 RCX: 00007f27ea99e0d9
[  196.094739][ T7392] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  196.094795][ T7392] RBP: 00007f27e8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  196.094849][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  196.094895][ T7392] R13: 00007f27eac26038 R14: 00007f27eac25fa0 R15: 00007fff47936898
[  196.094995][ T7392]  </TASK>
[  196.335717][ T7355] usb 10-1: new low-speed USB device number 5 using dummy_hcd
[  196.388502][ T7355] usb 10-1: Invalid ep0 maxpacket: 32
[  196.542839][ T7355] usb 10-1: new low-speed USB device number 6 using dummy_hcd
[  196.577743][ T7355] usb 10-1: Invalid ep0 maxpacket: 32
[  196.584364][ T7355] usb usb10-port1: unable to enumerate USB device
[  196.621979][ T7400] MTD: Couldn't look up './mnt': -15
[  196.726784][ T7403] Format for deleting device is "id" (uint).
[  196.733471][ T5706] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  196.862737][ T5706] usb 5-1: device descriptor read/64, error -71
[  197.052857][ T5617] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  197.102872][ T5706] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  197.212847][ T5617] usb 9-1: Using ep0 maxpacket: 8
[  197.219215][ T5617] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  197.226951][ T5617] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.227039][ T5617] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  197.227203][ T5617] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  197.231967][ T5617] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.232053][ T5617] usb 9-1: Product: syz
[  197.232096][ T5617] usb 9-1: Manufacturer: syz
[  197.232142][ T5617] usb 9-1: SerialNumber: syz
[  197.234010][ T5706] usb 5-1: device descriptor read/64, error -71
[  197.343353][ T5706] usb usb5-port1: attempt power cycle
[  197.682922][ T5706] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  197.703569][ T5706] usb 5-1: device descriptor read/8, error -71
[  197.895156][ T5617] usb 9-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  197.895211][ T5617] usb 9-1: clock source 0 is not valid, cannot use
[  197.898289][ T5617] usb 9-1: 1:1: cannot get freq (v2/v3): err -32
[  197.943297][ T5706] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  197.964755][ T5706] usb 5-1: device descriptor read/8, error -71
[  198.073275][ T5706] usb usb5-port1: unable to enumerate USB device
[  198.140017][ T7407] netlink: 'syz.8.290': attribute type 3 has an invalid length.
[  198.140079][ T7407] netlink: 666 bytes leftover after parsing attributes in process `syz.8.290'.
[  198.176967][ T7417] jffs2: notice: (7417) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  198.225303][ T6984] usb 9-1: USB disconnect, device number 11
[  199.472872][ T1220] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  199.624047][ T1220] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  199.625349][ T1220] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.625418][ T1220] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  199.625450][ T1220] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.629419][ T1220] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.629505][ T1220] usb 9-1: Product: syz
[  199.629560][ T1220] usb 9-1: Manufacturer: syz
[  199.629611][ T1220] usb 9-1: SerialNumber: syz
[  199.657695][ T1220] usb 9-1: config 0 descriptor??
[  199.665038][ T7444] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  199.672465][ T1220] usb 9-1: ucan: probing device on interface #0
[  199.672496][ T1220] usb 9-1: ucan: invalid EP count (1)
[  199.672515][ T1220] usb 9-1: ucan: probe failed; try to update the device firmware
[  200.052374][ T7467] FAULT_INJECTION: forcing a failure.
[  200.052374][ T7467] name failslab, interval 1, probability 0, space 0, times 0
[  200.052454][ T7467] CPU: 1 UID: 0 PID: 7467 Comm: syz.4.304 Not tainted syzkaller #0 PREEMPT(full) 
[  200.052483][ T7467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  200.052499][ T7467] Call Trace:
[  200.052580][ T7467]  <TASK>
[  200.052627][ T7467]  dump_stack_lvl+0xe8/0x150
[  200.052728][ T7467]  should_fail_ex+0x410/0x560
[  200.052866][ T7467]  should_failslab+0xa8/0x100
[  200.052950][ T7467]  __kmalloc_noprof+0xfe/0x720
[  200.053047][ T7467]  ? __list_lru_init+0xba/0x5d0
[  200.053098][ T7467]  ? __list_lru_init+0xba/0x5d0
[  200.053220][ T7467]  __list_lru_init+0xba/0x5d0
[  200.053352][ T7467]  sget_fc+0xf41/0x1a40
[  200.053439][ T7467]  ? __pfx_super_s_dev_test+0x10/0x10
[  200.053549][ T7467]  ? __pfx_super_s_dev_set+0x10/0x10
[  200.053655][ T7467]  ? __pfx_sget_fc+0x10/0x10
[  200.053748][ T7467]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  200.053858][ T7467]  sget_dev+0xab/0xf0
[  200.053942][ T7467]  ? __pfx_sget_dev+0x10/0x10
[  200.054027][ T7467]  ? get_mtd_device+0x200/0x240
[  200.054124][ T7467]  ? __pfx_get_mtd_device+0x10/0x10
[  200.054230][ T7467]  mtd_get_sb+0x51/0x410
[  200.054342][ T7467]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.054418][ T7467]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.054489][ T7467]  get_tree_mtd+0x597/0x7d0
[  200.054602][ T7467]  ? __pfx_jffs2_fill_super+0x10/0x10
[  200.054674][ T7467]  ? __pfx_get_tree_mtd+0x10/0x10
[  200.054810][ T7467]  vfs_get_tree+0x92/0x2a0
[  200.054918][ T7467]  do_new_mount+0x319/0xdc0
[  200.055017][ T7467]  ? __pfx_do_new_mount+0x10/0x10
[  200.055093][ T7467]  ? ns_capable+0x89/0xe0
[  200.055179][ T7467]  ? path_mount+0x647/0x1050
[  200.055274][ T7467]  ? user_path_at+0xd4/0x160
[  200.055370][ T7467]  __se_sys_mount+0x31d/0x420
[  200.055487][ T7467]  ? __pfx___se_sys_mount+0x10/0x10
[  200.055606][ T7467]  ? __x64_sys_mount+0x20/0xc0
[  200.055691][ T7467]  do_syscall_64+0x166/0x520
[  200.055763][ T7467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.055839][ T7467]  ? clear_bhb_loop+0x70/0xc0
[  200.055924][ T7467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.055997][ T7467] RIP: 0033:0x7f27ea99e0d9
[  200.056076][ T7467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  200.056135][ T7467] RSP: 002b:00007f27e8bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  200.056217][ T7467] RAX: ffffffffffffffda RBX: 00007f27eac25fa0 RCX: 00007f27ea99e0d9
[  200.056266][ T7467] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  200.056314][ T7467] RBP: 00007f27e8bf6090 R08: 0000000000000000 R09: 0000000000000000
[  200.056361][ T7467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  200.056407][ T7467] R13: 00007f27eac26038 R14: 00007f27eac25fa0 R15: 00007fff47936898
[  200.056507][ T7467]  </TASK>
[  200.528887][ T7479] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0)
[  200.528978][ T7479] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  200.643076][ T7475] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  200.842801][ T1220] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  200.979307][ T1220] usb 5-1: device descriptor read/64, error -71
[  201.214071][ T1220] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  201.347116][ T1220] usb 5-1: device descriptor read/64, error -71
[  201.388746][ T7516] overlayfs: failed to resolve './file2': -2
[  201.454915][ T1220] usb usb5-port1: attempt power cycle
[  201.559902][ T7525] FAULT_INJECTION: forcing a failure.
[  201.559902][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  201.559968][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.9.317 Not tainted syzkaller #0 PREEMPT(full) 
[  201.559994][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  201.560008][ T7525] Call Trace:
[  201.560058][ T7525]  <TASK>
[  201.560094][ T7525]  dump_stack_lvl+0xe8/0x150
[  201.560217][ T7525]  should_fail_ex+0x410/0x560
[  201.560327][ T7525]  _copy_from_user+0x2d/0xb0
[  201.560408][ T7525]  memdup_user+0x5e/0xd0
[  201.560501][ T7525]  proc_pid_attr_write+0x4fe/0x630
[  201.560587][ T7525]  ? proc_pid_attr_write+0xc2/0x630
[  201.560667][ T7525]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  201.560745][ T7525]  vfs_write+0x296/0xba0
[  201.560846][ T7525]  ? __pfx_vfs_write+0x10/0x10
[  201.560918][ T7525]  ? __fget_files+0x2a/0x420
[  201.561006][ T7525]  ? __fget_files+0x3a2/0x420
[  201.561072][ T7525]  ? __fget_files+0x2a/0x420
[  201.561169][ T7525]  ksys_write+0x150/0x270
[  201.561249][ T7525]  ? __pfx_ksys_write+0x10/0x10
[  201.561361][ T7525]  do_syscall_64+0x166/0x520
[  201.561430][ T7525]  ? trace_irq_disable+0x3b/0x140
[  201.561527][ T7525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.561608][ T7525]  ? clear_bhb_loop+0x70/0xc0
[  201.561687][ T7525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.561752][ T7525] RIP: 0033:0x7fa2f819e0d9
[  201.561809][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.561864][ T7525] RSP: 002b:00007fa2f9029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  201.561917][ T7525] RAX: ffffffffffffffda RBX: 00007fa2f8425fa0 RCX: 00007fa2f819e0d9
[  201.561963][ T7525] RDX: 000000000000001b RSI: 0000200000000100 RDI: 0000000000000003
[  201.562006][ T7525] RBP: 00007fa2f9029090 R08: 0000000000000000 R09: 0000000000000000
[  201.562041][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.562082][ T7525] R13: 00007fa2f8426038 R14: 00007fa2f8425fa0 R15: 00007ffcaf2e2958
[  201.562171][ T7525]  </TASK>
[  201.830505][ T7528] netlink: 71 bytes leftover after parsing attributes in process `syz.9.318'.
[  201.843374][ T1220] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  201.865230][ T1220] usb 5-1: device descriptor read/8, error -71
[  202.102764][ T1220] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  202.123772][ T1220] usb 5-1: device descriptor read/8, error -71
[  202.233472][ T1220] usb usb5-port1: unable to enumerate USB device
[  202.259498][ T5767] usb 9-1: USB disconnect, device number 12
[  202.264108][ T7539] fuse: fd is not a fuse device
[  202.742906][ T5767] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  202.908504][ T5767] usb 9-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  202.939999][ T5767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.940057][ T5767] usb 9-1: Product: syz
[  202.940074][ T5767] usb 9-1: Manufacturer: syz
[  202.940091][ T5767] usb 9-1: SerialNumber: syz
[  203.524457][ T7367] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  203.582253][ T7570] binder: 7569:7570 ioctl c0306201 200000000080 returned -14
[  203.590007][ T7570] binder: 7569:7570 ioctl c0306201 2000000003c0 returned -14
[  203.675685][ T7572] jffs2: notice: (7572) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  203.697366][ T7367] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  203.708544][ T7367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.719760][ T7367] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.719830][ T7367] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.743546][ T7367] usb 10-1: config 0 descriptor??
[  203.886918][ T5767] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  203.887009][ T5767] usb 9-1: MIDIStreaming interface descriptor not found
[  204.066117][ T7581] jffs2: notice: (7581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  204.136996][ T5767] usb 9-1: USB disconnect, device number 13
[  204.286161][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293714][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293753][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293782][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293811][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293839][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.293868][ T7367] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  204.373592][ T7367] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.9-1/input0
[  204.403161][ T7355] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  204.457433][ T7367] cp2112 0003:10C4:EA90.0006: Part Number: 0xDC Device Version: 0x5B
[  204.515954][ T7593] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8)
[  204.515988][ T7593] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  204.516146][ T7593] vhci_hcd vhci_hcd.0: Device attached
[  204.553785][ T7355] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  204.567633][ T7355] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  204.567715][ T7355] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  204.603202][ T7355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.603252][ T7355] usb 5-1: Product: syz
[  204.603293][ T7355] usb 5-1: Manufacturer: syz
[  204.603346][ T7355] usb 5-1: SerialNumber: syz
[  204.636056][ T7355] usb 5-1: config 0 descriptor??
[  204.645752][ T7585] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  204.660970][ T7367] cp2112 0003:10C4:EA90.0006: error requesting SMBus config
[  204.673597][ T7355] usb 5-1: ucan: probing device on interface #0
[  204.673650][ T7355] usb 5-1: ucan: invalid EP count (1)
[  204.673674][ T7355] usb 5-1: ucan: probe failed; try to update the device firmware
[  204.725985][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.743629][ T7595] vhci_hcd: connection closed
[  204.763515][ T7268] vhci_hcd vhci_hcd.8: stop threads
[  204.763573][ T7268] vhci_hcd vhci_hcd.8: release socket
[  204.778376][ T7268] vhci_hcd vhci_hcd.8: disconnect device
[  204.800146][ T7367] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -5
[  206.383740][ T5770] usb 10-1: USB disconnect, device number 7
[  206.768845][ T7640] netlink: 44 bytes leftover after parsing attributes in process `syz.8.338'.
[  207.043850][ T7647] FAULT_INJECTION: forcing a failure.
[  207.043850][ T7647] name failslab, interval 1, probability 0, space 0, times 0
[  207.043921][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.8.340 Not tainted syzkaller #0 PREEMPT(full) 
[  207.043947][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  207.044008][ T7647] Call Trace:
[  207.044037][ T7647]  <TASK>
[  207.044068][ T7647]  dump_stack_lvl+0xe8/0x150
[  207.044200][ T7647]  should_fail_ex+0x410/0x560
[  207.044325][ T7647]  should_failslab+0xa8/0x100
[  207.044391][ T7647]  ? skb_clone+0x212/0x3a0
[  207.044470][ T7647]  kmem_cache_alloc_noprof+0xa1/0x600
[  207.044552][ T7647]  ? skb_clone+0x212/0x3a0
[  207.044651][ T7647]  skb_clone+0x212/0x3a0
[  207.044740][ T7647]  __netlink_deliver_tap+0x413/0x860
[  207.044868][ T7647]  ? netlink_deliver_tap+0x2e/0x1b0
[  207.044954][ T7647]  netlink_deliver_tap+0x19c/0x1b0
[  207.045044][ T7647]  netlink_unicast+0x781/0x940
[  207.045146][ T7647]  netlink_sendmsg+0x813/0xb40
[  207.045268][ T7647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.045378][ T7647]  ? apparmor_socket_sendmsg+0x98/0x360
[  207.045493][ T7647]  ? __pfx_netlink_sendmsg+0x10/0x10
[  207.045606][ T7647]  sock_sendmsg_nosec+0x13a/0x180
[  207.045710][ T7647]  ____sys_sendmsg+0x54e/0x850
[  207.045789][ T7647]  ? __pfx_____sys_sendmsg+0x10/0x10
[  207.045891][ T7647]  ? import_iovec+0x73/0xa0
[  207.045971][ T7647]  ___sys_sendmsg+0x2a5/0x360
[  207.046051][ T7647]  ? __lock_acquire+0x6df/0x2e50
[  207.046156][ T7647]  ? __pfx____sys_sendmsg+0x10/0x10
[  207.046336][ T7647]  ? __fget_files+0x2a/0x420
[  207.046404][ T7647]  ? __fget_files+0x3a2/0x420
[  207.046504][ T7647]  __x64_sys_sendmsg+0x1b1/0x290
[  207.046592][ T7647]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  207.046728][ T7647]  do_syscall_64+0x166/0x520
[  207.046777][ T7647]  ? trace_irq_disable+0x3b/0x140
[  207.046873][ T7647]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.046947][ T7647]  ? clear_bhb_loop+0x70/0xc0
[  207.047024][ T7647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.047088][ T7647] RIP: 0033:0x7f5493b9e0d9
[  207.047145][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  207.047198][ T7647] RSP: 002b:00007f5494a81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  207.047267][ T7647] RAX: ffffffffffffffda RBX: 00007f5493e25fa0 RCX: 00007f5493b9e0d9
[  207.047311][ T7647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  207.047358][ T7647] RBP: 00007f5494a81090 R08: 0000000000000000 R09: 0000000000000000
[  207.047400][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  207.047435][ T7647] R13: 00007f5493e26038 R14: 00007f5493e25fa0 R15: 00007ffec90c9238
[  207.047523][ T7647]  </TASK>
[  207.089968][ T7647] netlink: 44 bytes leftover after parsing attributes in process `syz.8.340'.
[  207.107314][ T7650] netlink: 228 bytes leftover after parsing attributes in process `syz.5.339'.
[  207.483319][ T7654] ieee802154 phy0 wpan0: encryption failed: -22
[  207.506765][ T5770] usb 5-1: USB disconnect, device number 22
[  207.855849][ T7669] IPVS: set_ctl: invalid protocol: 50 100.1.5.0:20001
[  208.013041][ T5770] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  208.144215][ T5770] usb 5-1: device descriptor read/64, error -71
[  208.385403][ T5770] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  208.400388][ T7691] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001
[  208.523226][ T5770] usb 5-1: device descriptor read/64, error -71
[  208.570995][ T7695] FAULT_INJECTION: forcing a failure.
[  208.570995][ T7695] name failslab, interval 1, probability 0, space 0, times 0
[  208.586131][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.9.348 Not tainted syzkaller #0 PREEMPT(full) 
[  208.586165][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  208.586179][ T7695] Call Trace:
[  208.586189][ T7695]  <TASK>
[  208.586199][ T7695]  dump_stack_lvl+0xe8/0x150
[  208.586234][ T7695]  should_fail_ex+0x410/0x560
[  208.586272][ T7695]  should_failslab+0xa8/0x100
[  208.586296][ T7695]  ? skb_clone+0x212/0x3a0
[  208.586332][ T7695]  kmem_cache_alloc_noprof+0xa1/0x600
[  208.586365][ T7695]  ? skb_clone+0x212/0x3a0
[  208.586401][ T7695]  skb_clone+0x212/0x3a0
[  208.586429][ T7695]  ? nfnetlink_rcv+0x4b0/0x28c0
[  208.586460][ T7695]  nfnetlink_rcv+0x4de/0x28c0
[  208.586491][ T7695]  ? __dev_queue_xmit+0x29b/0x3820
[  208.586527][ T7695]  ? __local_bh_enable_ip+0xd6/0x140
[  208.586554][ T7695]  ? lockdep_hardirqs_on+0x7b/0x110
[  208.586589][ T7695]  ? __dev_queue_xmit+0x29b/0x3820
[  208.586619][ T7695]  ? __local_bh_enable_ip+0xd6/0x140
[  208.586643][ T7695]  ? __dev_queue_xmit+0x29b/0x3820
[  208.586673][ T7695]  ? __dev_queue_xmit+0x1edc/0x3820
[  208.586703][ T7695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.586748][ T7695]  ? __dev_queue_xmit+0x29b/0x3820
[  208.586780][ T7695]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  208.586825][ T7695]  ? ref_tracker_free+0x689/0x830
[  208.586864][ T7695]  ? __pfx_ref_tracker_free+0x10/0x10
[  208.586898][ T7695]  ? __asan_memcpy+0x40/0x70
[  208.586927][ T7695]  ? __skb_clone+0x5c/0x6c0
[  208.586961][ T7695]  ? __skb_clone+0x449/0x6c0
[  208.586995][ T7695]  ? skb_clone+0x246/0x3a0
[  208.587028][ T7695]  ? __netlink_deliver_tap+0x811/0x860
[  208.587059][ T7695]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.587097][ T7695]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.587126][ T7695]  ? netlink_deliver_tap+0x2e/0x1b0
[  208.587160][ T7695]  netlink_unicast+0x7bd/0x940
[  208.587199][ T7695]  netlink_sendmsg+0x813/0xb40
[  208.587238][ T7695]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.587279][ T7695]  ? apparmor_socket_sendmsg+0x98/0x360
[  208.587313][ T7695]  ? __pfx_netlink_sendmsg+0x10/0x10
[  208.587344][ T7695]  sock_sendmsg_nosec+0x13a/0x180
[  208.587382][ T7695]  __sys_sendto+0x408/0x5a0
[  208.587415][ T7695]  ? __pfx___sys_sendto+0x10/0x10
[  208.587470][ T7695]  ? do_user_addr_fault+0xc4c/0x1340
[  208.587508][ T7695]  __x64_sys_sendto+0xde/0x100
[  208.587537][ T7695]  do_syscall_64+0x166/0x520
[  208.587558][ T7695]  ? trace_irq_disable+0x3b/0x140
[  208.587593][ T7695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.587617][ T7695]  ? clear_bhb_loop+0x70/0xc0
[  208.587644][ T7695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.587667][ T7695] RIP: 0033:0x7fa2f815e90e
[  208.587689][ T7695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  208.587709][ T7695] RSP: 002b:00007fa2f9027e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  208.587733][ T7695] RAX: ffffffffffffffda RBX: 00007fa2f90296c0 RCX: 00007fa2f815e90e
[  208.587757][ T7695] RDX: 0000000000000020 RSI: 00007fa2f9028000 RDI: 0000000000000003
[  208.587772][ T7695] RBP: 0000000000000000 R08: 00007fa2f9027f04 R09: 000000000000000c
[  208.587786][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  208.587799][ T7695] R13: 00007fa2f9027f58 R14: 00007fa2f9028000 R15: 0000000000000000
[  208.587832][ T7695]  </TASK>
[  208.657470][ T5770] usb usb5-port1: attempt power cycle
[  209.043083][ T5770] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  209.065444][ T5770] usb 5-1: device descriptor read/8, error -71
[  209.302733][  T189] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  209.304269][ T5770] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  209.325766][ T5770] usb 5-1: device descriptor read/8, error -71
[  209.348554][ T7711] syzkaller1: entered promiscuous mode
[  209.348610][ T7711] syzkaller1: entered allmulticast mode
[  209.433507][ T5770] usb usb5-port1: unable to enumerate USB device
[  209.457986][  T189] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  209.467382][  T189] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  209.467432][  T189] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  209.467472][  T189] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.505386][ T7702] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  209.535912][  T189] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  209.811970][  T189] usb 10-1: USB disconnect, device number 8
[  209.944730][ T7367] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  210.102758][ T7367] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  210.120039][ T7367] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  210.120096][ T7367] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.145161][ T7367] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.145211][ T7367] usb 9-1: Product: syz
[  210.145257][ T7367] usb 9-1: Manufacturer: syz
[  210.145278][ T7367] usb 9-1: SerialNumber: syz
[  210.178366][ T7367] usb 9-1: config 0 descriptor??
[  210.184441][ T7719] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  210.195566][ T7367] usb 9-1: ucan: probing device on interface #0
[  210.206679][ T7367] usb 9-1: ucan: invalid EP count (1)
[  210.206745][ T7367] usb 9-1: ucan: probe failed; try to update the device firmware
[  210.524878][ T7736] kAFS: bad VL server IP address
[  211.043202][ T5767] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  211.235914][ T5767] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  211.245210][ T5767] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.245239][ T5767] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  211.257742][ T5767] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  211.257826][ T5767] usb 5-1: SerialNumber: syz
[  211.538934][ T5767] usb 5-1: 0:2 : does not exist
[  211.540515][ T5767] usb 5-1: unit 0 not found!
[  211.771905][ T5767] usb 5-1: USB disconnect, device number 27
[  211.842256][ T7603] udevd[7603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.379640][ T7784] syzkaller0: entered promiscuous mode
[  212.387098][ T7784] syzkaller0: entered allmulticast mode
[  212.721746][ T5770] usb 9-1: USB disconnect, device number 14
[  216.024866][ T7822] netlink: 84 bytes leftover after parsing attributes in process `syz.8.366'.
[  216.060370][ T7819] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.168785][ T1220] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  216.264785][ T7819] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.334876][ T1220] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00
[  216.349542][ T1220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  216.349612][ T1220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  216.349644][ T1220] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  216.389497][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.398082][ T1220] usb 5-1: Product: syz
[  216.405017][ T1220] usb 5-1: Manufacturer: syz
[  216.405069][ T1220] usb 5-1: SerialNumber: syz
[  216.424795][ T7818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  216.425954][ T7818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  216.426146][ T7818] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  216.459567][ T1220] mdc800 5-1:1.0: Found Mustek MDC800 on USB.
[  216.611749][ T7819] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.672904][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'.
[  216.762715][ T7819] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.806271][ T7841] 
[  216.808637][ T7841] ======================================================
[  216.815847][ T7841] WARNING: possible circular locking dependency detected
[  216.823109][ T7841] syzkaller #0 Not tainted
[  216.827680][ T7841] ------------------------------------------------------
[  216.834741][ T7841] syz.4.365/7841 is trying to acquire lock:
[  216.840676][ T7841] ffff88802a1a3a18 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x2e/0x470
[  216.850241][ T7841] 
[  216.850241][ T7841] but task is already holding lock:
[  216.857640][ T7841] ffffffff8fd1a9e8 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x30/0x1e0
[  216.866175][ T7841] 
[  216.866175][ T7841] which lock already depends on the new lock.
[  216.866175][ T7841] 
[  216.876616][ T7841] 
[  216.876616][ T7841] the existing dependency chain (in reverse order) is:
[  216.885654][ T7841] 
[  216.885654][ T7841] -> #1 (minor_rwsem#2){++++}-{4:4}:
[  216.893170][ T7841]        down_write+0x96/0x200
[  216.897974][ T7841]        usb_register_dev+0x142/0x5e0
[  216.903388][ T7841]        mdc800_usb_probe+0xf96/0x18c0
[  216.908884][ T7841]        usb_probe_interface+0x788/0xe50
[  216.914543][ T7841]        really_probe+0x254/0xae0
[  216.919591][ T7841]        __driver_probe_device+0x1e8/0x360
[  216.925426][ T7841]        driver_probe_device+0x4f/0x240
[  216.930988][ T7841]        __device_attach_driver+0x270/0x410
[  216.936937][ T7841]        bus_for_each_drv+0x258/0x2f0
[  216.942331][ T7841]        __device_attach+0x2c4/0x450
[  216.947670][ T7841]        device_initial_probe+0xa1/0xd0
[  216.953250][ T7841]        bus_probe_device+0x12a/0x220
[  216.958679][ T7841]        device_add+0x7d7/0xb80
[  216.963560][ T7841]        usb_set_configuration+0x1ad8/0x2180
[  216.969567][ T7841]        usb_generic_driver_probe+0x8d/0x150
[  216.975574][ T7841]        usb_probe_device+0x1c3/0x3b0
[  216.980980][ T7841]        really_probe+0x254/0xae0
[  216.986036][ T7841]        __driver_probe_device+0x1e8/0x360
[  216.991921][ T7841]        driver_probe_device+0x4f/0x240
[  216.997516][ T7841]        __device_attach_driver+0x270/0x410
[  217.003458][ T7841]        bus_for_each_drv+0x258/0x2f0
[  217.008865][ T7841]        __device_attach+0x2c4/0x450
[  217.014192][ T7841]        device_initial_probe+0xa1/0xd0
[  217.019784][ T7841]        bus_probe_device+0x12a/0x220
[  217.025182][ T7841]        device_add+0x7d7/0xb80
[  217.030063][ T7841]        usb_new_device+0x9aa/0x1690
[  217.035368][ T7841]        hub_event+0x28e8/0x4d30
[  217.040353][ T7841]        process_scheduled_works+0xc3d/0x1630
[  217.046447][ T7841]        worker_thread+0xa47/0xfb0
[  217.051614][ T7841]        kthread+0x38b/0x480
[  217.056245][ T7841]        ret_from_fork+0x514/0xb70
[  217.061385][ T7841]        ret_from_fork_asm+0x1a/0x30
[  217.066734][ T7841] 
[  217.066734][ T7841] -> #0 (&mdc800->io_lock){+.+.}-{4:4}:
[  217.074497][ T7841]        __lock_acquire+0x15ff/0x2e50
[  217.079905][ T7841]        lock_acquire+0x115/0x350
[  217.084987][ T7841]        __mutex_lock+0x19d/0x1550
[  217.090124][ T7841]        mdc800_device_open+0x2e/0x470
[  217.095612][ T7841]        usb_open+0x156/0x1e0
[  217.100318][ T7841]        chrdev_open+0x4d9/0x600
[  217.105301][ T7841]        do_dentry_open+0x816/0x1380
[  217.110610][ T7841]        vfs_open+0x3b/0x340
[  217.115225][ T7841]        path_openat+0x1443/0x1d60
[  217.120371][ T7841]        do_file_open+0x23e/0x4a0
[  217.125429][ T7841]        do_sys_openat2+0x115/0x200
[  217.130647][ T7841]        __x64_sys_openat+0x138/0x170
[  217.136041][ T7841]        do_syscall_64+0x166/0x520
[  217.141176][ T7841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.147658][ T7841] 
[  217.147658][ T7841] other info that might help us debug this:
[  217.147658][ T7841] 
[  217.157908][ T7841]  Possible unsafe locking scenario:
[  217.157908][ T7841] 
[  217.165400][ T7841]        CPU0                    CPU1
[  217.170783][ T7841]        ----                    ----
[  217.176257][ T7841]   rlock(minor_rwsem#2);
[  217.180618][ T7841]                                lock(&mdc800->io_lock);
[  217.187692][ T7841]                                lock(minor_rwsem#2);
[  217.194489][ T7841]   lock(&mdc800->io_lock);
[  217.199041][ T7841] 
[  217.199041][ T7841]  *** DEADLOCK ***
[  217.199041][ T7841] 
[  217.207227][ T7841] locks held by syz.4.365/7841: 1, last CPU#0:
[  217.213503][ T7841]  #0: ffffffff8fd1a9e8 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x30/0x1e0
[  217.222538][ T7841] 
[  217.222538][ T7841] stack backtrace:
[  217.228479][ T7841] CPU: 0 UID: 0 PID: 7841 Comm: syz.4.365 Not tainted syzkaller #0 PREEMPT(full) 
[  217.239614][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.249920][ T7841] Call Trace:
[  217.253320][ T7841]  <TASK>
[  217.256301][ T7841]  dump_stack_lvl+0xe8/0x150
[  217.261101][ T7841]  print_circular_bug+0x2e2/0x300
[  217.266161][ T7841]  check_noncircular+0x12f/0x150
[  217.271132][ T7841]  __lock_acquire+0x15ff/0x2e50
[  217.276113][ T7841]  ? stack_trace_save+0xa9/0x100
[  217.281082][ T7841]  ? __pfx_stack_trace_save+0x10/0x10
[  217.286611][ T7841]  ? mark_lock_irq+0x308/0x380
[  217.291745][ T7841]  lock_acquire+0x115/0x350
[  217.296279][ T7841]  ? mdc800_device_open+0x2e/0x470
[  217.301426][ T7841]  __mutex_lock+0x19d/0x1550
[  217.306045][ T7841]  ? mdc800_device_open+0x2e/0x470
[  217.311188][ T7841]  ? __lock_acquire+0x6df/0x2e50
[  217.316460][ T7841]  ? __mutex_unlock_slowpath+0x731/0x900
[  217.322143][ T7841]  ? mdc800_device_open+0x2e/0x470
[  217.327305][ T7841]  ? __pfx___mutex_lock+0x10/0x10
[  217.332366][ T7841]  mdc800_device_open+0x2e/0x470
[  217.337338][ T7841]  ? __pfx_mdc800_device_open+0x10/0x10
[  217.342913][ T7841]  usb_open+0x156/0x1e0
[  217.347104][ T7841]  chrdev_open+0x4d9/0x600
[  217.351572][ T7841]  ? __pfx_chrdev_open+0x10/0x10
[  217.356543][ T7841]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  217.362917][ T7841]  ? __pfx_chrdev_open+0x10/0x10
[  217.368152][ T7841]  do_dentry_open+0x816/0x1380
[  217.373147][ T7841]  vfs_open+0x3b/0x340
[  217.377245][ T7841]  ? path_openat+0x1428/0x1d60
[  217.382074][ T7841]  path_openat+0x1443/0x1d60
[  217.386713][ T7841]  do_file_open+0x23e/0x4a0
[  217.391389][ T7841]  ? __pfx_do_file_open+0x10/0x10
[  217.396472][ T7841]  ? _raw_spin_unlock+0x28/0x50
[  217.401379][ T7841]  ? alloc_fd+0x651/0x6c0
[  217.405748][ T7841]  do_sys_openat2+0x115/0x200
[  217.410502][ T7841]  ? __se_sys_futex+0x3a8/0x450
[  217.415524][ T7841]  ? __pfx_do_sys_openat2+0x10/0x10
[  217.420834][ T7841]  ? rcu_is_watching+0x16/0xb0
[  217.425622][ T7841]  __x64_sys_openat+0x138/0x170
[  217.430498][ T7841]  do_syscall_64+0x166/0x520
[  217.435111][ T7841]  ? trace_irq_disable+0x3b/0x140
[  217.440163][ T7841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.446267][ T7841]  ? clear_bhb_loop+0x70/0xc0
[  217.450970][ T7841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.456940][ T7841] RIP: 0033:0x7f27ea95e90e
[  217.461435][ T7841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  217.481083][ T7841] RSP: 002b:00007f27e8bd4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  217.489623][ T7841] RAX: ffffffffffffffda RBX: 00007f27e8bd56c0 RCX: 00007f27ea95e90e
[  217.497620][ T7841] RDX: 0000000000000002 RSI: 00007f27e8bd4c00 RDI: ffffffffffffff9c
[  217.505614][ T7841] RBP: 00007f27eaa35024 R08: 0000000000000000 R09: 0000000000000000
[  217.513655][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.521659][ T7841] R13: 00007f27eac26128 R14: 00007f27eac26090 R15: 00007fff47936898
[  217.529663][ T7841]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  217.844038][   T59] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  217.844102][   T59] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  217.860954][   T59] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  217.861002][   T59] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  217.906778][  T189] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  218.521528][ T7257] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.578984][ T5706] usb 5-1: USB disconnect, device number 28
[  218.587435][ T5706] mdc800 5-1:1.0: Mustek MDC800 disconnected from USB.
[  218.613271][ T7257] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.694669][ T7257] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.731711][ T7257] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.845567][ T7257] bridge_slave_1: left allmulticast mode
[  218.845612][ T7257] bridge_slave_1: left promiscuous mode
[  218.846008][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.865944][ T7257] bridge_slave_0: left allmulticast mode
[  218.865991][ T7257] bridge_slave_0: left promiscuous mode
[  218.870561][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.942825][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  218.955320][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  218.967398][ T7257] bond0 (unregistering): Released all slaves
[  219.189669][ T7257] hsr_slave_0: left promiscuous mode
[  219.197370][ T7257] hsr_slave_1: left promiscuous mode
[  219.205408][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.212932][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.221061][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.228911][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.240705][ T7257] veth1_macvtap: left promiscuous mode
[  219.240763][ T7257] veth0_macvtap: left promiscuous mode
[  219.240947][ T7257] veth1_vlan: left promiscuous mode
[  219.241123][ T7257] veth0_vlan: left promiscuous mode
[  219.399885][ T7257] team0 (unregistering): Port device team_slave_1 removed
[  219.410605][ T7257] team0 (unregistering): Port device team_slave_0 removed
[  219.769154][ T7257] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.807385][ T7257] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.868232][ T7257] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.927444][ T7257] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.033605][ T7257] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.060732][ T7257] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.125801][ T7257] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.206196][ T7257] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.327957][ T7257] bridge_slave_1: left allmulticast mode
[  220.327996][ T7257] bridge_slave_1: left promiscuous mode
[  220.328172][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.349579][ T7257] bridge_slave_0: left allmulticast mode
[  220.356837][ T7257] bridge_slave_0: left promiscuous mode
[  220.363033][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.379928][ T7257] bridge_slave_1: left allmulticast mode
[  220.379977][ T7257] bridge_slave_1: left promiscuous mode
[  220.380391][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.392115][ T7257] bridge_slave_0: left allmulticast mode
[  220.392144][ T7257] bridge_slave_0: left promiscuous mode
[  220.392297][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.521706][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.539015][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.555461][ T7257] bond0 (unregistering): Released all slaves
[  220.600205][ T7257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  220.617240][ T7257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  220.627751][ T7257] bond0 (unregistering): Released all slaves
[  220.928175][ T7257] hsr_slave_0: left promiscuous mode
[  220.928642][ T7257] hsr_slave_1: left promiscuous mode
[  220.929189][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.929219][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.930130][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.930182][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.958539][ T7257] hsr_slave_0: left promiscuous mode
[  220.966401][ T7257] hsr_slave_1: left promiscuous mode
[  220.967023][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.967044][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.970149][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.970215][ T7257] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.017056][ T7257] veth1_macvtap: left promiscuous mode
[  221.017112][ T7257] veth0_macvtap: left promiscuous mode
[  221.017376][ T7257] veth1_vlan: left promiscuous mode
[  221.017506][ T7257] veth0_vlan: left promiscuous mode
[  221.039864][ T7257] veth1_macvtap: left promiscuous mode
[  221.039925][ T7257] veth0_macvtap: left promiscuous mode
[  221.040115][ T7257] veth1_vlan: left promiscuous mode
[  221.040261][ T7257] veth0_vlan: left promiscuous mode
[  221.210980][ T7257] team0 (unregistering): Port device team_slave_1 removed
[  221.228564][ T7257] team0 (unregistering): Port device team_slave_0 removed
[  221.345883][ T7257] team0 (unregistering): Port device team_slave_1 removed
[  221.359076][ T7257] team0 (unregistering): Port device team_slave_0 removed
[  222.077821][ T7251] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.119319][ T7251] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.168966][ T7251] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.229220][ T7251] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.349526][ T7251] bridge_slave_1: left allmulticast mode
[  222.349573][ T7251] bridge_slave_1: left promiscuous mode
[  222.349753][ T7251] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.377390][ T7251] bridge_slave_0: left allmulticast mode
[  222.383345][ T7251] bridge_slave_0: left promiscuous mode
[  222.389639][ T7251] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.399574][ T7251] dvmrp0: left allmulticast mode
[  222.496144][ T7251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.507403][ T7251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.519442][ T7251] bond0 (unregistering): Released all slaves
[  222.595507][ T7251] tipc: Left network mode
[  222.749117][ T7251] hsr_slave_0: left promiscuous mode
[  222.755313][ T7251] hsr_slave_1: left promiscuous mode
[  222.760117][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.760185][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.765112][ T7251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.765197][ T7251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.791446][ T7251] veth1_macvtap: left promiscuous mode
[  222.791498][ T7251] veth0_macvtap: left promiscuous mode
[  222.791620][ T7251] veth1_vlan: left promiscuous mode
[  222.791817][ T7251] veth0_vlan: left promiscuous mode
[  222.979497][ T7251] team0 (unregistering): Port device team_slave_1 removed
[  222.992503][ T7251] team0 (unregistering): Port device team_slave_0 removed
[  223.059845][ T5278] 8021q: adding VLAN 0 to HW filter on device eth25
[  223.417564][ T5278] 8021q: adding VLAN 0 to HW filter on device eth26
[  223.724664][ T5278] 8021q: adding VLAN 0 to HW filter on device eth27
[  224.006134][ T5278] 8021q: adding VLAN 0 to HW filter on device eth28
[  224.283542][ T5278] 8021q: adding VLAN 0 to HW filter on device eth29
[  224.571221][ T5278] 8021q: adding VLAN 0 to HW filter on device eth31
[  224.856157][ T5278] 8021q: adding VLAN 0 to HW filter on device eth30
[  225.134006][ T5278] 8021q: adding VLAN 0 to HW filter on device eth32
[  225.413582][ T5278] 8021q: adding VLAN 0 to HW filter on device eth33
[  225.699445][ T5278] 8021q: adding VLAN 0 to HW filter on device eth34
[  225.994420][ T5278] 8021q: adding VLAN 0 to HW filter on device eth35
[  226.279563][ T5278] 8021q: adding VLAN 0 to HW filter on device eth36
[  226.613111][ T5278] 8021q: adding VLAN 0 to HW filter on device eth37