last executing test programs:

7m25.067540897s ago: executing program 2 (id=284):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xffff, 0xc8, 0x2, 0x8, 0x5c, 0x2, 0x1, 0x7, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

7m24.074155911s ago: executing program 2 (id=286):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x4, 0x0, 0x40000005, 0x20b, 0xb, "d206000890ea8efa0100000000010000000ee7"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6)

7m23.767910253s ago: executing program 2 (id=288):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x11)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/drivers/serial\x00', 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = openat(r0, &(0x7f0000000140)='unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='00:02\n', 0x6)
r2 = openat(r0, &(0x7f0000000480)='bind\x00', 0x1, 0x118)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000200)={0x11, 0x10, 0x1, 0x1, 0x0, 0x6, @random}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0xaa15, 0x2, 0x4, 0xfc6, 0x1, "f18573249dd86fbb4d1c29dd403ad793448bc0"})
write(r3, &(0x7f0000000000)="010000000000000020", 0x9)
write(r2, &(0x7f00000004c0)='00:02\n', 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)

7m22.342723228s ago: executing program 2 (id=289):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write(r0, &(0x7f0000000200)="0a604c78d522ab360dd45630b48e91169d95cb8e737e0863e6ca29f8d572b141c31814c26dc1f02a84ba12a3", 0x2c) (async, rerun: 32)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xf, 0x0, &(0x7f0000000080)=0x4c) (async, rerun: 32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000140)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async, rerun: 32)
symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./dev/file0\x00') (async, rerun: 32)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00') (async, rerun: 64)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x200) (rerun: 64)

7m21.74594386s ago: executing program 2 (id=290):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24)
listen(r1, 0x5)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "01"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x18, 0x110, 0x1, "cf"}, {0x10, 0x110, 0xe}], 0x28}, 0x4c001)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f0000000040)={0x1000000})
fallocate(r5, 0x1, 0x0, 0x1000000)
landlock_restrict_self(0xffffffffffffffff, 0xc)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r7 = eventfd2(0x0, 0x0)
r8 = dup2(r7, r6)
write$eventfd(r7, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000000)={0x0, r6})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/77, 0x0, 0xb000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000000c0)={0x1, r8})
close_range(r0, 0xffffffffffffffff, 0x0)

7m20.69558481s ago: executing program 2 (id=294):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xffff, 0xc8, 0x2, 0x8, 0x5c, 0x2, 0x1, 0x7, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

7m18.662416806s ago: executing program 32 (id=294):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000140)={0x1, 0x1, 0x9, 0xffff, 0xc8, 0x2, 0x8, 0x5c, 0x2, 0x1, 0x7, 0x1})
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})

3m54.346033397s ago: executing program 1 (id=725):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032757c3"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4)
setns(0xc9, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000100), 0x12)
listen(r3, 0x1)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000000201040101"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4)
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x97) (fail_nth: 3)

3m52.991447726s ago: executing program 1 (id=730):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0xfd8b, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdir(&(0x7f0000000280)='./file0\x00', 0x111)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x6, 0x5c823ea6e8df19c3, 0x66d, 0xfffc, 0x2, 0x6, 0x0, 0x0, 0x40, 0x1}}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20140, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x8})
ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000200))
close(r4)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000b80)={0x2, 0x9, 0x6, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbff}, 0x10}}, 0x0)
kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b00)={0x2, @pix_mp={0x6, 0x40000c, 0x0, 0x7, 0x3, [{0x2319, 0x3}, {0xfffffffd, 0x7}, {0x6, 0xadf}, {0x5, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0xfffffffe, 0x1}, {0x7402}], 0x0, 0x9, 0x1, 0x2, 0x1}})

3m51.883383276s ago: executing program 1 (id=733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000001c0)=0x8, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac00000000010505802c00018014000300fe8000000000000000000000000000bb14000400ff020000000000000000028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000fa8000000000000400000aa080007400000000018000d8014000400ff010000000000000000000000000001000000000000000000000000000000ccbd777810a1894c8834c9246122"], 0xac}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="620eb23748c4c3074b51", @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000400a1110140000000000010902270001010080320904"], 0x0)

3m49.579880728s ago: executing program 1 (id=739):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120110014d07df40cc0550337d4a0102030109021b0002011c70060904a507006adadb040904"], 0x0)
mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000004e40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0xb0, 0x3, "", [{{0x9, 0x4, 0x0, 0x15, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x90}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x26, 0x0, 0x0, 0x20, 0x3}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x7, 0xfe, 0x7}]}, 0x1, [{0x9d, &(0x7f00000000c0)=@string={0x9d, 0x3, "dcfeeca5e76cb227b2683f847cf30c6282a0726bc68b493c719c671b64618a8d92a3d0bee88ba62cbe4911cf78673079dd9e98be679b209b29916f0787bb31e92dea2582ef42a0de6467f308f99ae5e06d0a62374376fe019bb9ab221ad1c908503dd11547936464147e18ee3ceaa45badcc388034189626dece145d8515dcd98abd51aba073127c21a0b0327f60b17957d4eba6b2cc7e958e80ca"}}]})
syz_usb_control_io$printer(r0, 0x0, 0x0)
close(0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)

3m44.907593741s ago: executing program 1 (id=748):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)

3m44.344192565s ago: executing program 1 (id=752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x14}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002880)=""/264, 0x108}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/136, 0x88}], 0x5}, 0x101}], 0x3, 0x20, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)

3m43.384937161s ago: executing program 33 (id=752):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3}, 0x14}, {{0x0, 0x0, 0x0}, 0x98fd}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/65, 0x41}, {&(0x7f0000002880)=""/264, 0x108}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000380)=""/136, 0x88}], 0x5}, 0x101}], 0x3, 0x20, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084)

36.11403034s ago: executing program 0 (id=1418):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r2 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000280))
fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1)
r3 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r3, 0x105, 0x10000839, r1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110239fa3030c5f43106d04b8081df801020301090212000108040003090b00f700732eb981"], &(0x7f0000000f00)={0x0, 0x0, 0xfffffffffffffe6b, 0x0})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x7, 0x35314142, 0x35315852, 0x7, [{0x0, 0xdf}, {0x5, 0xfffffffe}, {0x1002}, {0x8}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0xfffff, 0x13ff}], 0x0, 0x0, 0x7}})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

32.871392277s ago: executing program 0 (id=1433):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000001300)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x33, 0x0, @local, @loopback={0x20010000}}}}}}}, 0x6e)

32.713252134s ago: executing program 0 (id=1434):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0xcf, 0x0, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000540)={0x0, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000000100", 0x0, 0xfffffffc, 0x1, 0xdf, 0xba994d21c8ea99c1, 0x2})
r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0xfffffcc0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRES8=r5], 0x5c}, 0x1, 0x0, 0x0, 0x48800}, 0x20040011)
r6 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe)
r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r9, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf90000000900030000000000ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
syz_extract_tcp_res(&(0x7f00000001c0), 0xd836, 0x6)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ac0)={0x2, &(0x7f0000000a80)=[{0x20, 0x0, 0x0, 0xfffff018}, {0x16}]}, 0x10)
pipe2(&(0x7f0000000000), 0x4880)

32.054734469s ago: executing program 0 (id=1437):
timer_create(0x0, 0x0, 0x0) (async)
io_setup(0x80000000, &(0x7f0000000740)=<r0=>0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) (async)
timer_create(0x5, &(0x7f0000000100)={0x0, 0x23, 0x2, @thr={&(0x7f0000000000), &(0x7f0000000040)="9067194a0d4b5fde59f8d71e89c05540c190c7c17eb150fc2b721972466640510c8b28023c1418951f8cdaa86814c73951e0ffed976cb19d6a4ebd6af301402dd5ab678ac747ce2b561aa63dd42078273e06880f3bb36dd491f4fb919cf2"}}, &(0x7f0000000140)=<r1=>0x0)
timer_gettime(r1, &(0x7f0000000300)) (async)
r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001340)={&(0x7f0000001300)})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0xfffffffffffffd82, 0x0}) (async)
timer_getoverrun(r1)
close_range(r3, 0xffffffffffffffff, 0x2) (async)
io_submit(r0, 0x0, &(0x7f0000000f00))
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000001c0)={0x2, @raw_data="2fa44395a0ec92456cb9340062e0bbd2cfa8ab8f8325ed1d1b6e0d5d70c8c614dd2f61908ae9ea9f27b975562ea7373086628f09a73a74dac42f71ab72bafe081ab14bfb9c6f10db8ebdc796b9a84bb1a941080f7b850f6c425fae03194e9d5975c6e187f0a6591f2adb35c5c7289580ee6e4927b97a93aa6db5ea95a7a57b2007337c7c7a9b9162068ec51cded3530bf2803504599bbc402a97461c36294bc56a7dbef42c86321e99a9aea76324a7144b2cd1b68d4fa1b7392f830c2d4ea5d98229b97963c8e71c"})
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c000b80080009004c"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084)

31.933617973s ago: executing program 0 (id=1438):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402312073f00000000000109022400010000a00009040000020300020009210000000122370009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="e01135000000370cb2edc459c3fd7a3707f46961c8cc0bfac9fd8394fd91b1d7440e02c77b07eeba71938a1cd8f2d0ac3e5c54b6c6e2ca55d866efe2a8"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000d00)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000000c80)=[{{&(0x7f00000001c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000000300)=""/27, 0x1b}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f00000003c0)=""/3, 0x3}, {&(0x7f0000000440)=""/91, 0x5b}, {&(0x7f00000005c0)=""/252, 0xfc}, {&(0x7f00000006c0)=""/4, 0x4}, {&(0x7f0000000700)=""/185, 0xb9}, {&(0x7f00000007c0)=""/118, 0x76}, {&(0x7f0000000840)}], 0xa, &(0x7f0000000940)=""/241, 0xf1}, 0x8}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/139, 0x8b}], 0x1, &(0x7f0000000b40)=""/211, 0xd3}, 0x4000000}], 0x2, 0x10043, &(0x7f0000000d40)={r3, r4+10000000})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01032757c3"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4)
setns(0xc9, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r5, &(0x7f00000004c0)="3cbeb44afbf2d93150280598160dcae2a440a239832cf59bdda8f008b35b684de2278c0d123911f709e334049d37e87ad219b0886c224477bbed21430021634d5cb626c969a79a9ea5fba4abce278a9e8fb78ac10f7be0fcee270b6de675538bb4646609591b2dce538f2197c2c4f5c16e1dffba", 0x74)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r6, &(0x7f0000000100), 0x12)
listen(r6, 0x1)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0xae8b4000)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000000201040101"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4)
write$tun(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x97)

29.415296659s ago: executing program 0 (id=1451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='f=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

29.181002089s ago: executing program 34 (id=1451):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='f=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.nlink\x00')

4.484402723s ago: executing program 6 (id=1572):
creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xae)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000001c00003d"], 0x22)

4.131141449s ago: executing program 6 (id=1574):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10000, 0xfffffffd, 0x5], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea9, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_PANTHOR_BO_SET_LABEL(0xffffffffffffffff, 0xc010644d, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)='!+@\x00'})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x7f, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0xfd7f0000)

3.891416892s ago: executing program 3 (id=1577):
socket$netlink(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x842, 0x0)
fcntl$setstatus(r0, 0x4, 0x2000)
r1 = openat(0xffffffffffffff9c, 0x0, 0x20d42, 0x4)
fcntl$setstatus(r1, 0x4, 0x42000)
openat$dir(0xffffffffffffff9c, 0x0, 0x2080, 0x4)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02)
ioctl$MEMWRITEOOB64(r2, 0xc0184d15, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x0, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x0, 0x0, 0x2}]}, 0x38}}, 0x0)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00')
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x13, &(0x7f00000001c0)={&(0x7f00000005c0)={0x28, 0x1, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x8, 0xa, '\x00\x00\x00\x00'}]}, 0x28}}, 0x0)

3.673054778s ago: executing program 3 (id=1578):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0xfffff96a, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
recvmmsg(r1, &(0x7f0000004100)=[{{&(0x7f00000001c0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000000580)=""/233, 0xe9}, {&(0x7f0000000680)=""/123, 0x7b}, {&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000800)=""/80, 0x50}, {&(0x7f0000000880)=""/165, 0xa5}, {&(0x7f0000000940)=""/255, 0xff}, {&(0x7f0000000a40)=""/5, 0x5}, {&(0x7f0000000a80)=""/152, 0x98}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0xa, &(0x7f0000002c00)=""/115, 0x73}, 0x81}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002c80)=""/157, 0x9d}, {&(0x7f0000002d40)=""/227, 0xe3}, {&(0x7f0000002e40)=""/181, 0xb5}, {&(0x7f0000002f00)=""/243, 0xf3}], 0x4, &(0x7f0000003040)=""/238, 0xee}}, {{&(0x7f0000003140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003600)=[{&(0x7f0000004040)=""/164, 0xa4}, {&(0x7f0000003280)=""/169, 0xa9}, {&(0x7f0000003340)=""/224, 0xe0}, {&(0x7f00000043c0)=""/211, 0xd3}, {&(0x7f0000003540)=""/165, 0xa5}], 0x5, &(0x7f0000003680)=""/46, 0x2e}, 0xffff}, {{&(0x7f00000036c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003740)=""/172, 0xac}, {&(0x7f0000003800)=""/255, 0xff}, {&(0x7f0000003900)=""/26, 0x1a}, {&(0x7f0000003940)=""/122, 0x7a}, {&(0x7f00000039c0)=""/24, 0x18}, {&(0x7f0000003a00)=""/177, 0xb1}, {&(0x7f0000003ac0)=""/32, 0x20}, {&(0x7f0000003b00)=""/167, 0xa7}, {&(0x7f0000003bc0)=""/136, 0x88}, {&(0x7f0000003c80)=""/84, 0x54}], 0xa, &(0x7f0000000240)=""/69, 0x45}, 0x1}, {{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000003e00)=""/149, 0x95}], 0x1, &(0x7f0000003f00)=""/28, 0x1c}, 0x3}, {{&(0x7f0000003f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003fc0)=""/26, 0x1a}], 0x1, &(0x7f0000003440)=""/148, 0x94}, 0x8}], 0x6, 0x10000, &(0x7f0000004280)={0x0, 0x989680})
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
lsm_list_modules(0x0, 0x0, 0x10000000)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000005c0)={0x7, 0x80000001, 0x1}, 0xc)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc010000000101040000000000000000000000066400068008000200ac1414bb0c000380060001004e21000008000200ac1414bb14000400fc01000000000000000000000000000014000500fc0000000000000000000000000000001c000380060001004e220000060001004e230000060002004e2400005c000e800c00028005000100060000001400018008000100ac1e000108000200000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000bd0000000000aa0c000280050001002f000000100005800a000100482e323435000000080015400000000408000340000020001c001700000000050000000300000081000000080000036100000001140005800f0001006e657462696f732d6e730000ac000e8006000340000400000c000780050001002e0000000c00028005000100110000000c000280050001001700000006000340000000000c00028005000100210000002c00018014000300fe80000000000000000000000000002c14000400ff0100000000000000000000000000012c0001801400030000000000000000000000ffffffffffff14000400fe80000000000000000000000000002b060003400002000006000340000100002c000f8008000140000000050800014000000bf008000240fffffff7080001400000000208000340000000ff"], 0x1fc}, 0x1, 0x0, 0x0, 0x80}, 0x30004850)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x10201, 0x0, 0xfee00000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0xfff)
pipe2$watch_queue(&(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f00000002c0)={0x1, 0x0, [{0x75f, 0x4, 0x1, [0x6000000, 0x1, 0x4, 0x1104, 0xffff, 0xa, 0x7, 0x101]}]})
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$EVIOCSCLOCKID(r8, 0x400445a0, &(0x7f0000000780)=0xfffffffe)
r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_SIOCOUTQ(r9, 0x5411, &(0x7f00000000c0))
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
write$cgroup_int(r3, &(0x7f0000000040)=0x900, 0x12)

3.623752357s ago: executing program 6 (id=1579):
r0 = socket$kcm(0x21, 0x2, 0x2)
setsockopt(r0, 0x110, 0x81, 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket(0x2d, 0x2, 0x1ff) (async)
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) (async)
mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffff7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x7fd, 0x3, 0x33524742, 0xb5cecfb7e8bf2fbd, 0x1, 0x4, 0x7, 0x6c8e, 0x0, 0x6, 0x0, 0x2}})
r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) (async)
io_setup(0x1fe, &(0x7f0000001180)=<r5=>0x0)
io_submit(r5, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r4, &(0x7f0000000000), 0x100000}])
bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)
r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0)
syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000001340)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="40010100000053da2af48ef026bb3185b99f173303e1dc8956f05354266552e86da1b88058b342dfe764b8e949e70f8d9780ec9be43cfe11"], 0x0, 0x0})

3.35995835s ago: executing program 3 (id=1580):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r2, 0x5)
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00000800010003000000140008004500003c000000004084ca2502020202ac14000104d2321014000000000000000100001c"], 0x4a)

3.200040894s ago: executing program 3 (id=1581):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@multiplanar_userptr={0xffff, 0xa, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x3, 0xc, 0x3a, 0xa, 0xdb, 0x4, "20eb16a5"}, 0x10000, 0x2, {&(0x7f0000000100)=[{0x400, 0x80000001, {0x0}, 0xc0}, {0x0, 0x17, {0x0}, 0x3}]}, 0x4})
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x200011, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x30, 0x6, "a2a72e7d929f"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.137423025s ago: executing program 4 (id=1582):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x12)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r4)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000440)={0x40, 0x2, 0x1}, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4)
sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r8, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x40)
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r7, 0xc0086448, &(0x7f00000005c0))
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r4)
sendmsg$TIPC_NL_KEY_FLUSH(r7, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x190, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdb4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x787}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1ff, @private1, 0x81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7a78}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc459}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x391}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3e38}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x84}, 0x20008000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000008c0)={0x10002, 0x6, 0x2000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r10 = openat$cgroup_ro(r7, &(0x7f0000000900)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000940)={0x0, 0x1, 0x8, 0x3, 0xffffffd2, 0x1})
ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000980)={0x400, 0x5dc})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r10, 0xc01864cd, &(0x7f0000000a40)={&(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x6, 0xde, 0x19, 0x26, 0xb, 0x3, 0xf7a, 0x8001], 0x1, 0x1})
sendmsg$tipc(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="ee495f947f3717f05e053a5efbd5666ca6efc40cb2261b184d4d9f24f3470cd95e24021d2ae7cf70d4de69856b442ac5207dd948f9100790caa9e3b2bb9348237aab7ec3b6a9c7fc968538029520c3c871", 0x51}], 0x1, &(0x7f0000000b40)="c538706c0cdea409cd711f6c6e6b29fc40c9e7f1d5d98bd7ef125bcd1c15d4b24dd0e3814323838ddf707e3beb3aa4948db73c2321f6963f98acbb1a5eba6d0ad7638a3a37a7e730f0f5da9fb2b610864bdf6404f3d88333ccfa3154f3c3f46c5aa672f7907fee995574133e9a18e2d0ca25148669f625", 0x77, 0x4080001}, 0x24000040)
read(r1, &(0x7f0000000c00)=""/137, 0x89)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x70}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x28, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x59}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3000000}]}, 0x28}}, 0x54)
ioctl$DVB_DEMUX_DMX_DQBUF(r7, 0xc0186f40, &(0x7f0000000dc0)={0x4, 0x40, 0x4, 0x9, 0x10, 0xa})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000f00)=@multiplanar_userptr={0x2, 0x0, 0x4, 0x4000, 0x3, {0x77359400}, {0x5, 0x0, 0x6, 0x2, 0xb, 0xa, "83f18075"}, 0xfffffffb, 0x2, {&(0x7f0000000e80)=[{0x4, 0x6, {&(0x7f0000000e00)}, 0x5}, {0x4a, 0xa9, {&(0x7f0000000e40)}, 0x9}]}, 0x400, 0x0, r10})
ioctl$BLKFRASET(r10, 0x1264, &(0x7f0000000f80)=0x900)
ioctl$BLKSECTGET(r7, 0x1267, &(0x7f0000000fc0))

2.93603709s ago: executing program 4 (id=1583):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, 0x0, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a00170000ff00040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1)

2.876357634s ago: executing program 4 (id=1584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000032006e0100003801000001")

2.75334844s ago: executing program 4 (id=1585):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4000000}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x58}}, 0x0)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

2.203588407s ago: executing program 4 (id=1586):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x2000000, 0x4, {0x9, 0x5, 0x9e7, 0x9}})

2.103856038s ago: executing program 5 (id=1587):
r0 = socket(0x11, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x13}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}, 0x4000000}], 0x1, 0x24044015)

2.053283012s ago: executing program 4 (id=1588):
r0 = syz_open_procfs(0xffffffff, &(0x7f0000000080)='clear_refs\x00')
write(r0, &(0x7f00000000c0)='1\x00', 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x6, 0x44, 0x10000000}, 0x10)
fchdir(r1)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x202a048, &(0x7f0000000180))
syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c032090400000102020100052400100105240600010705810340000a09040100020a0000000705020240000007058202400000"], 0x0)

1.963958972s ago: executing program 6 (id=1589):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x100)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000340)={@remote, r2}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x140)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xff0f, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f7feff000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000300390001000400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0)
write(r5, &(0x7f0000001640)="8b", 0x1)

1.810508587s ago: executing program 5 (id=1590):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
set_mempolicy(0x3, 0x0, 0x6)
listen(r0, 0x6)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e})
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000280)=0x100, 0x4)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x6, 0x80, 0x0, 0x9, 0x9}, {0x3, 0x0, 0x52, 0x6, 0x15, 0x8}], ['\x00', '\x00']})

1.632247946s ago: executing program 6 (id=1591):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000240)=0x2)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r3)
connect$unix(r3, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000040)=0x100000001, 0x4)
poll(&(0x7f0000000080)=[{r3, 0x1040}], 0x1, 0x0)
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/29, 0x1d}], 0x1, 0x9, 0x80000001)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x100, 0x400, 0x3, 0x3, 0x2, 0x36, 0x100000001, 0x1, 0x6, 0x8001, 0x6, 0x8, 0x1, 0x5, 0xba49], 0x5000, 0x10})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0)
write(r6, &(0x7f0000000280)="707265765f73746174652e66756e6374696f6e203d3d78d0d00ee6bb0a04", 0x1e)
sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x2c}}, 0x8000)
r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0x4, 0x1f8, 0xfffffffffffffffe, 0xffffffdfefffff17, 0x3, 0x0, 0x1, 0x4]}})
ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f00000001c0)=""/63)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1.470923151s ago: executing program 5 (id=1592):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x80)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8}, 0x20)
r1 = fcntl$dupfd(r0, 0x406, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f}}, 0x20)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="44000000100001040000000000000000000000000fff00002100000000000000240012000a00010076786c616e00000014000200080000207b00000008000f0017c10304", 0x44}], 0x1}, 0x0)

1.374083918s ago: executing program 3 (id=1593):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a5ac300140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

858.052963ms ago: executing program 3 (id=1594):
socketpair$unix(0x1, 0x0, 0x0, 0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1000, 0xffffffffffffffff, 0x0) (async)
fanotify_mark(0xffffffffffffffff, 0x0, 0x1000, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x2) (async)
mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x2)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./lower1/dir1\x00', 0x1ff)
mount(0x0, &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='overlay\x00', 0x0, &(0x7f0000000380)='lowerdir=lower1:lower2,upperdir=upper,workdir=work,index=on,nfs_export=on,uuid=off\x00')
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x0, 0xfffffff9})
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102787dc340450c0180b45d0102030109021200010106c0040904b1b9005f895710d3e0a8ac4636c68e32ccdfdd775be859465ae673fee8acc401bba41280b58510bc8d8addb6cca05474e7ab21d514e8e8c3c90a35bfaa8ef24971b7a0e1ca64b5851b3740aaa1c65a27881f1ca4f0d6345dc61af910009d1e9a897d4f2051814e1f9601a2870d06c5091a8607f27cf874b95e925542d557a849ae9ce16d1b84"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010102787dc340450c0180b45d0102030109021200010106c0040904b1b9005f895710d3e0a8ac4636c68e32ccdfdd775be859465ae673fee8acc401bba41280b58510bc8d8addb6cca05474e7ab21d514e8e8c3c90a35bfaa8ef24971b7a0e1ca64b5851b3740aaa1c65a27881f1ca4f0d6345dc61af910009d1e9a897d4f2051814e1f9601a2870d06c5091a8607f27cf874b95e925542d557a849ae9ce16d1b84"], &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0})
mkdirat(r1, &(0x7f0000000000)='./file1\x00', 0x188)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526) (async)
inotify_add_watch(r2, &(0x7f0000000240)='.\x00', 0x60000526)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8)
socket$inet6(0xa, 0x800000000000002, 0x0) (async)
socket$inet6(0xa, 0x800000000000002, 0x0)

487.569096ms ago: executing program 5 (id=1595):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0188beffff00140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

190.386092ms ago: executing program 5 (id=1596):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x44, r1, 0x801, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f400"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x8080)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000000)={0x2, 0x0, 0x4, {0x9, 0x5, 0x9e7, 0x9}})
ftruncate(r0, 0x6)

95.13694ms ago: executing program 6 (id=1597):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) (async)
mount$overlay(0x0, &(0x7f0000000040)='./mnt/test\x00', &(0x7f0000000080), 0x1810080, &(0x7f00000000c0)={[{@userxattr}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) (async)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff)

0s ago: executing program 5 (id=1598):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10)
write$nbd(r0, &(0x7f0000000180)={0x67446698, 0xffe4, 0x4, 0x0, 0x4}, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0)

kernel console output (not intermixed with test programs):

vice number 90 using dummy_hcd
[  552.264339][ T6572] usb 1-1: unable to get BOS descriptor or descriptor too short
[  552.264390][ T6572] usb 1-1: New USB device found: idVendor=0582, idProduct=9b12, bcdDevice=0.40
[  552.267443][ T6572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  552.267500][ T6572] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 8
[  552.267524][ T6572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  552.267546][ T6572] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0
[  552.331291][ T6572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.331320][ T6572] usb 1-1: Product: syz
[  552.331343][ T6572] usb 1-1: Manufacturer: syz
[  552.331358][ T6572] usb 1-1: SerialNumber: syz
[  552.359833][T10347] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  552.528462][ T5620] Bluetooth: hci0: unexpected event for opcode 0x0c12
[  552.588315][ T6572] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  552.588440][ T6572] usb 1-1: MIDIStreaming interface descriptor not found
[  552.608193][ T6550] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  552.741247][ T6572] usb 1-1: USB disconnect, device number 90
[  552.780818][ T6550] usb 6-1: New USB device found: idVendor=047e, idProduct=ffff, bcdDevice=0.00
[  552.781502][ T6550] usb 6-1: config 0 has no interfaces?
[  552.781541][ T6550] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.822924][ T6550] usb 6-1: config 0 descriptor??
[  552.953027][ T9186] udevd[9186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  553.216930][ T6550] usb 6-1: USB disconnect, device number 21
[  553.253390][T10368] libceph: resolve '4' (ret=-3): failed
[  553.408858][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1261'.
[  553.832171][ T6565] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  553.945276][T10386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.982617][ T6565] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  553.986818][ T6565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.986850][ T6565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.986873][ T6565] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  553.986914][ T6565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.995912][ T6565] usb 4-1: config 0 descriptor??
[  554.205754][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.212080][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.220597][T10379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.223913][T10379] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.444279][ T6565] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  554.444316][ T6565] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  554.444341][ T6565] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  554.444367][ T6565] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  554.514807][ T6565] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  554.618980][ T9433] udevd[9433]: 'fido_id' [10401] terminated by signal 11 (Segmentation fault)
[  555.040089][ T6565] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  555.190791][ T6565] usb 6-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=83.9c
[  555.192484][ T6565] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  555.195758][ T6565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.195781][ T6565] usb 6-1: Product: syz
[  555.195796][ T6565] usb 6-1: Manufacturer: syz
[  555.195811][ T6565] usb 6-1: SerialNumber: syz
[  555.227672][ T6572] usb 1-1: new full-speed USB device number 91 using dummy_hcd
[  555.257962][ T6565] usb 6-1: config 0 descriptor??
[  555.279275][ T6565] ims_pcu 6-1:0.0: Zero length descriptor
[  555.279331][ T6565] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22
[  555.403827][ T6572] usb 1-1: New USB device found: idVendor=0df6, idProduct=0056, bcdDevice=d2.4b
[  555.405223][ T6572] usb 1-1: config 127 has an invalid interface number: 57 but max is 0
[  555.405275][ T6572] usb 1-1: config 127 has no interface number 0
[  555.405348][ T6572] usb 1-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  555.408402][ T6572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.408425][ T6572] usb 1-1: Product: syz
[  555.408440][ T6572] usb 1-1: Manufacturer: syz
[  555.408454][ T6572] usb 1-1: SerialNumber: syz
[  555.476021][T10408] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  555.514653][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.516466][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.553013][ T6565] usb 6-1: USB disconnect, device number 22
[  555.879445][T10408] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  555.930992][ T6565] usb 4-1: reset high-speed USB device number 74 using dummy_hcd
[  556.319096][ T6572] asix 1-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  556.319128][ T6572] asix 1-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  556.319362][ T6572] asix 1-1:127.57: probe with driver asix failed with error -71
[  556.370313][ T6572] usb 1-1: USB disconnect, device number 91
[  556.402157][T10052] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  556.485721][T10414] netlink: ct_mark mask cannot be 0
[  556.485755][T10414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.549882][T10052] usb 6-1: Using ep0 maxpacket: 32
[  556.552394][T10052] usb 6-1: unable to get BOS descriptor or descriptor too short
[  556.552448][T10052] usb 6-1: New USB device found: idVendor=041e, idProduct=3048, bcdDevice=0.40
[  556.553158][T10052] usb 6-1: config 0 has no interfaces?
[  556.558026][T10052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.558051][T10052] usb 6-1: Product: syz
[  556.558066][T10052] usb 6-1: Manufacturer: syz
[  556.558081][T10052] usb 6-1: SerialNumber: syz
[  556.618856][T10052] usb 6-1: config 0 descriptor??
[  556.676549][T10417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1277'.
[  556.678807][T10417] FAULT_INJECTION: forcing a failure.
[  556.678807][T10417] name failslab, interval 1, probability 0, space 0, times 0
[  556.678837][T10417] CPU: 1 UID: 0 PID: 10417 Comm: syz.3.1277 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  556.678866][T10417] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  556.678874][T10417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  556.678887][T10417] Call Trace:
[  556.678895][T10417]  <TASK>
[  556.678904][T10417]  dump_stack_lvl+0xe8/0x150
[  556.678937][T10417]  should_fail_ex+0x3eb/0x540
[  556.678963][T10417]  ? __pfx_sock_alloc_inode+0x10/0x10
[  556.678991][T10417]  should_failslab+0xa8/0x100
[  556.679019][T10417]  ? __pfx_sock_alloc_inode+0x10/0x10
[  556.679044][T10417]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  556.679069][T10417]  ? sock_alloc_inode+0x2c/0x1a0
[  556.679093][T10417]  ? sock_alloc_inode+0x2c/0x1a0
[  556.679123][T10417]  ? __pfx_sock_alloc_inode+0x10/0x10
[  556.679150][T10417]  sock_alloc_inode+0x2c/0x1a0
[  556.679177][T10417]  ? __pfx_sock_alloc_inode+0x10/0x10
[  556.679201][T10417]  alloc_inode+0x6a/0x1b0
[  556.679223][T10417]  __sock_create+0x127/0xac0
[  556.679261][T10417]  __sys_socketpair+0x127/0x5e0
[  556.679298][T10417]  __x64_sys_socketpair+0x9b/0xb0
[  556.679338][T10417]  do_syscall_64+0x166/0x520
[  556.679362][T10417]  ? trace_irq_disable+0x3b/0x140
[  556.679385][T10417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.679406][T10417]  ? clear_bhb_loop+0x70/0xc0
[  556.679430][T10417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.679452][T10417] RIP: 0033:0x7f5ba459e159
[  556.679471][T10417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  556.679489][T10417] RSP: 002b:00007f5ba5395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035
[  556.679512][T10417] RAX: ffffffffffffffda RBX: 00007f5ba4825fa0 RCX: 00007f5ba459e159
[  556.679528][T10417] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001
[  556.679541][T10417] RBP: 00007f5ba463506b R08: 0000000000000000 R09: 0000000000000000
[  556.679554][T10417] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  556.679567][T10417] R13: 00007f5ba4826038 R14: 00007f5ba4825fa0 R15: 00007fff9c27e9a8
[  556.679599][T10417]  </TASK>
[  556.679610][T10417] socket: no more sockets
[  556.938131][ T6573] usb 4-1: USB disconnect, device number 74
[  557.018009][ T6565] usb 6-1: USB disconnect, device number 23
[  557.718454][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1286'.
[  558.287238][T10455] binder: Failure when writing BR_NOOP at beginning of buffer.
[  558.287258][T10455] binder: Read failure Err(EFAULT) in pid:311
[  558.688783][T10469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'.
[  558.730261][ T6565] usb 6-1: new full-speed USB device number 24 using dummy_hcd
[  558.860626][ T6565] usb 6-1: device descriptor read/64, error -71
[  558.949891][ T6573] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[  559.099726][ T6565] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  559.100451][ T6573] usb 4-1: Invalid ep0 maxpacket: 64
[  559.139739][T10052] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  559.229861][ T6565] usb 6-1: device descriptor read/64, error -71
[  559.229933][ T6573] usb 4-1: new low-speed USB device number 76 using dummy_hcd
[  559.291152][T10052] usb 1-1: New USB device found: idVendor=045e, idProduct=0775, bcdDevice=1.00
[  559.292578][T10052] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  559.294513][T10052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  559.294537][T10052] usb 1-1: Product: syz
[  559.294551][T10052] usb 1-1: Manufacturer: syz
[  559.342471][ T6565] usb usb6-port1: attempt power cycle
[  559.420807][ T6573] usb 4-1: Invalid ep0 maxpacket: 64
[  559.421852][ T6573] usb usb4-port1: attempt power cycle
[  559.525296][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1294'.
[  559.568614][ T6550] usb 1-1: USB disconnect, device number 92
[  559.679710][ T6565] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  559.702881][ T6565] usb 6-1: device descriptor read/8, error -71
[  559.759713][ T6573] usb 4-1: new low-speed USB device number 77 using dummy_hcd
[  559.781943][ T6573] usb 4-1: Invalid ep0 maxpacket: 64
[  559.911134][ T6573] usb 4-1: new low-speed USB device number 78 using dummy_hcd
[  559.932349][ T6573] usb 4-1: Invalid ep0 maxpacket: 64
[  559.932626][ T6573] usb usb4-port1: unable to enumerate USB device
[  559.951753][ T6565] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  559.980415][ T6565] usb 6-1: device descriptor read/8, error -71
[  560.091048][ T6565] usb usb6-port1: unable to enumerate USB device
[  561.329647][ T6565] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  561.480434][ T6565] usb 1-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  561.483612][ T6565] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  561.483639][ T6565] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  561.483659][ T6565] usb 1-1: config 220 has no interface number 2
[  561.483726][ T6565] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  561.483751][ T6565] usb 1-1: config 220 interface 0 has no altsetting 0
[  561.483768][ T6565] usb 1-1: config 220 interface 76 has no altsetting 0
[  561.483783][ T6565] usb 1-1: config 220 interface 1 has no altsetting 0
[  561.486215][ T6565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.486239][ T6565] usb 1-1: Product: syz
[  561.486254][ T6565] usb 1-1: Manufacturer: syz
[  561.486268][ T6565] usb 1-1: SerialNumber: syz
[  561.809341][T10493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  561.820741][T10493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  561.862718][ T6565] usb 1-1: selecting invalid altsetting 0
[  561.875007][ T6565] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  561.875042][ T6565] uvcvideo 1-1:220.0: No valid video chain found.
[  561.907265][ T6565] usb 1-1: selecting invalid altsetting 0
[  561.907294][ T6565] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  561.935949][ T6565] usb 1-1: USB disconnect, device number 93
[  562.309559][ T6573] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  562.439961][ T6573] usb 4-1: device descriptor read/64, error -71
[  562.457304][T10499] loop0: detected capacity change from 0 to 1
[  562.493479][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  562.493539][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  562.541824][T10499] ldm_validate_privheads(): Disk read failed.
[  562.541909][T10499]  loop0:
[  562.541931][T10499] loop0: partition table partially beyond EOD, truncated
[  562.700737][ T6573] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  562.829600][ T6573] usb 4-1: device descriptor read/64, error -71
[  562.869563][ T6572] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  562.940765][ T6573] usb usb4-port1: attempt power cycle
[  563.019696][ T6572] usb 6-1: Using ep0 maxpacket: 32
[  563.020979][ T6572] usb 6-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c
[  563.022234][ T6572] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  563.024721][ T6572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.024745][ T6572] usb 6-1: Product: syz
[  563.024760][ T6572] usb 6-1: Manufacturer: syz
[  563.024775][ T6572] usb 6-1: SerialNumber: syz
[  563.083010][ T6572] usb 6-1: config 0 descriptor??
[  563.085282][T10502] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  563.088488][ T6572] hub 6-1:0.0: bad descriptor, ignoring hub
[  563.088513][ T6572] hub 6-1:0.0: probe with driver hub failed with error -5
[  563.130952][ T6572] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39
[  563.280210][ T6573] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  563.301527][ T6573] usb 4-1: device descriptor read/8, error -71
[  563.316319][    C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  563.316352][ T6572] usb 6-1: USB disconnect, device number 28
[  563.483717][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.485503][T10508] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  563.539530][ T6573] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  563.560515][ T6573] usb 4-1: device descriptor read/8, error -71
[  563.670199][ T6573] usb usb4-port1: unable to enumerate USB device
[  563.920438][ T6572] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  564.069474][ T6572] usb 1-1: Using ep0 maxpacket: 8
[  564.070371][ T6572] usb 1-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  564.071805][ T6572] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  564.071830][ T6572] usb 1-1: config 0 has no interface number 0
[  564.074357][ T6572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.074380][ T6572] usb 1-1: Product: syz
[  564.074394][ T6572] usb 1-1: Manufacturer: syz
[  564.074409][ T6572] usb 1-1: SerialNumber: syz
[  564.078922][ T6572] usb 1-1: config 0 descriptor??
[  564.329265][ T6572] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  564.329653][ T6572] uvcvideo 1-1:0.31: Entity type for entity Output 32774 was not initialized!
[  564.363215][ T6572] usb 1-1: USB disconnect, device number 94
[  564.799106][T10517] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1312'.
[  564.832975][T10517] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1312'.
[  564.965025][T10523] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1314'.
[  565.243571][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.295702][ T6572] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  565.307966][ T6572] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  565.310956][   T51] wlan1: send auth to 08:02:11:00:00:00 (try 2/3)
[  565.311397][   T51] wlan1: send auth to 08:02:11:00:00:00 (try 3/3)
[  565.311510][   T51] wlan1: authentication with 08:02:11:00:00:00 timed out
[  565.355806][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.370035][T10530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.378454][T10525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.673020][T10539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1320'.
[  565.930358][ T6572] usb 4-1: new full-speed USB device number 83 using dummy_hcd
[  566.083772][ T6572] usb 4-1: New USB device found: idVendor=1e7d, idProduct=3232, bcdDevice=0.00
[  566.086569][ T6572] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  566.086600][ T6572] usb 4-1: config 0 interface 0 has no altsetting 0
[  566.086635][ T6572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.104801][ T6572] usb 4-1: config 0 descriptor??
[  566.604004][T10551] 9p: Could not find request transport: xen
[  566.744710][ T6572] usbhid 4-1:0.0: can't add hid device: -71
[  566.744823][ T6572] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  566.762167][ T6572] usb 4-1: USB disconnect, device number 83
[  566.808762][T10556] openvswitch: netlink: Flow key attr not present in new flow.
[  567.569395][ T5757] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  567.695470][T10574] input: syz1 as /devices/virtual/input/input40
[  567.709406][ T5757] usb 6-1: device descriptor read/64, error -71
[  567.749415][ T6550] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  567.899849][ T6550] usb 4-1: Using ep0 maxpacket: 8
[  567.902651][ T6550] usb 4-1: unable to get BOS descriptor or descriptor too short
[  567.902706][ T6550] usb 4-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  567.905292][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  567.905323][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  567.905347][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  567.905370][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  567.905397][ T6550] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  567.905421][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  567.905444][ T6550] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  567.905465][ T6550] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  567.933292][ T6550] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.933321][ T6550] usb 4-1: Product: syz
[  567.933337][ T6550] usb 4-1: Manufacturer: syz
[  567.933352][ T6550] usb 4-1: SerialNumber: syz
[  567.976944][ T5757] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  568.053416][ T6550] usb 4-1: config 0 descriptor??
[  568.054699][T10572] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  568.062855][ T6550] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  568.080226][ T6565] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  568.186091][ T5757] usb 6-1: device descriptor read/64, error -71
[  568.231783][ T6565] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  568.233941][ T6565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  568.233971][ T6565] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  568.233992][ T6565] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  568.234043][ T6565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.238864][ T6565] usb 1-1: config 0 descriptor??
[  568.369370][ T5757] usb usb6-port1: attempt power cycle
[  568.470562][T10577] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1330'.
[  568.633391][ T6550] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  568.668509][T10579] FAULT_INJECTION: forcing a failure.
[  568.668509][T10579] name failslab, interval 1, probability 0, space 0, times 0
[  568.668543][T10579] CPU: 1 UID: 0 PID: 10579 Comm: syz.4.1332 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  568.668574][T10579] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  568.668583][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  568.668600][T10579] Call Trace:
[  568.668609][T10579]  <TASK>
[  568.668619][T10579]  dump_stack_lvl+0xe8/0x150
[  568.668652][T10579]  should_fail_ex+0x3eb/0x540
[  568.668681][T10579]  should_failslab+0xa8/0x100
[  568.668712][T10579]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  568.668737][T10579]  ? __kasan_kmalloc+0x93/0xb0
[  568.668763][T10579]  ? v9fs_init_fs_context+0x10a/0x540
[  568.668855][T10579]  ? v9fs_init_fs_context+0x10a/0x540
[  568.668884][T10579]  ? __kmalloc_cache_noprof+0x148/0x600
[  568.668912][T10579]  kstrdup+0x42/0x100
[  568.668937][T10579]  v9fs_init_fs_context+0x10a/0x540
[  568.668969][T10579]  alloc_fs_context+0x99e/0xd00
[  568.669040][T10579]  do_new_mount+0x17f/0xdc0
[  568.669069][T10579]  ? __pfx_do_new_mount+0x10/0x10
[  568.669094][T10579]  ? ns_capable+0x84/0xe0
[  568.669121][T10579]  ? path_mount+0x647/0x1050
[  568.669147][T10579]  ? user_path_at+0xd4/0x160
[  568.669175][T10579]  __se_sys_mount+0x31d/0x420
[  568.669204][T10579]  ? __pfx___se_sys_mount+0x10/0x10
[  568.669232][T10579]  ? __x64_sys_mount+0x20/0xc0
[  568.669258][T10579]  do_syscall_64+0x166/0x520
[  568.669283][T10579]  ? trace_irq_disable+0x3b/0x140
[  568.669306][T10579]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.669329][T10579]  ? clear_bhb_loop+0x70/0xc0
[  568.669356][T10579]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.669377][T10579] RIP: 0033:0x7fd013d9e159
[  568.669397][T10579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.669416][T10579] RSP: 002b:00007fd014b80028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  568.669439][T10579] RAX: ffffffffffffffda RBX: 00007fd014025fa0 RCX: 00007fd013d9e159
[  568.669455][T10579] RDX: 0000200000001d40 RSI: 0000200000000280 RDI: 00002000000000c0
[  568.669471][T10579] RBP: 00007fd013e3506b R08: 00002000000002c0 R09: 0000000000000000
[  568.669485][T10579] R10: 0000000002200080 R11: 0000000000000246 R12: 0000000000000000
[  568.669499][T10579] R13: 00007fd014026038 R14: 00007fd014025fa0 R15: 00007ffdc22f35b8
[  568.669530][T10579]  </TASK>
[  568.682697][ T6550] usb 4-1: USB disconnect, device number 84
[  568.739376][ T5757] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  568.774440][ T5757] usb 6-1: device descriptor read/8, error -71
[  568.862687][ T9186] udevd[9186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  568.973049][T10560] netlink: 'syz.0.1326': attribute type 7 has an invalid length.
[  568.973109][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'.
[  568.973137][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1326'.
[  569.019412][ T5757] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  569.043886][ T5757] usb 6-1: device descriptor read/8, error -71
[  569.060310][ T6565] usbhid 1-1:0.0: can't add hid device: -71
[  569.060415][ T6565] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  569.064938][ T6565] usb 1-1: USB disconnect, device number 95
[  569.150690][ T5757] usb usb6-port1: unable to enumerate USB device
[  569.468481][T10592] autofs: Bad value for 'fd'
[  569.541720][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.622808][T10594] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.886524][   T33] audit: type=1400 audit(1790944586.916:110): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10602 comm="syz.0.1341" name="unknown" offset=28
[  569.930409][ T6565] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  570.085504][ T6565] usb 4-1: unable to get BOS descriptor or descriptor too short
[  570.086327][ T6565] usb 4-1: not running at top speed; connect to a high speed hub
[  570.086359][ T6565] usb 4-1: New USB device found: idVendor=200c, idProduct=1018, bcdDevice=0.40
[  570.105616][ T6565] usb 4-1: config 1 has an invalid descriptor of length 46, skipping remainder of the config
[  570.105642][ T6565] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  570.137682][ T6565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.137710][ T6565] usb 4-1: Product: syz
[  570.137726][ T6565] usb 4-1: Manufacturer: syz
[  570.137740][ T6565] usb 4-1: SerialNumber: syz
[  570.397236][ T6565] usb 4-1: 3:0: failed to get current value for ch 0 (-71)
[  570.421381][ T6565] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3)
[  570.421414][ T6565] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  570.421433][ T6565] usb 4-1: [3] FU [LFE Playback Volume] ch = 2, val = 0/1/1
[  570.424989][ T6565] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3)
[  570.425014][ T6565] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  570.425032][ T6565] usb 4-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1
[  570.427487][ T6565] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3)
[  570.493595][ T6565] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3)
[  570.496637][ T6565] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3)
[  570.498598][ T6565] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3)
[  570.525903][ T6565] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3)
[  570.527284][ T6565] usb 4-1: 3:0: failed to get current value for ch 0 (-71)
[  570.547491][ T6565] usb 4-1: 3:0: failed to get current value for ch 1 (-71)
[  570.557483][ T6565] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3)
[  570.567601][ T6565] usb 4-1: 3:0: cannot get min/max values for control 11 (id 3)
[  570.582112][ T6565] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3)
[  570.585272][ T6565] usb 4-1: 3:0: failed to get current value for ch 1 (-71)
[  570.622720][ T6573] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  570.642082][ T6565] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3)
[  570.643839][ T6565] usb 4-1: 3:0: cannot get min/max values for control 5 (id 3)
[  570.696614][ T6565] usb 4-1: USB disconnect, device number 85
[  570.764920][ T9295] udevd[9295]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  570.785504][ T6573] usb 1-1: Using ep0 maxpacket: 8
[  570.792711][ T6573] usb 1-1: New USB device found: idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  570.798849][ T6573] usb 1-1: config 3 has an invalid interface number: 45 but max is 0
[  570.798875][ T6573] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  570.798894][ T6573] usb 1-1: config 3 has no interface number 0
[  570.798937][ T6573] usb 1-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  570.798964][ T6573] usb 1-1: config 3 interface 45 has no altsetting 0
[  570.853951][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.853979][ T6573] usb 1-1: Product: syz
[  570.853993][ T6573] usb 1-1: Manufacturer: syz
[  570.854007][ T6573] usb 1-1: SerialNumber: syz
[  571.019424][T10614] binder: got new transaction with bad transaction stack
[  571.110729][   T33] audit: type=1326 audit(1790944588.137:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10617 comm="syz.3.1348" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ba459e159 code=0x0
[  571.111727][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.115367][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.133156][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.137026][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.185298][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.188565][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.194178][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.194831][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.204526][T10608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  571.205183][T10608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  571.249811][ T6573] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  571.349843][ T6573] usb 1-1: USB disconnect, device number 96
[  571.498951][ T9186] udevd[9186]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  571.729311][ T6565] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  571.882567][ T6565] usb 6-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[  571.901683][ T6565] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  571.901714][ T6565] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  571.901753][ T6565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.944549][ T6565] spcp8x5 6-1:1.0: SPCP8x5 converter detected
[  571.966249][ T6565] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[  572.292302][ T6565] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  572.440825][ T6565] usb 4-1: Using ep0 maxpacket: 32
[  572.442185][ T6565] usb 4-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  572.443811][ T6565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.479408][ T6565] usb 4-1: config 0 descriptor??
[  572.487734][ T6565] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  573.182661][T10641] FAULT_INJECTION: forcing a failure.
[  573.182661][T10641] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  573.182695][T10641] CPU: 1 UID: 0 PID: 10641 Comm: syz.0.1357 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  573.182727][T10641] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  573.182736][T10641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  573.182748][T10641] Call Trace:
[  573.182757][T10641]  <TASK>
[  573.182770][T10641]  dump_stack_lvl+0xe8/0x150
[  573.182804][T10641]  should_fail_ex+0x3eb/0x540
[  573.182831][T10641]  _copy_from_user+0x2d/0xb0
[  573.182859][T10641]  _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1812/0x3dc0
[  573.183052][T10641]  ? stack_depot_save_flags+0x33/0x7f0
[  573.183076][T10641]  ? __lock_acquire+0x747/0x2de0
[  573.183104][T10641]  ? kasan_save_track+0x3e/0x80
[  573.183129][T10641]  ? kasan_save_free_info+0x40/0x50
[  573.183148][T10641]  ? __kasan_slab_free+0x5c/0x80
[  573.183171][T10641]  ? kfree+0x1c5/0x650
[  573.183188][T10641]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  573.183218][T10641]  ? security_file_ioctl+0xc3/0x2a0
[  573.183246][T10641]  ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[  573.183322][T10641]  ? kasan_quarantine_put+0xbb/0x1f0
[  573.183355][T10641]  ? tomoyo_path_number_perm+0x219/0x5f0
[  573.183385][T10641]  ? tomoyo_path_number_perm+0x219/0x5f0
[  573.183418][T10641]  ? do_vfs_ioctl+0x116f/0x1530
[  573.183450][T10641]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  573.183491][T10641]  ? do_futex+0x3e7/0x4e0
[  573.183548][T10641]  ? security_file_ioctl+0x246/0x2a0
[  573.183581][T10641]  ? bpf_lsm_file_ioctl+0x9/0x20
[  573.183608][T10641]  ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10
[  573.183642][T10641]  __se_sys_ioctl+0xfc/0x170
[  573.183673][T10641]  do_syscall_64+0x166/0x520
[  573.183697][T10641]  ? trace_irq_disable+0x3b/0x140
[  573.183720][T10641]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.183742][T10641]  ? clear_bhb_loop+0x70/0xc0
[  573.183768][T10641]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.183789][T10641] RIP: 0033:0x7fce0c19e159
[  573.183810][T10641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.183829][T10641] RSP: 002b:00007fce0d040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  573.183852][T10641] RAX: ffffffffffffffda RBX: 00007fce0c425fa0 RCX: 00007fce0c19e159
[  573.183868][T10641] RDX: 0000000000000000 RSI: 000000004018620d RDI: 0000000000000004
[  573.183882][T10641] RBP: 00007fce0c23506b R08: 0000000000000000 R09: 0000000000000000
[  573.183894][T10641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  573.183907][T10641] R13: 00007fce0c426038 R14: 00007fce0c425fa0 R15: 00007fffacedccb8
[  573.183948][T10641]  </TASK>
[  573.272697][T10642] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  573.294546][T10642] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  573.359568][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'.
[  574.208049][ T6565] gspca_vc032x: reg_w err -71
[  574.208106][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208118][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208127][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208136][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208146][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208155][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208164][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208173][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208182][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208192][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208201][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208210][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208220][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208228][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208237][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208246][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208255][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208264][ T6565] gspca_vc032x: I2c Bus Busy Wait 00
[  574.208273][ T6565] gspca_vc032x: Unknown sensor...
[  574.208351][ T6565] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  574.299143][ T5757] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  574.357133][ T6565] usb 4-1: USB disconnect, device number 86
[  574.439184][ T5757] usb 1-1: device descriptor read/64, error -71
[  574.442537][ T9432] udevd[9432]: 'scsi_id --export --whitelisted -d /dev/sda' [10656] terminated by signal 11 (Segmentation fault)
[  574.546671][T10052] usb 6-1: USB disconnect, device number 33
[  574.584384][T10052] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  574.585097][T10052] spcp8x5 6-1:1.0: device disconnected
[  574.690719][ T5757] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  574.849262][ T5757] usb 1-1: device descriptor read/64, error -71
[  574.964251][ T5757] usb usb1-port1: attempt power cycle
[  575.081856][ T6550] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  575.219130][ T6550] usb 6-1: device descriptor read/64, error -71
[  575.309168][ T5757] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  575.330217][ T5757] usb 1-1: device descriptor read/8, error -71
[  575.429093][T10052] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  575.479108][ T6550] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  575.579172][T10052] usb 4-1: Using ep0 maxpacket: 16
[  575.580448][T10052] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  575.581713][T10052] usb 4-1: config 0 has no interfaces?
[  575.581747][T10052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.586411][T10052] usb 4-1: config 0 descriptor??
[  575.590776][ T5757] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  575.629355][ T6550] usb 6-1: device descriptor read/64, error -71
[  575.647582][ T5757] usb 1-1: device descriptor read/8, error -71
[  575.729974][ T6550] usb usb6-port1: attempt power cycle
[  575.760654][ T5757] usb usb1-port1: unable to enumerate USB device
[  575.801178][T10052] usb 4-1: USB disconnect, device number 87
[  576.149114][ T6550] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  576.169838][ T6550] usb 6-1: device descriptor read/8, error -71
[  576.239070][T10052] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[  576.390079][T10052] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[  576.391030][T10052] usb 4-1: config 0 has no interfaces?
[  576.391065][T10052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.395451][T10052] usb 4-1: config 0 descriptor??
[  576.429152][ T6550] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  576.456783][ T6550] usb 6-1: device descriptor read/8, error -71
[  576.571058][ T6550] usb usb6-port1: unable to enumerate USB device
[  576.600661][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.601127][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.603141][T10052] usb 4-1: USB disconnect, device number 88
[  577.070596][T10052] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  577.143607][   T33] audit: type=1326 audit(1790944594.177:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10675 comm="syz.0.1365" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fce0c19e159 code=0x0
[  577.219865][T10052] usb 4-1: New USB device found: idVendor=057c, idProduct=2200, bcdDevice=34.b1
[  577.221032][T10052] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  577.221062][T10052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  577.221089][T10052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  577.221113][T10052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  577.223107][T10052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.223130][T10052] usb 4-1: Product: syz
[  577.223144][T10052] usb 4-1: Manufacturer: syz
[  577.223159][T10052] usb 4-1: SerialNumber: syz
[  577.228042][T10052] usb 4-1: config 0 descriptor??
[  577.316187][T10052] bfusb 4-1:0.0: probe with driver bfusb failed with error -5
[  577.438200][ T6550] usb 4-1: USB disconnect, device number 89
[  577.898751][T10680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  578.146685][T10683] FAULT_INJECTION: forcing a failure.
[  578.146685][T10683] name failslab, interval 1, probability 0, space 0, times 0
[  578.146719][T10683] CPU: 1 UID: 0 PID: 10683 Comm: syz.0.1367 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  578.146750][T10683] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  578.146759][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  578.146772][T10683] Call Trace:
[  578.146781][T10683]  <TASK>
[  578.146791][T10683]  dump_stack_lvl+0xe8/0x150
[  578.146824][T10683]  should_fail_ex+0x3eb/0x540
[  578.146852][T10683]  should_failslab+0xa8/0x100
[  578.146880][T10683]  ? vm_area_alloc+0x24/0x140
[  578.146910][T10683]  kmem_cache_alloc_noprof+0x9c/0x600
[  578.146934][T10683]  ? vm_area_alloc+0x24/0x140
[  578.146970][T10683]  vm_area_alloc+0x24/0x140
[  578.147002][T10683]  mmap_region+0x18df/0x2c60
[  578.147053][T10683]  ? __pfx_mmap_region+0x10/0x10
[  578.147098][T10683]  ? process_measurement+0x7b2/0x1c10
[  578.147200][T10683]  ? up_write+0x19d/0x4a0
[  578.147345][T10683]  ? __lock_acquire+0x747/0x2de0
[  578.147371][T10683]  ? cap_mmap_addr+0xaa/0xf0
[  578.147404][T10683]  ? bpf_lsm_mmap_addr+0x9/0x50
[  578.147429][T10683]  ? security_mmap_addr+0x71/0x240
[  578.147459][T10683]  ? shmem_mapping+0xd/0x50
[  578.147478][T10683]  ? memfd_check_seals_mmap+0xc5/0x220
[  578.147514][T10683]  do_mmap+0xe0a/0x1300
[  578.147540][T10683]  ? get_pid_task+0x20/0x1f0
[  578.147578][T10683]  ? __pfx_do_mmap+0x10/0x10
[  578.147617][T10683]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  578.147640][T10683]  ? down_write_killable+0x179/0x230
[  578.147671][T10683]  ? __pfx_down_write_killable+0x10/0x10
[  578.147699][T10683]  ? apparmor_mmap_file+0x2e7/0x390
[  578.147733][T10683]  vm_mmap_pgoff+0x272/0x4e0
[  578.147757][T10683]  ? lock_acquire+0x115/0x350
[  578.147784][T10683]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  578.147809][T10683]  ? __fget_files+0x2a/0x420
[  578.147836][T10683]  ? __fget_files+0x3a2/0x420
[  578.147857][T10683]  ? __fget_files+0x2a/0x420
[  578.147883][T10683]  ksys_mmap_pgoff+0x4dc/0x760
[  578.147919][T10683]  do_syscall_64+0x166/0x520
[  578.147942][T10683]  ? trace_irq_disable+0x3b/0x140
[  578.147965][T10683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.147986][T10683]  ? clear_bhb_loop+0x70/0xc0
[  578.148012][T10683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.148033][T10683] RIP: 0033:0x7fce0c19e159
[  578.148053][T10683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.148071][T10683] RSP: 002b:00007fce0d040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  578.148095][T10683] RAX: ffffffffffffffda RBX: 00007fce0c425fa0 RCX: 00007fce0c19e159
[  578.148110][T10683] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000200000000000
[  578.148124][T10683] RBP: 00007fce0d040090 R08: 0000000000000003 R09: 000000001f985000
[  578.148138][T10683] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  578.148151][T10683] R13: 00007fce0c426038 R14: 00007fce0c425fa0 R15: 00007fffacedccb8
[  578.148185][T10683]  </TASK>
[  578.224079][T10685] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96
[  578.551600][T10693] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1370'.
[  578.551628][T10693] openvswitch: netlink: Flow key attr not present in new flow.
[  578.709629][ T6573] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  578.859847][ T6573] usb 6-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  578.867518][ T6573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.867546][ T6573] usb 6-1: Product: syz
[  578.867562][ T6573] usb 6-1: Manufacturer: syz
[  578.867578][ T6573] usb 6-1: SerialNumber: syz
[  578.916259][ T6573] usb 6-1: config 0 descriptor??
[  579.276692][   T54] block nbd0: Receive control failed (result -32)
[  579.278135][ T5620] block nbd0: Receive control failed (result -32)
[  579.354540][ T6573] usb 6-1: Firmware: major: 1, minor: 255, hardware type: ATUSB (1)
[  579.556413][ T6573] usb 6-1: failed to fetch extended address, random address set
[  579.702546][ T6573] usb 6-1: USB disconnect, device number 38
[  579.810897][T10717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.814266][T10715] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  579.830033][T10052] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  579.999311][T10052] usb 1-1: Using ep0 maxpacket: 16
[  580.000156][T10052] usb 1-1: New USB device found: idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  580.003847][T10052] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.003872][T10052] usb 1-1: Product: syz
[  580.003887][T10052] usb 1-1: Manufacturer: syz
[  580.003903][T10052] usb 1-1: SerialNumber: syz
[  580.038542][T10052] usb 1-1: config 0 descriptor??
[  580.060436][T10052] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  580.544250][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1381'.
[  580.545346][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1381'.
[  580.658990][ T6573] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  580.751597][ T5620] Bluetooth: hci3: unexpected cc 0x1003 length: 8 < 9
[  580.751632][ T5620] Bluetooth: hci3: unexpected event for opcode 0x1003
[  580.752909][T10729] netlink: 'syz.3.1383': attribute type 2 has an invalid length.
[  580.752928][T10729] netlink: 'syz.3.1383': attribute type 8 has an invalid length.
[  580.752942][T10729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1383'.
[  580.754591][ T5620] Bluetooth: hci3: unexpected event for opcode 0x203b
[  580.820134][ T6573] usb 6-1: Using ep0 maxpacket: 32
[  580.820956][ T6573] usb 6-1: New USB device found: idVendor=1b1c, idProduct=0c10, bcdDevice=0.00
[  580.823333][ T6573] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  580.823383][ T6573] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  580.823437][ T6573] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  580.823467][ T6573] usb 6-1: config 0 interface 0 has no altsetting 0
[  580.823502][ T6573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.828035][ T6573] usb 6-1: config 0 descriptor??
[  580.912478][ T6573] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  581.058963][ T6573] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  581.080691][T10723] nfs4: Unknown parameter 'ramfs'
[  581.084671][ T6565] usb 6-1: USB disconnect, device number 39
[  581.102862][T10052] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5
[  581.210432][ T6573] usb 4-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  581.213002][ T6573] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  581.213054][ T6573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.252247][ T6573] gspca_main: stv0680-2.14.0 probing 041e:4007
[  581.801108][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.801599][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.804446][ T5620] Bluetooth: hci3: unexpected cc 0x2003 length: 8 < 9
[  581.804475][ T5620] Bluetooth: hci3: unexpected event for opcode 0x2003
[  581.807815][ T5620] Bluetooth: hci3: unexpected event for opcode 0x203b
[  581.855270][T10730] netlink: 'syz.3.1383': attribute type 4 has an invalid length.
[  581.855292][T10730] netlink: 'syz.3.1383': attribute type 7 has an invalid length.
[  581.978924][ T6565] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  582.128871][ T6565] usb 6-1: Using ep0 maxpacket: 32
[  582.129703][ T6565] usb 6-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  582.131280][ T6565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.137468][ T6565] usb 6-1: config 0 descriptor??
[  582.232023][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'.
[  582.329906][ T6573] stv0680 4-1:4.0: STV(e): camera ping failed!!
[  582.364513][ T6565] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  582.381022][ T6565] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  582.382533][ T6565] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  582.382588][ T6565] usb 6-1: media controller created
[  582.436154][ T6565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  582.541304][ T6573] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  582.541328][ T6573] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  582.566961][ T6573] usb 4-1: USB disconnect, device number 90
[  582.577140][T10052] usb 1-1: USB disconnect, device number 101
[  582.680548][T10740] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  582.713101][ T6565] az6027: usb out operation failed. (-71)
[  582.723797][ T6565] az6027: usb out operation failed. (-71)
[  582.723815][ T6565] stb0899_attach: Driver disabled by Kconfig
[  582.723827][ T6565] az6027: no front-end attached
[  582.723827][ T6565] 
[  582.724202][ T6565] az6027: usb out operation failed. (-71)
[  582.724291][ T6565] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  582.764902][ T6565] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41
[  582.768092][ T6565] dvb-usb: schedule remote query interval to 400 msecs.
[  582.768116][ T6565] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  582.802511][ T6565] usb 6-1: USB disconnect, device number 40
[  582.914496][ T6565] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  583.188911][ T6550] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  583.358840][ T6550] usb 1-1: Using ep0 maxpacket: 32
[  583.359595][ T6550] usb 1-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  583.362563][ T6550] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  583.362588][ T6550] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.362609][ T6550] usb 1-1: config 0 has no interface number 0
[  583.362652][ T6550] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  583.362675][ T6550] usb 1-1: config 0 interface 1 has no altsetting 0
[  583.364843][ T6550] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.364867][ T6550] usb 1-1: Product: syz
[  583.364883][ T6550] usb 1-1: Manufacturer: syz
[  583.364899][ T6550] usb 1-1: SerialNumber: syz
[  583.378273][ T6550] usb 1-1: config 0 descriptor??
[  583.392390][T10757] FAULT_INJECTION: forcing a failure.
[  583.392390][T10757] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  583.392421][T10757] CPU: 0 UID: 0 PID: 10757 Comm: syz.3.1390 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  583.392449][T10757] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  583.392457][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  583.392469][T10757] Call Trace:
[  583.392478][T10757]  <TASK>
[  583.392486][T10757]  dump_stack_lvl+0xe8/0x150
[  583.392517][T10757]  should_fail_ex+0x3eb/0x540
[  583.392543][T10757]  _copy_from_iter+0x1d3/0x1660
[  583.392565][T10757]  ? __alloc_skb+0x27a/0x7a0
[  583.392586][T10757]  ? __alloc_skb+0x27a/0x7a0
[  583.392606][T10757]  ? __alloc_skb+0x27a/0x7a0
[  583.392624][T10757]  ? __pfx__copy_from_iter+0x10/0x10
[  583.392643][T10757]  ? kmem_cache_alloc_node_noprof+0x1f4/0x600
[  583.392663][T10757]  ? __alloc_skb+0x27a/0x7a0
[  583.392680][T10757]  ? __alloc_skb+0x27a/0x7a0
[  583.392710][T10757]  ? netlink_sendmsg+0x5fa/0xae0
[  583.392735][T10757]  ? skb_put+0x112/0x210
[  583.392758][T10757]  netlink_sendmsg+0x667/0xae0
[  583.392788][T10757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.392821][T10757]  ? apparmor_socket_sendmsg+0x98/0x360
[  583.392850][T10757]  ? __pfx_netlink_sendmsg+0x10/0x10
[  583.392873][T10757]  sock_sendmsg_nosec+0x13a/0x180
[  583.392902][T10757]  __sys_sendto+0x408/0x5a0
[  583.392926][T10757]  ? __pfx___sys_sendto+0x10/0x10
[  583.392971][T10757]  ? do_user_addr_fault+0xd3f/0x1480
[  583.393004][T10757]  __x64_sys_sendto+0xde/0x100
[  583.393027][T10757]  do_syscall_64+0x166/0x520
[  583.393049][T10757]  ? trace_irq_disable+0x3b/0x140
[  583.393070][T10757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.393090][T10757]  ? clear_bhb_loop+0x70/0xc0
[  583.393113][T10757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  583.393132][T10757] RIP: 0033:0x7f5ba455e98e
[  583.393150][T10757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  583.393167][T10757] RSP: 002b:00007f5ba27f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  583.393189][T10757] RAX: ffffffffffffffda RBX: 00007f5ba27f66c0 RCX: 00007f5ba455e98e
[  583.393204][T10757] RDX: 0000000000000024 RSI: 00007f5ba27f5000 RDI: 0000000000000004
[  583.393216][T10757] RBP: 0000000000000000 R08: 00007f5ba27f4f04 R09: 000000000000000c
[  583.393228][T10757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  583.393240][T10757] R13: 00007f5ba27f4f58 R14: 00007f5ba27f5000 R15: 0000000000000000
[  583.393270][T10757]  </TASK>
[  583.728333][T10746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1387'.
[  583.978832][T10052] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  584.103091][ T6550] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  584.103128][ T6550] cx231xx 1-1:0.1: Not found matching IAD interface
[  584.109820][ T6550] usb 1-1: USB disconnect, device number 102
[  584.132876][T10052] usb 6-1: device descriptor read/64, error -71
[  584.368890][T10052] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  584.499263][T10052] usb 6-1: device descriptor read/64, error -71
[  584.614003][T10052] usb usb6-port1: attempt power cycle
[  584.699187][ T6565] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[  584.828806][ T6565] usb 4-1: device descriptor read/64, error -71
[  584.888150][T10768] netlink: 'syz.0.1396': attribute type 5 has an invalid length.
[  584.888173][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1396'.
[  584.973615][T10052] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  584.989512][T10052] usb 6-1: device descriptor read/8, error -71
[  585.068978][ T6565] usb 4-1: new full-speed USB device number 92 using dummy_hcd
[  585.198851][ T6565] usb 4-1: device descriptor read/64, error -71
[  585.228828][T10052] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  585.251468][T10052] usb 6-1: device descriptor read/8, error -71
[  585.309002][ T6565] usb usb4-port1: attempt power cycle
[  585.359521][T10052] usb usb6-port1: unable to enumerate USB device
[  585.418786][ T6573] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  585.570662][ T6573] usb 1-1: New USB device found: idVendor=2a39, idProduct=3fd2, bcdDevice=0.40
[  585.571957][ T6573] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 137, changing to 7
[  585.572003][ T6573] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 78, changing to 7
[  585.574451][ T6573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.574474][ T6573] usb 1-1: Product: syz
[  585.574490][ T6573] usb 1-1: Manufacturer: syz
[  585.574505][ T6573] usb 1-1: SerialNumber: syz
[  585.698783][ T6565] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[  585.719447][ T6565] usb 4-1: device descriptor read/8, error -71
[  585.863565][ T6573] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  585.866792][ T6573] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  585.937452][ T6573] usb 1-1: USB disconnect, device number 103
[  585.958809][ T6565] usb 4-1: new full-speed USB device number 94 using dummy_hcd
[  585.982485][ T6565] usb 4-1: device descriptor read/8, error -71
[  586.091134][ T6565] usb usb4-port1: unable to enumerate USB device
[  586.099984][ T9295] udevd[9295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  586.305588][T10782] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1403'.
[  587.030498][ T6573] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  587.178878][ T6573] usb 6-1: Using ep0 maxpacket: 16
[  587.179773][ T6573] usb 6-1: New USB device found: idVendor=1b1c, idProduct=1c0c, bcdDevice=0.00
[  587.181123][ T6573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11
[  587.181154][ T6573] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  587.181198][ T6573] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.239718][ T6573] usb 6-1: config 0 descriptor??
[  587.542525][T10793] CIFS: VFS: Unknown vers= option specified: -�B��]ąRB �,����g��Wy��� 2"/��>�4Z ҄F��Yc�IGQ�B�*0�⑒��V&�S������mZ���)`s���A�k!O�w�����z������"��R�L�L�|ZuWG4&޺��[G
[  587.686341][ T6573] hid (null): unknown global tag 0xdf
[  587.716485][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.716522][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718348][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718376][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718402][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718428][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718454][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718480][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718506][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.718532][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unknown main item tag 0x0
[  587.770246][ T6573] corsair-psu 0003:1B1C:1C0C.0010: unexpected long global item
[  587.811749][ T6573] corsair-psu 0003:1B1C:1C0C.0010: probe with driver corsair-psu failed with error -22
[  587.895942][ T6573] usb 6-1: USB disconnect, device number 45
[  587.979242][T10796] FAULT_INJECTION: forcing a failure.
[  587.979242][T10796] name failslab, interval 1, probability 0, space 0, times 0
[  587.979278][T10796] CPU: 0 UID: 0 PID: 10796 Comm: syz.0.1410 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  587.979309][T10796] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  587.979318][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  587.979331][T10796] Call Trace:
[  587.979340][T10796]  <TASK>
[  587.979351][T10796]  dump_stack_lvl+0xe8/0x150
[  587.979384][T10796]  should_fail_ex+0x3eb/0x540
[  587.979414][T10796]  should_failslab+0xa8/0x100
[  587.979445][T10796]  __kmalloc_noprof+0xf9/0x710
[  587.979471][T10796]  ? tomoyo_encode+0x2ad/0x570
[  587.979493][T10796]  ? tomoyo_encode+0x2ad/0x570
[  587.979523][T10796]  tomoyo_encode+0x2ad/0x570
[  587.979553][T10796]  tomoyo_realpath_from_path+0x5fa/0x640
[  587.979588][T10796]  ? tomoyo_path_number_perm+0x219/0x5f0
[  587.979620][T10796]  tomoyo_path_number_perm+0x246/0x5f0
[  587.979663][T10796]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  587.979696][T10796]  ? __lock_acquire+0x747/0x2de0
[  587.979762][T10796]  ? __fget_files+0x2a/0x420
[  587.979790][T10796]  ? __fget_files+0x2a/0x420
[  587.979813][T10796]  ? __fget_files+0x2a/0x420
[  587.979841][T10796]  security_file_ioctl+0xc3/0x2a0
[  587.979874][T10796]  __se_sys_ioctl+0x47/0x170
[  587.979906][T10796]  do_syscall_64+0x166/0x520
[  587.979930][T10796]  ? trace_irq_disable+0x3b/0x140
[  587.979955][T10796]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.979977][T10796]  ? clear_bhb_loop+0x70/0xc0
[  587.980005][T10796]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.980027][T10796] RIP: 0033:0x7fce0c19e159
[  587.980047][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.980066][T10796] RSP: 002b:00007fce0d040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  587.980090][T10796] RAX: ffffffffffffffda RBX: 00007fce0c425fa0 RCX: 00007fce0c19e159
[  587.980106][T10796] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  587.980120][T10796] RBP: 00007fce0d040090 R08: 0000000000000000 R09: 0000000000000000
[  587.980133][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  587.980146][T10796] R13: 00007fce0c426038 R14: 00007fce0c425fa0 R15: 00007fffacedccb8
[  587.980181][T10796]  </TASK>
[  587.980761][T10796] ERROR: Out of memory at tomoyo_realpath_from_path.
[  588.520443][ T6573] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  588.561603][T10804] FAULT_INJECTION: forcing a failure.
[  588.561603][T10804] name failslab, interval 1, probability 0, space 0, times 0
[  588.561644][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.0.1413 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  588.561683][T10804] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  588.561693][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  588.561708][T10804] Call Trace:
[  588.561718][T10804]  <TASK>
[  588.561729][T10804]  dump_stack_lvl+0xe8/0x150
[  588.561768][T10804]  should_fail_ex+0x3eb/0x540
[  588.561801][T10804]  should_failslab+0xa8/0x100
[  588.561836][T10804]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  588.561865][T10804]  ? __d_alloc+0x37/0x7f0
[  588.561892][T10804]  ? __d_alloc+0x37/0x7f0
[  588.561927][T10804]  __d_alloc+0x37/0x7f0
[  588.561959][T10804]  d_alloc+0x4b/0x190
[  588.561983][T10804]  ? lookup_one_qstr_excl+0xc4/0x360
[  588.562019][T10804]  lookup_one_qstr_excl+0xd8/0x360
[  588.562049][T10804]  ? lookup_noperm_common+0x245/0x430
[  588.562082][T10804]  start_dirop+0x5c/0x90
[  588.562119][T10804]  simple_start_creating+0xcc/0x110
[  588.562152][T10804]  ? __pfx_simple_start_creating+0x10/0x10
[  588.562183][T10804]  ? do_raw_spin_unlock+0xf5/0x200
[  588.562221][T10804]  ? mntput+0x65/0xc0
[  588.562260][T10804]  debugfs_start_creating+0xca/0x1b0
[  588.562299][T10804]  __debugfs_create_file+0x6f/0x400
[  588.562336][T10804]  debugfs_create_file_full+0x3f/0x60
[  588.562371][T10804]  kvm_create_vm_debugfs+0x471/0x8f0
[  588.562421][T10804]  ? __pfx_kvm_create_vm_debugfs+0x10/0x10
[  588.562470][T10804]  kvm_dev_ioctl+0x12f2/0x16e0
[  588.562517][T10804]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  588.562557][T10804]  ? bpf_lsm_file_ioctl+0x9/0x20
[  588.562590][T10804]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  588.562623][T10804]  __se_sys_ioctl+0xfc/0x170
[  588.562657][T10804]  do_syscall_64+0x166/0x520
[  588.562688][T10804]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.562715][T10804]  ? clear_bhb_loop+0x70/0xc0
[  588.562746][T10804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  588.562773][T10804] RIP: 0033:0x7fce0c19e159
[  588.562798][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  588.562821][T10804] RSP: 002b:00007fce0d040028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  588.562848][T10804] RAX: ffffffffffffffda RBX: 00007fce0c425fa0 RCX: 00007fce0c19e159
[  588.562866][T10804] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  588.562882][T10804] RBP: 00007fce0c23506b R08: 0000000000000000 R09: 0000000000000000
[  588.562898][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  588.562913][T10804] R13: 00007fce0c426038 R14: 00007fce0c425fa0 R15: 00007fffacedccb8
[  588.562949][T10804]  </TASK>
[  588.774101][ T6573] usb 4-1: New USB device found: idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  588.805031][ T6573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.805071][ T6573] usb 4-1: config 0 interface 0 has no altsetting 0
[  588.851776][ T5757] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  588.868470][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.868500][ T6573] usb 4-1: Product: syz
[  588.868515][ T6573] usb 4-1: Manufacturer: syz
[  588.868531][ T6573] usb 4-1: SerialNumber: syz
[  588.920352][ T6573] usb 4-1: config 0 descriptor??
[  588.928093][ T6573] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  588.945890][ T6573] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  588.946794][ T6573] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  588.946852][ T6573] usb 4-1: media controller created
[  588.985305][ T6573] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  588.989370][ T5757] usb 6-1: device descriptor read/64, error -71
[  589.046463][ T6573] DVB: Unable to find symbol tda10046_attach()
[  589.046480][ T6573] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  589.046494][ T6573] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  589.258812][ T5757] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  589.388882][ T5757] usb 6-1: device descriptor read/64, error -71
[  589.552099][ T5757] usb usb6-port1: attempt power cycle
[  589.908677][ T5757] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  589.929281][ T5757] usb 6-1: device descriptor read/8, error -71
[  589.989843][T10799] FAULT_INJECTION: forcing a failure.
[  589.989843][T10799] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  589.989908][T10799] CPU: 1 UID: 0 PID: 10799 Comm: syz.3.1411 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  589.989941][T10799] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  589.989950][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  589.989963][T10799] Call Trace:
[  589.989973][T10799]  <TASK>
[  589.989982][T10799]  dump_stack_lvl+0xe8/0x150
[  589.990020][T10799]  should_fail_ex+0x3eb/0x540
[  589.990050][T10799]  prepare_alloc_pages+0x21e/0x5f0
[  589.990097][T10799]  __alloc_frozen_pages_noprof+0x17a/0x400
[  589.990129][T10799]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  589.990183][T10799]  alloc_pages_mpol+0x21e/0x390
[  589.990220][T10799]  alloc_pages_noprof+0xb1/0x2b0
[  589.990252][T10799]  folio_alloc_noprof+0x1e/0x30
[  589.990283][T10799]  filemap_alloc_folio_noprof+0x111/0x460
[  589.990317][T10799]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[  589.990355][T10799]  __filemap_get_folio_mpol+0x3fd/0xff0
[  589.990391][T10799]  aio_setup_ring+0x3b1/0xe20
[  589.990497][T10799]  ? __pfx_aio_setup_ring+0x10/0x10
[  589.990537][T10799]  ioctx_alloc+0x313/0x830
[  589.990572][T10799]  __se_sys_io_setup+0x7b/0x1d0
[  589.990601][T10799]  do_syscall_64+0x166/0x520
[  589.990626][T10799]  ? trace_irq_disable+0x3b/0x140
[  589.990651][T10799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.990674][T10799]  ? clear_bhb_loop+0x70/0xc0
[  589.990701][T10799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.990722][T10799] RIP: 0033:0x7f5ba459e159
[  589.990743][T10799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  589.990761][T10799] RSP: 002b:00007f5ba5395028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[  589.990787][T10799] RAX: ffffffffffffffda RBX: 00007f5ba4825fa0 RCX: 00007f5ba459e159
[  589.990803][T10799] RDX: 0000000000000000 RSI: 00002000000028c0 RDI: 000000000000ffff
[  589.990818][T10799] RBP: 00007f5ba463506b R08: 0000000000000000 R09: 0000000000000000
[  589.990831][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  589.990845][T10799] R13: 00007f5ba4826038 R14: 00007f5ba4825fa0 R15: 00007fff9c27e9a8
[  589.990879][T10799]  </TASK>
[  590.085488][T10799] FAULT_INJECTION: forcing a failure.
[  590.085488][T10799] name fail_futex, interval 1, probability 0, space 0, times 0
[  590.085520][T10799] CPU: 0 UID: 0 PID: 10799 Comm: syz.3.1411 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  590.085549][T10799] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  590.085557][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  590.085570][T10799] Call Trace:
[  590.085579][T10799]  <TASK>
[  590.085587][T10799]  dump_stack_lvl+0xe8/0x150
[  590.085619][T10799]  should_fail_ex+0x3eb/0x540
[  590.085654][T10799]  get_futex_key+0x1b4/0x1580
[  590.085684][T10799]  ? preempt_schedule_thunk+0x16/0x40
[  590.085711][T10799]  ? __pfx_get_futex_key+0x10/0x10
[  590.085752][T10799]  futex_wake+0x119/0x5f0
[  590.085781][T10799]  ? __pfx_futex_wake+0x10/0x10
[  590.085799][T10799]  ? __lock_acquire+0x747/0x2de0
[  590.085828][T10799]  ? __sys_sendmmsg+0x363/0x4d0
[  590.085858][T10799]  do_futex+0x458/0x4e0
[  590.085890][T10799]  ? __pfx_do_futex+0x10/0x10
[  590.085914][T10799]  ? lock_acquire+0x115/0x350
[  590.085944][T10799]  __se_sys_futex+0x3a8/0x450
[  590.085974][T10799]  ? __fget_files+0x2a/0x420
[  590.085997][T10799]  ? __pfx___se_sys_futex+0x10/0x10
[  590.086032][T10799]  ? __x64_sys_futex+0x21/0xf0
[  590.086062][T10799]  do_syscall_64+0x166/0x520
[  590.086084][T10799]  ? trace_irq_disable+0x3b/0x140
[  590.086107][T10799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.086127][T10799]  ? clear_bhb_loop+0x70/0xc0
[  590.086151][T10799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.086171][T10799] RIP: 0033:0x7f5ba459e159
[  590.086190][T10799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.086207][T10799] RSP: 002b:00007f5ba53950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  590.086229][T10799] RAX: ffffffffffffffda RBX: 00007f5ba4825fa8 RCX: 00007f5ba459e159
[  590.086243][T10799] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5ba4825fac
[  590.086257][T10799] RBP: 00007f5ba4825fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  590.086270][T10799] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  590.086284][T10799] R13: 00007f5ba4826038 R14: 00007fff9c27e8c0 R15: 00007fff9c27e9a8
[  590.086314][T10799]  </TASK>
[  590.198968][ T5757] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  590.219188][ T5757] usb 6-1: device descriptor read/8, error -71
[  590.332124][ T5757] usb usb6-port1: unable to enumerate USB device
[  590.484922][ T6573] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  590.500168][ T6573] usb 4-1: USB disconnect, device number 95
[  590.507243][ T9295] udevd[9295]: setting mode of /dev/bus/usb/004/095 to 020664 failed: No such file or directory
[  590.507380][ T9295] udevd[9295]: setting owner of /dev/bus/usb/004/095 to uid=0, gid=0 failed: No such file or directory
[  590.878644][ T6572] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  591.008652][ T6572] usb 1-1: device descriptor read/64, error -71
[  591.071937][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1422'.
[  591.248828][ T6572] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  591.378764][ T6572] usb 1-1: device descriptor read/64, error -71
[  591.437460][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  591.456139][T10839] netlink: 'syz.3.1426': attribute type 1 has an invalid length.
[  591.456161][T10839] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1426'.
[  591.456177][T10839] netlink: 'syz.3.1426': attribute type 2 has an invalid length.
[  591.456191][T10839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'.
[  591.496770][ T6572] usb usb1-port1: attempt power cycle
[  591.828621][ T6572] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  591.853057][ T6572] usb 1-1: device descriptor read/8, error -71
[  591.978651][ T6573] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  592.089633][ T6572] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  592.110963][ T6572] usb 1-1: device descriptor read/8, error -71
[  592.128764][ T6573] usb 4-1: Using ep0 maxpacket: 32
[  592.129872][ T6573] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  592.130895][ T6573] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  592.134142][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  592.134165][ T6573] usb 4-1: Product: syz
[  592.134181][ T6573] usb 4-1: Manufacturer: syz
[  592.134195][ T6573] usb 4-1: SerialNumber: syz
[  592.189991][ T6573] usb 4-1: config 0 descriptor??
[  592.192579][T10846] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  592.218951][ T6572] usb usb1-port1: unable to enumerate USB device
[  592.828611][ T6573] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  592.959465][ T6573] usb 6-1: device descriptor read/64, error -71
[  593.198623][ T6573] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  593.328621][ T6573] usb 6-1: device descriptor read/64, error -71
[  593.438821][ T6573] usb usb6-port1: attempt power cycle
[  593.778616][ T6573] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  593.799606][ T6573] usb 6-1: device descriptor read/8, error -71
[  594.039600][ T6573] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[  594.059864][ T6573] usb 6-1: device descriptor read/8, error -71
[  594.158954][T10867] loop9: detected capacity change from 0 to 7
[  594.180138][ T6573] usb usb6-port1: unable to enumerate USB device
[  594.224572][T10867] Dev loop9: unable to read RDB block 7
[  594.224617][T10867]  loop9: unable to read partition table
[  594.224859][T10867] loop9: partition table beyond EOD, truncated
[  594.224901][T10867] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  594.375069][ T6573] usb 4-1: USB disconnect, device number 96
[  594.498905][T10871] netlink: 436 bytes leftover after parsing attributes in process `syz.0.1437'.
[  594.499192][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1437'.
[  594.748371][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1440'.
[  594.888680][ T6573] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  595.039273][ T6573] usb 1-1: New USB device found: idVendor=1223, idProduct=3f07, bcdDevice=0.00
[  595.042027][ T6573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.042061][ T6573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.042084][ T6573] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  595.042127][ T6573] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.047985][ T6573] usb 1-1: config 0 descriptor??
[  595.089417][T10884] FAULT_INJECTION: forcing a failure.
[  595.089417][T10884] name failslab, interval 1, probability 0, space 0, times 0
[  595.089448][T10884] CPU: 0 UID: 0 PID: 10884 Comm: syz.3.1441 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  595.089478][T10884] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  595.089488][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  595.089500][T10884] Call Trace:
[  595.089510][T10884]  <TASK>
[  595.089518][T10884]  dump_stack_lvl+0xe8/0x150
[  595.089550][T10884]  should_fail_ex+0x3eb/0x540
[  595.089577][T10884]  should_failslab+0xa8/0x100
[  595.089607][T10884]  __kmalloc_noprof+0xf9/0x710
[  595.089630][T10884]  ? __register_sysctl_table+0x6f/0x1370
[  595.089679][T10884]  ? __register_sysctl_table+0x6f/0x1370
[  595.089719][T10884]  __register_sysctl_table+0x6f/0x1370
[  595.089748][T10884]  ? register_net_sysctl_sz+0x2ba/0x3f0
[  595.089860][T10884]  nf_lwtunnel_net_init+0x53/0xf0
[  595.089913][T10884]  ops_init+0x35d/0x5d0
[  595.089943][T10884]  setup_net+0x118/0x350
[  595.089992][T10884]  ? __pfx_setup_net+0x10/0x10
[  595.090022][T10884]  ? down_read_killable+0x1b6/0x3b0
[  595.090050][T10884]  ? __ns_common_init+0x38a/0x590
[  595.090081][T10884]  copy_net_ns+0x536/0x770
[  595.090113][T10884]  create_new_namespaces+0x3f0/0x6b0
[  595.090141][T10884]  ? security_capable+0x7e/0x2c0
[  595.090176][T10884]  unshare_nsproxy_namespaces+0x144/0x190
[  595.090206][T10884]  ksys_unshare+0x53c/0x890
[  595.090235][T10884]  ? __pfx_ksys_unshare+0x10/0x10
[  595.090263][T10884]  ? rcu_is_watching+0x16/0xb0
[  595.090301][T10884]  __x64_sys_unshare+0x38/0x50
[  595.090325][T10884]  do_syscall_64+0x166/0x520
[  595.090347][T10884]  ? trace_irq_disable+0x3b/0x140
[  595.090369][T10884]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.090389][T10884]  ? clear_bhb_loop+0x70/0xc0
[  595.090413][T10884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.090432][T10884] RIP: 0033:0x7f5ba459e159
[  595.090451][T10884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.090468][T10884] RSP: 002b:00007f5ba5395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  595.090491][T10884] RAX: ffffffffffffffda RBX: 00007f5ba4825fa0 RCX: 00007f5ba459e159
[  595.090505][T10884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  595.090518][T10884] RBP: 00007f5ba463506b R08: 0000000000000000 R09: 0000000000000000
[  595.090531][T10884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.090543][T10884] R13: 00007f5ba4826038 R14: 00007f5ba4825fa0 R15: 00007fff9c27e9a8
[  595.090575][T10884]  </TASK>
[  595.777032][T10873] syz_tun (unregistering): left allmulticast mode
[  595.789652][T10894] netlink: 'syz.5.1446': attribute type 21 has an invalid length.
[  595.789675][T10894] netlink: 29 bytes leftover after parsing attributes in process `syz.5.1446'.
[  595.796122][T10873] bond0: (slave syz_tun): Releasing backup interface
[  595.935929][ T6573] usbhid 1-1:0.0: can't add hid device: -71
[  595.936051][ T6573] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  595.958025][ T6573] usb 1-1: USB disconnect, device number 108
[  596.992283][T10907] pim6reg1: entered promiscuous mode
[  596.992308][T10907] pim6reg1: entered allmulticast mode
[  597.248509][ T6573] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[  597.405038][ T6573] usb 4-1: unable to get BOS descriptor or descriptor too short
[  597.406282][ T6573] usb 4-1: not running at top speed; connect to a high speed hub
[  597.406314][ T6573] usb 4-1: New USB device found: idVendor=07fd, idProduct=0004, bcdDevice=0.40
[  597.439061][ T6573] usb 4-1: config 1 has an invalid descriptor of length 109, skipping remainder of the config
[  597.439090][ T6573] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  597.444586][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.444612][ T6573] usb 4-1: Product: syz
[  597.444628][ T6573] usb 4-1: Manufacturer: syz
[  597.444673][ T6573] usb 4-1: SerialNumber: syz
[  597.785892][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  597.797993][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  597.809888][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  597.812918][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  597.813846][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  598.217259][ T6572] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  598.262436][ T6573] usb 4-1: USB disconnect, device number 97
[  598.399432][ T6572] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  598.405208][ T6572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.405236][ T6572] usb 6-1: Product: syz
[  598.405251][ T6572] usb 6-1: Manufacturer: syz
[  598.405266][ T6572] usb 6-1: SerialNumber: syz
[  598.802344][T10928] loop5: detected capacity change from 0 to 7
[  598.806147][T10928] Dev loop5: unable to read RDB block 7
[  598.806176][T10928]  loop5: AHDI p1 p2 p4
[  598.806224][T10928] loop5: partition table partially beyond EOD, truncated
[  598.834391][T10928] loop5: p1 size 4261412863 extends beyond EOD, truncated
[  598.868561][T10928] loop5: p4 start 3288604672 is beyond EOD, truncated
[  598.952447][ T9433] udevd[9433]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  599.241407][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'.
[  599.537390][ T6572] cdc_ncm 6-1:1.0: failed to get mac address
[  599.570209][ T6572] cdc_ncm 6-1:1.0: bind() failure
[  599.589807][ T6572] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  599.590544][ T6572] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  599.593224][ T6572] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  599.629975][ T6572] usb 6-1: USB disconnect, device number 54
[  599.920223][T10913] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.920343][T10913] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.920561][T10913] bridge_slave_0: entered allmulticast mode
[  599.928602][ T5620] Bluetooth: hci1: command tx timeout
[  599.964280][T10913] bridge_slave_0: entered promiscuous mode
[  599.978855][T10913] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.979325][T10913] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.979762][T10913] bridge_slave_1: entered allmulticast mode
[  599.987015][T10913] bridge_slave_1: entered promiscuous mode
[  600.078254][T10913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  600.098156][T10913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  600.345796][T10913] team0: Port device team_slave_0 added
[  600.367320][T10913] team0: Port device team_slave_1 added
[  600.500239][T10913] batman_adv: batadv0: Adding interface: batadv_slave_0
[  600.500260][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.500288][T10913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  600.502457][T10913] batman_adv: batadv0: Adding interface: batadv_slave_1
[  600.502472][T10913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  600.502498][T10913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  600.677372][T10913] hsr_slave_0: entered promiscuous mode
[  600.684275][T10913] hsr_slave_1: entered promiscuous mode
[  600.713682][   T33] audit: type=1326 audit(1790944617.747:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10956 comm="syz.5.1463" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f659699e159 code=0x0
[  601.183315][T10913] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  601.217058][T10913] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  601.224483][T10913] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  601.254062][T10913] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  601.261468][T10913] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  601.297700][T10913] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  601.304313][T10913] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  601.346944][T10913] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  601.502152][T10913] 8021q: adding VLAN 0 to HW filter on device bond0
[  601.533529][T10913] 8021q: adding VLAN 0 to HW filter on device team0
[  601.557139][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.557321][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.614041][T10466] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.614162][T10466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  602.008441][ T5620] Bluetooth: hci1: command tx timeout
[  602.038359][ T6573] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  602.190061][ T6573] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  602.191358][ T6573] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  602.191390][ T6573] usb 4-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61
[  602.191415][ T6573] usb 4-1: config 0 interface 0 has no altsetting 0
[  602.194352][ T6573] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  602.194378][ T6573] usb 4-1: Product: syz
[  602.194394][ T6573] usb 4-1: Manufacturer: syz
[  602.194409][ T6573] usb 4-1: SerialNumber: syz
[  602.267703][ T6573] usb 4-1: config 0 descriptor??
[  602.278843][T10982] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  602.287229][ T6573] usb 4-1: selecting invalid altsetting 0
[  602.392604][T10052] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  602.509723][ T6573] usb 4-1: USB disconnect, device number 98
[  602.539236][T10052] usb 6-1: New USB device found: idVendor=0a5c, idProduct=21e1, bcdDevice=1.00
[  602.544151][T10052] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  602.544184][T10052] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  602.544223][T10052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.688010][ T5620] Bluetooth: hci2: urb ffff888028d32f00 submission failed (90)
[  603.084316][T10913] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.535264][T10913] veth0_vlan: entered promiscuous mode
[  603.545057][T10913] veth1_vlan: entered promiscuous mode
[  603.597000][T10913] veth0_macvtap: entered promiscuous mode
[  603.604283][T10913] veth1_macvtap: entered promiscuous mode
[  603.630641][T10913] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.643424][T10913] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.679261][T10463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.682531][T10467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.682572][T10467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.689430][   T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.898735][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.898758][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.995411][T10459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.995436][T10459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.088820][   T54] Bluetooth: hci1: command tx timeout
[  604.288471][ T6572] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  604.440125][ T6572] usb 4-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  604.441607][ T6572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.454016][ T6572] usb 4-1: config 0 descriptor??
[  604.671249][ T6572] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  604.914519][ T6572] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  604.914547][ T6572] [drm] Initialized udl on minor 1
[  605.194515][T10052] usb 6-1: USB disconnect, device number 55
[  605.392987][T11027] FAULT_INJECTION: forcing a failure.
[  605.392987][T11027] name failslab, interval 1, probability 0, space 0, times 0
[  605.393022][T11027] CPU: 1 UID: 0 PID: 11027 Comm: syz.5.1479 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  605.393053][T11027] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  605.393065][T11027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  605.393079][T11027] Call Trace:
[  605.393088][T11027]  <TASK>
[  605.393097][T11027]  dump_stack_lvl+0xe8/0x150
[  605.393130][T11027]  should_fail_ex+0x3eb/0x540
[  605.393158][T11027]  should_failslab+0xa8/0x100
[  605.393189][T11027]  __kmalloc_noprof+0xf9/0x710
[  605.393211][T11027]  ? rcu_is_watching+0x16/0xb0
[  605.393238][T11027]  ? tomoyo_realpath_from_path+0xef/0x640
[  605.393260][T11027]  ? tomoyo_realpath_from_path+0xef/0x640
[  605.393290][T11027]  tomoyo_realpath_from_path+0xef/0x640
[  605.393323][T11027]  ? tomoyo_path_number_perm+0x219/0x5f0
[  605.393353][T11027]  tomoyo_path_number_perm+0x246/0x5f0
[  605.393386][T11027]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  605.393414][T11027]  ? __lock_acquire+0x747/0x2de0
[  605.393476][T11027]  ? __fget_files+0x2a/0x420
[  605.393503][T11027]  ? __fget_files+0x2a/0x420
[  605.393525][T11027]  ? __fget_files+0x2a/0x420
[  605.393553][T11027]  security_file_ioctl+0xc3/0x2a0
[  605.393583][T11027]  __se_sys_ioctl+0x47/0x170
[  605.393614][T11027]  do_syscall_64+0x166/0x520
[  605.393639][T11027]  ? trace_irq_disable+0x3b/0x140
[  605.393661][T11027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.393686][T11027]  ? clear_bhb_loop+0x70/0xc0
[  605.393715][T11027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.393736][T11027] RIP: 0033:0x7f659699e159
[  605.393760][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.393788][T11027] RSP: 002b:00007f6597855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  605.393812][T11027] RAX: ffffffffffffffda RBX: 00007f6596c25fa0 RCX: 00007f659699e159
[  605.393831][T11027] RDX: 0000200000000200 RSI: 00000000c0585611 RDI: 0000000000000003
[  605.393846][T11027] RBP: 00007f6597855090 R08: 0000000000000000 R09: 0000000000000000
[  605.393859][T11027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.393872][T11027] R13: 00007f6596c26038 R14: 00007f6596c25fa0 R15: 00007ffc465b3f48
[  605.393906][T11027]  </TASK>
[  605.394009][T11027] ERROR: Out of memory at tomoyo_realpath_from_path.
[  605.532357][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  605.996138][T11033] FAT-fs (nullb0): bogus number of reserved sectors
[  605.996164][T11033] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  606.135044][T11038] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[10913] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[11038]
[  606.168307][ T5620] Bluetooth: hci1: command tx timeout
[  606.194871][T11038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1483'.
[  606.196200][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1483'.
[  607.228290][ T5616] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  607.400067][ T5616] usb 6-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  607.401329][ T5616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  607.401359][ T5616] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  607.401386][ T5616] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  607.404592][ T5616] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.404614][ T5616] usb 6-1: Product: syz
[  607.404623][ T5616] usb 6-1: Manufacturer: syz
[  607.404632][ T5616] usb 6-1: SerialNumber: syz
[  607.450756][ T6573] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  607.481232][ T5616] usb 6-1: config 0 descriptor??
[  607.482074][T11059] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  607.482221][T11059] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  607.485673][ T5616] usb 6-1: ucan: probing device on interface #0
[  607.603294][ T6573] usb 7-1: Using ep0 maxpacket: 8
[  607.604647][ T6573] usb 7-1: New USB device found: idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  607.606334][ T6573] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[  607.606359][ T6573] usb 7-1: config 0 has no interface number 0
[  607.606400][ T6573] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  607.606452][ T6573] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  607.606477][ T6573] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  607.606503][ T6573] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  607.606530][ T6573] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  607.612458][ T6573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.612482][ T6573] usb 7-1: Product: syz
[  607.612495][ T6573] usb 7-1: Manufacturer: syz
[  607.612509][ T6573] usb 7-1: SerialNumber: syz
[  607.616769][ T6573] usb 7-1: config 0 descriptor??
[  607.833208][T11063] tipc: Failed to remove unknown binding: 66,0,0/0:1489519316/1489519318
[  607.833244][T11063] tipc: Failed to remove unknown binding: 66,0,0/0:1489519316/1489519317
[  607.839770][ T6573] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  608.178778][T11066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.179549][T11066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.181812][ T5616] ucan 6-1:0.0 can0: registered device
[  608.230872][ T6573] usb 7-1: USB disconnect, device number 2
[  608.333297][ T5616] ucan 6-1:0.0 can0: firmware string: unknown
[  608.537127][ T6573] usb 6-1: USB disconnect, device number 56
[  608.542001][ T5272] ucan 6-1:0.0 can0: could not start device, code: -71
[  608.542086][ T5272] ucan 6-1:0.0 can0: could not reset device, code: -19
[  609.683755][T11080] openvswitch: netlink: IPv4 tun info is not correct
[  609.928426][T10052] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  609.931969][ T6572] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  609.939893][ T6572] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  609.971554][ T6572] usb 4-1: USB disconnect, device number 99
[  610.078952][T10052] usb 6-1: New USB device found: idVendor=104f, idProduct=0004, bcdDevice=1.00
[  610.081138][T10052] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  610.081165][T10052] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  610.087955][T10052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  610.087982][T10052] usb 6-1: Product: syz
[  610.087997][T10052] usb 6-1: Manufacturer: syz
[  610.145064][T10052] iuu_phoenix 6-1:1.0: iuu_phoenix converter detected
[  610.160543][T10052] usb 6-1: iuu_phoenix converter now attached to ttyUSB0
[  610.216662][T11087] program syz.3.1499 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  611.392133][T11080] iuu_phoenix ttyUSB0: iuu_open - failed submitting read urb, error -90
[  611.396835][ T6550] usb 6-1: USB disconnect, device number 57
[  611.439666][ T6550] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  611.465947][ T6550] iuu_phoenix 6-1:1.0: device disconnected
[  611.606859][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1512'.
[  611.606884][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1512'.
[  612.028347][T10052] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  612.054973][T11134] CIFS: Attempting to mount //127.0.0.1/share
[  612.067591][T11134] CIFS: VFS: Error connecting to socket. Aborting operation.
[  612.067645][T11134] CIFS: VFS: cifs_mount failed w/return code = -101
[  612.158225][T10052] usb 7-1: device descriptor read/64, error -71
[  612.398149][T10052] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  612.528212][T10052] usb 7-1: device descriptor read/64, error -71
[  612.640875][T10052] usb usb7-port1: attempt power cycle
[  612.979154][T10052] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  613.003359][T10052] usb 7-1: device descriptor read/8, error -71
[  613.098303][T11146] tmpfs: Bad value for 'mpol'
[  613.116295][T11149] FAULT_INJECTION: forcing a failure.
[  613.116295][T11149] name failslab, interval 1, probability 0, space 0, times 0
[  613.116332][T11149] CPU: 1 UID: 0 PID: 11149 Comm: syz.5.1522 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  613.116368][T11149] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  613.116378][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  613.116392][T11149] Call Trace:
[  613.116402][T11149]  <TASK>
[  613.116412][T11149]  dump_stack_lvl+0xe8/0x150
[  613.116446][T11149]  should_fail_ex+0x3eb/0x540
[  613.116476][T11149]  should_failslab+0xa8/0x100
[  613.116508][T11149]  __kmalloc_noprof+0xf9/0x710
[  613.116532][T11149]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  613.116554][T11149]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  613.116585][T11149]  __memcg_list_lru_alloc+0x1d9/0x760
[  613.116615][T11149]  ? xa_load+0x60/0x210
[  613.116644][T11149]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  613.116685][T11149]  zswap_store+0x7a4/0x2200
[  613.116719][T11149]  ? zswap_store+0x53d/0x2200
[  613.116769][T11149]  ? __pfx_zswap_store+0x10/0x10
[  613.116799][T11149]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  613.116840][T11149]  ? do_raw_spin_unlock+0xf5/0x200
[  613.116876][T11149]  swap_writeout+0x9bf/0x15d0
[  613.116915][T11149]  ? try_to_unmap_flush_dirty+0x96/0x100
[  613.116941][T11149]  shrink_folio_list+0x3039/0x4d90
[  613.116998][T11149]  ? __pfx_shrink_folio_list+0x10/0x10
[  613.117030][T11149]  ? lock_acquire+0x115/0x350
[  613.117054][T11149]  ? __kfree_rcu_sheaf+0x21/0x690
[  613.117110][T11149]  ? mas_wr_store_entry+0x5fc2/0x7cf0
[  613.117210][T11149]  ? __pfx___css_rstat_updated+0x10/0x10
[  613.117248][T11149]  reclaim_folio_list+0x100/0x430
[  613.117286][T11149]  ? __pfx_reclaim_folio_list+0x10/0x10
[  613.117327][T11149]  reclaim_pages+0x452/0x530
[  613.117359][T11149]  ? __pfx_reclaim_pages+0x10/0x10
[  613.117385][T11149]  ? madvise_cold_or_pageout_pte_range+0x1b69/0x2400
[  613.117420][T11149]  madvise_cold_or_pageout_pte_range+0x1b8e/0x2400
[  613.117470][T11149]  ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10
[  613.117501][T11149]  ? lru_gen_update_size+0x719/0xd00
[  613.117550][T11149]  walk_pgd_range+0x102d/0x1dc0
[  613.117620][T11149]  ? __pfx_walk_pgd_range+0x10/0x10
[  613.117650][T11149]  ? __pfx_folio_batch_move_lru+0x10/0x10
[  613.117686][T11149]  __walk_page_range+0x16d/0x720
[  613.117736][T11149]  walk_page_range_vma_unsafe+0x309/0x410
[  613.117774][T11149]  ? __pfx_walk_page_range_vma_unsafe+0x10/0x10
[  613.117808][T11149]  ? mlock_drain_local+0x79/0x490
[  613.117837][T11149]  ? walk_page_range_vma+0x6b/0x90
[  613.117868][T11149]  madvise_vma_behavior+0x2f63/0x5180
[  613.117906][T11149]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  613.117942][T11149]  ? do_raw_spin_lock+0x12b/0x2f0
[  613.117982][T11149]  ? rcu_is_watching+0x16/0xb0
[  613.118010][T11149]  ? trace_hrtimer_start+0x82/0x200
[  613.118049][T11149]  ? hrtimer_start_range_ns_common+0x7cd/0xb60
[  613.118095][T11149]  ? finish_task_switch+0x40e/0xc60
[  613.118123][T11149]  ? lockdep_hardirqs_on+0x7b/0x110
[  613.118150][T11149]  ? rcu_is_watching+0x16/0xb0
[  613.118189][T11149]  ? trace_sched_exit_tp+0x3a/0x130
[  613.118222][T11149]  ? __lock_acquire+0x747/0x2de0
[  613.118270][T11149]  ? mas_prev_slot+0xb76/0xbf0
[  613.118311][T11149]  ? find_vma_prev+0x123/0x1b0
[  613.118344][T11149]  ? __pfx_find_vma_prev+0x10/0x10
[  613.118388][T11149]  ? __pfx___futex_wait+0x10/0x10
[  613.118417][T11149]  madvise_walk_vmas+0x57d/0xb70
[  613.118458][T11149]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  613.118490][T11149]  ? blk_start_plug+0x6e/0x1b0
[  613.118524][T11149]  madvise_do_behavior+0x385/0x540
[  613.118558][T11149]  ? __pfx_madvise_do_behavior+0x10/0x10
[  613.118594][T11149]  ? down_read+0x2b9/0x320
[  613.118631][T11149]  do_madvise+0x26f/0x330
[  613.118667][T11149]  ? __pfx_do_madvise+0x10/0x10
[  613.118702][T11149]  ? rcu_is_watching+0x16/0xb0
[  613.118738][T11149]  __x64_sys_madvise+0xa6/0xc0
[  613.118767][T11149]  do_syscall_64+0x166/0x520
[  613.118792][T11149]  ? trace_irq_disable+0x3b/0x140
[  613.118816][T11149]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.118839][T11149]  ? clear_bhb_loop+0x70/0xc0
[  613.118865][T11149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.118887][T11149] RIP: 0033:0x7f659699e159
[  613.118909][T11149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  613.118927][T11149] RSP: 002b:00007f6597855028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c
[  613.118953][T11149] RAX: ffffffffffffffda RBX: 00007f6596c25fa0 RCX: 00007f659699e159
[  613.118969][T11149] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000
[  613.118984][T11149] RBP: 00007f6596a3506b R08: 0000000000000000 R09: 0000000000000000
[  613.118999][T11149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  613.119012][T11149] R13: 00007f6596c26038 R14: 00007f6596c25fa0 R15: 00007ffc465b3f48
[  613.119048][T11149]  </TASK>
[  613.215683][T11151] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1523'.
[  613.220937][T11151] gretap0: entered promiscuous mode
[  613.238305][T10052] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  613.260117][T10052] usb 7-1: device descriptor read/8, error -71
[  613.362953][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.364373][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.367897][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.370112][T10052] usb usb7-port1: unable to enumerate USB device
[  613.378252][ T6572] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  613.440876][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.450762][T11161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.485905][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'.
[  613.536508][ T6572] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  613.557062][ T6572] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  613.557089][ T6572] usb 6-1: Product: syz
[  613.557104][ T6572] usb 6-1: SerialNumber: syz
[  613.569076][ T6572] usb 6-1: config 0 descriptor??
[  613.787394][ T6572] hso 6-1:0.0: Failed to find BULK eps
[  613.964758][   T33] audit: type=1326 audit(1790944630.998:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11171 comm="syz.4.1527" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd013d9e159 code=0x0
[  613.985908][ T6573] usb 6-1: USB disconnect, device number 58
[  614.158142][ T6572] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  614.308893][ T6572] usb 4-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01
[  614.310302][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  614.310332][ T6572] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  614.310353][ T6572] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  614.310393][ T6572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.320039][T11170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  614.547066][ T5620] Bluetooth: hci2: Reading Intel version command failed (-71)
[  614.552881][ T6572] usb 4-1: USB disconnect, device number 100
[  614.918273][ T6573] usb 6-1: new full-speed USB device number 59 using dummy_hcd
[  614.922059][T11177] ���l����i�: renamed from lo (while UP)
[  615.070785][ T6573] usb 6-1: New USB device found: idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  615.072611][ T6573] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.072659][ T6573] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  615.072687][ T6573] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  615.072714][ T6573] usb 6-1: config 0 interface 0 has no altsetting 0
[  615.077709][ T6573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.077733][ T6573] usb 6-1: Product: syz
[  615.077747][ T6573] usb 6-1: Manufacturer: syz
[  615.077761][ T6573] usb 6-1: SerialNumber: syz
[  615.080658][ T6573] usb 6-1: config 0 descriptor??
[  615.115734][ T6573] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  615.304811][T11182] 9pnet_fd: p9_fd_create_unix (11182): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  615.326856][T11175] jffs2: notice: (11175) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  615.411778][ T6573] snd_usb_toneport 6-1:0.0: cannot get proper max packet size
[  615.412019][ T6573] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  615.420161][ T6573] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  615.620282][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'.
[  615.859515][ T5616] usb 6-1: USB disconnect, device number 59
[  615.870438][T11199] input: syz1 as /devices/virtual/input/input43
[  616.082731][T11204] No source specified
[  616.169768][ T6572] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  616.320433][ T6572] usb 7-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  616.321827][ T6572] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  616.321858][ T6572] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  616.321883][ T6572] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 255
[  616.327038][ T6572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.327063][ T6572] usb 7-1: Product: syz
[  616.327078][ T6572] usb 7-1: Manufacturer: syz
[  616.327107][ T6572] usb 7-1: SerialNumber: syz
[  616.337030][ T6572] usb 7-1: config 0 descriptor??
[  616.340447][T11199] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  616.340582][T11199] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  616.346980][ T6572] usb 7-1: ucan: probing device on interface #0
[  616.585205][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.592986][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.705415][ T6572] usb 7-1: ucan: could not read protocol version, ret=-71
[  616.705445][ T6572] usb 7-1: ucan: probe failed; try to update the device firmware
[  616.750201][ T6572] usb 7-1: USB disconnect, device number 7
[  617.082300][T11232] __nla_validate_parse: 68 callbacks suppressed
[  617.082324][T11232] netlink: 6308 bytes leftover after parsing attributes in process `syz.3.1550'.
[  617.258921][ T6572] usb 6-1: new full-speed USB device number 60 using dummy_hcd
[  617.417716][ T6572] usb 6-1: unable to get BOS descriptor or descriptor too short
[  617.430738][ T6572] usb 6-1: not running at top speed; connect to a high speed hub
[  617.430778][ T6572] usb 6-1: New USB device found: idVendor=045e, idProduct=0284, bcdDevice=36.a1
[  617.432691][ T6572] usb 6-1: config 4 has an invalid interface number: 84 but max is 0
[  617.432717][ T6572] usb 6-1: config 4 has no interface number 0
[  617.432760][ T6572] usb 6-1: config 4 interface 84 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  617.432787][ T6572] usb 6-1: config 4 interface 84 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64
[  617.432814][ T6572] usb 6-1: config 4 interface 84 has no altsetting 0
[  617.435042][ T6572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.435068][ T6572] usb 6-1: Product: syz
[  617.435084][ T6572] usb 6-1: Manufacturer: syz
[  617.435100][ T6572] usb 6-1: SerialNumber: syz
[  617.526655][T11230] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  617.766604][ T6572] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2
[  617.787571][ T6572] usb 6-1: USB disconnect, device number 60
[  617.858088][ T6573] usb 7-1: new low-speed USB device number 8 using dummy_hcd
[  617.935508][T11244] syzkaller1: entered promiscuous mode
[  617.935531][T11244] syzkaller1: entered allmulticast mode
[  618.010747][ T6573] usb 7-1: unable to get BOS descriptor or descriptor too short
[  618.010804][ T6573] usb 7-1: New USB device found: idVendor=1235, idProduct=8004, bcdDevice=0.40
[  618.012241][ T6573] usb 7-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config
[  618.012294][ T6573] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  618.012353][ T6573] usb 7-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  618.015477][ T6573] usb 7-1: string descriptor 0 read error: -22
[  618.015627][ T6573] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.103428][ T6573] usb 7-1: low speed audio streaming not supported
[  618.103452][ T6573] usb 7-1: 0:2 : does not exist
[  618.218343][T10052] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  618.315384][ T6573] usb 7-1: USB disconnect, device number 8
[  618.372800][T10052] usb 4-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  618.400195][T10052] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.400235][T10052] usb 4-1: Product: syz
[  618.400251][T10052] usb 4-1: Manufacturer: syz
[  618.400266][T10052] usb 4-1: SerialNumber: syz
[  618.438266][T10052] usb 4-1: config 0 descriptor??
[  618.445034][T10052] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  618.480584][T10052] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  618.482364][T10052] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  618.482419][T10052] usb 4-1: media controller created
[  618.522473][T10052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  618.598354][T10052] DVB: Unable to find symbol mt352_attach()
[  618.651823][T10052] DVB: Unable to find symbol nxt6000_attach()
[  618.651841][T10052] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  618.688477][T10052] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44
[  618.696633][T10052] dvb-usb: schedule remote query interval to 1000 msecs.
[  618.696657][T10052] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  618.696674][T10052] dvb-usb: bulk message failed: -22 (7/0)
[  618.696689][T10052] dvb-usb: bulk message failed: -22 (7/0)
[  618.746942][T10052] usb 4-1: USB disconnect, device number 101
[  618.884833][T10052] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  619.144265][T11254] FAULT_INJECTION: forcing a failure.
[  619.144265][T11254] name failslab, interval 1, probability 0, space 0, times 0
[  619.144303][T11254] CPU: 1 UID: 0 PID: 11254 Comm: syz.5.1558 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  619.144336][T11254] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  619.144346][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  619.144358][T11254] Call Trace:
[  619.144367][T11254]  <TASK>
[  619.144377][T11254]  dump_stack_lvl+0xe8/0x150
[  619.144412][T11254]  should_fail_ex+0x3eb/0x540
[  619.144442][T11254]  should_failslab+0xa8/0x100
[  619.144474][T11254]  __kmalloc_cache_noprof+0x9e/0x600
[  619.144501][T11254]  ? __se_sys_mount+0x166/0x420
[  619.144523][T11254]  ? __se_sys_mount+0x166/0x420
[  619.144574][T11254]  ? memdup_user+0x99/0xd0
[  619.144602][T11254]  __se_sys_mount+0x166/0x420
[  619.144632][T11254]  ? __pfx___se_sys_mount+0x10/0x10
[  619.144662][T11254]  ? __x64_sys_mount+0x20/0xc0
[  619.144688][T11254]  do_syscall_64+0x166/0x520
[  619.144713][T11254]  ? trace_irq_disable+0x3b/0x140
[  619.144740][T11254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.144762][T11254]  ? clear_bhb_loop+0x70/0xc0
[  619.144790][T11254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.144812][T11254] RIP: 0033:0x7f659699e159
[  619.144833][T11254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.144853][T11254] RSP: 002b:00007f6597855028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  619.144881][T11254] RAX: ffffffffffffffda RBX: 00007f6596c25fa0 RCX: 00007f659699e159
[  619.144898][T11254] RDX: 0000200000000500 RSI: 0000000000000000 RDI: 0000000000000000
[  619.144913][T11254] RBP: 00007f6596a3506b R08: 0000200000000540 R09: 0000000000000000
[  619.144927][T11254] R10: 0000000002002808 R11: 0000000000000246 R12: 0000000000000000
[  619.144941][T11254] R13: 00007f6596c26038 R14: 00007f6596c25fa0 R15: 00007ffc465b3f48
[  619.144975][T11254]  </TASK>
[  619.370126][T11257] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  619.442757][   T33] audit: type=1326 audit(1790944636.478:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11256 comm="syz.6.1559" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e6db9e159 code=0x0
[  619.837996][T10052] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  619.988747][T10052] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  619.992308][T10052] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.992361][T10052] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  619.992384][T10052] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  619.992407][T10052] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  619.992451][T10052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.330137][T11266] input: syz0 as /devices/virtual/input/input45
[  620.362285][T11262] ovs-dp0: entered promiscuous mode
[  620.992094][T10052] gud 4-1:1.0: No supported pixel formats found
[  620.992127][T10052] gud 4-1:1.0: probe with driver gud failed with error -22
[  621.121477][T11283] FAULT_INJECTION: forcing a failure.
[  621.121477][T11283] name failslab, interval 1, probability 0, space 0, times 0
[  621.121512][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.6.1568 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  621.121544][T11283] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  621.121553][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  621.121566][T11283] Call Trace:
[  621.121575][T11283]  <TASK>
[  621.121585][T11283]  dump_stack_lvl+0xe8/0x150
[  621.121618][T11283]  should_fail_ex+0x3eb/0x540
[  621.121647][T11283]  should_failslab+0xa8/0x100
[  621.121676][T11283]  ? do_getname+0x2e/0x250
[  621.121766][T11283]  kmem_cache_alloc_noprof+0x9c/0x600
[  621.121787][T11283]  ? fput+0xa0/0xd0
[  621.121818][T11283]  ? do_getname+0x2e/0x250
[  621.121855][T11283]  do_getname+0x2e/0x250
[  621.121884][T11283]  ? __se_sys_mkdirat+0x18/0x150
[  621.121915][T11283]  __se_sys_mkdirat+0x24/0x150
[  621.121947][T11283]  do_syscall_64+0x166/0x520
[  621.121971][T11283]  ? trace_irq_disable+0x3b/0x140
[  621.122005][T11283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.122026][T11283]  ? clear_bhb_loop+0x70/0xc0
[  621.122053][T11283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.122074][T11283] RIP: 0033:0x7f3e6db9e159
[  621.122099][T11283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.122117][T11283] RSP: 002b:00007f3e6e9f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  621.122142][T11283] RAX: ffffffffffffffda RBX: 00007f3e6de25fa0 RCX: 00007f3e6db9e159
[  621.122158][T11283] RDX: 00000000000001ff RSI: 0000200000000200 RDI: ffffffffffffff9c
[  621.122173][T11283] RBP: 00007f3e6e9f1090 R08: 0000000000000000 R09: 0000000000000000
[  621.122187][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.122201][T11283] R13: 00007f3e6de26038 R14: 00007f3e6de25fa0 R15: 00007ffd45eb2958
[  621.122235][T11283]  </TASK>
[  621.271825][ T5615] usb 4-1: USB disconnect, device number 102
[  622.089029][T11293] input: syz0 as /devices/virtual/input/input46
[  622.211104][T11296] Bluetooth: hci0: load_link_keys: expected 1528 bytes, got 28 bytes
[  622.868237][T10052] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  623.018272][T10052] usb 6-1: Using ep0 maxpacket: 32
[  623.020954][T10052] usb 6-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40
[  623.026301][T10052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.026325][T10052] usb 6-1: Product: syz
[  623.026340][T10052] usb 6-1: Manufacturer: syz
[  623.026355][T10052] usb 6-1: SerialNumber: syz
[  623.218070][ T5615] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  623.372039][ T5615] usb 7-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00
[  623.373362][ T5615] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.373390][ T5615] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3
[  623.373439][ T5615] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.427610][ T5615] usb 7-1: config 0 descriptor??
[  623.563159][T11329] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1583'.
[  623.563297][T11329] 0�X��D��: renamed from gretap0 (while UP)
[  623.588037][ T6573] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  623.690243][T11331] device-mapper: table: 248:0: zero-length target
[  623.690263][T11331] device-mapper: ioctl: error adding target to table
[  623.762130][ T6573] usb 4-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  623.763237][ T6573] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  623.763288][ T6573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.772223][T10052] usb 6-1: 1:1: cannot get freq (v2/v3): err -71
[  623.774271][T10052] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  623.785249][T10052] usb 6-1: 2:1: cannot get freq (v2/v3): err -71
[  623.785862][T10052] usb 6-1: 2:1: cannot set freq 44100 (v2/v3): err -71
[  623.794150][ T6573] usb 4-1: config 0 descriptor??
[  623.826772][ T6573] pwc: Askey VC010 type 2 USB webcam detected.
[  623.850218][ T5615] Bluetooth: Can't get version to change to load ram patch err
[  623.850241][ T5615] Bluetooth: Loading patch file failed
[  623.850268][ T5615] ath3k 7-1:0.0: probe with driver ath3k failed with error -71
[  623.854091][ T5615] usb 7-1: USB disconnect, device number 9
[  623.936072][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  623.936164][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  624.076862][T11324] befs: (nullb0): invalid magic header
[  624.082041][T10052] usb 6-1: USB disconnect, device number 61
[  624.204970][ T9162] udevd[9162]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  624.534585][ T6573] pwc: recv_control_msg error -71 req 02 val 2700
[  624.536461][ T6573] pwc: recv_control_msg error -71 req 02 val 2c00
[  624.539791][ T6573] pwc: recv_control_msg error -71 req 04 val 1000
[  624.541874][ T6573] pwc: recv_control_msg error -71 req 04 val 1300
[  624.542661][ T6573] pwc: recv_control_msg error -71 req 04 val 1400
[  624.544541][ T6573] pwc: recv_control_msg error -71 req 02 val 2000
[  624.546196][ T6573] pwc: recv_control_msg error -71 req 02 val 2100
[  624.547080][ T6573] pwc: recv_control_msg error -71 req 04 val 1500
[  624.548935][ T6573] pwc: recv_control_msg error -71 req 02 val 2500
[  624.550365][ T6573] pwc: recv_control_msg error -71 req 02 val 2400
[  624.551297][ T6573] pwc: recv_control_msg error -71 req 02 val 2600
[  624.551889][ T6573] pwc: recv_control_msg error -71 req 02 val 2900
[  624.553517][ T6573] pwc: recv_control_msg error -71 req 02 val 2800
[  624.555623][ T6573] pwc: recv_control_msg error -71 req 04 val 1100
[  624.557238][ T6573] pwc: recv_control_msg error -71 req 04 val 1200
[  624.572497][ T6573] pwc: Registered as video103.
[  624.579904][ T6573] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48
[  624.613231][ T6573] usb 4-1: USB disconnect, device number 103
[  624.836956][ T9295] udevd[9295]: 'v4l_id /dev/video103' [11345] terminated by signal 11 (Segmentation fault)
[  624.900637][T11347] .: renamed from bond0 (while UP)
[  624.901346][T11347] FAULT_INJECTION: forcing a failure.
[  624.901346][T11347] name failslab, interval 1, probability 0, space 0, times 0
[  624.901376][T11347] CPU: 1 UID: 0 PID: 11347 Comm: syz.5.1590 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  624.901417][T11347] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  624.901427][T11347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  624.901440][T11347] Call Trace:
[  624.901449][T11347]  <TASK>
[  624.901459][T11347]  dump_stack_lvl+0xe8/0x150
[  624.901494][T11347]  should_fail_ex+0x3eb/0x540
[  624.901524][T11347]  should_failslab+0xa8/0x100
[  624.901552][T11347]  ? __kernfs_new_node+0xe6/0x980
[  624.901646][T11347]  kmem_cache_alloc_noprof+0x9c/0x600
[  624.901668][T11347]  ? kstrdup+0x81/0x100
[  624.901690][T11347]  ? __kernfs_new_node+0xe6/0x980
[  624.901725][T11347]  __kernfs_new_node+0xe6/0x980
[  624.901757][T11347]  ? string+0x28a/0x2d0
[  624.901793][T11347]  ? __pfx___kernfs_new_node+0x10/0x10
[  624.901822][T11347]  ? kernfs_root+0x1c/0x230
[  624.901856][T11347]  ? kernfs_root+0x1c/0x230
[  624.901882][T11347]  ? kernfs_root+0x1c/0x230
[  624.901906][T11347]  ? kernfs_root+0x1c/0x230
[  624.901937][T11347]  kernfs_new_node+0xeb/0x140
[  624.901970][T11347]  kernfs_create_link+0xe3/0x240
[  624.902022][T11347]  sysfs_do_create_link_sd+0x83/0x110
[  624.902051][T11347]  netdev_adjacent_rename_links+0x46a/0x520
[  624.902095][T11347]  ? __pfx_netdev_adjacent_rename_links+0x10/0x10
[  624.902135][T11347]  ? kasan_quarantine_put+0xbb/0x1f0
[  624.902160][T11347]  ? lockdep_hardirqs_on+0x7b/0x110
[  624.902190][T11347]  ? kfree+0x1c5/0x650
[  624.902208][T11347]  ? device_rename+0x1ac/0x210
[  624.902277][T11347]  ? sysfs_rename_link_ns+0x178/0x1b0
[  624.902308][T11347]  ? device_rename+0x1ac/0x210
[  624.902340][T11347]  netif_change_name+0x2fc/0x970
[  624.902375][T11347]  ? dev_change_name+0x101/0x220
[  624.902430][T11347]  ? __pfx_netif_change_name+0x10/0x10
[  624.902458][T11347]  ? full_name_hash+0x92/0xe0
[  624.902484][T11347]  ? __dev_get_by_name+0xe5/0x130
[  624.902518][T11347]  dev_change_name+0x101/0x220
[  624.902544][T11347]  dev_ioctl+0x5ec/0x1150
[  624.902592][T11347]  sock_do_ioctl+0x23e/0x320
[  624.902626][T11347]  ? __pfx_sock_do_ioctl+0x10/0x10
[  624.902652][T11347]  ? do_futex+0x3e7/0x4e0
[  624.902698][T11347]  sock_ioctl+0x57a/0x7e0
[  624.902726][T11347]  ? __fget_files+0x2a/0x420
[  624.902749][T11347]  ? __pfx_sock_ioctl+0x10/0x10
[  624.902776][T11347]  ? __fget_files+0x2a/0x420
[  624.902800][T11347]  ? __fget_files+0x2a/0x420
[  624.902827][T11347]  ? bpf_lsm_file_ioctl+0x9/0x20
[  624.902856][T11347]  ? __pfx_sock_ioctl+0x10/0x10
[  624.902883][T11347]  __se_sys_ioctl+0xfc/0x170
[  624.902914][T11347]  do_syscall_64+0x166/0x520
[  624.902939][T11347]  ? trace_irq_disable+0x3b/0x140
[  624.902963][T11347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.902986][T11347]  ? clear_bhb_loop+0x70/0xc0
[  624.903013][T11347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.903034][T11347] RIP: 0033:0x7f659699e159
[  624.903055][T11347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.903074][T11347] RSP: 002b:00007f6597855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  624.903099][T11347] RAX: ffffffffffffffda RBX: 00007f6596c25fa0 RCX: 00007f659699e159
[  624.903115][T11347] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005
[  624.903130][T11347] RBP: 00007f6596a3506b R08: 0000000000000000 R09: 0000000000000000
[  624.903144][T11347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  624.903158][T11347] R13: 00007f6596c26038 R14: 00007f6596c25fa0 R15: 00007ffc465b3f48
[  624.903193][T11347]  </TASK>
[  625.152328][T11349] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  625.172326][T11353] netlink: 'syz.5.1592': attribute type 15 has an invalid length.
[  625.788001][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.790076][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.007937][ T5615] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  626.147918][ T5615] usb 4-1: device descriptor read/64, error -71
[  626.407992][ T5615] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  626.487056][T11373] 
[  626.489467][T11373] ======================================================
[  626.496479][T11373] WARNING: possible circular locking dependency detected
[  626.503490][T11373] syzkaller #0 Tainted: G             L     Y
[  626.509550][T11373] ------------------------------------------------------
[  626.516558][T11373] syz.6.1597/11373 is trying to acquire lock:
[  626.522609][T11373] ffff88805951d2e0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700
[  626.532350][T11373] 
[  626.532350][T11373] but task is already holding lock:
[  626.539711][T11373] ffff888022b10eb8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80
[  626.549186][T11373] 
[  626.549186][T11373] which lock already depends on the new lock.
[  626.549186][T11373] 
[  626.559579][T11373] 
[  626.559579][T11373] the existing dependency chain (in reverse order) is:
[  626.568594][T11373] 
[  626.568594][T11373] -> #1 (&type->i_mutex_dir_key#5){++++}-{4:4}:
[  626.577038][T11373]        down_read+0x45/0x320
[  626.581715][T11373]        lookup_slow+0x46/0x80
[  626.586470][T11373]        ovl_lookup_single+0x323/0xe90
[  626.592011][T11373]        ovl_lookup_layer+0x377/0x440
[  626.597376][T11373]        ovl_lookup+0x5e5/0x1c80
[  626.602320][T11373]        __lookup_slow+0x1fb/0x2f0
[  626.607423][T11373]        lookup_slow+0x59/0x80
[  626.612173][T11373]        path_lookupat+0x3f5/0x8c0
[  626.617272][T11373]        filename_lookup+0x265/0x5d0
[  626.622545][T11373]        __se_sys_chdir+0xa8/0x2a0
[  626.627645][T11373]        do_syscall_64+0x166/0x520
[  626.632745][T11373]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.639148][T11373] 
[  626.639148][T11373] -> #0 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}:
[  626.646948][T11373]        __lock_acquire+0x164c/0x2de0
[  626.652319][T11373]        lock_acquire+0x115/0x350
[  626.657335][T11373]        __d_alloc_parallel+0xc32/0x1700
[  626.662969][T11373]        __lookup_slow+0x82/0x2f0
[  626.667986][T11373]        lookup_slow+0x59/0x80
[  626.672751][T11373]        link_path_walk+0xd22/0x1910
[  626.678026][T11373]        path_lookupat+0xe4/0x8c0
[  626.683062][T11373]        filename_lookup+0x265/0x5d0
[  626.688335][T11373]        user_path_at+0x40/0x160
[  626.693270][T11373]        __se_sys_mount+0x2dc/0x420
[  626.698457][T11373]        do_syscall_64+0x166/0x520
[  626.703582][T11373]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.709982][T11373] 
[  626.709982][T11373] other info that might help us debug this:
[  626.709982][T11373] 
[  626.720195][T11373]  Possible unsafe locking scenario:
[  626.720195][T11373] 
[  626.727640][T11373]        CPU0                    CPU1
[  626.733006][T11373]        ----                    ----
[  626.738374][T11373]   rlock(&type->i_mutex_dir_key#5);
[  626.743670][T11373]                                lock(DCACHE_PAR_LOOKUP);
[  626.750769][T11373]                                lock(&type->i_mutex_dir_key#5);
[  626.758488][T11373]   lock(DCACHE_PAR_LOOKUP);
[  626.763081][T11373] 
[  626.763081][T11373]  *** DEADLOCK ***
[  626.763081][T11373] 
[  626.771218][T11373] locks held by syz.6.1597/11373: 1, last CPU#1:
[  626.777549][T11373]  #0: ffff888022b10eb8 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80
[  626.787472][T11373] 
[  626.787472][T11373] stack backtrace:
[  626.793356][T11373] CPU: 1 UID: 0 PID: 11373 Comm: syz.6.1597 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  626.804386][T11373] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  626.810193][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  626.820253][T11373] Call Trace:
[  626.823529][T11373]  <TASK>
[  626.826454][T11373]  dump_stack_lvl+0xe8/0x150
[  626.831038][T11373]  print_circular_bug+0x2e2/0x300
[  626.836072][T11373]  check_noncircular+0x12f/0x150
[  626.841004][T11373]  __lock_acquire+0x164c/0x2de0
[  626.845846][T11373]  ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[  626.852473][T11373]  ? rcu_needs_cpu+0x80/0xb0
[  626.857061][T11373]  lock_acquire+0x115/0x350
[  626.861569][T11373]  ? __d_alloc_parallel+0x39e/0x1700
[  626.866850][T11373]  ? __d_alloc_parallel+0x39e/0x1700
[  626.872127][T11373]  ? __d_alloc_parallel+0x39e/0x1700
[  626.877405][T11373]  __d_alloc_parallel+0xc32/0x1700
[  626.882523][T11373]  ? __d_alloc_parallel+0x39e/0x1700
[  626.887809][T11373]  ? __d_alloc_parallel+0x39e/0x1700
[  626.893109][T11373]  ? __pfx___d_alloc_parallel+0x10/0x10
[  626.898648][T11373]  ? lock_acquire+0x115/0x350
[  626.903331][T11373]  __lookup_slow+0x82/0x2f0
[  626.907833][T11373]  lookup_slow+0x59/0x80
[  626.912075][T11373]  link_path_walk+0xd22/0x1910
[  626.916847][T11373]  path_lookupat+0xe4/0x8c0
[  626.921354][T11373]  filename_lookup+0x265/0x5d0
[  626.926112][T11373]  ? __pfx_filename_lookup+0x10/0x10
[  626.931391][T11373]  ? strncpy_from_user+0x150/0x2c0
[  626.936495][T11373]  ? do_getname+0x151/0x250
[  626.940993][T11373]  user_path_at+0x40/0x160
[  626.945397][T11373]  __se_sys_mount+0x2dc/0x420
[  626.950063][T11373]  ? __pfx___se_sys_mount+0x10/0x10
[  626.955251][T11373]  ? __x64_sys_mount+0x20/0xc0
[  626.960004][T11373]  do_syscall_64+0x166/0x520
[  626.964585][T11373]  ? trace_irq_disable+0x3b/0x140
[  626.969597][T11373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.975652][T11373]  ? clear_bhb_loop+0x70/0xc0
[  626.980322][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.986214][T11373] RIP: 0033:0x7f3e6db9e159
[  626.990618][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.010216][T11373] RSP: 002b:00007f3e6e9d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  627.018624][T11373] RAX: ffffffffffffffda RBX: 00007f3e6de26090 RCX: 00007f3e6db9e159
[  627.026595][T11373] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000
[  627.034556][T11373] RBP: 00007f3e6dc3506b R08: 00002000000000c0 R09: 0000000000000000
[  627.042534][T11373] R10: 0000000001810080 R11: 0000000000000246 R12: 0000000000000000
[  627.050499][T11373] R13: 00007f3e6de26128 R14: 00007f3e6de26090 R15: 00007ffd45eb2958
[  627.058480][T11373]  </TASK>
[  627.093770][   T33] audit: type=1800 audit(1790944644.128:116): pid=11377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1598" name=08 dev="sda1" ino=2050 res=0 errno=-22
[  627.110264][T11374] jffs2: notice: (11374) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found.
[  627.152814][ T5615] usb 4-1: device descriptor read/64, error -71
[  627.269644][ T5615] usb usb4-port1: attempt power cycle
[  627.617888][ T5615] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[  627.638247][ T5615] usb 4-1: device descriptor read/8, error -71
[  627.877919][ T5615] usb 4-1: new full-speed USB device number 107 using dummy_hcd
[  627.898222][ T5615] usb 4-1: device descriptor read/8, error -71
[  628.008280][ T5615] usb usb4-port1: unable to enumerate USB device