last executing test programs:

7m26.128332707s ago: executing program 1 (id=514):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x1})
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="02007f000980ffff", 0x8)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x2c39000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4800)

7m25.994055393s ago: executing program 1 (id=516):
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19e}, 0x0, 0x0) (async)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19e}, 0x0, 0x0)
r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
userfaultfd(0x80801) (async)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff7000/0x3000)=nil, 0x3000})
r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x8000086c}}) (async)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x8000086c}})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10842, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10842, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008e27afb3d218bbeedc5e640de0002400000000038000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000003e30de14f0d14c07c3e3b34956857e65c2b84e9461d582d257b80be28edaf78287ebf178eb15fe6607b5de83bb8efd318f3bbc00f78b3a715a5e78de369db1bea022e1babaec182e306d3fdfff3a60caeffec13a59f8b0a8f0a2c5cb6a7110318d33435241414aa2795e"], 0xc0}}, 0x0)
write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='L'], 0x58)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r7, &(0x7f0000000000), 0x6)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x7, 0xce46, 0x0, 0x4, 0x2476, 0x919})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000140)=0xb283faab13df2798) (async)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f0000000140)=0xb283faab13df2798)
mount(&(0x7f0000000040)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x10, 0x0)

7m25.871364208s ago: executing program 1 (id=517):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0xa, 0x0, 0x408d}, @mpls={[], @ipv6=@udp={0x4, 0x6, "c80f59", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "2737f19c7d3c3653289a9104c02dbfdc70bea0431a23b0f8063fce146e39b05c", "869bbd9cf785d23a9cebb43d614789da", {"f3f0cb8057706a65a051f8b0ad365751", "eea00bcb0bfb26a397f5a312ea0bb6b1"}}}}}}}, 0x9a)

7m25.675579493s ago: executing program 1 (id=519):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)
unshare(0x62040200)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00446cfffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0xd)

7m25.140985795s ago: executing program 1 (id=522):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f0000430000/0x1000)=nil, &(0x7f0000684000/0x2000)=nil, 0x1000, 0x2, 0x2}) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) (async)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async)
sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x24080804}, 0x20000000) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) (async)
write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000007c0)=""/4083, 0xff3, 0x0, 0x3, 0x2}}, 0x48) (async)
write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) (async)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x4) (async)
r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x0, 0x1})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
r6 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=ANY=[@ANYBLOB="38010000100001000000000000000000ac1e0101000000000008000000000000fe8000000600000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff010000000000000000000000000001000400146c00000000000014000000000000000000000000000000000000000000000000000000000000000000000000fffffffff7ffffff000000000000000000000000000000000000000000000010000000000000002000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000200)={"7fcc64d5e5a1d8bb6a0bfec2d421cfa5", 0x0, 0x0, {0x8, 0x9}, {0x6, 0x8}, 0x3, [0x6827, 0xe2, 0x7, 0xfffffffffffffffc, 0x6c5, 0x30757598, 0x9, 0x3, 0x8, 0x80000000, 0x9, 0x3, 0x8, 0x3, 0x5, 0x7fffffffffffffff]}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) (async)
inotify_init() (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000017c0)={0x0, r5, 0x9, 0x1, 0x7fff, 0x2})

7m24.750135359s ago: executing program 1 (id=523):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x90000)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0x2b82, 0x80000001, 0x5, 0x89, &(0x7f0000000040)=""/137, 0x48, &(0x7f0000000100)=""/72, 0x1000, &(0x7f0000001180)=""/4096})
sendfile(r0, r0, 0x0, 0x7ffff000)

7m9.76917552s ago: executing program 2 (id=587):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0)
pipe(&(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r3=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r3, 0x40, 0xa4, 0x7, 0x732, 0x9}, &(0x7f0000000400)=0x14)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x10, "3498125f4cc3035fa82d7d4272ac6210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$media(&(0x7f00000000c0), 0x19, 0x280000)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000040)='squashfs\x00', 0x209002, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22751735810203010902120001000001000904"], 0x0) (async)
pipe(&(0x7f0000000040)) (async)
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r3, 0x40, 0xa4, 0x7, 0x732, 0x9}, &(0x7f0000000400)=0x14) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)={0x0, 0x15, 0x10, "3498125f4cc3035fa82d7d4272ac6210"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_open_dev$media(&(0x7f00000000c0), 0x19, 0x280000) (async)
mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000040)='squashfs\x00', 0x209002, 0x0) (async)

7m9.746712793s ago: executing program 32 (id=523):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x101, 0x90000)
ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0x2b82, 0x80000001, 0x5, 0x89, &(0x7f0000000040)=""/137, 0x48, &(0x7f0000000100)=""/72, 0x1000, &(0x7f0000001180)=""/4096})
sendfile(r0, r0, 0x0, 0x7ffff000)

7m9.713799661s ago: executing program 2 (id=590):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0)
syz_usb_control_io(r2, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003160000000403"], 0x0, 0x0, 0x0}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000040), 0x10)
sendmsg$netlink(r3, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0xc6c82)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000240)={r6, 0x656, {0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x10, 0x9, 0xc, "37770a657d93789e28a6303c212a47083013296c28d1b9f70a2fdcac1859d4133181b007101b935afe214a10e2917fe8a79e1507de7627a14c4af71a315f36e3", "01f380d7ce5b0e1af1099e289d6ca329f97898518f75272997124fe3c1086e5fec6119317a98a4d82dbf11f5514457a0241cc22503ff4c6e166dce65e8a08ef8", "64fa4f57fd289235d87f78dce7d81dd3854fc28446c4faf44ae906e294efe8be", [0x7f, 0x8]}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

7m8.509354925s ago: executing program 2 (id=592):
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async)
mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0)
r0 = gettid()
syz_pidfd_open(r0, 0x0)
capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0xf2c, 0x800, 0x3, 0x2f, 0x1, 0x9})

7m8.314083901s ago: executing program 2 (id=593):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed21", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvmmsg(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/106, 0x6a}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000180)=""/112, 0x70}, {&(0x7f0000000480)=""/175, 0xaf}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f0000000340)=""/7, 0x7}, {&(0x7f00000006c0)=""/99, 0x63}, {&(0x7f0000000740)=""/94, 0x5e}], 0x9}, 0x6}], 0x2, 0x40, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000900), r5)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000)

7m7.994241958s ago: executing program 2 (id=594):
r0 = socket$inet(0x2, 0xa, 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x880)
mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x100010, r2, 0x8001)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r4 = accept4(r3, &(0x7f00000000c0)=@qipcrtr, &(0x7f0000000140)=0x80, 0x80800)
ioprio_set$pid(0x2, r1, 0x4004)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={<r5=>0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x4}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r5, 0xa}, 0x8)
write$UHID_DESTROY(r0, &(0x7f0000000240), 0x4)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r6=>r3, {0x2}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x4, @private1, 0x9}], 0x1c)
bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffa}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)={'sit0\x00', <r7=>0x0, 0x8000, 0x8, 0x8, 0x0, {{0x6, 0x4, 0x2, 0x2, 0x18, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast1, @loopback, {[@end]}}}}})
setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f00000003c0)={@multicast1, @multicast1, r7}, 0xc)
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000400)=0x6, 0x4)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x40)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
splice(r6, &(0x7f0000000440)=0xb, r8, &(0x7f00000004c0)=0x10000, 0x1, 0xa)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000500), 0x40001, 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x1, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008}, 0x20044041)
ptrace$setregs(0xffffffffffffffff, r1, 0x6, &(0x7f0000000640)="a1ff3a125a44400a1ea61240a8969f8d7e69c2eacb8ea1233c22036c67206c6642ce2111396885633542fb52843a91e494f4cea52feb5c222deb4a9c75b76167d89da1ae2e96d62e2d71737a83ecb419f71c443949cfd4f035b0693b98acf10ddf7ffbf3db864c311c16d1505484a97be9b175a091f87b4f6ea101f3ec170c92e672a8684b2b357a5d26183a3fc8c8a3109cce07cbfcf0369b4017d2b2f49b67ba2434a291a369ea6b1f9e16f45c0927725595916ad50a0886a02bd1")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000700)={<r9=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001700)={<r10=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000002700)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r11=>0x0}], 0x3, "ffc17b28ed2500"})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000003700)={0x0, ""/256, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000003900)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r13=>0x0}], 0x7, "4f504a52ae226b"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000004900)={0xd781, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r14=>0x0}], 0xc, "b701ffab6904b1"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000010dd80)={0x5, [{0x0, r9}, {0x0, r10}, {r11, r12}, {r13, r14}], 0x8, "29b257c7b9b162"})

7m7.191273219s ago: executing program 2 (id=595):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
fadvise64(r0, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

7m6.84232912s ago: executing program 33 (id=595):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0)
fadvise64(r0, 0x94, 0x6e, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

4m4.933167497s ago: executing program 4 (id=1480):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x1000, 0x0, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0xb9, 0x0)
close_range(r4, 0xffffffffffffffff, 0x6)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000000c0)="89a4664aaf5c02ff1d7528e21c2097783ed0d394e9354562823f5f01fda1fb2d272a6609d2c5d581509bd554249a66c3eec160bf591b03210ef2cf03440a2cfb54756debbf2a9eec4367b9dd0c42f0e8735f7cb8a0e7a4518bd8abbcefa4ca8d1f5fa28dc295978657fe9396c841a3dcff8c2f91c21d50361bd2dd82943226c34f15", 0x82)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)
r5 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x101000)
ioctl$I2C_SLAVE_FORCE(r5, 0x706, 0x28f)

4m4.829998862s ago: executing program 4 (id=1482):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16, 0xa2, "4c9056c6bf9c0a46384e3775a00c3129094ec48a62a646c6e7059c33941b1130722cb1064b765ce0d5d84948010bbb37a3b3e7594935a96191f697f8e7bd5ac2be11a368245ecddc01783d3d1c91848b49cfecc440fe3ed82d727fa4beaf00008aa300130c9dee6a8ae3745f7f20c54e012b4343bdfe1e9ee041409dbb6ff918faa5023f45d4f7206f6c5284d7b76d539c782196b76e2000"/162}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13, 0x5, "19fa4937a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4m1.54896339s ago: executing program 4 (id=1506):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0x2, 0x15c2, 0x5505, 0xc3bb, 0x0, 0x0, 'syz0\x00'}) (async)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x20}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xa0}}, 0x44) (async)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './cgroup\x00'})

4m1.327646176s ago: executing program 4 (id=1507):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x220000, 0x0)
fcntl$setflags(r1, 0x2, 0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0xc)
chdir(&(0x7f00000001c0)='./bus\x00')
unlink(&(0x7f0000000100)='./file0/file1\x00')
rmdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
removexattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='a'])
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

3m58.861547245s ago: executing program 4 (id=1527):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x2}, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000f5ff00000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)

3m56.715395685s ago: executing program 4 (id=1532):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x800000000fe, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
syz_io_uring_setup(0x3a60, &(0x7f0000000000)={0x0, 0x5e6c, 0x8000, 0x80000000, 0x6b, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

3m56.463706874s ago: executing program 34 (id=1532):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x800000000fe, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
syz_io_uring_setup(0x3a60, &(0x7f0000000000)={0x0, 0x5e6c, 0x8000, 0x80000000, 0x6b, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))

2m46.405458351s ago: executing program 5 (id=1968):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8949, &(0x7f0000000040)={'bond0\x00', 0x1000})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite\x00') (async, rerun: 32)
syz_open_dev$char_usb(0xc, 0xb4, 0x5) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x68d01e15f18a8567, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x2, r4, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) (async, rerun: 32)
close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010126bd7000000000002b00000008000300", @ANYRES32=r8, @ANYBLOB="0400460007003400c4000000080026006c0900002400518020000080110005"], 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4024000) (async, rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 64)
r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x85)
ioctl$BLKGETZONESZ(r9, 0x80041284, &(0x7f0000000080)=0xfffffffa)

2m46.34568977s ago: executing program 5 (id=1969):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, 0x0) (async)
fremovexattr(r0, &(0x7f0000000000)=@random={'btrfs.', '/dev/rnullb0\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000)

2m46.078226596s ago: executing program 5 (id=1970):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x5b, 0x7e, 0xc8, 0x40, 0x5c6, 0x9000, 0xbb9d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x5c, 0xc0, 0x16, [{{0x9, 0x4, 0x4, 0x1, 0x0, 0x95, 0x31, 0x7f, 0x1}}]}}]}}, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r1, 0x102, 0x0)
getdents(r1, 0x0, 0x0) (async)
openat$incfs(r1, &(0x7f0000000040)='.log\x00', 0x688082, 0x68)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000)

2m45.113174401s ago: executing program 5 (id=1972):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d440, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000020901020000000000000000010000050c00048008000140ffffffa67dc28778250cb36e94fd0c000480080001400000000c0c0004800800014000000002"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008050)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x2000)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x1, 0x0, 0xe00, 0x0, 0x6, 0x8000, 0x1a, 0xfff, 0x1, 0xfffffffffffffff8, 0x2, 0x6, 0x9, 0xfffffffffffffd12, 0x9, 0x7], 0x2, 0x20080})
madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0x1a, r3, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000578000/0x2000)=nil, 0x2000, &(0x7f0000000080)=""/45)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
r4 = fcntl$getown(r0, 0x9)
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r2, &(0x7f0000000240)={r2, r1, 0x400})
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007)

2m44.846113087s ago: executing program 5 (id=1973):
sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4004000)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)})

2m44.558995595s ago: executing program 5 (id=1974):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13, 0x5, "19fa4937a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m44.334139774s ago: executing program 35 (id=1974):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13, 0x5, "19fa4937a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

27.370071392s ago: executing program 6 (id=2809):
socketpair(0x22, 0x2, 0x3, &(0x7f00000000c0))
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xfffffff9, 0x3}]}, 0xc, 0x3)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000000090001"], 0xb8}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x2c39000)
socketpair(0x22, 0x2, 0x3, &(0x7f00000000c0)) (async)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x4080, 0x0) (async)
fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v1={0x1000000, [{0xfffffff9, 0x3}]}, 0xc, 0x3) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0101000000000000000001000000090001"], 0xb8}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async)
sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc00000800090005000000080007009801000020"], 0x234}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x2c39000) (async)

27.186227753s ago: executing program 0 (id=2812):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f0000000100000fff58000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

27.0767572s ago: executing program 0 (id=2814):
creat(&(0x7f0000001380)='./file0\x00', 0x29) (async, rerun: 32)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (rerun: 32)
r1 = syz_open_dev$sg(&(0x7f0000000240), 0x9, 0x1)
ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000280))
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000001480)={0xe})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x1020000, &(0x7f00000002c0)={[{@redirect_dir_nofollow}, {@index_off}, {@redirect_dir_nofollow}, {@xino_auto}, {@redirect_dir_on}, {@uuid_on}], [{@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@seclabel}, {@dont_appraise}, {@permit_directio}, {@appraise_type}, {@flag='ro'}, {@smackfsdef={'smackfsdef', 0x3d, 'ntfs3\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'permit_directio'}}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '/dev/sg#\x00'}}]})

27.022454668s ago: executing program 6 (id=2815):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0d4e01051d6ff63"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="06282afdb3ac30448c5af284e8c6f7a9"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="08e0f23e5814c761bd5b4310649505c1"}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async)
sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe2(&(0x7f0000000200)={<r6=>0x0, <r7=>0x0}, 0x0)
vmsplice(r6, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, 0x1) (async)
openat$cgroup_ro(r6, &(0x7f00000003c0)='memory.events.local\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r8, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1ffff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r9=>0x0})
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000580)="ec19d628c23b092d0818da18da586b446b2d1861644664c29d9b4601165ac24fc5db6ca0b1f644ad35eb3ee9884fe67e2f0b72f77581d6b7bc6e92dda1ea0cb385aa83e25ff32932aafd890a02bb0c868fe9258838f02ba46f8b03cb238406bc8709de4ccdc0b3c07d3e3689c8a00d3093634a942be877b7f809581a711112f1f93715da802f11a2a8cac69a2ac38125bb1ab1", 0x93) (async)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x54, r8, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, 0xffffffffffffffff, 0xd6baf000) (async)
r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000440), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r10, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '-+%!\x00'}]}, 0x38}}, 0x4004098) (async)
r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r11, &(0x7f0000000280)={0xa, 0xce22, 0x4009, @loopback, 0x6}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) (async)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0xe8, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x9}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa727}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9827}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7db}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3647d825}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35ec2d2a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe885}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3bf515ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d1e2ade}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c1f66c}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d5fbbf1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e8}]}, {0x4}]}]}, 0xe8}}, 0x8000) (async)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="26011001d4f86140d804830047da010203010902380001020840b3090400b20102020194052406"], 0x0)
setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async)
sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000008c0)="84", 0x1}], 0x2}}], 0x1, 0x4404c880)
sendto$inet6(r11, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) (async)
socket$igmp(0x2, 0x3, 0x2)
mremap(&(0x7f000026a000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000005c000/0x1000)=nil)

26.938139361s ago: executing program 6 (id=2816):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

26.914962437s ago: executing program 0 (id=2817):
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)

26.655591182s ago: executing program 7 (id=2820):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0xa8200, 0xd6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a00000006000000000000000300060000000000020000003b8bffff"], 0x50}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="a0000000250001002bbd7000fcdbdf2526dd187513"], 0xa0}], 0x1, 0x0, 0x0, 0x4050}, 0x40)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x7fffffff, 0x1, 0x3})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x81c0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200), 0x0, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x1, [0x80]}, 0xa)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc048840}, 0x40854)
socket(0x23, 0x804, 0x2)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r4, 0xf648d000)
madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

26.603177543s ago: executing program 7 (id=2821):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x24014802}, 0x40001)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x2000002, 0x40010, r0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='exfat\x00', 0x0, &(0x7f00000001c0)='discard')
setresuid(r1, r1, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x7c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010005000000000000000000000a20000000000a01020000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000020900030073797a30000000000900010073797a3000000000040004"], 0xa0}}, 0x0)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r3, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x3a2cc68b}], 0x1, 0x40002000, 0x0)
getpriority(0x0, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
add_key(&(0x7f00000000c0)='.request_key_auth\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)="2661435342846c73550d7550c37c6c2be0f39513999463eaf24c5d773ff1efd7b4d1e1fa3342bbad68e31f84", 0x2c, r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d80070003"], 0xac}}, 0x0)
bind$802154_dgram(r4, &(0x7f0000000140)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0xd)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000080)='ntfs3\x00', 0x40, 0x0)

26.498174461s ago: executing program 7 (id=2822):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'bridge0\x00', @ifru_ivalue=0x2})
ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x67c21000)
r4 = getpgid(0x0)
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0)
fadvise64(r0, 0x95, 0x2, 0x5)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'bridge0\x00', @ifru_ivalue=0x2}) (async)
ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x1010, r0, 0x67c21000) (async)
getpgid(0x0) (async)
sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r4}}}], 0x20}, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) (async)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) (async)
fadvise64(r0, 0x95, 0x2, 0x5) (async)

26.495422806s ago: executing program 7 (id=2823):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r3 = socket$netlink(0x10, 0x3, 0x0)
write$tun(r0, &(0x7f0000001f80)={@val={0x0, 0x804f}, @val={0x2, 0x4, 0x3ff, 0x9, 0x0, 0x9}, @mpls={[{0x800, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xffff9, 0x0, 0x1}, {0x9}], @ipv6=@generic={0x0, 0x6, '(_q', 0x11c9, 0x5c, 0x1, @mcast1, @remote, {[@routing={0x2, 0xa, 0x2, 0x5, 0x0, [@mcast1, @mcast1, @rand_addr=' \x01\x00', @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x88, 0x0, 0x6, 0x1, 0x0, 0x16, 0x67}, @dstopts={0x5c, 0x209, '\x00', [@pad1, @generic={0x5, 0x1000, "9b1d6812c980e357dafda51bce970403779033599d13a8f33c349a37df6816b268a4cc596b3bc1d2e22a52ffcce51fc987354a8f11cafaf94a86a1b588a7dc955f01e49ec4a7985b325af0d0c2e1b83aaf42a8cf7087f609f283be80ffab336c4b8a8e6941826218b48e46b75cfbc50570664b71731f44f645b5a7311601ddc0a357deee6ebe25eef7c3970d3955ca69b74c6271681bc97b94cfa574df56b898ebb1f355f100eb48ebee73fe4bd020ded3bcb9b1f2a16995df99cf861fb9588ed15eb440fbb4bd65c141c920c0e971ab2fc1dfdadd7736874c33668fbb023bcdf0cf507ec66ecdab09006f8c7a3aae1be658aa0b03bc00cfc3842e1d689cf819305cf6a3b7a34d372609d4e4de4bf040d467d9a0ef0cf68c83164a1f4a81588f9e52340d7fcb9a04eac8897f361052e9e07b550a7b0bc5e721e74bf8a366d3897f01004f953192ed8affe7fec548bf3617416e8321870bb098009f9354f8a868656f1ebe28ffcc4da3e532db75727bc08d2bfc084c243ff221878745a30db1d0b7afdf275a4353dbe814ff97be4550fe76b34f93131b346ca6039305209fe1e08ea5656dbb55237678823384dafff2ab4926712138f92c92428db447c00d4c6fbc7b55c58b243aa5a54d9abead6225bbf9f878e5f3343eb204b4a2302d0e92278324d16723099f6ac04bb3a7dbab51a0d1e2e30592110fd499286ba9c8e8a2e5f2525f9fee62741ef823f543ecc1994ec469bb01b4b9c529d1faf65e0eeb77931b7629e1e1d04d220c51568dee8d6acda15b85c108ecec0c3a0f4b7cb3af2bb343ff5972643f1ee53aec71d11fdc68aa0b2dbaf087ffa34bdd7058bed0bb015a547f53380304dfe5ae3e1b6e2a59fb1ff898c9bcd2d1f209813e1d12438b25e4655a8568430df7221c7387542bc3d73906013ef0f1543c9d628ac9873f9bdaaf005b51133aac7767c697d355e6d9d990233675d6f5b15f15f9360233300e6b3d35d78fb2a39b12e121894510438512bdd508ecc9e5cf1b805a4d7fb1bf8a22c812d7e7e7a4182236759bc2dc86f7774a73e5953983ed85333a65c093fe93433d51c438d5057d5afac20d27b679e8c775a1ab03514158f854b8c8aa15fc44506bac78a9b6b5721f866b9a1ab6488096a755fa5006591858995572e1118f2a5a5b9df2d94b30d598f60daa9bc5b662cb110bee0a5d2e650fe26a680ad96d18f5980601d17193d537c955b1543709c0fbd5c22e1f4245f99162fcf85d66ef83e99a722ca649876dd5dcd10bbd53239675065fba64007309f51909676c2abafe4c563a0651d4228441c79d49888fcfffd2f1f06fde729b455c1067662a284d8f413e0041f59dd5c1ff03fb2c1177a6accff96932e0dcd7e38d3469a9cee91ef556c96cb52f460c38ab03945ae53ef60f89997b616bfa02d984c93908a0e27b67d805efd953518fa664fdb56eea9b92f03e8d63c3e570ce31109c887755e7c3c65883f0f7718f757bfe9ea25386577721ff4964255e9ceaf324233b0ecb48c4dba819cb26617410f88318e5091abcbde0ca2b3d81f76c5d3fa9311f785363ae5847be646b8df9c0a384070660acf69b0766ba01c203852b58ff08c44b1063228054174ceb0f0113921b9db352864cf45a518bf5f8edaf35747910eb1d8870034e4ab805b92cc94092ef2f057a398c0622a95784f5f7d9d3c5d01f38f607584bd159267044a8e1777a2b0b4e83d5558149ae39d7c9fec76ec7cb8141183f5503cb903453ee9a23e9ce05aaa7f0fdf9acf52e5ccbaba6219b49d60d8e5ee125d9d0bf89f4cd75a5a77a404b600c5e87bc55f8fb3c64af4802eebb5d33b8a11ba9fe2d7365f376890be1123226cd88996dd6832e8bddc0565e90fb59eb210445e19aea11214b0c02b40d2a9abefdeb51403c251cff615fe462952cbd7ea59d184f011d1bf07557fce9b7396c3f462fcc4c75cee86a68bdce51b8f73cd0b076a83beb721332ab78b9f74adf6ba3df0158e4b828a9119cf2691a6b2c7110946415764eb5ef7dcf441d84ce6a87ba87e23fd2cf6055a60f165b2e507459970f54a7a5fcbbaf5955668bae0a8f25d18c2d111947a71c549087eddb08dc2804abeac5d96be421667e12863444a39d8cff6c62ec78d2f0eeb8ef0e2ddee70e12141bb7f8f94c69631d7fc8a5dc10745717eeb124abc1aff9d24010ea038aa7b28b35ac16fd94f83c3102840a01f1b68a452f48c778f797a645cf4d6c98157bdbf4b7a68fc3a0f0e3ba23cd8f099490b3d160fa556a3466738c450fdb39d763a35fe066b9184214f552b2ee8ac693e22b694030088e8e81dfd5e5262dfa54c2e4942ef392a4f8bfe0dcf7324a505699905607eeca3a35d638914763ad1c6d1b7a6e27c6338cd2f3cf731102629d84117b2a5021f6407af371743ba15d2eff8aff0dea90981a8ec5c13309d6feb3587aba4306efaf0cb6bd715cda92e3ae135371e1f050926e5ef30764919b80f6a68f7b8af8de1f2af6da19542d48faae548fba14706fb13630d7a91b812fa01d0eec894ba122daa150d05e5af6538e75fc486a5e7039837ed232f4a1b4b88a160fd82b87e1b6f6c5376cc13bf8714bd58233cfc99b321358ac4a864069b91c7243bd6cd8ee649bbe1f6c9b89dbbf16661623ef95f639cb14f42833e932ec891c84377001e79cbbb1137e79a49ab5dd4624c79bcd84e92e3602f374565ff107402c7a8f6c2d9cc916d3839ca03255c346a942bb949ce988b44c57214493fc70d7b62c1865c0670258a9d1552f5873988e5a03b61842a022145c6b68c8702559969a3fd02fda37066603f82d7e025b8ef5ef282b30ec41db211fe968ea15d2dcc31ab632733ad409ba177090f9cdab07ad68b624dfa06e2dd51a74a95d71b21665360f169c54433f128cd6e7c076b0801577a5fcddf3461f9651aa25c5e5a55d1d9bcdd5977089802b9a26c27c8f8fc0673e1384154cbb22dbe69dead4c12db5ef720f323b2c87aae6499b02754f9798038155d18790e75de72882891b52809b27da6d3add461ae58cc4edfb74fa1df014c437c3a5aefd9a4fa950af7b29a4b7cffdae0cca154c6225cea83944a3cc8a1cbc076f4713bd5f6907b63ec06dc25e58d65c141b8ff154bd1bc0e367536f35473a598cf9cc797f456d9e23071ee33a2b71866cf7484b2eb1963c404eee9e20ae597fd3ff226ddbfe25e3d424b14dabe58f7f7e321eb77c10f8587ab04dc2ef49de95255a396e61dbaee7e3a1fc2f488bbee3e1750197afa8c88be8e5ffcfe016ef361c012dec5dcdd74d0af1977563d89031e903cda252d653c3060057c95371700caec6e702f7de1ea28a53170f8667f6b99d7cf46ce619b500f1181cbcdc0a7e2c24a2abdebddbbef3b684a5f0b4a6f00aa073aa6b89aeb887dd7f6ee0f6986f44ccaa16ca98b7bfb98faf2c843300edefbea55ca4c2d1bc6b8ba8ec747a3a02cc78a7fd29a40f7054e8a2fdc03fcdda29e05eabaf7b7fd5a340197f8428757bc6f10a555a0648e54ea91554dd8cba7fab5b7395882b92c3e643bebdfb295ef20c53f0e0768230a50a92a03ff5df4c28e8eb019bec83ae82c284077a759354284a141a1ca76cc9671a9d0eacbd99a576f7fae6c23cc60bad03163b1594bea38e75fc241524ab0c133053590b58667b55c065f638335360c504cb0d4c266b5300bb62d644a9c472bfbbae1cd3348d6e27a37fe99af0bd0f4faf9b58ff1ebcee1e1a993eeb2241008d5f5e63ca3222131995c978e5eaf04ab1a6b32d3425052b4cede894b9c901db58dd4cc324ccfd916545dc3d3497f533de81351e3eecec721371050b607e7fa96fa63f4cd5a264ec4a3508a52fa80feeaa73ca383995c3c022acb171460897a3025ebe939a1bab02e3b6a338253be7ca36e1c2a33345f250f1435009702fd8d4e372626c6275ca270dfed7693c439c50d9de4e366dc9129c549830febefb558b65c082f2c9d9cd6ab03c66a30c7064878a4b82f17ee205d4fe02f0c660418134aad10b351e4fbf2f2afb6c447044d54148547f42f82b06bffa29c08864143278449a297c5af70bfad37eee808dc1babcca3a6bfbdfc27d6b034cfdb957fccc6cf63251978748aa7bd2ff8f9ad59aca0a8c76445d33ab4811493696f76543b7c797bc974aa298fe955c35f0b6360b9f559f5fdea48c783d6e9e140bc4402c7614d569d54d2ec554e22cb1eef977469735aa61bf5b09b2ade3196ed8b383ec83cde161f77028ee3cb4cbc31f5bddcfb64f2ae0de2c7391b31a47af61ba02bef3a684c690ee286645df3fb0e8adae330194406e1a4fe1ddafcdf385a6d592e1520da4c2814cf6ac97edc535f6dbad397b2b2ea6da0176f14e4931a247bbfe13b94ad63461d7ce0a9c847f5a75854e8bd4451bed8fc93048aeb13c7deb4dbbf2757a4cdaf5bf38d8782fa8e52b5b74e7c3b43bc8a1a4f1ee4b3445e7990a28f98b21d7674918b97968f363fe33bff61e0879700d6e672c46eb39f1cf24a5bf81a6de3be0cf50b699269dd2ae2dcf2bb8a37dcc63c9e3700debfe51be0c355ffa7e5f104d7bb1d91ae664111efda6b5fd3bc5c471c1d46bebb372fdc5efda1cb947259408c58a8e2bc5c779e3e7be9e73363573958e2c962e1988a1b457d824dfab0e2d77a302f97122186024ec9551f8f2d128b9e4cfdb15d8595145bb492c2ddd713a7fbbf0f246caf903fc2bd67da2cffd806ffabbe2b96cb99977a73ce444dd7d8aec39741c21f431ffd4da6df6e6ddef2b98d8941dc05a8ec8d063e5b52660b7b77d5af23efb6fbbb014e7289058424e599b1062884b74cdc8d8e4ea57c9722875bdba6a7dbf59fc71ab8ba67b8d80156d5958c7fabf4d67f553c493017852b24a7c428db7eb7615345e1394ea94c3ef32ba22c87bbd5820c7923791e35e31e717f5df24da7c08be7d3f3f99f719b748997c485b745786eab10fd855a3826a32f71509491d166786728d60c575e6c4d39bd865f835d63d0efe10da4c01563bcef10be030c494c475be926a8ee4c4344a6d0b1c307a36e0c12d6be82cc2c70dc73afd06139430f7050a3f3f3390c46287d3fadbc4a39f29e368dbb0aec20170b05e78df23a91e6d387cb8d2850c9a94075d6819ad05d03c3be1618edd2ce98c61b5bc8701fb63a09a3eb07d1119b7baa026d2cd3ccfedc9634157e97909e365e710dbe7070e1f383a02beb49223d2f5a1cf4fbf305ccc098a9fb9678ab934d85649cf3027d19743cdc16bd9131ed6be6ea0da4573d6659cb29320abcf87600e0fc927795aa0f4ec0006f2eeab79a7126cb0b99ad11326b14da6174a6892823b8eb0e29502d4dc4ae9e8e4cecf73abfbda40667c358f0850585597321f461cc4ffb36b291c925c740fbd2bdf0604a5d40731baee513eaf921534cac7ca8862234597e9bdf54a619bf2df2b119d2afd8cd138fcd272fe48a2f5cafa195bedd7e9f78f998469ef6867a2c6509a4e22f936e345eda47551c3a70fecd491f764b7a9c17e016a131e28e89c5fcdf6e0d51ebbb51b9a8c6316d4bcf1dff9faa93ff629f51fe1c3bf8399e7cc606c2d661bd9e0e5560b96c9c07bd9d1b1aafb98d701507f8d08c4db5250fe095f79265d70972304ef21634de82c250c9d24508f397e8e75ecfbcc846f45214dc77a483c28c9af68aada8a02a515c1b5d9ebdc4675ecd088296a2417916d2322f831bdc5f51398a9e809a98fc12144403cac77d047c65d465783f33320061e84b6692b1db4090bf7bad633a5d9ea7d3ca2f4bdc364368decfd11"}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x7, 0x40, "abbdc2e044314cd04b4d01b780b420943084e64145ef8865cf15822bc08f41b1ab84d0f592ba402c7765b2a19c9ca55dc828ee261d680a153965a1566275bc99"}, @padn={0x1, 0x1, [0x0]}]}, @dstopts={0x0, 0x5, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @hao={0xc9, 0x10, @mcast1}]}], "c7311e2c8a6da27dfdeffaa6665fac7d50a8101bf0688b8a3f5d352e40e82eb35689842f08326b08aee8a7b5c9ac8f8cdf6aee575347fcf9d9c077225fb088c663bc1a356a47f41eb448b9379b7238a962a4b0f452208db0c04392e19822dd4fc4738d7d00186a8d9fd7e89b80e49af7c2db5fbc77f9ce6ae17819317b2705ee05ab16c096a60534fd219cf6c999bdb9b2a56239b27dc319d51f3430d499c6eb832e91a0366a77a23da597e2f2ef7f9314279fdcf7411fce5b9f57e2180e97b93332d086f35f1b6f70ea6377d5f8d8be25acb54b06ab06b05e"}}}}, 0x120f)
sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x25, 0x1, 0x70bd26, 0x0, "", [@typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000114000229bd7000fcdbdf250800010001000000080001000200000008000100010000000800010002000000080001f9ff00"/72], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4000001)
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900640d00fe8000000000000000000000000000aaff0200000000000000000000000000014e244e22006490780200000002000020e20000000000009c7d3c36"], 0x9a)

26.414583771s ago: executing program 7 (id=2824):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x0, 0x8, 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0, <r2=>0x0], 0x2})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000140)=[0x0, <r4=>0x0, 0x0, <r5=>0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, r2, 0xcccccccc})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000004c0)=[<r6=>0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x9, 0x3, 0x2})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000640)={&(0x7f00000005c0)=[<r7=>0x0, 0x0, <r8=>0x0, 0x0, 0x0, <r9=>0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x8, r2, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000900)={&(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000880)=[<r10=>0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x6, 0x1, 0x1, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000a00)={0x101, 0x3, &(0x7f00000000c0)=[r2, r1, r2], &(0x7f0000000100)=[0xfffffffb, 0x9, 0x4, 0x0, 0x0, 0x95b, 0xfffffffb], &(0x7f0000000980)=[r4, r6, r7, r10, 0x0], &(0x7f00000009c0)=[0x8, 0x7b0], 0x0, 0x4})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000b40)={&(0x7f0000000a40)=[0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, <r12=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x9, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000c80)={&(0x7f0000000c00)=[<r13=>0x0], &(0x7f0000000c40)=[0x0], 0x1, r10, 0xdededede})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000d40)={0x1, 0x4, &(0x7f0000000b80)=[r7, r11, r9, r12], &(0x7f0000000bc0)=[0x3], &(0x7f0000000cc0)=[r5, r7, r13, r4], &(0x7f0000000d00)=[0x8000000000000000, 0x4, 0x5, 0x7], 0x0, 0x5})
ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0)
r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000d80), 0x121000, 0x0)
stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
quotactl_fd$Q_GETNEXTQUOTA(r14, 0xffffffff80000902, r15, &(0x7f0000000e80))
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001080)={&(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x9, 0x1, 0x4})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000010c0)={&(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, r16, 0x6b6b6b6b})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000001100)={0x7, 0x7f, {<r17=>0xffffffffffffffff}, {r15}, 0x1, 0x8e14})
move_pages(r17, 0x1, &(0x7f0000001140)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4)
r18 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r18, 0x89f6, &(0x7f0000001200)={'sit0\x00', &(0x7f00000011c0)={@private=0xa010102, 0x1, 0x0, 0x20, 0x0, [{@local}, {}]}})
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
writev(r18, &(0x7f00000026c0)=[{&(0x7f0000001240)="f066aefe9e0eb704d2f79c6a60c9c984a87a9345cf27dbbfcf890e662974ae0fd5aff3d0dfa40796a0acdd2a2bca2d767032054d84ce7ada93cb27130dd8d4f910620e8af067bb2b67115fac0f2f8dd2e0d8c3de84c2289ff9a37213e92a4979900377dbe5fdb80519774886ae56bac00a0166f6849fded713c0e4f6a13c34c05e514951ea0885", 0x87}, {&(0x7f0000001300)="9f2ad0df47e59088ada9cfec37a672f8427f8454be89566f597cf54214e2eb561faec535310f4f35977372926c6c4ba76ae03062b524cf2fca00a9726e195bd805079ad38e092004805e34b1d7cf7a1c4d4f95d4fdce225398cef6c1b021b6ee9b3a6b3982b4b3e3b21a8e9d81f9edd7277d381cfb7399d10a915685957a30a1044befa130ebe8307a64fcea70e2901a03ce4fb5b1a79718e4fe3d675f4ecf8daa6778f8c8b0eeb66e668c8bc214616c38dbc74cd3112ed3c41c79f689821925f27d977a9f7abb38aadf5450d7d6810ad22a69d1c26705aad0a1648c7ba7cc345cdf9be8470094ef80f4", 0xea}, {&(0x7f0000001400)="7bb076e97dda0df7c9f519da55231fdde1a08adf62b05e620ea4f087cd403c68e66c5892d17752053f91f0d43ce04b5270cc7a4be962d18a8fc2ac671acfcb25f514883bd285a1370d043a7d56966a293a0924a3601fd186ccf1609ac9aa2a4ea3e3ebaea938f565dfeaa67af306bf32778277f73867704cc163c3b528fd3a478ab155a7b72b624aae56a3", 0x8b}, {&(0x7f00000014c0)="ba69316a3b6521bab077c8b14e5c12323fa31a3a89e0f1ceb05aea9f1028884de63ff7a5f3512dfce694a27ca87ba14259099b567777fdf2c320be3ae3ec99695cac6327dd26f9ccb3dd4508ceb44ae35406d21cedeab4aa9e0290e0693748ee0c55aace1d7533f333556ae299efa0c8404c4b30db9a85534af71caf88c05f991b0a2c278ea01447088468fcfa665f249dfa71acc79ded3b85577370b37b7735fb67d0f8cc05a2010524e618", 0xac}, {&(0x7f0000001580)="ff08eb4b133f8e3513ab4a1b9339874c1787d03f6c5c0fea293f62410e6a3001f575423dfaee1a449d5391e51d3ab284d12f06db8d82167e8980dbf568974f49df3e66a46fc4f67b8d25faa231bc3faa6a121c33e1d0046cec", 0x59}, {&(0x7f0000001600)="e4ed1608591827b5d9d41b958470d447f87b4f0684a158fef33f917ac45dba7aee1f6f5c3a25b6ba13f343e702fab4b6f515767162f37bc089f1b1e3367577d3a2edfd7b37ea559a3b4e5a5f16c726761712600ad079ce37732038da56db8aeac05bce34325eeee5c5d1ecc4e8a5daed82c6982d07288f1bd9db42137e1bfae6d31eef4ceb5b306b98606967601b19b23bc117df55ae1f13979f", 0x9a}, {&(0x7f00000016c0)="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", 0x1000}], 0x7)
read(r3, &(0x7f0000002740)=""/165, 0xa5)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000002800)=0x9, 0x4)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000028c0)={&(0x7f0000002840)=[0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0], 0x3, r8, 0xe0e0e0e0})
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000029c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x20, 0x2, 0x9, 0x3, 0x0, 0x0, {0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x80000000}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044054}, 0x0)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000002a00)={0x5, {0x0, 0xfffffffc, 0x4c3c, 0x9}})
r19 = syz_usb_connect$uac1(0x1, 0xc9, &(0x7f0000002a40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb7, 0x3, 0x1, 0x3, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x8d}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x5, "ca"}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0xe868, 0x8}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x8, 0x5, '[1'}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x3ff, 0x1, 'QS'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x3, 0x8, 0x61}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x40, 0x4, 0x5, {0x7, 0x25, 0x1, 0x1, 0x5, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xa, 0x4, 0x9, 0x90, '{^', 'Z'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x3, 0x6, 0x2, "7dad797250b5"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xb8e, 0x1, 0x0, "d55a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x80, '_', "abb1"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x7, 0x34, 0x9, {0x7, 0x25, 0x1, 0x83, 0x4, 0x5}}}}}}}]}}, &(0x7f0000002d40)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x300, 0x8, 0x6, 0x6, 0x20, 0x7}, 0x19, &(0x7f0000002b80)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "bf032b9093761335badd060c6c2ff44b"}]}, 0x6, [{0x31, &(0x7f0000002bc0)=@string={0x31, 0x3, "a4ee102ab2b4bd0244444da5c8eedbc21b890e4a30916d3cfe6c915f282293b51c8542b2ee59b94b55b04377b7d6c3"}}, {0x4, &(0x7f0000002c00)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000002c40)=@lang_id={0x4, 0x3, 0x7a453142f14fc4ad}}, {0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000002cc0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000002d00)=@lang_id={0x4, 0x3, 0x418}}]})
syz_usb_control_io$uac1(r19, &(0x7f0000002e80)={0x14, &(0x7f0000002dc0)={0x20, 0x8, 0x33, {0x33, 0x2, "c512ba73506e4f0fa9825eb4e6c7edb45578fe2869c31ba0c046290861b89e91e50a5bd590837fadf5bc3cf6de95cf8592"}}, &(0x7f0000002e00)={0x0, 0x3, 0x41, @string={0x41, 0x3, "f599704ad1cb20a4a7f73b0d7d4b376a2b033007593aaf82ad972b877db6c662442ae0d2b031dbd8336a8e905c3627bce33800dc45edcff4997ee514411d66"}}}, &(0x7f0000003180)={0x44, &(0x7f0000002ec0)={0x20, 0x1, 0xec, "2455437841e5a5629426b27b7adc53142e4a6dd7493adc1144abfdcd9c7317b86f5d767a3a1fbdc5e97b20aaadb4795c3e5f3d8da1905373e648be6ffd4a0fe121e39e566e32febd0b7b308474378e3aa178c3b539685fc6ee15943477df3225247047654f9ec27996e8c9ef6ebf0580b8c1a78a9e6aa1d1449f0db4fd4f9400bfbe8f884ede60f8fd13e898a072358d5e5961b14d54fc86c412e00c81aeb6dd649e112733e886bbc188e0d495f9b415c7757f793dc97f742bd00a5e08749bf3c1a3f64977a312e29a87a24fb3e85fa6042f2fbec85e2561604755c34c82f1e01eb70ed484dc4ad6637d3a0d"}, &(0x7f0000002fc0)={0x0, 0xa, 0x1}, &(0x7f0000003000)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000003040)={0x20, 0x81, 0x3, "a5a1f3"}, &(0x7f0000003080)={0x20, 0x82, 0x3, "354512"}, &(0x7f00000030c0)={0x20, 0x83, 0x2, "a554"}, &(0x7f0000003100)={0x20, 0x84, 0x2, "a61a"}, &(0x7f0000003140)={0x20, 0x85, 0x3, "a52007"}})

26.380619716s ago: executing program 6 (id=2825):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0)
fadvise64(r0, 0x92, 0x5, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_init_net_socket$llc(0x1a, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
sendmmsg$inet6(r1, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000680)={0x8000, 0x0, 0x200, 0x9, 0x0, 0x0, 0x3, 0xfffffff8}, 0x20)
pselect6(0x40, &(0x7f00000002c0)={0x6, 0xfffffffffffffffc, 0x5, 0x81, 0x5, 0x5, 0x9, 0x6}, 0xfffffffffffffffd, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000)

26.314257942s ago: executing program 0 (id=2826):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x800003f, r1, 0x0)
fanotify_mark(r1, 0x1, 0x11, r0, 0x0)
fanotify_mark(r1, 0x80, 0x800, 0xffffffffffffffff, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r2, 0x0, 0x7ffff000)

26.313238283s ago: executing program 0 (id=2827):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0)
fcntl$setsig(r0, 0xa, 0x21)
fcntl$setlease(r0, 0x400, 0x1)
creat(&(0x7f0000000100)='./file0\x00', 0x0) (async)
creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r2)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r1, 0xa4717000)

26.239918467s ago: executing program 0 (id=2829):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x9, 0x6d, {0x6d, 0x1, "a1f4446bfc7b6dfee98340fccf5ee707c2cf8d2c6d5ac5376c3db6ecfb7714a1adfc03fc81660fcfc21ca805a584c62daf606d0a002971241c50e01a7c96adf301ec9ce7a9683897208b147eaaffc7588ec49af783bb70ddab7693fc5dbd48e85da383182a4f7f814a6a75"}}, &(0x7f0000000300)={0x0, 0x3, 0x60, @string={0x60, 0x3, "a103da9f52e3bda10557aee1fc9af5addccc664faedfec12f347366c1ffb57572b628dcaabe8186d58127bddf63e22d00fa04da1b3df6735726176273bf04a02255da6b172b75919ac377187d9d5a5e6279c316830bfd16c01ce5ff2eca8"}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000400)={0x20, 0xe, 0xee, "de1d7f07fe81eb2774a8c994d098225863c5a1ce00805de39845a2ae5161f54735c3b5a400c4175c6e8b9c06718dea0628795b8284fd29f01d2d5e5f4763417434822310a33f35e63e6594a701a5dc3eac3ddf2e93bb97c6ff0607c39c077561bd0b4290811db2d1802808ef0cb66feedeb513aa4696dcfe3459e3a13dc42ba2f3e46bcc17a9819f9c457f73ba553499d4d648d2c606382723ae387d66f94ffbc102cf615e9909d96191696dd60a7f8bd66a038c447604d6c952d6e7fb4b7a1467cc0b8b4bbd924ef55c9c916b550a7b25a86817dbd1ea1aa4a8fdc7006c7b2a6f65c2ef5f46a0c5e184d5208ddc"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000100)={0x21, 0x0, 0x4, "000000e7"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x430100, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendfile(r2, r2, 0x0, 0x7ffff000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x18081, 0x0)

26.173977945s ago: executing program 6 (id=2830):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000080)=0x104)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000003c0)={0x38, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000), &(0x7f00000002c0)=""/246, &(0x7f0000000140)=""/117, 0xdddd0000})
ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x24, 0x0, 0x0, 0x0, 0x200, 0xe, 0x8, 0x7, 0x0})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r7, 0x52fbb000)
ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000001180)={[0x6, 0x1, 0x49d6069d, 0x3f5, 0x2, 0x0, 0x5, 0x3, 0x3df, 0x1, 0x4, 0x4, 0xe, 0x1000, 0x0, 0x2, 0x4, 0x6, 0xffff, 0x1, 0xd, 0xb, 0x9, 0x3, 0x75d6, 0x3, 0x4, 0xffff, 0x10001, 0x0, 0x553, 0x3, 0x7, 0xda, 0x1, 0x0, 0xfffffffa, 0x0, 0xa, 0x2, 0x8, 0xffffffff, 0xffff2cd5, 0x3, 0xf, 0x8, 0x3, 0xbc1, 0x1, 0x0, 0x5620, 0x7, 0xa4b, 0xffff, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x4, 0x400, 0x6, 0x4a, 0x3, 0x401, 0x0, 0x80000000, 0x62, 0xfff, 0x6, 0x8, 0x800000, 0x5, 0x1, 0x3, 0xc, 0x900, 0x9, 0xfffff801, 0xd14, 0xffffffff, 0x7f, 0x9, 0x7, 0x6, 0x7, 0x5, 0x5, 0x1, 0xfab7, 0x4, 0x8, 0x8, 0x5ab6, 0x80000000, 0x0, 0x99, 0x5, 0x9, 0x1ff, 0x6, 0x80, 0x915f, 0x1, 0xdcde, 0x2, 0x450, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x6, 0x9, 0xfff00000, 0x0, 0x4, 0x4, 0x9, 0x7, 0x2dec, 0x2, 0x8073, 0x6, 0xa, 0x2, 0xfffffff9, 0x0, 0x7d3, 0x4, 0x1, 0x80000000, 0x4, 0xe, 0xe, 0x0, 0x6, 0x7fffffff, 0x9, 0x6, 0xfffffff3, 0x40, 0xee, 0xadb, 0x5, 0x2, 0xa00, 0xd13, 0x55de, 0x8, 0x2, 0x0, 0x4, 0x6bbe, 0xb18, 0x6, 0x800, 0x8, 0x8, 0xda3f, 0xaf, 0x4, 0x2, 0x100, 0x80, 0x7, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0xffff2826, 0x9, 0x7, 0x2, 0x487f4171, 0x3, 0x5, 0x800, 0x80000000, 0x7, 0x4, 0x871, 0x50, 0x0, 0xff, 0x0, 0x7, 0x5, 0x1, 0x10000, 0xfffffffe, 0x5, 0x2, 0xb0, 0xfffffff5, 0x319, 0x2392, 0xbfd, 0x7, 0x80, 0x13, 0x6, 0x448, 0xeb48, 0x6, 0x5, 0x6c, 0x100, 0x80, 0x4, 0x5, 0x0, 0xe3a1, 0xffff, 0x17f, 0x4, 0x2, 0x6, 0x32c, 0x1000, 0x5, 0x4, 0xfffffff0, 0x3, 0x6, 0x7, 0x8, 0x9, 0x10, 0x6, 0x9, 0x915e, 0x7, 0x7, 0x738d, 0x10, 0x7, 0x1, 0xf, 0x7446, 0xfffffff9, 0x1, 0x7, 0xfffffff8, 0x9, 0xff, 0x0, 0x3, 0xe5, 0x2e2, 0x26210000, 0x3, 0x9, 0x40, 0xe, 0x7fffffff, 0x1, 0x4, 0x1, 0x75ee915a, 0x0, 0x1, 0x6, 0xa8ba, 0x0, 0x2, 0x5, 0x6, 0x7fff, 0x7ff, 0x4, 0x565, 0x80000000, 0x81, 0x7, 0xc, 0x0, 0xffffffff, 0x10, 0x2, 0xe, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x2, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0xb58d, 0x4, 0xfffffff8, 0xa9, 0x4, 0x9, 0xffff0000, 0x8, 0x7, 0x9, 0xfffffffa, 0x1, 0x7, 0x1, 0x7fffffff, 0x5, 0x8, 0x7b, 0xf, 0xc, 0xb08f, 0x5, 0x7ff, 0x2, 0xcaab, 0x9, 0x5, 0x7ff, 0x9, 0x3, 0x6, 0xffffff01, 0xd12, 0x3, 0x8, 0x6, 0x400, 0x3, 0x7, 0xa935, 0x300000, 0xa3, 0xc, 0x5, 0x5, 0x7ff, 0x7, 0x10000, 0x2, 0x8, 0x10001, 0x3ff, 0x3, 0x3, 0x3, 0x66a, 0x3, 0xff, 0x1ff, 0x6, 0x6, 0x6, 0x2, 0x80, 0x0, 0x8, 0x88c, 0x56c, 0x7, 0x98, 0x5, 0x2, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x5a3c, 0x7fffffff, 0x7, 0x9c, 0x1ff, 0xa00000, 0xffff, 0xd, 0xc6ea, 0xfff, 0x7ff, 0xc594, 0x3, 0x18, 0xa, 0x726c, 0x8, 0x3, 0xd71, 0xc, 0x9, 0x8, 0x2, 0x5, 0x0, 0x10, 0x0, 0xb9, 0x4, 0x9, 0xfff, 0x12, 0x7fff, 0x9, 0x8, 0x7fff, 0x9, 0xb4b, 0x6, 0x1, 0xa312, 0x553, 0x1, 0x0, 0xfffffffc, 0x2, 0xf, 0xe, 0x1, 0x3, 0x48, 0xf2, 0xa28, 0x4, 0xb3c, 0x4, 0xfffffffe, 0xf726, 0x0, 0x4, 0x80000000, 0x1, 0x8, 0xf4, 0x9, 0x2, 0x3, 0x8, 0x4, 0xfffffffe, 0x7, 0x7, 0x48, 0xf, 0xbab, 0xfffffe00, 0x2, 0x7fffffff, 0xfffffffc, 0x10000, 0x4, 0x36c, 0x1, 0x100, 0x3, 0x101, 0x7, 0x0, 0x6, 0x2, 0x5, 0x1, 0x800000, 0x4, 0x5, 0x100, 0x1000, 0x9, 0xde5c, 0x200, 0x80000001, 0xff, 0x0, 0xd, 0x4, 0x0, 0x7cbe8276, 0x3d4, 0x186, 0x1, 0x4, 0x6, 0xfffffffa, 0x1, 0xa000, 0x8, 0x3ad3125b, 0xfffff491, 0x81, 0x2, 0xffffff01, 0x800, 0x3ff, 0x39ae, 0xdf3, 0xe1d2, 0xffffee22, 0x1, 0x1000, 0x1a2f91b4, 0x6, 0x8, 0xfb3, 0x8, 0x3, 0x8, 0xc, 0x1, 0x152, 0xfffffff9, 0x2a, 0x5, 0xfff, 0x7fffffff, 0x4, 0x3000, 0x9, 0x8, 0x7fff, 0x10, 0x3, 0x8, 0x10, 0x57, 0xf, 0x8, 0x2, 0xff, 0xe1, 0xa9, 0x8, 0x8, 0x8c, 0x69e8, 0x130a, 0x4, 0x9, 0x80, 0x2, 0x8, 0x9, 0xfff, 0x7fff, 0x10000, 0x7ff80, 0x8, 0x2, 0x4, 0x90000000, 0x1, 0x7, 0xfffffffd, 0xa12, 0x7, 0xea8, 0x5bf8, 0x2, 0x6ab, 0x3, 0xf, 0xffff, 0x1, 0xfffffffb, 0x80000001, 0x80000001, 0x5, 0x0, 0x78, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x4, 0x7, 0x6, 0x400, 0x1, 0xb72, 0x0, 0x4800, 0xdd7f, 0x7, 0x6, 0x9, 0xe, 0x95f, 0x1ff, 0xe5, 0x37ae, 0x0, 0xa92, 0x4, 0x5, 0x9, 0x1, 0x6, 0x2, 0x3ff, 0x3b, 0xb, 0x4, 0x1, 0x12e7, 0x2, 0x10001, 0x7, 0xc5, 0x6, 0x5, 0x1, 0x1, 0x7fffffff, 0x5, 0xa1, 0xffffffff, 0x1, 0x1, 0x743, 0x1, 0x7, 0xffffe9fb, 0xb, 0x7, 0x1, 0x0, 0x100, 0xfffffff7, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x4, 0x3, 0xb4, 0x80000001, 0x1, 0xbe8b, 0x0, 0x9, 0x3, 0x81, 0x3, 0xdf8, 0x4, 0x71, 0x3, 0x3, 0x9, 0x4edc, 0x100, 0x8, 0x0, 0x2, 0x10, 0x8, 0x7, 0x7f, 0xa58, 0x6, 0x81, 0xfffffffa, 0x3, 0xff, 0xfffff000, 0x1237, 0x71a66a2a, 0x6, 0x1, 0x1, 0xcf0c, 0x4, 0x81, 0xff, 0x1, 0x698fdd79, 0xfffffffc, 0x8, 0x6, 0x7, 0x7f9a, 0x0, 0x0, 0x3, 0x6f5, 0xa, 0x6, 0xfffffffd, 0x2, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0x6, 0x0, 0x200, 0x3cf5dd3d, 0x7, 0x1, 0xa, 0x200, 0x200, 0x92fe25b, 0xc, 0x1, 0x9, 0x81, 0x7, 0x7, 0x1000, 0xc651, 0xf, 0x3, 0x8, 0x6, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x5, 0xd02, 0x2, 0x7, 0x10001, 0x0, 0x9, 0x7, 0xfffffffb, 0x64e, 0x4403c5ae, 0xc, 0xfffffffc, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x1, 0xfffffff6, 0x516, 0x5, 0x2, 0x200, 0xc3, 0x2b1c, 0x6, 0x4, 0x0, 0x81, 0x5, 0x6fa, 0x6, 0x2, 0x80000000, 0x6e7, 0x7f, 0x7, 0x8, 0xfffffff9, 0x3, 0x7f, 0x10000, 0x3, 0x6, 0x37, 0x89, 0x2, 0x2, 0x89a, 0xb, 0x80000000, 0x4, 0x10, 0x6, 0x1, 0x0, 0x5, 0xf8d9, 0x5, 0x2, 0x2, 0x9, 0x2, 0xb8, 0x74e2, 0x2, 0x3ff, 0x1, 0x9, 0x2, 0x1, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x7, 0x7, 0xf, 0x7ff, 0xffffffc6, 0x9, 0xcc9, 0x7, 0x5, 0xb0, 0xe4, 0x5, 0x80000001, 0xc410, 0x8000, 0x7fffffff, 0x3, 0x6, 0x1c000000, 0x101, 0x79, 0xfffffffb, 0x3, 0x1, 0xff, 0x6, 0x81, 0xfffffffc, 0x6, 0x30000, 0x6, 0x7, 0x6, 0x8, 0xc0e1, 0x5, 0x3, 0x6f, 0x5, 0x5, 0x800, 0x1, 0x80000000, 0x8, 0x81, 0x2, 0x9, 0x0, 0x7a8, 0x8e, 0x4, 0x1356, 0x3, 0x80000000, 0x8, 0x7, 0x81, 0x8, 0x1, 0x0, 0x5, 0xa, 0x1d, 0xa22, 0x5, 0xffffffc5, 0xc, 0xa, 0x7, 0x81, 0x2d063505, 0x223, 0xd7, 0x80000001, 0x5, 0xff, 0x4800000, 0x80000000, 0x8001, 0x8, 0x10, 0x9, 0x200, 0x5, 0xfffffffa, 0xd093, 0x3, 0x1, 0x3, 0x5, 0x5, 0x5, 0x589c1fd7, 0xd0f, 0x4, 0x0, 0xb55d, 0x920, 0x7f, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x5, 0x1, 0xffff4bfc, 0x1, 0x10001, 0xfe05, 0x5, 0x79, 0x1000, 0x9, 0x10000, 0xf8b9, 0x4, 0x3832, 0x1, 0xd, 0x81, 0x8, 0x5, 0xbd, 0x4, 0x800, 0x5, 0x826, 0xffffed29, 0x7f, 0x60b8, 0x200, 0x7, 0x6, 0x9, 0x101, 0x0, 0xfffffff8, 0x8, 0x8, 0x401, 0x5, 0x4d800000, 0xa44, 0x3, 0x6, 0xc00, 0x5, 0x2, 0x0, 0x3, 0x200, 0x1fc000, 0x3, 0x3, 0x5, 0x2, 0x8, 0xd, 0x1, 0x80000000, 0xbd1a, 0x0, 0x1, 0xfc4, 0x3, 0xfb1c, 0x42, 0x0, 0x400, 0x7, 0x8d7, 0xd, 0xfffffff9, 0x1, 0xc27a, 0x2, 0x5, 0x5, 0x101, 0x7, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x8, 0x4, 0x8, 0x4, 0x7, 0x9, 0x1, 0x3, 0x3ff, 0x4b6, 0x9, 0x9, 0x3, 0x0, 0x5]})

26.105577663s ago: executing program 6 (id=2831):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

23.36932265s ago: executing program 7 (id=2832):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0xd000, 0xdddd0000, 0x4, 0x5, 0xbc, 0x9, 0x9d, 0xb, 0x1, 0x1, 0x0, 0xa}, {0xeeef0000, 0x2, 0xd, 0xd, 0x3, 0x10, 0x3, 0x7, 0xf2, 0x3, 0x8, 0x85}, {0x3000, 0x10000, 0x0, 0x3, 0x3, 0x9, 0x8, 0x0, 0x4, 0x1, 0x6e, 0x6c}, {0x8080000, 0x100000, 0x0, 0x25, 0x8, 0x73, 0x4, 0x4, 0x8, 0x6, 0x6, 0x5}, {0x2000, 0xeeef0000, 0x4, 0x7, 0xdc, 0xa, 0x80, 0xff, 0x81, 0x7, 0x0, 0x25}, {0x1, 0x100000, 0xd, 0x2, 0x20, 0x8, 0x0, 0x2, 0xff, 0xa, 0x0, 0xeb}, {0xdddd0000, 0x5000, 0xc, 0x6, 0x3, 0x0, 0xfc, 0x9, 0x80, 0x0, 0xa, 0x9}, {0xdddd0000, 0x37000, 0xf, 0xb, 0x0, 0x5, 0xd, 0x9, 0x8, 0xc, 0x72, 0xfd}, {0x6000, 0x2}, {0x0, 0xfffd}, 0x10, 0x0, 0x80a0000, 0x400420, 0xe, 0x400, 0x10000, [0xc6f7, 0x4, 0xffffffffffffff81, 0x5]})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x8, r2)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
write$fb(r1, &(0x7f0000000080)="d0aac476eaeacacfd7a649b0f7f63fa4a489b0eb034e9dd2419db7f649f17829ac1f0b866dd3e87a1ed30f687c5302323934ec91c7257c325805a948706f14c0c708db1c6ce0ad5e6e851c150d856ad4c75dd8707fd052ebbeeca3c2ed8147316dc16234b848b234565563398e5f77410d596acb827279321a75b2af1180a92f6b7d72cfbe1c36b06d5ab9b58180b19a557b500fb471844fb8eb6014f7f07729077deeed3bc6d63ce1922cbf872b47e0a8fb8246b5d4a96215a965c2e2ba85919644ebb04585e0ff991c4bfda6", 0xcd)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900640d00fe8000000000000000000000000000aaff0200000000000000000000000000014e244e22006490780200000002000020e20000000000009c7d3c36"], 0x9a)

20.150560146s ago: executing program 3 (id=2834):
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f00000000c0))
mount$cgroup(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x18, &(0x7f0000000200)={[{@name={'name', 0x3d, ']-1\x1e\x01~\xe1\xec\aD0\xab\xa5\xf4\xda\x02A\x9aS\xce\xb8\xad\xbc\xe4?\x8f0\x88\xc8\xe9\xf8\"%\x89\x93\x88\xe7/L\xd1\x01\x8c\xbe\xb4Fx\x1f\xdc\xa1I\xde\x9bb{\xfe\x88}_\xa2\x99\x8b\xc0C\x83\x97\x87\xfb\x84\xa8*\xf1\xe2\x8d\xf1\b\xba\x7f\\'}}]})
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f0000000580)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x4004054)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x80, 0x11}, 0x18)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000100)=0x9)
getdents64(r2, &(0x7f0000000180)=""/247, 0xf7)
set_mempolicy(0x1, &(0x7f0000001080)=0xfff, 0xfff)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x85, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
socket(0x10, 0x803, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000)

19.415508195s ago: executing program 3 (id=2835):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r3, 0x0, 0x0, 0x0, 0x8})
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@host})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13, 0x2, "19fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

16.302159159s ago: executing program 3 (id=2836):
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000400)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c40)={0x2c, &(0x7f0000000ac0)={0x20, 0xc, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000011c0)={0x84, &(0x7f0000000c80)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

15.786078342s ago: executing program 3 (id=2837):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b404, 0x0)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000004c0)={0x79, 0x0, 0x3})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000100000002"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd})
r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
mmap(&(0x7f0000734000/0x1000)=nil, 0x1000, 0x0, 0x50, r4, 0x802000)
r5 = socket$inet6_sctp(0xa, 0x0, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0xfd7, 0x1, 0x4, 0x1, 0x0, 0x7, 0x0, 0x1715}, &(0x7f0000000140)=0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, 0xffffffffffffffff, 0x5708e000)

15.379764367s ago: executing program 3 (id=2838):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x2, &(0x7f00006b6000/0x3000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0, 0x30}], 0x1, 0x200004, 0x80000000)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000)

15.141885308s ago: executing program 3 (id=2839):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB="7600000073564fc3273263f127690e1ef839865df21b5798c247cda54296b886420166257fd310c1370bbaf576a42cc9da5f79734229585f1e93400a021929d8b33ab372132ebebbcd64dbd3dbac052ec959e51791aa9002d3008000004ed21ac6c723620e61b852da7bc2951443b815ef557bbad56f0f316dabc2165939d306f6c55e718fd9fc69745a96857baa01a7a3ad319897b9fe16ccb4227384f59b19124de19426fff226117e5aa7c8bab4ffddf31334677fcfe226372aa28bb99c"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd, 0x0, <r4=>0x0})
socket$packet(0x11, 0x3, 0x300)
socket(0x1d, 0x2, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRESOCT=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000)

11.101526528s ago: executing program 36 (id=2829):
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000106"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000940)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}], 0x1, 0x14)
shutdown(r1, 0x1)
getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x9, 0x6d, {0x6d, 0x1, "a1f4446bfc7b6dfee98340fccf5ee707c2cf8d2c6d5ac5376c3db6ecfb7714a1adfc03fc81660fcfc21ca805a584c62daf606d0a002971241c50e01a7c96adf301ec9ce7a9683897208b147eaaffc7588ec49af783bb70ddab7693fc5dbd48e85da383182a4f7f814a6a75"}}, &(0x7f0000000300)={0x0, 0x3, 0x60, @string={0x60, 0x3, "a103da9f52e3bda10557aee1fc9af5addccc664faedfec12f347366c1ffb57572b628dcaabe8186d58127bddf63e22d00fa04da1b3df6735726176273bf04a02255da6b172b75919ac377187d9d5a5e6279c316830bfd16c01ce5ff2eca8"}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000400)={0x20, 0xe, 0xee, "de1d7f07fe81eb2774a8c994d098225863c5a1ce00805de39845a2ae5161f54735c3b5a400c4175c6e8b9c06718dea0628795b8284fd29f01d2d5e5f4763417434822310a33f35e63e6594a701a5dc3eac3ddf2e93bb97c6ff0607c39c077561bd0b4290811db2d1802808ef0cb66feedeb513aa4696dcfe3459e3a13dc42ba2f3e46bcc17a9819f9c457f73ba553499d4d648d2c606382723ae387d66f94ffbc102cf615e9909d96191696dd60a7f8bd66a038c447604d6c952d6e7fb4b7a1467cc0b8b4bbd924ef55c9c916b550a7b25a86817dbd1ea1aa4a8fdc7006c7b2a6f65c2ef5f46a0c5e184d5208ddc"}, &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000100)={0x21, 0x0, 0x4, "000000e7"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x430100, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sendfile(r2, r2, 0x0, 0x7ffff000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x18081, 0x0)

10.052758334s ago: executing program 37 (id=2831):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f00000000c0)={0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

8.029593011s ago: executing program 38 (id=2832):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0)
ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0xd000, 0xdddd0000, 0x4, 0x5, 0xbc, 0x9, 0x9d, 0xb, 0x1, 0x1, 0x0, 0xa}, {0xeeef0000, 0x2, 0xd, 0xd, 0x3, 0x10, 0x3, 0x7, 0xf2, 0x3, 0x8, 0x85}, {0x3000, 0x10000, 0x0, 0x3, 0x3, 0x9, 0x8, 0x0, 0x4, 0x1, 0x6e, 0x6c}, {0x8080000, 0x100000, 0x0, 0x25, 0x8, 0x73, 0x4, 0x4, 0x8, 0x6, 0x6, 0x5}, {0x2000, 0xeeef0000, 0x4, 0x7, 0xdc, 0xa, 0x80, 0xff, 0x81, 0x7, 0x0, 0x25}, {0x1, 0x100000, 0xd, 0x2, 0x20, 0x8, 0x0, 0x2, 0xff, 0xa, 0x0, 0xeb}, {0xdddd0000, 0x5000, 0xc, 0x6, 0x3, 0x0, 0xfc, 0x9, 0x80, 0x0, 0xa, 0x9}, {0xdddd0000, 0x37000, 0xf, 0xb, 0x0, 0x5, 0xd, 0x9, 0x8, 0xc, 0x72, 0xfd}, {0x6000, 0x2}, {0x0, 0xfffd}, 0x10, 0x0, 0x80a0000, 0x400420, 0xe, 0x400, 0x10000, [0xc6f7, 0x4, 0xffffffffffffff81, 0x5]})
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace(0x8, r2)
waitid(0x2, 0x0, 0x0, 0x4, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r4 = socket$kcm(0x2, 0xa, 0x2)
write$fb(r1, &(0x7f0000000080)="d0aac476eaeacacfd7a649b0f7f63fa4a489b0eb034e9dd2419db7f649f17829ac1f0b866dd3e87a1ed30f687c5302323934ec91c7257c325805a948706f14c0c708db1c6ce0ad5e6e851c150d856ad4c75dd8707fd052ebbeeca3c2ed8147316dc16234b848b234565563398e5f77410d596acb827279321a75b2af1180a92f6b7d72cfbe1c36b06d5ab9b58180b19a557b500fb471844fb8eb6014f7f07729077deeed3bc6d63ce1922cbf872b47e0a8fb8246b5d4a96215a965c2e2ba85919644ebb04585e0ff991c4bfda6", 0xcd)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f5900640d00fe8000000000000000000000000000aaff0200000000000000000000000000014e244e22006490780200000002000020e20000000000009c7d3c36"], 0x9a)

0s ago: executing program 39 (id=2839):
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000240)=ANY=[@ANYBLOB="7600000073564fc3273263f127690e1ef839865df21b5798c247cda54296b886420166257fd310c1370bbaf576a42cc9da5f79734229585f1e93400a021929d8b33ab372132ebebbcd64dbd3dbac052ec959e51791aa9002d3008000004ed21ac6c723620e61b852da7bc2951443b815ef557bbad56f0f316dabc2165939d306f6c55e718fd9fc69745a96857baa01a7a3ad319897b9fe16ccb4227384f59b19124de19426fff226117e5aa7c8bab4ffddf31334677fcfe226372aa28bb99c"])
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd, 0x0, <r4=>0x0})
socket$packet(0x11, 0x3, 0x300)
socket(0x1d, 0x2, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRESOCT=r4, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000)

kernel console output (not intermixed with test programs):

X: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000003
[  470.398957][T13936] RBP: 00007f660d819090 R08: 0000000000000000 R09: 0000000000000000
[  470.398968][T13936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.398979][T13936] R13: 00007f660cbc6038 R14: 00007f660cbc5fa0 R15: 00007fff70835148
[  470.399009][T13936]  </TASK>
[  470.643821][    C1] vkms_vblank_simulate: vblank timer overrun
[  470.660377][T13936] ERROR: Out of memory at tomoyo_realpath_from_path.
[  470.668198][T13936] blktrace: Concurrent blktraces are not allowed on rnullb0
[  470.711358][T13942] blktrace: Concurrent blktraces are not allowed on rnullb0
[  471.000750][T13960] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2253'.
[  471.063916][T13964] FAULT_INJECTION: forcing a failure.
[  471.063916][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  471.077302][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.3.2255 Not tainted syzkaller #0 PREEMPT(full) 
[  471.077344][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  471.077362][T13964] Call Trace:
[  471.077370][T13964]  <TASK>
[  471.077378][T13964]  dump_stack_lvl+0x189/0x250
[  471.077407][T13964]  ? __pfx____ratelimit+0x10/0x10
[  471.077429][T13964]  ? __pfx_dump_stack_lvl+0x10/0x10
[  471.077461][T13964]  ? __pfx__printk+0x10/0x10
[  471.077481][T13964]  ? __might_fault+0xb0/0x130
[  471.077507][T13964]  ? rcu_is_watching+0x15/0xb0
[  471.077525][T13964]  should_fail_ex+0x414/0x560
[  471.077547][T13964]  _copy_from_user+0x2d/0xb0
[  471.077565][T13964]  drm_mode_atomic_ioctl+0x6ba/0xcb0
[  471.077591][T13964]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  471.077619][T13964]  ? do_raw_spin_unlock+0x122/0x240
[  471.077641][T13964]  ? _raw_spin_unlock+0x28/0x50
[  471.077660][T13964]  ? drm_is_current_master+0x19f/0x200
[  471.077681][T13964]  drm_ioctl_kernel+0x2cc/0x390
[  471.077703][T13964]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  471.077723][T13964]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  471.077745][T13964]  ? __might_fault+0xcc/0x130
[  471.077768][T13964]  drm_ioctl+0x67f/0xb10
[  471.077791][T13964]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  471.077812][T13964]  ? __pfx_drm_ioctl+0x10/0x10
[  471.077838][T13964]  ? __fget_files+0x3a0/0x420
[  471.077856][T13964]  ? __fget_files+0x2a/0x420
[  471.077876][T13964]  ? bpf_lsm_file_ioctl+0x9/0x20
[  471.077896][T13964]  ? __pfx_drm_ioctl+0x10/0x10
[  471.077917][T13964]  __se_sys_ioctl+0xf9/0x170
[  471.077940][T13964]  do_syscall_64+0xfa/0xfa0
[  471.077960][T13964]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.077977][T13964]  ? clear_bhb_loop+0x60/0xb0
[  471.077994][T13964]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.078009][T13964] RIP: 0033:0x7f41d698ebe9
[  471.078024][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  471.078038][T13964] RSP: 002b:00007f41d7878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  471.078057][T13964] RAX: ffffffffffffffda RBX: 00007f41d6bc5fa0 RCX: 00007f41d698ebe9
[  471.078070][T13964] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003
[  471.078081][T13964] RBP: 00007f41d7878090 R08: 0000000000000000 R09: 0000000000000000
[  471.078091][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.078100][T13964] R13: 00007f41d6bc6038 R14: 00007f41d6bc5fa0 R15: 00007ffcbd1c58c8
[  471.078118][T13964]  </TASK>
[  471.323968][    C1] vkms_vblank_simulate: vblank timer overrun
[  471.383974][T13966] blktrace: Concurrent blktraces are not allowed on rnullb0
[  471.578442][   T43] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  471.658561][ T5946] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  471.728563][   T43] usb 7-1: Using ep0 maxpacket: 32
[  471.734933][   T43] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  471.743355][   T43] usb 7-1: config 0 has no interface number 0
[  471.751409][   T43] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  471.760612][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.768825][   T43] usb 7-1: Product: syz
[  471.773004][   T43] usb 7-1: Manufacturer: syz
[  471.777578][   T43] usb 7-1: SerialNumber: syz
[  471.786313][   T43] usb 7-1: config 0 descriptor??
[  471.793020][   T43] smsc95xx v2.0.0
[  471.808414][ T5908] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  471.817922][ T5946] usb 4-1: unable to get BOS descriptor or descriptor too short
[  471.826540][ T5946] usb 4-1: not running at top speed; connect to a high speed hub
[  471.835209][ T5946] usb 4-1: config 2 has an invalid interface number: 59 but max is 0
[  471.843425][ T5946] usb 4-1: config 2 has no interface number 0
[  471.849633][ T5946] usb 4-1: config 2 interface 59 has no altsetting 0
[  471.858313][ T5946] usb 4-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=50.1e
[  471.867447][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.877340][ T5946] usb 4-1: Product: syz
[  471.881855][ T5946] usb 4-1: Manufacturer: syz
[  471.886457][ T5946] usb 4-1: SerialNumber: syz
[  471.971272][ T5908] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  471.980412][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.988571][ T5908] usb 1-1: Product: syz
[  471.992767][ T5908] usb 1-1: Manufacturer: syz
[  471.998122][ T5908] usb 1-1: SerialNumber: syz
[  472.099228][T13968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.110939][T13968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.198124][   T43] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  472.214861][   T43] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  472.813438][   T43] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  472.830448][   T43] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  472.844476][   T43] usb 7-1: USB disconnect, device number 25
[  473.377594][T13974] blktrace: Concurrent blktraces are not allowed on rnullb0
[  473.431879][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  473.464475][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  473.557382][T13978] /dev/rnullb0: Can't open blockdev
[  473.838772][   T43] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  473.892939][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  473.911320][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  473.921374][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  473.940175][ T5908] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  473.956468][ T5908] usb 1-1: USB disconnect, device number 87
[  474.010030][   T43] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  474.028429][   T43] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  474.052056][   T43] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29
[  474.061572][   T43] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  474.078524][   T43] usb 7-1: Manufacturer: syz
[  474.083196][   T43] usb 7-1: SerialNumber: syz
[  474.199524][T13988] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2264'.
[  474.318758][T13981] program syz.6.2262 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.484865][ T5946] keyspan 4-1:2.59: Keyspan - (without firmware) converter detected
[  474.516971][T13999] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  474.522245][T13996] fuseblk: Unknown parameter '©ãBl«¡C§mFmƵë¹$²ÿxi>>@p/ªŸ¡éI‘ªÝc|›_²(GîV·)“ú6À H®ÅÀ{uUò[9¹çukôþXÌGŒˆ†Šâ¯ÈÈr°D€õe+ê/]hÄÉc‡…'
[  474.524006][ T5946] usb 4-1: USB disconnect, device number 104
[  474.549460][T13999] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  474.563222][T13999] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  474.577098][T13999] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  474.577350][ T5946] keyspan 4-1:2.59: device disconnected
[  474.586122][T13999] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  474.621245][T13999] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4)
[  474.629460][T13999] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  474.640793][T13999] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  474.649270][T13999] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  474.655917][T13999] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  474.699433][T14004] blktrace: Concurrent blktraces are not allowed on rnullb0
[  474.706876][T14004] FAULT_INJECTION: forcing a failure.
[  474.706876][T14004] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  474.722002][T14004] CPU: 1 UID: 0 PID: 14004 Comm: syz.0.2270 Not tainted syzkaller #0 PREEMPT(full) 
[  474.722027][T14004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  474.722042][T14004] Call Trace:
[  474.722049][T14004]  <TASK>
[  474.722057][T14004]  dump_stack_lvl+0x189/0x250
[  474.722085][T14004]  ? __pfx____ratelimit+0x10/0x10
[  474.722106][T14004]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.722128][T14004]  ? __pfx__printk+0x10/0x10
[  474.722151][T14004]  ? rcu_is_watching+0x15/0xb0
[  474.722170][T14004]  should_fail_ex+0x414/0x560
[  474.722193][T14004]  _copy_to_user+0x31/0xb0
[  474.722213][T14004]  simple_read_from_buffer+0xe1/0x170
[  474.722234][T14004]  proc_fail_nth_read+0x1b3/0x220
[  474.722257][T14004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  474.722279][T14004]  ? rw_verify_area+0x2a6/0x4d0
[  474.722295][T14004]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  474.722317][T14004]  vfs_read+0x200/0xa30
[  474.722333][T14004]  ? fdget_pos+0x247/0x320
[  474.722353][T14004]  ? __pfx___mutex_lock+0x10/0x10
[  474.722374][T14004]  ? __pfx_vfs_read+0x10/0x10
[  474.722394][T14004]  ? __fget_files+0x3a0/0x420
[  474.722412][T14004]  ? __fget_files+0x2a/0x420
[  474.722433][T14004]  ksys_read+0x145/0x250
[  474.722450][T14004]  ? __pfx_ksys_read+0x10/0x10
[  474.722468][T14004]  ? rcu_is_watching+0x15/0xb0
[  474.722487][T14004]  do_syscall_64+0xfa/0xfa0
[  474.722508][T14004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.722524][T14004]  ? clear_bhb_loop+0x60/0xb0
[  474.722543][T14004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.722560][T14004] RIP: 0033:0x7f660c98d5fc
[  474.722575][T14004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  474.722591][T14004] RSP: 002b:00007f660d819030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  474.722610][T14004] RAX: ffffffffffffffda RBX: 00007f660cbc5fa0 RCX: 00007f660c98d5fc
[  474.722623][T14004] RDX: 000000000000000f RSI: 00007f660d8190a0 RDI: 0000000000000005
[  474.722635][T14004] RBP: 00007f660d819090 R08: 0000000000000000 R09: 0000000000000000
[  474.722646][T14004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  474.722657][T14004] R13: 00007f660cbc6038 R14: 00007f660cbc5fa0 R15: 00007fff70835148
[  474.722677][T14004]  </TASK>
[  474.951088][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.230084][ T5946] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  475.248532][ T5868] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  475.369983][ T5946] usb 4-1: device descriptor read/64, error -71
[  475.413456][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  475.425743][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.435114][ T5868] usb 1-1: Product: syz
[  475.439553][ T5868] usb 1-1: Manufacturer: syz
[  475.444214][ T5868] usb 1-1: SerialNumber: syz
[  475.608512][ T5946] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  475.738445][ T5946] usb 4-1: device descriptor read/64, error -71
[  475.849253][ T5946] usb usb4-port1: attempt power cycle
[  476.188571][ T5946] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  476.238984][ T5946] usb 4-1: device descriptor read/8, error -71
[  476.488479][ T5946] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  476.508882][ T5946] usb 4-1: device descriptor read/8, error -71
[  476.626646][   T43] usbhid 7-1:36.0: couldn't find an input interrupt endpoint
[  476.637351][ T5946] usb usb4-port1: unable to enumerate USB device
[  476.652381][   T43] usb 7-1: USB disconnect, device number 26
[  476.948570][   T43] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  477.103125][   T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  477.112324][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.122247][   T43] usb 7-1: Product: syz
[  477.126449][   T43] usb 7-1: Manufacturer: syz
[  477.131236][   T43] usb 7-1: SerialNumber: syz
[  477.869191][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  477.881957][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  477.892418][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  477.898676][ T5946] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  477.901921][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  477.919601][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  477.931406][ T5868] usb 1-1: USB disconnect, device number 88
[  478.060156][ T5946] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  478.068275][ T5946] usb 4-1: config 1 has no interface number 0
[  478.074467][ T5946] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  478.086232][ T5946] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  478.096175][ T5946] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.109316][ T5946] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  478.118975][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.127087][ T5946] usb 4-1: Product: syz
[  478.131316][ T5946] usb 4-1: Manufacturer: syz
[  478.135935][ T5946] usb 4-1: SerialNumber: syz
[  478.142349][T14018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  478.351480][T14017] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  478.559314][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  478.571264][ T5946] usb 4-1: Incompatible driver and firmware versions
[  478.578983][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  478.592121][ T5946] usb 4-1: USB disconnect, device number 109
[  479.001206][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  479.013318][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  479.022898][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  479.032446][   T43] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  479.045646][   T43] usb 7-1: USB disconnect, device number 27
[  479.145584][T14037] FAULT_INJECTION: forcing a failure.
[  479.145584][T14037] name failslab, interval 1, probability 0, space 0, times 0
[  479.162750][T14037] CPU: 0 UID: 0 PID: 14037 Comm: syz.3.2283 Not tainted syzkaller #0 PREEMPT(full) 
[  479.162776][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  479.162788][T14037] Call Trace:
[  479.162795][T14037]  <TASK>
[  479.162803][T14037]  dump_stack_lvl+0x189/0x250
[  479.162832][T14037]  ? __pfx____ratelimit+0x10/0x10
[  479.162853][T14037]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.162876][T14037]  ? __pfx__printk+0x10/0x10
[  479.162900][T14037]  ? __pfx___might_resched+0x10/0x10
[  479.162918][T14037]  ? lock_acquire+0x5f/0x360
[  479.162935][T14037]  should_fail_ex+0x414/0x560
[  479.162958][T14037]  should_failslab+0xa8/0x100
[  479.162976][T14037]  __kmalloc_cache_noprof+0x70/0x3a0
[  479.162999][T14037]  ? drm_atomic_helper_setup_commit+0x1c9/0x1370
[  479.163025][T14037]  drm_atomic_helper_setup_commit+0x1c9/0x1370
[  479.163051][T14037]  ? __pfx___drm_dev_dbg+0x10/0x10
[  479.163073][T14037]  drm_atomic_helper_commit+0x6a/0xb10
[  479.163097][T14037]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  479.163118][T14037]  drm_atomic_commit+0x25f/0x2c0
[  479.163138][T14037]  ? __pfx_drm_atomic_commit+0x10/0x10
[  479.163156][T14037]  ? __pfx___drm_printfn_info+0x10/0x10
[  479.163185][T14037]  drm_mode_atomic_ioctl+0x8e9/0xcb0
[  479.163211][T14037]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.163240][T14037]  ? do_raw_spin_unlock+0x122/0x240
[  479.163261][T14037]  ? _raw_spin_unlock+0x28/0x50
[  479.163279][T14037]  ? drm_is_current_master+0x19f/0x200
[  479.163299][T14037]  drm_ioctl_kernel+0x2cc/0x390
[  479.163320][T14037]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.163340][T14037]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  479.163362][T14037]  ? __might_fault+0xcc/0x130
[  479.163386][T14037]  drm_ioctl+0x67f/0xb10
[  479.163409][T14037]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.163431][T14037]  ? __pfx_drm_ioctl+0x10/0x10
[  479.163457][T14037]  ? __fget_files+0x3a0/0x420
[  479.163475][T14037]  ? __fget_files+0x2a/0x420
[  479.163494][T14037]  ? bpf_lsm_file_ioctl+0x9/0x20
[  479.163521][T14037]  ? __pfx_drm_ioctl+0x10/0x10
[  479.163542][T14037]  __se_sys_ioctl+0xf9/0x170
[  479.163565][T14037]  do_syscall_64+0xfa/0xfa0
[  479.163587][T14037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.163611][T14037]  ? clear_bhb_loop+0x60/0xb0
[  479.163639][T14037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.163660][T14037] RIP: 0033:0x7f41d698ebe9
[  479.163692][T14037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.163711][T14037] RSP: 002b:00007f41d7878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  479.163731][T14037] RAX: ffffffffffffffda RBX: 00007f41d6bc5fa0 RCX: 00007f41d698ebe9
[  479.163744][T14037] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003
[  479.163755][T14037] RBP: 00007f41d7878090 R08: 0000000000000000 R09: 0000000000000000
[  479.163767][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  479.163778][T14037] R13: 00007f41d6bc6038 R14: 00007f41d6bc5fa0 R15: 00007ffcbd1c58c8
[  479.163797][T14037]  </TASK>
[  479.792268][T14067] FAULT_INJECTION: forcing a failure.
[  479.792268][T14067] name failslab, interval 1, probability 0, space 0, times 0
[  479.806602][T14067] CPU: 0 UID: 0 PID: 14067 Comm: syz.0.2294 Not tainted syzkaller #0 PREEMPT(full) 
[  479.806629][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  479.806641][T14067] Call Trace:
[  479.806648][T14067]  <TASK>
[  479.806656][T14067]  dump_stack_lvl+0x189/0x250
[  479.806685][T14067]  ? __pfx____ratelimit+0x10/0x10
[  479.806707][T14067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  479.806730][T14067]  ? __pfx__printk+0x10/0x10
[  479.806753][T14067]  ? __pfx___might_resched+0x10/0x10
[  479.806771][T14067]  ? lock_acquire+0x5f/0x360
[  479.806789][T14067]  should_fail_ex+0x414/0x560
[  479.806812][T14067]  should_failslab+0xa8/0x100
[  479.806829][T14067]  __kmalloc_cache_noprof+0x70/0x3a0
[  479.806852][T14067]  ? drm_atomic_helper_setup_commit+0x1c9/0x1370
[  479.806877][T14067]  drm_atomic_helper_setup_commit+0x1c9/0x1370
[  479.806903][T14067]  ? __pfx___drm_dev_dbg+0x10/0x10
[  479.806925][T14067]  drm_atomic_helper_commit+0x6a/0xb10
[  479.806949][T14067]  ? __pfx_drm_atomic_helper_commit+0x10/0x10
[  479.806970][T14067]  drm_atomic_commit+0x25f/0x2c0
[  479.806990][T14067]  ? __pfx_drm_atomic_commit+0x10/0x10
[  479.807008][T14067]  ? __pfx___drm_printfn_info+0x10/0x10
[  479.807037][T14067]  drm_mode_atomic_ioctl+0x8e9/0xcb0
[  479.807063][T14067]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.807091][T14067]  ? do_raw_spin_unlock+0x122/0x240
[  479.807113][T14067]  ? _raw_spin_unlock+0x28/0x50
[  479.807131][T14067]  ? drm_is_current_master+0x19f/0x200
[  479.807152][T14067]  drm_ioctl_kernel+0x2cc/0x390
[  479.807174][T14067]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.807194][T14067]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[  479.807274][T14067]  ? __might_fault+0xcc/0x130
[  479.807298][T14067]  drm_ioctl+0x67f/0xb10
[  479.807321][T14067]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  479.807342][T14067]  ? __pfx_drm_ioctl+0x10/0x10
[  479.807369][T14067]  ? __fget_files+0x3a0/0x420
[  479.807388][T14067]  ? __fget_files+0x2a/0x420
[  479.807407][T14067]  ? bpf_lsm_file_ioctl+0x9/0x20
[  479.807428][T14067]  ? __pfx_drm_ioctl+0x10/0x10
[  479.807449][T14067]  __se_sys_ioctl+0xf9/0x170
[  479.807472][T14067]  do_syscall_64+0xfa/0xfa0
[  479.807493][T14067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.807509][T14067]  ? clear_bhb_loop+0x60/0xb0
[  479.807527][T14067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  479.807543][T14067] RIP: 0033:0x7f660c98ebe9
[  479.807559][T14067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  479.807573][T14067] RSP: 002b:00007f660d819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  479.807593][T14067] RAX: ffffffffffffffda RBX: 00007f660cbc5fa0 RCX: 00007f660c98ebe9
[  479.807606][T14067] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003
[  479.807617][T14067] RBP: 00007f660d819090 R08: 0000000000000000 R09: 0000000000000000
[  479.807628][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  479.807639][T14067] R13: 00007f660cbc6038 R14: 00007f660cbc5fa0 R15: 00007fff70835148
[  479.807659][T14067]  </TASK>
[  480.104551][   T43] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  480.261940][   T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  480.271146][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.279481][   T43] usb 4-1: Product: syz
[  480.283713][   T43] usb 4-1: Manufacturer: syz
[  480.288290][   T43] usb 4-1: SerialNumber: syz
[  480.379192][ T5946] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  480.529858][ T5946] usb 7-1: config 39 has an invalid interface number: 2 but max is 1
[  480.551199][ T5946] usb 7-1: config 39 has an invalid interface number: 208 but max is 1
[  480.571761][ T5946] usb 7-1: config 39 has no interface number 0
[  480.587630][ T5946] usb 7-1: config 39 has no interface number 1
[  480.605496][ T5946] usb 7-1: config 39 interface 2 has no altsetting 0
[  480.623108][ T5946] usb 7-1: config 39 interface 208 has no altsetting 0
[  480.649699][ T5946] usb 7-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[  480.660857][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.669720][ T5946] usb 7-1: Product: syz
[  480.674053][ T5946] usb 7-1: Manufacturer: syz
[  480.680667][ T5946] usb 7-1: SerialNumber: syz
[  480.889529][T14070] /dev/rnullb0: Can't open blockdev
[  480.897413][ T5946] mdc800 7-1:39.2: probe fails -> wrong Interface
[  480.909698][ T5946] mdc800 7-1:39.208: probe fails -> wrong Interface
[  480.927119][ T5946] usb 7-1: USB disconnect, device number 28
[  481.392908][T14084] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.2302'.
[  481.403718][T14086] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2301'.
[  481.455024][T14091] /dev/rnullb0: Can't open blockdev
[  481.489031][T14094] FAULT_INJECTION: forcing a failure.
[  481.489031][T14094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.504152][T14094] CPU: 0 UID: 0 PID: 14094 Comm: syz.0.2305 Not tainted syzkaller #0 PREEMPT(full) 
[  481.504178][T14094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  481.504189][T14094] Call Trace:
[  481.504196][T14094]  <TASK>
[  481.504204][T14094]  dump_stack_lvl+0x189/0x250
[  481.504232][T14094]  ? __pfx____ratelimit+0x10/0x10
[  481.504258][T14094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.504280][T14094]  ? __pfx__printk+0x10/0x10
[  481.504302][T14094]  ? rcu_is_watching+0x15/0xb0
[  481.504322][T14094]  should_fail_ex+0x414/0x560
[  481.504346][T14094]  _copy_to_user+0x31/0xb0
[  481.504367][T14094]  simple_read_from_buffer+0xe1/0x170
[  481.504387][T14094]  proc_fail_nth_read+0x1b3/0x220
[  481.504410][T14094]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.504433][T14094]  ? rw_verify_area+0x2a6/0x4d0
[  481.504449][T14094]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  481.504470][T14094]  vfs_read+0x200/0xa30
[  481.504486][T14094]  ? fdget_pos+0x247/0x320
[  481.504506][T14094]  ? __pfx___mutex_lock+0x10/0x10
[  481.504528][T14094]  ? __pfx_vfs_read+0x10/0x10
[  481.504546][T14094]  ? __fget_files+0x3a0/0x420
[  481.504564][T14094]  ? __fget_files+0x2a/0x420
[  481.504585][T14094]  ksys_read+0x145/0x250
[  481.504601][T14094]  ? __pfx_ksys_read+0x10/0x10
[  481.504618][T14094]  ? rcu_is_watching+0x15/0xb0
[  481.504638][T14094]  do_syscall_64+0xfa/0xfa0
[  481.504657][T14094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.504674][T14094]  ? clear_bhb_loop+0x60/0xb0
[  481.504692][T14094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.504708][T14094] RIP: 0033:0x7f660c98d5fc
[  481.504723][T14094] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  481.504738][T14094] RSP: 002b:00007f660d819030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  481.504757][T14094] RAX: ffffffffffffffda RBX: 00007f660cbc5fa0 RCX: 00007f660c98d5fc
[  481.504770][T14094] RDX: 000000000000000f RSI: 00007f660d8190a0 RDI: 0000000000000004
[  481.504781][T14094] RBP: 00007f660d819090 R08: 0000000000000000 R09: 0000000000000000
[  481.504792][T14094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  481.504803][T14094] R13: 00007f660cbc6038 R14: 00007f660cbc5fa0 R15: 00007fff70835148
[  481.504822][T14094]  </TASK>
[  481.753506][   T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  481.766283][   T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  482.184211][   T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  482.196965][   T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  482.212840][   T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  482.231326][   T43] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  482.246634][   T43] usb 4-1: USB disconnect, device number 110
[  482.329122][T14112] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2311'.
[  482.630381][T14119] MTD: Couldn't look up './cgroup': -15
[  482.636229][T14119] ./cgroup: Can't lookup blockdev
[  482.872530][T14131] /dev/rnullb0: Can't open blockdev
[  482.929068][T14137] /dev/rnullb0: Can't open blockdev
[  482.957714][T14141] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2321'.
[  483.076343][T14145] /dev/rnullb0: Can't open blockdev
[  483.208456][ T5946] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  483.359607][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.371370][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  483.382609][ T5946] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  483.393474][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.399096][    T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  483.410731][ T5946] usb 4-1: config 0 descriptor??
[  483.574106][    T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  483.583292][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.591485][    T9] usb 7-1: Product: syz
[  483.595774][    T9] usb 7-1: Manufacturer: syz
[  483.600553][    T9] usb 7-1: SerialNumber: syz
[  483.811715][   T43] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  483.873533][ T5946] logitech-djreceiver 0003:046D:C534.001D: unknown main item tag 0x0
[  483.883466][ T5946] logitech-djreceiver 0003:046D:C534.001D: unknown main item tag 0x0
[  483.892173][ T5946] logitech-djreceiver 0003:046D:C534.001D: unknown main item tag 0x0
[  483.903611][ T5946] logitech-djreceiver 0003:046D:C534.001D: unknown main item tag 0x0
[  483.912536][ T5946] logitech-djreceiver 0003:046D:C534.001D: unknown main item tag 0x0
[  483.969924][   T43] usb 1-1: config 8 has an invalid interface number: 152 but max is 0
[  483.978166][   T43] usb 1-1: config 8 has no interface number 0
[  483.985243][   T43] usb 1-1: config 8 interface 152 has no altsetting 0
[  483.993846][   T43] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=57.b9
[  484.002974][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.011739][   T43] usb 1-1: Product: syz
[  484.015921][   T43] usb 1-1: Manufacturer: syz
[  484.020569][   T43] usb 1-1: SerialNumber: syz
[  484.081858][ T5946] usb 4-1: USB disconnect, device number 111
[  484.684964][T14164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2329'.
[  484.697202][T14164] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2329'.
[  484.774501][T14168] comedi comedi1: pcl726: I/O port conflict (0x3,16)
[  484.809753][T14173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2332'.
[  485.021574][    T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  485.053252][    T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  485.098040][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  485.108108][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  485.116545][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  485.124951][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  485.132847][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  485.164276][T14175] wlan1 speed is unknown, defaulting to 1000
[  485.361662][T14175] chnl_net:caif_netlink_parms(): no params data found
[  485.425501][T14175] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.433878][T14175] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.441443][T14175] bridge_slave_0: entered allmulticast mode
[  485.449039][T14175] bridge_slave_0: entered promiscuous mode
[  485.456813][T14175] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.464234][T14175] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.472159][    T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  485.473864][T14175] bridge_slave_1: entered allmulticast mode
[  485.490413][    T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  485.495431][T14175] bridge_slave_1: entered promiscuous mode
[  485.507406][    T9] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  485.522474][    T9] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  485.534247][T14175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.536726][    T9] usb 7-1: USB disconnect, device number 29
[  485.554395][T14175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.581654][T14175] team0: Port device team_slave_0 added
[  485.590414][T14175] team0: Port device team_slave_1 added
[  485.612845][T14175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  485.620762][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.647169][T14175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  485.659460][T14175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  485.666413][T14175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.692548][T14175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  485.727634][T14175] hsr_slave_0: entered promiscuous mode
[  485.734552][T14175] hsr_slave_1: entered promiscuous mode
[  485.742697][T14175] debugfs: 'hsr0' already exists in 'hsr'
[  485.748804][T14175] Cannot create hsr debugfs directory
[  485.817978][T14175] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.864279][T14175] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.920763][T14175] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.983798][T14175] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.997643][T14186] netlink: 56537 bytes leftover after parsing attributes in process `syz.7.2335'.
[  486.056521][T14175] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  486.066374][T14175] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  486.080414][T14175] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  486.093982][T14175] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  486.187249][T14175] 8021q: adding VLAN 0 to HW filter on device bond0
[  486.210017][T14175] 8021q: adding VLAN 0 to HW filter on device team0
[  486.223013][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.230794][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  486.248166][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.255358][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  486.486496][   T43] gspca_main: etoms-2.14.0 probing 102c:6251
[  486.545486][   T43] usb 1-1: USB disconnect, device number 89
[  486.573320][T14206] /dev/rnullb0: Can't open blockdev
[  486.584182][T14175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  486.672556][T14175] veth0_vlan: entered promiscuous mode
[  486.686171][T14175] veth1_vlan: entered promiscuous mode
[  486.743315][T14175] veth0_macvtap: entered promiscuous mode
[  486.763355][T14175] veth1_macvtap: entered promiscuous mode
[  486.783289][T14175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.798852][T14175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.816483][ T3587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.839589][ T3587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  486.858176][ T3587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  486.870472][   T43] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  486.890701][ T3587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  486.937007][   T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.955462][   T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.976015][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  486.984060][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  486.986171][T14208] /dev/rnullb0: Can't open blockdev
[  487.028494][   T43] usb 1-1: device descriptor read/64, error -71
[  487.037621][T14211] blktrace: Concurrent blktraces are not allowed on rnullb0
[  487.048207][T14211] /dev/rnullb0: Can't open blockdev
[  487.055340][T14211] befs: (nullb0): invalid magic header
[  487.148678][ T5874] Bluetooth: hci4: command tx timeout
[  487.248426][ T5907] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  487.298443][   T43] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  487.410753][ T5907] usb 7-1: Using ep0 maxpacket: 8
[  487.417609][ T5907] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  487.431328][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  487.446196][   T43] usb 1-1: device descriptor read/64, error -71
[  487.454206][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  487.477871][ T5907] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  487.491061][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.501144][ T5907] usb 7-1: Product: syz
[  487.505396][ T5907] usb 7-1: Manufacturer: syz
[  487.511770][ T5907] usb 7-1: SerialNumber: syz
[  487.521122][ T5907] usb 7-1: config 0 descriptor??
[  487.530999][T14208] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  487.559779][   T43] usb usb1-port1: attempt power cycle
[  487.744157][ T5907] usb 7-1: USB disconnect, device number 30
[  487.899728][   T43] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  487.920514][   T43] usb 1-1: device descriptor read/8, error -71
[  488.128530][ T5908] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  488.158656][   T43] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  488.179663][   T43] usb 1-1: device descriptor read/8, error -71
[  488.289164][ T5908] usb 4-1: Using ep0 maxpacket: 8
[  488.295737][   T43] usb usb1-port1: unable to enumerate USB device
[  488.303430][ T5908] usb 4-1: descriptor type invalid, skip
[  488.310779][ T5908] usb 4-1: config 0 has no interfaces?
[  488.319406][ T5908] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  488.328577][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.336614][ T5908] usb 4-1: Product: syz
[  488.340951][ T5908] usb 4-1: Manufacturer: syz
[  488.345544][ T5908] usb 4-1: SerialNumber: syz
[  488.352203][ T5908] usb 4-1: config 0 descriptor??
[  488.528518][ T5907] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  488.560930][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2340'.
[  488.572185][ T5908] usb 4-1: USB disconnect, device number 112
[  488.678490][ T5907] usb 7-1: Using ep0 maxpacket: 32
[  488.685173][ T5907] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  488.694224][ T5907] usb 7-1: config 0 has no interface number 0
[  488.702220][ T5907] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  488.711639][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.720344][ T5907] usb 7-1: Product: syz
[  488.724811][ T5907] usb 7-1: Manufacturer: syz
[  488.729475][ T5907] usb 7-1: SerialNumber: syz
[  488.735213][ T5907] usb 7-1: config 0 descriptor??
[  488.741829][ T5907] smsc95xx v2.0.0
[  489.143856][ T5907] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  489.166355][ T5907] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  489.228945][ T5874] Bluetooth: hci4: command tx timeout
[  489.620236][T14234] syzkaller1: entered promiscuous mode
[  489.625740][T14234] syzkaller1: entered allmulticast mode
[  489.658699][  T888] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  489.748003][ T5907] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  489.776398][ T5907] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  489.790536][ T5907] usb 7-1: USB disconnect, device number 31
[  489.821678][  T888] usb 4-1: config 0 has an invalid interface number: 23 but max is 0
[  489.829843][  T888] usb 4-1: config 0 has no interface number 0
[  489.835993][  T888] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  489.846548][  T888] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  489.864083][  T888] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  489.873235][  T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.881357][  T888] usb 4-1: Product: syz
[  489.885757][  T888] usb 4-1: Manufacturer: syz
[  489.890464][  T888] usb 4-1: SerialNumber: syz
[  489.897195][  T888] usb 4-1: config 0 descriptor??
[  489.902909][T14230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  489.915204][T14230] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  489.929242][  T888] ums-usbat 4-1:0.23: USB Mass Storage device detected
[  490.192543][T14243] FAULT_INJECTION: forcing a failure.
[  490.192543][T14243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  490.210551][T14243] CPU: 1 UID: 0 PID: 14243 Comm: syz.0.2350 Not tainted syzkaller #0 PREEMPT(full) 
[  490.210577][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  490.210588][T14243] Call Trace:
[  490.210596][T14243]  <TASK>
[  490.210604][T14243]  dump_stack_lvl+0x189/0x250
[  490.210632][T14243]  ? __pfx____ratelimit+0x10/0x10
[  490.210652][T14243]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.210675][T14243]  ? __pfx__printk+0x10/0x10
[  490.210695][T14243]  ? rcu_is_watching+0x15/0xb0
[  490.210714][T14243]  ? lock_acquire+0x5f/0x360
[  490.210730][T14243]  ? get_sigframe+0x596/0x7d0
[  490.210747][T14243]  ? rcu_is_watching+0x15/0xb0
[  490.210766][T14243]  should_fail_ex+0x414/0x560
[  490.210789][T14243]  _copy_to_user+0x31/0xb0
[  490.210809][T14243]  copy_siginfo_to_user+0x22/0xc0
[  490.210829][T14243]  x64_setup_rt_frame+0x776/0xd40
[  490.210854][T14243]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  490.210875][T14243]  arch_do_signal_or_restart+0x3d7/0x750
[  490.210891][T14243]  ? __fget_files+0x3a0/0x420
[  490.210912][T14243]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  490.210934][T14243]  ? rcu_is_watching+0x15/0xb0
[  490.210952][T14243]  exit_to_user_mode_loop+0x75/0x130
[  490.210969][T14243]  do_syscall_64+0x2bd/0xfa0
[  490.210990][T14243]  ? rcu_is_watching+0x15/0xb0
[  490.211007][T14243]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.211024][T14243]  ? clear_bhb_loop+0x60/0xb0
[  490.211043][T14243]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.211060][T14243] RIP: 0033:0x7f660c98d69f
[  490.211076][T14243] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  490.211090][T14243] RSP: 002b:00007f660d819030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  490.211109][T14243] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f660c98d69f
[  490.211121][T14243] RDX: 0000000000000001 RSI: 00007f660d819090 RDI: 0000000000000004
[  490.211132][T14243] RBP: 00007f660d819090 R08: 0000000000000000 R09: 00007f660d818df7
[  490.211144][T14243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  490.211156][T14243] R13: 00007f660cbc6038 R14: 00007f660cbc5fa0 R15: 00007fff70835148
[  490.211175][T14243]  </TASK>
[  490.433869][    C1] vkms_vblank_simulate: vblank timer overrun
[  490.883575][T14257] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer.
[  491.311186][ T5874] Bluetooth: hci4: command tx timeout
[  491.504273][T14274] syzkaller1: entered promiscuous mode
[  491.509975][T14274] syzkaller1: entered allmulticast mode
[  491.588474][ T5868] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  491.753352][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  491.766547][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.776979][ T5868] usb 1-1: Product: syz
[  491.784878][ T5868] usb 1-1: Manufacturer: syz
[  491.793552][ T5868] usb 1-1: SerialNumber: syz
[  492.385646][  T888] ums-usbat 4-1:0.23: probe with driver ums-usbat failed with error -5
[  492.400611][  T888] usb 4-1: USB disconnect, device number 113
[  492.416979][T14292] input: syz0 as /devices/virtual/input/input39
[  492.438603][T14292] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2364'.
[  492.638260][T14300] syzkaller1: entered promiscuous mode
[  492.643848][T14300] syzkaller1: entered allmulticast mode
[  492.779372][T14307] /dev/rnullb0: Can't open blockdev
[  492.785644][T14307] /dev/rnullb0: Can't open blockdev
[  492.793465][T14307] /dev/rnullb0: Can't open blockdev
[  492.800108][T14307] /dev/rnullb0: Can't open blockdev
[  492.805855][T14307] /dev/rnullb0: Can't open blockdev
[  492.811906][T14307] /dev/rnullb0: Can't open blockdev
[  492.817507][T14307] /dev/rnullb0: Can't open blockdev
[  492.823468][T14307] /dev/rnullb0: Can't open blockdev
[  492.829312][T14307] /dev/rnullb0: Can't open blockdev
[  492.835012][T14307] /dev/rnullb0: Can't open blockdev
[  492.840967][T14307] /dev/rnullb0: Can't open blockdev
[  492.846639][T14307] /dev/rnullb0: Can't open blockdev
[  492.852386][T14307] /dev/rnullb0: Can't open blockdev
[  492.858058][T14307] /dev/rnullb0: Can't open blockdev
[  492.864112][T14307] /dev/rnullb0: Can't open blockdev
[  492.870353][T14307] /dev/rnullb0: Can't open blockdev
[  492.876057][T14307] /dev/rnullb0: Can't open blockdev
[  492.882067][T14307] /dev/rnullb0: Can't open blockdev
[  492.887776][T14307] /dev/rnullb0: Can't open blockdev
[  492.894475][T14307] /dev/rnullb0: Can't open blockdev
[  492.900906][T14307] /dev/rnullb0: Can't open blockdev
[  492.906565][T14307] /dev/rnullb0: Can't open blockdev
[  492.913039][T14307] /dev/rnullb0: Can't open blockdev
[  492.919127][T14307] /dev/rnullb0: Can't open blockdev
[  492.924780][T14307] /dev/rnullb0: Can't open blockdev
[  492.930753][T14307] /dev/rnullb0: Can't open blockdev
[  492.936402][T14307] /dev/rnullb0: Can't open blockdev
[  492.942424][T14307] /dev/rnullb0: Can't open blockdev
[  492.943554][ T5945] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  492.948273][T14307] /dev/rnullb0: Can't open blockdev
[  492.961272][T14307] /dev/rnullb0: Can't open blockdev
[  492.967096][T14307] /dev/rnullb0: Can't open blockdev
[  492.972893][T14307] /dev/rnullb0: Can't open blockdev
[  492.978900][T14307] /dev/rnullb0: Can't open blockdev
[  493.113305][ T5945] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  493.122616][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.130964][ T5945] usb 4-1: Product: syz
[  493.135143][ T5945] usb 4-1: Manufacturer: syz
[  493.139771][ T5945] usb 4-1: SerialNumber: syz
[  493.231994][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  493.246836][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  493.315304][T14319] /dev/rnullb0: Can't open blockdev
[  493.388410][ T5874] Bluetooth: hci4: command tx timeout
[  493.438597][T14325] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2378'.
[  493.464977][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  493.480577][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  493.490744][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  493.501544][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  493.517315][ T5868] usb 1-1: USB disconnect, device number 94
[  493.638609][T14330] mkiss: ax0: crc mode is auto.
[  493.646296][T14330] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2380'.
[  494.531156][T14347] /dev/rnullb0: Can't open blockdev
[  494.537752][T14347] /dev/rnullb0: Can't open blockdev
[  494.556435][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  494.573912][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  494.576794][T14350] blktrace: Concurrent blktraces are not allowed on rnullb0
[  494.616301][T14352] /dev/rnullb0: Can't open blockdev
[  494.991092][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  495.017881][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  495.043450][ T5945] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  495.066414][ T5945] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  495.095366][ T5945] usb 4-1: USB disconnect, device number 114
[  495.703441][T14372] syzkaller1: entered promiscuous mode
[  495.710903][T14372] syzkaller1: entered allmulticast mode
[  495.779479][ T5908] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  495.805382][T14375] blktrace: Concurrent blktraces are not allowed on rnullb0
[  495.832129][T14377] syzkaller1: left promiscuous mode
[  495.837342][T14377] syzkaller1: left allmulticast mode
[  495.867349][T14379] binder: 14378:14379 ioctl 4018f514 200000000080 returned -22
[  495.892089][T14380] binder: 14378:14380 ioctl 4018f514 200000000080 returned -22
[  495.941661][ T5908] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  495.955781][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.966073][ T5908] usb 4-1: Product: syz
[  495.972176][ T5908] usb 4-1: Manufacturer: syz
[  495.976792][ T5908] usb 4-1: SerialNumber: syz
[  496.548612][ T5946] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  496.708399][ T5946] usb 7-1: Using ep0 maxpacket: 32
[  496.714944][ T5946] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  496.723574][ T5946] usb 7-1: config 0 has no interface number 0
[  496.731317][ T5946] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  496.740385][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.748411][ T5946] usb 7-1: Product: syz
[  496.752567][ T5946] usb 7-1: Manufacturer: syz
[  496.757156][ T5946] usb 7-1: SerialNumber: syz
[  496.762930][ T5946] usb 7-1: config 0 descriptor??
[  496.770964][ T5946] smsc95xx v2.0.0
[  497.034271][T14399] blktrace: Concurrent blktraces are not allowed on rnullb0
[  497.172681][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  497.183755][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  497.403420][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  497.416102][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  497.630663][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  497.642807][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  497.652500][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  497.663327][ T5908] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  497.674216][ T5908] usb 4-1: USB disconnect, device number 115
[  497.780213][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  497.791622][ T5946] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  497.802704][ T5946] usb 7-1: USB disconnect, device number 32
[  498.025333][T14412] syzkaller1: entered promiscuous mode
[  498.031546][T14412] syzkaller1: entered allmulticast mode
[  498.405899][T14418] /dev/rnullb0: Can't open blockdev
[  498.597640][T14426] blktrace: Concurrent blktraces are not allowed on rnullb0
[  498.628811][T14431] kAFS: Can only specify source 'none' with -o dyn
[  498.938723][ T5945] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  499.103008][ T5945] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  499.141079][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.158423][ T5945] usb 1-1: Product: syz
[  499.165112][T14443] kAFS: unable to lookup cell 'sy�0'
[  499.178513][ T5945] usb 1-1: Manufacturer: syz
[  499.183139][ T5945] usb 1-1: SerialNumber: syz
[  499.458529][ T5908] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  499.612645][ T5908] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  499.622025][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  499.633807][ T5908] usb 4-1: Product: syz
[  499.637994][ T5908] usb 4-1: SerialNumber: syz
[  499.644518][ T5908] usb 4-1: config 0 descriptor??
[  499.856608][T14443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.868894][T14443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.885841][ T5908] usb 4-1: USB disconnect, device number 116
[  500.464342][T14459] syzkaller1: entered promiscuous mode
[  500.471352][T14459] syzkaller1: entered allmulticast mode
[  500.600119][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  500.612888][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  500.625011][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  500.637002][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  500.646537][ T5945] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  500.657798][ T5945] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  500.670783][ T5945] usb 1-1: USB disconnect, device number 95
[  500.788491][   T43] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  500.941070][   T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  500.950377][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.958715][   T43] usb 7-1: Product: syz
[  500.962877][   T43] usb 7-1: Manufacturer: syz
[  500.967442][   T43] usb 7-1: SerialNumber: syz
[  501.388514][ T5946] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  501.541602][ T5946] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  501.552009][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.560621][ T5946] usb 1-1: Product: syz
[  501.561900][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  501.564810][ T5946] usb 1-1: Manufacturer: syz
[  501.575809][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  501.576178][ T5946] usb 1-1: SerialNumber: syz
[  502.143100][T14475] fuse: Bad value for 'fd'
[  502.150142][T14475] 9p: Unknown parameter 'tr1ÚêAH0xffffffffffffffff'
[  502.287025][T14481] syzkaller1: entered promiscuous mode
[  502.292591][T14481] syzkaller1: entered allmulticast mode
[  502.390279][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  502.402801][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  502.498394][    T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  502.618131][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO
[  502.631426][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  502.641019][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  502.650913][   T43] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  502.663361][    T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  502.664283][   T43] usb 7-1: USB disconnect, device number 33
[  502.675555][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.687018][    T9] usb 4-1: Product: syz
[  502.691335][    T9] usb 4-1: Manufacturer: syz
[  502.696081][    T9] usb 4-1: SerialNumber: syz
[  502.908777][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.919323][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.966948][    T9] rtl8150 4-1:1.0: couldn't reset the device
[  502.974046][    T9] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  502.990350][    T9] usb 4-1: USB disconnect, device number 117
[  503.004550][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  503.030414][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[  503.449623][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO
[  503.471921][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  503.489898][ T5946] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  503.502847][ T5946] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  503.504232][T14494] vivid-000: disconnect
[  503.519184][ T5946] usb 1-1: USB disconnect, device number 96
[  503.798498][  T888] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  503.958438][  T888] usb 4-1: Using ep0 maxpacket: 32
[  503.973529][  T888] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  503.992783][  T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.008121][  T888] usb 4-1: Product: syz
[  504.013994][  T888] usb 4-1: Manufacturer: syz
[  504.020571][  T888] usb 4-1: SerialNumber: syz
[  504.043400][  T888] usb 4-1: config 0 descriptor??
[  504.054339][  T888] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  504.083117][T14499] syzkaller1: left promiscuous mode
[  504.088511][T14499] syzkaller1: left allmulticast mode
[  504.158771][T14501] blktrace: Concurrent blktraces are not allowed on rnullb0
[  505.002759][T14493] netlink: 'syz.3.2442': attribute type 28 has an invalid length.
[  505.258296][T13146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  505.272671][T13146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  505.280572][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2451'.
[  505.290117][T13146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  505.298797][T13146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  505.306297][T13146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.378123][T14527] wlan1 speed is unknown, defaulting to 1000
[  505.876008][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.911937][T14494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.934636][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.943246][T14527] chnl_net:caif_netlink_parms(): no params data found
[  505.958795][T14494] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.002652][  T888] gspca_stk1135: reg_w 0x203 err -71
[  506.012505][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.033694][  T888] gspca_stk1135: Sensor write failed
[  506.050660][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.057543][  T888] gspca_stk1135: Sensor write failed
[  506.073195][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.090664][  T888] gspca_stk1135: Sensor read failed
[  506.101284][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.112581][  T888] gspca_stk1135: Sensor read failed
[  506.117852][  T888] gspca_stk1135: Detected sensor type unknown (0x0)
[  506.134646][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.135718][T14527] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.148900][T14527] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.156120][T14527] bridge_slave_0: entered allmulticast mode
[  506.160095][  T888] gspca_stk1135: Sensor read failed
[  506.163374][T14527] bridge_slave_0: entered promiscuous mode
[  506.167286][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.176738][T14527] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.187048][T14527] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.195022][T14527] bridge_slave_1: entered allmulticast mode
[  506.202141][T14527] bridge_slave_1: entered promiscuous mode
[  506.217848][  T888] gspca_stk1135: Sensor read failed
[  506.230548][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.240545][  T888] gspca_stk1135: Sensor write failed
[  506.245873][  T888] gspca_stk1135: serial bus timeout: status=0x00
[  506.255240][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  506.258542][  T888] gspca_stk1135: Sensor write failed
[  506.272033][  T888] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71
[  506.278024][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  506.295348][  T888] usb 4-1: USB disconnect, device number 118
[  506.342926][T14527] team0: Port device team_slave_0 added
[  506.352588][T14527] team0: Port device team_slave_1 added
[  506.383206][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  506.390991][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.421560][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  506.433623][T14527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  506.441036][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  506.468097][T14527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  506.514531][T14527] hsr_slave_0: entered promiscuous mode
[  506.535543][T14527] hsr_slave_1: entered promiscuous mode
[  506.548934][T14527] debugfs: 'hsr0' already exists in 'hsr'
[  506.554689][T14527] Cannot create hsr debugfs directory
[  506.705042][T14527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.759293][T14527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.815420][T14527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.884548][T14527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  506.909424][T14549] blktrace: Concurrent blktraces are not allowed on rnullb0
[  506.999116][T14527] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  507.013480][T14527] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  507.025562][T14527] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  507.037765][T14527] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  507.117552][T14527] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.146531][T14527] 8021q: adding VLAN 0 to HW filter on device team0
[  507.160883][ T3587] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.168028][ T3587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.182231][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.189410][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.236812][T14527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  507.388511][T13146] Bluetooth: hci1: command tx timeout
[  507.405986][T14527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.435782][T14527] veth0_vlan: entered promiscuous mode
[  507.444910][T14527] veth1_vlan: entered promiscuous mode
[  507.465487][T14527] veth0_macvtap: entered promiscuous mode
[  507.475429][T14527] veth1_macvtap: entered promiscuous mode
[  507.490334][T14527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  507.502159][T14527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  507.513890][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.523819][ T3587] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.540629][ T3587] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.558874][ T3587] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.591706][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.605237][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.627547][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  507.640992][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  507.888603][ T5908] usb 4-1: new low-speed USB device number 119 using dummy_hcd
[  508.050318][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  508.069086][ T5908] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  508.094829][ T5908] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.121571][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0
[  508.140461][ T5908] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  508.164685][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.199439][ T5908] usb 4-1: config 0 descriptor??
[  508.616717][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.627797][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.639744][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.648020][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.656879][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.666413][ T5908] logitech-hidpp-device 0003:046D:C086.001E: unknown main item tag 0x0
[  508.682932][ T5908] logitech-hidpp-device 0003:046D:C086.001E: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[  508.698730][   T56] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  508.832827][T14569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  508.843149][T14569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  508.852674][T14569] loop6: detected capacity change from 0 to 1
[  508.860730][T13478] Dev loop6: unable to read RDB block 1
[  508.867070][T13478]  loop6: unable to read partition table
[  508.873510][T13478] loop6: partition table beyond EOD, truncated
[  508.876340][   T56] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  508.885558][T13478] udevd[13478]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system
[  508.900129][   T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.900154][   T56] usb 7-1: Product: syz
[  508.900168][   T56] usb 7-1: Manufacturer: syz
[  508.900181][   T56] usb 7-1: SerialNumber: syz
[  508.922768][T14569] Dev loop6: unable to read RDB block 1
[  508.931140][T14569]  loop6: unable to read partition table
[  508.936911][T14569] loop6: partition table beyond EOD, truncated
[  508.943379][T14569] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà) failed (rc=-5)
[  508.959061][ T5868] usb 4-1: USB disconnect, device number 119
[  508.963144][T13478] udevd[13478]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system
[  508.992923][T13478] udevd[13478]: symlink '../../loop6' '/dev/disk/by-diskseq/80.tmp-b7:6' failed: Read-only file system
[  509.078430][  T888] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  509.228520][  T888] usb 1-1: Using ep0 maxpacket: 8
[  509.235030][  T888] usb 1-1: config 6 has an invalid interface number: 151 but max is 0
[  509.243460][  T888] usb 1-1: config 6 has no interface number 0
[  509.249690][  T888] usb 1-1: config 6 interface 151 has no altsetting 0
[  509.258110][  T888] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=7e.a3
[  509.267256][  T888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.276670][  T888] usb 1-1: Product: syz
[  509.280959][  T888] usb 1-1: Manufacturer: syz
[  509.285580][  T888] usb 1-1: SerialNumber: syz
[  509.468556][T13146] Bluetooth: hci1: command tx timeout
[  509.504475][  T888] kvaser_usb 1-1:6.151: error -ENODEV: Cannot get usb endpoint(s)
[  509.518532][  T888] usb 1-1: USB disconnect, device number 97
[  510.312730][   T56] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  510.328492][ T5908] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  510.508182][ T5908] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  510.526263][   T56] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  510.548419][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.568603][ T5908] usb 1-1: Product: syz
[  510.572804][ T5908] usb 1-1: Manufacturer: syz
[  510.577399][ T5908] usb 1-1: SerialNumber: syz
[  510.584610][   T56] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  510.613196][   T56] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  510.643213][   T56] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  510.675873][   T56] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  510.687793][T14613] syzkaller1: entered promiscuous mode
[  510.698015][T14613] syzkaller1: entered allmulticast mode
[  510.711356][   T56] usb 7-1: USB disconnect, device number 34
[  510.806389][T14617] wlan1 speed is unknown, defaulting to 1000
[  511.081523][T13475] udevd[13475]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  511.124872][T13475] udevd[13475]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  511.188454][   T56] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  511.341947][   T56] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  511.351197][   T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.359781][   T56] usb 4-1: Product: syz
[  511.363961][   T56] usb 4-1: Manufacturer: syz
[  511.369440][   T56] usb 4-1: SerialNumber: syz
[  511.558559][T13146] Bluetooth: hci1: command tx timeout
[  512.035260][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  512.087087][T13481] udevd[13481]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  512.175361][T13481] udevd[13481]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  512.206942][T13481] udevd[13481]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  512.333368][T13481] udevd[13481]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  512.387220][T13481] udevd[13481]: symlink '../../loop6' '/dev/disk/by-diskseq/81.tmp-b7:6' failed: Read-only file system
[  512.463881][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  512.499161][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  512.512177][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  512.521873][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  512.532752][ T5908] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  512.544209][ T5908] usb 1-1: USB disconnect, device number 98
[  512.768396][ T5945] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  512.788642][   T56] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  512.921085][ T5945] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  512.930318][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.938660][ T5945] usb 7-1: Product: syz
[  512.942869][ T5945] usb 7-1: Manufacturer: syz
[  512.947462][ T5945] usb 7-1: SerialNumber: syz
[  513.403268][   T56] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  513.415613][   T56] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  513.428044][   T56] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  513.438039][   T56] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  513.447784][   T56] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  513.461340][   T56] usb 4-1: USB disconnect, device number 120
[  513.628499][T13146] Bluetooth: hci1: command tx timeout
[  514.380346][ T5945] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  514.606185][ T5945] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  514.637674][ T5945] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  514.659239][ T5945] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  514.681719][ T5945] usb 7-1: USB disconnect, device number 35
[  515.088465][ T5908] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  515.200682][T14688] /dev/rnullb0: Can't open blockdev
[  515.286731][T14691] syzkaller1: entered promiscuous mode
[  515.292539][T14691] syzkaller1: entered allmulticast mode
[  515.309617][T14693] /dev/rnullb0: Can't open blockdev
[  515.395887][T14695] netlink: 'syz.0.2503': attribute type 11 has an invalid length.
[  515.415948][T14695] /dev/rnullb0: Can't open blockdev
[  515.427027][ T5908] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  515.436751][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.454972][ T5908] usb 4-1: Product: syz
[  515.461164][ T5908] usb 4-1: Manufacturer: syz
[  515.466663][ T5908] usb 4-1: SerialNumber: syz
[  515.868647][ T5868] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  516.023648][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  516.050047][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.068676][ T5868] usb 1-1: Product: syz
[  516.072861][ T5868] usb 1-1: Manufacturer: syz
[  516.077456][ T5868] usb 1-1: SerialNumber: syz
[  516.628397][   T56] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  516.758460][   T56] usb 7-1: device descriptor read/64, error -71
[  516.893817][ T5908] net_ratelimit: 2 callbacks suppressed
[  516.893839][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  516.998474][   T56] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  517.128499][   T56] usb 7-1: device descriptor read/64, error -71
[  517.239402][   T56] usb usb7-port1: attempt power cycle
[  517.316469][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  517.328932][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  517.340950][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  517.350499][ T5908] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  517.362119][ T5908] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  517.374283][ T5908] usb 4-1: USB disconnect, device number 121
[  517.522102][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  517.578453][   T56] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  517.598980][   T56] usb 7-1: device descriptor read/8, error -71
[  517.735140][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  517.747661][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  517.759913][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  517.769436][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  517.780389][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  517.792649][ T5868] usb 1-1: USB disconnect, device number 99
[  517.838541][   T56] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  517.860738][   T56] usb 7-1: device descriptor read/8, error -71
[  517.968687][   T56] usb usb7-port1: unable to enumerate USB device
[  518.138484][ T5908] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  518.289811][ T5908] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  518.303077][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0
[  518.310008][ T5908] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  518.319069][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.327962][ T5908] usb 4-1: config 0 descriptor??
[  518.362311][T14727] /dev/rnullb0: Can't open blockdev
[  518.420449][T14729] sctp: [Deprecated]: syz.0.2516 (pid 14729) Use of int in maxseg socket option.
[  518.420449][T14729] Use struct sctp_assoc_value instead
[  518.435849][T14729] sctp: [Deprecated]: syz.0.2516 (pid 14729) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.435849][T14729] Use struct sctp_sack_info instead
[  518.452799][T14730] sctp: [Deprecated]: syz.0.2516 (pid 14730) Use of struct sctp_assoc_value in delayed_ack socket option.
[  518.452799][T14730] Use struct sctp_sack_info instead
[  518.841840][T14740] syzkaller1: entered promiscuous mode
[  518.860597][T14740] syzkaller1: entered allmulticast mode
[  518.928652][ T5908] usbhid 4-1:0.0: can't add hid device: -71
[  518.939474][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  518.962966][ T5908] usb 4-1: USB disconnect, device number 122
[  519.602909][T14746] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  519.721883][T14746] /dev/rnullb0: Can't open blockdev
[  520.028903][ T5868] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[  520.202006][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  520.218655][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.238491][ T5868] usb 1-1: Product: syz
[  520.248506][ T5868] usb 1-1: Manufacturer: syz
[  520.259053][ T5868] usb 1-1: SerialNumber: syz
[  520.534790][T14755] /dev/rnullb0: Can't open blockdev
[  520.775309][T14768] syzkaller1: entered promiscuous mode
[  520.782134][T14768] syzkaller1: entered allmulticast mode
[  520.949266][   T43] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  521.100980][   T43] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  521.111329][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.119426][   T43] usb 7-1: Product: syz
[  521.123587][   T43] usb 7-1: Manufacturer: syz
[  521.128174][   T43] usb 7-1: SerialNumber: syz
[  521.483322][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  521.495348][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  521.505288][ T5868] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  521.516802][ T5868] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  521.938414][ T5868] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  522.088457][ T5868] usb 4-1: Using ep0 maxpacket: 16
[  522.095472][ T5868] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  522.103786][ T5868] usb 4-1: config 0 has no interface number 0
[  522.112471][ T5868] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  522.121559][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.129634][ T5868] usb 4-1: Product: syz
[  522.133829][ T5868] usb 4-1: Manufacturer: syz
[  522.138455][ T5868] usb 4-1: SerialNumber: syz
[  522.144626][ T5868] usb 4-1: config 0 descriptor??
[  522.152061][ T5868] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  522.555160][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  522.801050][T13672] usb 1-1: USB disconnect, device number 100
[  523.173963][T14795] netlink: 'syz.7.2537': attribute type 1 has an invalid length.
[  523.173968][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  523.202583][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  523.215636][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  523.215980][T13672] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[  523.225839][   T43] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  523.252012][   T43] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  523.277879][   T43] usb 7-1: USB disconnect, device number 40
[  523.409701][T13672] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  523.429167][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.437352][T13672] usb 1-1: Product: syz
[  523.447482][T13672] usb 1-1: Manufacturer: syz
[  523.452332][T13672] usb 1-1: SerialNumber: syz
[  523.582167][T14790] wlan1 speed is unknown, defaulting to 1000
[  523.658744][ T5868] gspca_spca1528: reg_w err -110
[  523.673983][ T5868] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  523.706694][T14805] syzkaller1: entered promiscuous mode
[  523.712875][T14805] syzkaller1: entered allmulticast mode
[  523.768734][T14808] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  523.831767][T14790] lo speed is unknown, defaulting to 1000
[  523.837553][T14790] lo speed is unknown, defaulting to 1000
[  523.844100][T14790] lo speed is unknown, defaulting to 1000
[  523.852863][T14790] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  523.865126][T14790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  523.874198][T14810] block nbd6: Unsupported socket: shutdown callout must be supported.
[  523.885135][T14790] lo speed is unknown, defaulting to 1000
[  523.893603][T14790] lo speed is unknown, defaulting to 1000
[  523.900859][T14790] lo speed is unknown, defaulting to 1000
[  523.907450][T14790] lo speed is unknown, defaulting to 1000
[  523.914288][T14790] lo speed is unknown, defaulting to 1000
[  523.922164][T14790] lo speed is unknown, defaulting to 1000
[  523.929167][T14790] lo speed is unknown, defaulting to 1000
[  523.936167][T14790] lo speed is unknown, defaulting to 1000
[  523.936406][T14811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.947028][T14803] smc: removing ib device syz0
[  523.960360][T14811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.692638][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  524.728688][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  524.755348][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  524.783773][T13672] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  525.035959][   T43] usb 4-1: USB disconnect, device number 123
[  525.328414][ T5946] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  525.478442][   T43] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[  525.486203][ T5946] usb 7-1: Using ep0 maxpacket: 32
[  525.492764][ T5946] usb 7-1: config 0 has an invalid interface number: 67 but max is 0
[  525.500905][ T5946] usb 7-1: config 0 has no interface number 0
[  525.511514][ T5946] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  525.520626][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.528936][ T5946] usb 7-1: Product: syz
[  525.533097][ T5946] usb 7-1: Manufacturer: syz
[  525.537662][ T5946] usb 7-1: SerialNumber: syz
[  525.543567][ T5946] usb 7-1: config 0 descriptor??
[  525.550731][ T5946] smsc95xx v2.0.0
[  525.640707][   T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  525.649883][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.661323][   T43] usb 4-1: config 0 descriptor??
[  525.832642][T13672] usb 1-1: USB disconnect, device number 101
[  525.867396][T14831] trusted_key: encrypted_key: insufficient parameters specified
[  525.953081][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  525.964257][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  526.198454][T13672] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  526.382877][T13672] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  526.392070][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.400182][T13672] usb 1-1: Product: syz
[  526.404357][T13672] usb 1-1: Manufacturer: syz
[  526.409165][T13672] usb 1-1: SerialNumber: syz
[  526.565671][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  526.580195][ T5946] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71
[  526.594816][ T5946] usb 7-1: USB disconnect, device number 41
[  527.123504][T14840] syzkaller1: entered promiscuous mode
[  527.129207][T14840] syzkaller1: entered allmulticast mode
[  527.368409][ T5946] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  527.431721][T14842] syzkaller1: entered promiscuous mode
[  527.437360][T14842] syzkaller1: entered allmulticast mode
[  527.538381][ T5946] usb 7-1: Using ep0 maxpacket: 16
[  527.549711][ T5946] usb 7-1: config 1 has an invalid interface number: 105 but max is 0
[  527.557912][ T5946] usb 7-1: config 1 has no interface number 0
[  527.564222][ T5946] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  527.574454][ T5946] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  527.584630][ T5946] usb 7-1: config 1 interface 105 has no altsetting 0
[  527.600222][ T5946] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  527.610461][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.619601][ T5946] usb 7-1: Product: syz
[  527.623783][ T5946] usb 7-1: Manufacturer: syz
[  527.633103][ T5946] usb 7-1: SerialNumber: syz
[  527.650583][T14840] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  527.658027][T14840] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  527.826407][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  528.080964][T14847] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  528.094927][T14847] /dev/rnullb0: Can't open blockdev
[  528.261942][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  528.276150][    T9] usb 4-1: USB disconnect, device number 124
[  528.284674][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  528.297002][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  528.306553][T13672] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  528.322175][T13672] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  528.358870][T13672] usb 1-1: USB disconnect, device number 102
[  528.823459][   T43] IPVS: starting estimator thread 0...
[  528.823555][T14863] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  528.861277][T14863] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2559'.
[  528.909099][ T5907] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  528.938442][T14867] IPVS: using max 45 ests per chain, 108000 per kthread
[  529.074646][ T5907] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  529.098451][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.106620][ T5907] usb 4-1: Product: syz
[  529.116770][ T5907] usb 4-1: Manufacturer: syz
[  529.121583][   T43] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[  529.138661][ T5907] usb 4-1: SerialNumber: syz
[  529.294144][   T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  529.303476][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.312216][   T43] usb 1-1: Product: syz
[  529.316458][   T43] usb 1-1: Manufacturer: syz
[  529.321477][   T43] usb 1-1: SerialNumber: syz
[  529.957205][T14877] syzkaller1: left promiscuous mode
[  529.963429][T14877] syzkaller1: left allmulticast mode
[  529.971225][T14877] FAULT_INJECTION: forcing a failure.
[  529.971225][T14877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.984926][T14877] CPU: 0 UID: 0 PID: 14877 Comm: syz.6.2564 Not tainted syzkaller #0 PREEMPT(full) 
[  529.984951][T14877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  529.984963][T14877] Call Trace:
[  529.984970][T14877]  <TASK>
[  529.984978][T14877]  dump_stack_lvl+0x189/0x250
[  529.985007][T14877]  ? __pfx____ratelimit+0x10/0x10
[  529.985028][T14877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.985050][T14877]  ? __pfx__printk+0x10/0x10
[  529.985074][T14877]  ? rcu_is_watching+0x15/0xb0
[  529.985093][T14877]  should_fail_ex+0x414/0x560
[  529.985117][T14877]  _copy_to_user+0x31/0xb0
[  529.985138][T14877]  simple_read_from_buffer+0xe1/0x170
[  529.985158][T14877]  proc_fail_nth_read+0x1b3/0x220
[  529.985181][T14877]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.985204][T14877]  ? rw_verify_area+0x2a6/0x4d0
[  529.985220][T14877]  ? tun_chr_write_iter+0xe0/0x200
[  529.985238][T14877]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  529.985260][T14877]  vfs_read+0x200/0xa30
[  529.985274][T14877]  ? fdget_pos+0x247/0x320
[  529.985294][T14877]  ? __pfx___mutex_lock+0x10/0x10
[  529.985316][T14877]  ? __pfx_vfs_read+0x10/0x10
[  529.985335][T14877]  ? __fget_files+0x3a0/0x420
[  529.985354][T14877]  ? __fget_files+0x2a/0x420
[  529.985412][T14877]  ksys_read+0x145/0x250
[  529.985429][T14877]  ? __pfx_ksys_read+0x10/0x10
[  529.985446][T14877]  ? rcu_is_watching+0x15/0xb0
[  529.985464][T14877]  do_syscall_64+0xfa/0xfa0
[  529.985485][T14877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.985502][T14877]  ? clear_bhb_loop+0x60/0xb0
[  529.985520][T14877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.985536][T14877] RIP: 0033:0x7fd05af8d5fc
[  529.985552][T14877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  529.985566][T14877] RSP: 002b:00007fd05bef1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  529.985585][T14877] RAX: ffffffffffffffda RBX: 00007fd05b1c5fa0 RCX: 00007fd05af8d5fc
[  529.985597][T14877] RDX: 000000000000000f RSI: 00007fd05bef10a0 RDI: 0000000000000006
[  529.985609][T14877] RBP: 00007fd05bef1090 R08: 0000000000000000 R09: 0000000000000000
[  529.985620][T14877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.985630][T14877] R13: 00007fd05b1c6038 R14: 00007fd05b1c5fa0 R15: 00007ffc055b58f8
[  529.985649][T14877]  </TASK>
[  530.421450][ T5907] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  530.471061][ T5907] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  530.520138][ T5907] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  530.540078][ T5907] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  530.639327][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  530.659250][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  530.678931][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  530.709764][   T43] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  530.865813][T14886] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2568'.
[  531.046762][T14897] /dev/rnullb0: Can't open blockdev
[  531.092137][T14899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.102658][T14899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.699118][    T9] usb 4-1: USB disconnect, device number 125
[  531.710603][T14906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.719309][T14906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.922668][   T43] usb 1-1: USB disconnect, device number 103
[  531.957265][T14913] Malformed UNC in devname
[  531.957265][T14913] 
[  531.979275][T14913] CIFS: VFS: Malformed UNC in devname
[  532.204838][T14920] syzkaller1: entered promiscuous mode
[  532.210420][T14920] syzkaller1: entered allmulticast mode
[  532.478526][    T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  532.498449][T13672] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  532.583698][T14933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.593122][T14933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.628668][    T9] usb 1-1: Using ep0 maxpacket: 32
[  532.635312][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  532.643621][    T9] usb 1-1: config 0 has no interface number 0
[  532.653516][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  532.662853][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.671071][    T9] usb 1-1: Product: syz
[  532.671557][ T5946] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32
[  532.675584][T13672] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  532.688674][ T5946] aqc111 7-1:1.105: probe with driver aqc111 failed with error -32
[  532.695284][    T9] usb 1-1: Manufacturer: syz
[  532.707839][    T9] usb 1-1: SerialNumber: syz
[  532.713753][    T9] usb 1-1: config 0 descriptor??
[  532.718873][T13672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.727476][T13672] usb 4-1: Product: syz
[  532.731813][T13672] usb 4-1: Manufacturer: syz
[  532.736463][T13672] usb 4-1: SerialNumber: syz
[  532.742265][    T9] smsc95xx v2.0.0
[  533.140368][T14939] netlink: 'syz.6.2588': attribute type 2 has an invalid length.
[  533.148254][T14939] netlink: 'syz.6.2588': attribute type 6 has an invalid length.
[  533.148817][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  533.170413][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  533.267438][T14945] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2591'.
[  533.348727][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  533.357648][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  533.760650][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  533.771829][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  533.784495][    T9] usb 1-1: USB disconnect, device number 104
[  533.981677][T13672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  533.993546][T13672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  534.003139][T13672] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  534.013317][T13672] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  534.294899][T14955] syzkaller1: entered promiscuous mode
[  534.300626][T14955] syzkaller1: entered allmulticast mode
[  534.522473][T14958] syzkaller1: entered promiscuous mode
[  534.527984][T14958] syzkaller1: entered allmulticast mode
[  534.915342][T14961] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  534.923790][T14961] /dev/rnullb0: Can't open blockdev
[  535.293526][T13672] usb 4-1: USB disconnect, device number 126
[  535.511561][T14971] block nbd3: Attempted send on invalid socket
[  535.534390][T14971] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  535.558965][T14973] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  535.565517][T14973] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  535.584521][T14973] vhci_hcd vhci_hcd.0: Device attached
[  535.601807][T14974] usbip_core: unknown command
[  535.606971][T13146] Bluetooth: hci2: ISO packet for unknown connection handle 201
[  535.615274][T14973] netlink: 'syz.6.2602': attribute type 2 has an invalid length.
[  535.625266][T14974] vhci_hcd: unknown pdu 0
[  535.636160][T14973] /dev/rnullb0: Can't open blockdev
[  535.644155][T14974] usbip_core: unknown command
[  535.650420][   T49] vhci_hcd: stop threads
[  535.654679][   T49] vhci_hcd: release socket
[  535.668433][   T49] vhci_hcd: disconnect device
[  535.902043][T14981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2604'.
[  535.973523][T14985] /dev/rnullb0: Can't open blockdev
[  536.057910][T14987] syzkaller1: entered promiscuous mode
[  536.063485][T14987] syzkaller1: entered allmulticast mode
[  536.148574][T13672] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  536.288995][T14989] o2cb: This node has not been configured.
[  536.294812][T14989] o2cb: Cluster check failed. Fix errors before retrying.
[  536.303497][T14989] (syz.6.2608,14989,0):user_dlm_register:674 ERROR: status = -22
[  536.311929][T14989] (syz.6.2608,14989,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  536.326104][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.335793][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.338438][T13672] usb 1-1: Using ep0 maxpacket: 32
[  536.353447][T13672] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  536.365848][T13672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  536.380302][T13672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  536.390543][T13672] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  536.403489][T13672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  536.416344][T13672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  536.431428][T13672] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  536.441347][T13672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.449878][T13672] usb 1-1: Product: syz
[  536.454041][T13672] usb 1-1: Manufacturer: syz
[  536.459447][T13672] usb 1-1: SerialNumber: syz
[  536.464999][T13672] usb 1-1: config 0 descriptor??
[  536.648533][ T5946] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  536.677654][   T43] usb 1-1: USB disconnect, device number 105
[  536.810832][ T5946] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  536.820056][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.829188][ T5946] usb 4-1: Product: syz
[  536.835228][ T5946] usb 4-1: Manufacturer: syz
[  536.840045][ T5946] usb 4-1: SerialNumber: syz
[  536.880962][T14997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.891056][T14997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.278526][T15001] binder: 15000:15001 ioctl c0306201 200000000640 returned -22
[  537.457653][T15005] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2615'.
[  538.055707][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  538.070159][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  538.081026][ T5946] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  538.099541][ T5946] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[  538.177589][T15027] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2622'.
[  538.338237][T15038] program syz.6.2626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  538.369987][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.384279][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.396963][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.410626][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.421795][T15044] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  538.422759][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.440506][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.510359][T15050] /dev/rnullb0: Can't open blockdev
[  538.768557][ T5946] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  538.920196][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.931207][ T5946] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  538.940420][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.950725][ T5946] usb 1-1: config 0 descriptor??
[  539.162350][ T5946] usbhid 1-1:0.0: can't add hid device: -71
[  539.168624][ T5946] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  539.179416][ T5946] usb 1-1: USB disconnect, device number 106
[  539.427264][ T5946] usb 4-1: USB disconnect, device number 127
[  539.608450][  T888] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  539.615180][T15068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.626106][T15068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.758546][  T888] usb 1-1: Using ep0 maxpacket: 32
[  539.771508][  T888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.798128][  T888] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  539.824933][  T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.840267][  T888] usb 1-1: config 0 descriptor??
[  539.859866][  T888] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  539.874815][  T888] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  539.961468][ T5945] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  540.125473][ T5945] usb 4-1: config 4 has an invalid interface number: 88 but max is 1
[  540.133907][ T5945] usb 4-1: config 4 has an invalid interface number: 29 but max is 1
[  540.145108][ T5945] usb 4-1: config 4 has no interface number 0
[  540.151564][ T5945] usb 4-1: config 4 has no interface number 1
[  540.158872][ T5945] usb 4-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  540.170358][ T5945] usb 4-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 2, skipping
[  540.182076][ T5945] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  540.195783][ T5945] usb 4-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  540.210838][ T5945] usb 4-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  540.222336][ T5945] usb 4-1: config 4 interface 88 has no altsetting 0
[  540.229614][ T5945] usb 4-1: config 4 interface 29 has no altsetting 0
[  540.239433][ T5945] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  540.248939][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.257044][ T5945] usb 4-1: Product: syz
[  540.263350][ T5945] usb 4-1: Manufacturer: syz
[  540.268058][ T5945] usb 4-1: SerialNumber: syz
[  540.477304][T15074] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  540.490436][T15074] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  540.502180][T15074] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  540.513103][T15074] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  540.531066][ T5945] usb 4-1: USB disconnect, device number 2
[  541.544310][ T5945] usb 1-1: USB disconnect, device number 107
[  541.559745][ T5945] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  541.732633][T15085] syzkaller1: entered promiscuous mode
[  541.751730][T15085] syzkaller1: entered allmulticast mode
[  542.618674][   T56] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  542.641447][T15093] syzkaller1: left promiscuous mode
[  542.646817][T15093] syzkaller1: left allmulticast mode
[  542.778559][   T56] usb 1-1: Using ep0 maxpacket: 8
[  542.787495][   T56] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  542.797108][   T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.806197][   T56] usb 1-1: Product: syz
[  542.810842][   T56] usb 1-1: Manufacturer: syz
[  542.815425][   T56] usb 1-1: SerialNumber: syz
[  542.821694][   T56] usb 1-1: config 0 descriptor??
[  542.828555][  T888] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  542.981934][  T888] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  542.991452][  T888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.000328][  T888] usb 4-1: Product: syz
[  543.004505][  T888] usb 4-1: Manufacturer: syz
[  543.009187][  T888] usb 4-1: SerialNumber: syz
[  543.033985][   T56] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  543.041940][   T56] gspca_sunplus: reg_w_riv err -71
[  543.047224][   T56] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  543.057447][   T56] usb 1-1: USB disconnect, device number 108
[  543.598068][T15109] syzkaller1: entered promiscuous mode
[  543.603875][T15109] syzkaller1: entered allmulticast mode
[  544.227119][T15114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.237956][T15114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.425944][  T888] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  544.787311][T15126] fuse: Bad value for 'fd'
[  544.842560][  T888] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  544.860470][  T888] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  544.875237][  T888] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  544.882462][T15131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.886029][  T888] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  544.895146][T15131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.912872][  T888] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  544.925012][  T888] usb 4-1: USB disconnect, device number 3
[  545.380621][T15134] syzkaller1: entered promiscuous mode
[  545.386123][T15134] syzkaller1: entered allmulticast mode
[  545.623624][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.633155][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.248552][  T888] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  546.398410][  T888] usb 4-1: device descriptor read/64, error -71
[  546.640391][  T888] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  546.788535][  T888] usb 4-1: device descriptor read/64, error -71
[  546.898637][  T888] usb usb4-port1: attempt power cycle
[  547.181005][T15165] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2675'.
[  547.248401][  T888] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  547.280738][  T888] usb 4-1: device descriptor read/8, error -71
[  547.518425][  T888] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  547.550706][  T888] usb 4-1: device descriptor read/8, error -71
[  547.658641][  T888] usb usb4-port1: unable to enumerate USB device
[  548.106132][T15179] netlink: 'syz.7.2680': attribute type 1 has an invalid length.
[  549.710677][ T5874] Bluetooth: hci3: command 0x0406 tx timeout
[  550.067300][T15223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.076101][T15223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.298470][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  550.312517][T15225] netlink: 'syz.0.2696': attribute type 10 has an invalid length.
[  550.322230][T15225] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  550.334439][T15225] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  550.348269][T15225] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  550.377575][T15227] /dev/rnullb0: Can't lookup blockdev
[  550.451809][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  550.461471][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.469996][    T9] usb 4-1: Product: syz
[  550.474162][    T9] usb 4-1: Manufacturer: syz
[  550.479435][    T9] usb 4-1: SerialNumber: syz
[  550.656315][T15233] NILFS (nullb0): couldn't find nilfs on the device
[  551.790756][T15264] pimreg3: entered allmulticast mode
[  551.798094][T15264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  551.808572][T15264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  551.902159][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  552.317588][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO
[  552.331877][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  552.344682][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  552.357750][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  552.369599][    T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  552.384579][    T9] usb 4-1: USB disconnect, device number 8
[  552.530820][T15271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.540311][T15271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.523485][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.534567][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.108662][T15318] netlink: 'syz.6.2731': attribute type 29 has an invalid length.
[  554.123935][T15318] netlink: 548 bytes leftover after parsing attributes in process `syz.6.2731'.
[  554.337266][T15327] /dev/rnullb0: Can't open blockdev
[  554.516109][T15337] /dev/rnullb0: Can't open blockdev
[  554.532754][T15339] syzkaller1: left promiscuous mode
[  554.541934][T15339] syzkaller1: left allmulticast mode
[  554.553480][T15339] /dev/rnullb0: Can't open blockdev
[  554.599293][T15342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.617583][T15342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.701082][T15352] /dev/rnullb0: Can't open blockdev
[  554.907881][T15358] netlink: 'syz.3.2746': attribute type 3 has an invalid length.
[  554.915759][T15358] netlink: 'syz.3.2746': attribute type 1 has an invalid length.
[  554.923949][T15358] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2746'.
[  554.935636][T15358] block nbd3: Attempted send on invalid socket
[  554.941895][T15358] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  554.952256][T15358] efs: cannot read volume header
[  555.186680][T15364] netlink: 'syz.6.2749': attribute type 29 has an invalid length.
[  555.198640][T15364] netlink: 'syz.6.2749': attribute type 29 has an invalid length.
[  555.206518][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  555.207669][T15364] netlink: 500 bytes leftover after parsing attributes in process `syz.6.2749'.
[  555.229083][T15364] /dev/rnullb0: Can't open blockdev
[  555.348729][    T9] usb 4-1: device descriptor read/64, error -71
[  555.608463][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  555.738504][    T9] usb 4-1: device descriptor read/64, error -71
[  555.851141][    T9] usb usb4-port1: attempt power cycle
[  556.166108][T13146] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  556.195441][T15388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.205661][T15388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.214362][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  556.226266][T15388] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  556.239936][T15388] Error validating options; rc = [-22]
[  556.249306][    T9] usb 4-1: device descriptor read/8, error -71
[  556.490023][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  556.493501][T15395] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2763'.
[  556.510279][    T9] usb 4-1: device descriptor read/8, error -71
[  556.620529][    T9] usb usb4-port1: unable to enumerate USB device
[  556.772214][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'.
[  556.781932][T15401] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2765'.
[  557.142473][T15423] /dev/rnullb0: Can't lookup blockdev
[  557.647926][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.656584][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.680397][T15456] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2770'.
[  557.695933][T15456] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  557.706794][T15456] syzkaller0: MTU too low for tipc bearer
[  557.714119][T15456] tipc: Disabling bearer <eth:syzkaller0>
[  557.781728][T15466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.828643][T15466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.957169][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2774'.
[  558.021749][T15478] team0: Port device team_slave_0 removed
[  558.131099][T15480] FAULT_INJECTION: forcing a failure.
[  558.131099][T15480] name failslab, interval 1, probability 0, space 0, times 0
[  558.165469][T15480] CPU: 0 UID: 0 PID: 15480 Comm: syz.3.2775 Not tainted syzkaller #0 PREEMPT(full) 
[  558.165494][T15480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  558.165504][T15480] Call Trace:
[  558.165511][T15480]  <TASK>
[  558.165519][T15480]  dump_stack_lvl+0x189/0x250
[  558.165546][T15480]  ? __pfx____ratelimit+0x10/0x10
[  558.165566][T15480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.165588][T15480]  ? __pfx__printk+0x10/0x10
[  558.165610][T15480]  ? __pfx___might_resched+0x10/0x10
[  558.165628][T15480]  ? lock_acquire+0x5f/0x360
[  558.165644][T15480]  should_fail_ex+0x414/0x560
[  558.165667][T15480]  should_failslab+0xa8/0x100
[  558.165684][T15480]  __kmalloc_noprof+0xcb/0x4b0
[  558.165705][T15480]  ? kfree+0x4d/0x440
[  558.165724][T15480]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  558.165746][T15480]  tomoyo_realpath_from_path+0xe3/0x5d0
[  558.165768][T15480]  ? tomoyo_domain+0xd9/0x130
[  558.165799][T15480]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  558.165815][T15480]  tomoyo_path_number_perm+0x1e8/0x5a0
[  558.165833][T15480]  ? lock_release+0x4b/0x3e0
[  558.165848][T15480]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  558.165867][T15480]  ? rcu_is_watching+0x15/0xb0
[  558.165885][T15480]  ? lock_release+0x4b/0x3e0
[  558.165899][T15480]  ? vfs_write+0x956/0xb30
[  558.165916][T15480]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  558.165947][T15480]  ? __fget_files+0x3a0/0x420
[  558.165964][T15480]  ? __fget_files+0x2a/0x420
[  558.165982][T15480]  security_file_ioctl+0xcb/0x2d0
[  558.166000][T15480]  __se_sys_ioctl+0x47/0x170
[  558.166022][T15480]  do_syscall_64+0xfa/0xfa0
[  558.166042][T15480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.166058][T15480]  ? clear_bhb_loop+0x60/0xb0
[  558.166076][T15480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  558.166091][T15480] RIP: 0033:0x7f701af8ebe9
[  558.166105][T15480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  558.166119][T15480] RSP: 002b:00007f701be79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  558.166137][T15480] RAX: ffffffffffffffda RBX: 00007f701b1c5fa0 RCX: 00007f701af8ebe9
[  558.166148][T15480] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  558.166158][T15480] RBP: 00007f701be79090 R08: 0000000000000000 R09: 0000000000000000
[  558.166168][T15480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  558.166179][T15480] R13: 00007f701b1c6038 R14: 00007f701b1c5fa0 R15: 00007ffd715e4248
[  558.166197][T15480]  </TASK>
[  558.166203][T15480] ERROR: Out of memory at tomoyo_realpath_from_path.
[  558.367862][T15499] overlayfs: failed to resolve './file0': -2
[  558.659709][T15508] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  558.666667][T15508] /dev/rnullb0: Can't open blockdev
[  558.890145][T15520] syzkaller1: entered promiscuous mode
[  558.895672][T15520] syzkaller1: entered allmulticast mode
[  559.729059][T13672] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  559.889837][T13672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.901016][T13672] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  559.918595][T13672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.931326][T13672] usb 4-1: config 0 descriptor??
[  560.073078][T13146] Bluetooth: Unexpected start frame (len 12)
[  560.080756][T13146] Bluetooth: Frame is too long (len 12, expected len 4)
[  560.356475][T13672] zydacron 0003:13EC:0006.001F: item fetching failed at offset 4/5
[  560.365587][T13672] zydacron 0003:13EC:0006.001F: parse failed
[  560.377228][T13672] zydacron 0003:13EC:0006.001F: probe with driver zydacron failed with error -22
[  560.537015][T15558] syzkaller1: entered promiscuous mode
[  560.542650][T15558] syzkaller1: entered allmulticast mode
[  560.567072][T15532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.575892][T15532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.602925][ T5946] usb 4-1: USB disconnect, device number 13
[  560.823122][T15569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2798'.
[  561.124794][T15575] /dev/rnullb0: Can't open blockdev
[  561.143677][T15577] /dev/rnullb0: Can't open blockdev
[  561.253615][T15590] /dev/rnullb0: Can't open blockdev
[  561.279080][T15592] input: syz1 as /devices/virtual/input/input43
[  561.869987][T15604] netlink: 428 bytes leftover after parsing attributes in process `syz.6.2809'.
[  561.887156][T15604] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2809'.
[  561.907015][T15606] /dev/rnullb0: Can't open blockdev
[  562.115473][T15616] /dev/rnullb0: Can't lookup blockdev
[  562.202015][T15625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.214649][T15625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.504887][T15634] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2820'.
[  562.558231][T15636] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  562.568822][T15636] exFAT-fs (nullb0): invalid boot record signature
[  562.575314][T15636] exFAT-fs (nullb0): failed to read boot sector
[  562.582884][T15636] exFAT-fs (nullb0): failed to recognize exfat type
[  562.991822][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  562.998193][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  569.046956][T15675] cgroup: Name too long
[  573.398220][T15697] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.411471][T15697] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.421278][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  573.433158][T15697] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.445281][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  573.456972][T15697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  573.477273][T15697] UDF-fs: Scanning with blocksize 512 failed
[  573.485518][T15697] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.514618][T15697] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.550820][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  573.567067][T15697] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.576836][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  573.590203][T15697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  573.597903][T15697] UDF-fs: Scanning with blocksize 1024 failed
[  573.605347][T15697] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.618270][T15697] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.630492][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  573.640601][T15697] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.652024][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  573.663572][T15697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  573.673685][T15697] UDF-fs: Scanning with blocksize 2048 failed
[  573.680715][T15697] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  573.693413][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  573.703724][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  573.715329][T15697] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  573.724716][T15697] UDF-fs: Scanning with blocksize 4096 failed
[  573.732629][T15697] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[  578.273590][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  578.284389][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  578.291693][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  578.305032][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  578.312493][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  578.500023][T15711] chnl_net:caif_netlink_parms(): no params data found
[  579.365447][ T5946] usb 7-1: USB disconnect, device number 42
[  579.452307][ T5874] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  579.461880][ T5874] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  579.470192][ T5874] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  579.477762][ T5874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  579.487517][ T5874] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  580.348404][ T5874] Bluetooth: hci0: command tx timeout
[  581.361089][T13146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  581.368875][T13146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  581.378665][T13146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  581.389258][T13146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  581.398449][T13146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  581.548814][T13146] Bluetooth: hci5: command tx timeout
[  582.428526][ T5874] Bluetooth: hci0: command tx timeout
[  583.469528][ T5874] Bluetooth: hci6: command tx timeout
[  583.628520][ T5874] Bluetooth: hci5: command tx timeout
[  584.510492][ T5874] Bluetooth: hci0: command tx timeout
[  585.548529][ T5874] Bluetooth: hci6: command tx timeout
[  585.711724][ T5874] Bluetooth: hci5: command tx timeout
[  586.588574][ T5874] Bluetooth: hci0: command tx timeout
[  587.628553][ T5874] Bluetooth: hci6: command tx timeout
[  587.788554][ T5874] Bluetooth: hci5: command tx timeout
[  589.224123][T14495] vivid-000: reconnect
[  589.277322][ T1305] ==================================================================
[  589.285429][ T1305] BUG: KASAN: slab-use-after-free in handle_tx+0x466/0x610
[  589.292636][ T1305] Read of size 1 at addr ffff888032a9f490 by task aoe_tx0/1305
[  589.300180][ T1305] 
[  589.302507][ T1305] CPU: 0 UID: 0 PID: 1305 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  589.302528][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  589.302541][ T1305] Call Trace:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  589.302549][ T1305]  <TASK>
[  589.302565][ T1305]  dump_stack_lvl+0x189/0x250
[  589.302590][ T1305]  ? __virt_addr_valid+0x1c8/0x5c0
[  589.302613][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.302632][ T1305]  ? __pfx_dump_stack_lvl+0x10/0x10
[  589.302653][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.302671][ T1305]  ? lock_release+0x4b/0x3e0
[  589.302686][ T1305]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  589.302709][ T1305]  ? __virt_addr_valid+0x1c8/0x5c0
[  589.302729][ T1305]  ? __virt_addr_valid+0x4a5/0x5c0
[  589.302750][ T1305]  print_report+0xca/0x240
[  589.302767][ T1305]  ? handle_tx+0x466/0x610
[  589.302783][ T1305]  kasan_report+0x118/0x150
[  589.302800][ T1305]  ? handle_tx+0x466/0x610
[  589.302818][ T1305]  handle_tx+0x466/0x610
[  589.302839][ T1305]  dev_hard_start_xmit+0x2d7/0x830
[  589.302862][ T1305]  __dev_queue_xmit+0x1b8d/0x3b50
[  589.302883][ T1305]  ? __dev_queue_xmit+0x27b/0x3b50
[  589.302901][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.302918][ T1305]  ? trace_sched_exit_tp+0x36/0x110
[  589.302951][ T1305]  ? __schedule+0x17ae/0x4cc0
[  589.302971][ T1305]  ? __pfx___dev_queue_xmit+0x10/0x10
[  589.302990][ T1305]  ? do_raw_spin_lock+0x121/0x290
[  589.303011][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.303031][ T1305]  ? do_raw_spin_unlock+0x122/0x240
[  589.303052][ T1305]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  589.303073][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.303092][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.303110][ T1305]  tx+0x6b/0x190
[  589.303130][ T1305]  ? __pfx_tx+0x10/0x10
[  589.303151][ T1305]  kthread+0x1cd/0x3e0
[  589.303173][ T1305]  ? __pfx_kthread+0x10/0x10
[  589.303191][ T1305]  ? __pfx_default_wake_function+0x10/0x10
[  589.303207][ T1305]  ? __kthread_parkme+0x7b/0x200
[  589.303226][ T1305]  ? __kthread_parkme+0x1a1/0x200
[  589.303247][ T1305]  kthread+0x711/0x8a0
[  589.303268][ T1305]  ? __pfx_kthread+0x10/0x10
[  589.303286][ T1305]  ? __pfx_kthread+0x10/0x10
[  589.303306][ T1305]  ? rcu_is_watching+0x15/0xb0
[  589.303324][ T1305]  ? __pfx_kthread+0x10/0x10
[  589.303344][ T1305]  ret_from_fork+0x47c/0x820
[  589.303363][ T1305]  ? __pfx_ret_from_fork+0x10/0x10
[  589.303384][ T1305]  ? __switch_to_asm+0x39/0x70
[  589.303400][ T1305]  ? __switch_to_asm+0x33/0x70
[  589.303415][ T1305]  ? __pfx_kthread+0x10/0x10
[  589.303435][ T1305]  ret_from_fork_asm+0x1a/0x30
[  589.303458][ T1305]  </TASK>
[  589.303465][ T1305] 
[  589.548402][ T1305] Allocated by task 12371:
[  589.552799][ T1305]  kasan_save_track+0x3e/0x80
[  589.557468][ T1305]  __kasan_kmalloc+0x93/0xb0
[  589.562048][ T1305]  __kmalloc_cache_noprof+0x21c/0x3a0
[  589.567420][ T1305]  alloc_tty_struct+0xa6/0x780
[  589.572181][ T1305]  tty_init_dev+0x59/0x4d0
[  589.576586][ T1305]  tty_open+0x5ab/0xd10
[  589.580734][ T1305]  chrdev_open+0x4cc/0x5e0
[  589.585150][ T1305]  do_dentry_open+0x950/0x13f0
[  589.589900][ T1305]  vfs_open+0x3b/0x340
[  589.593954][ T1305]  path_openat+0x2ee5/0x3830
[  589.598527][ T1305]  do_filp_open+0x1fa/0x410
[  589.603018][ T1305]  do_sys_openat2+0x121/0x1c0
[  589.607678][ T1305]  __x64_sys_openat+0x138/0x170
[  589.612523][ T1305]  do_syscall_64+0xfa/0xfa0
[  589.617024][ T1305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.622904][ T1305] 
[  589.625215][ T1305] Freed by task 5946:
[  589.629174][ T1305]  kasan_save_track+0x3e/0x80
[  589.633859][ T1305]  __kasan_save_free_info+0x46/0x50
[  589.639130][ T1305]  __kasan_slab_free+0x5b/0x80
[  589.643878][ T1305]  kfree+0x18e/0x440
[  589.647756][ T1305]  process_scheduled_works+0xae1/0x17b0
[  589.653283][ T1305]  worker_thread+0x8a0/0xda0
[  589.657857][ T1305]  kthread+0x711/0x8a0
[  589.661910][ T1305]  ret_from_fork+0x47c/0x820
[  589.666482][ T1305]  ret_from_fork_asm+0x1a/0x30
[  589.671508][ T1305] 
[  589.673823][ T1305] Last potentially related work creation:
[  589.679520][ T1305]  kasan_save_stack+0x3e/0x60
[  589.684193][ T1305]  kasan_record_aux_stack+0xbd/0xd0
[  589.689385][ T1305]  insert_work+0x3d/0x330
[  589.693699][ T1305]  __queue_work+0xcd2/0xfb0
[  589.698279][ T1305]  queue_work_on+0x181/0x270
[  589.702869][ T1305]  tty_release_struct+0xb8/0xd0
[  589.707705][ T1305]  tty_release+0xcb0/0x1640
[  589.712192][ T1305]  __fput+0x449/0xa70
[  589.716162][ T1305]  task_work_run+0x1d4/0x260
[  589.720754][ T1305]  do_exit+0x6b5/0x2300
[  589.724898][ T1305]  do_group_exit+0x21c/0x2d0
[  589.729476][ T1305]  get_signal+0x1286/0x1340
[  589.733971][ T1305]  arch_do_signal_or_restart+0x9a/0x750
[  589.739674][ T1305]  exit_to_user_mode_loop+0x75/0x130
[  589.744942][ T1305]  do_syscall_64+0x2bd/0xfa0
[  589.749521][ T1305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  589.755422][ T1305] 
[  589.757728][ T1305] Second to last potentially related work creation:
[  589.764294][ T1305]  kasan_save_stack+0x3e/0x60
[  589.768961][ T1305]  kasan_record_aux_stack+0xbd/0xd0
[  589.774146][ T1305]  insert_work+0x3d/0x330
[  589.778490][ T1305]  __queue_work+0xcd2/0xfb0
[  589.782982][ T1305]  queue_work_on+0x181/0x270
[  589.787559][ T1305]  serial8250_modem_status+0x1ac/0x2a0
[  589.793001][ T1305]  serial8250_handle_irq+0x576/0xbb0
[  589.798270][ T1305]  serial8250_default_handle_irq+0xbf/0x200
[  589.804251][ T1305]  serial8250_interrupt+0x8d/0x180
[  589.809379][ T1305]  __handle_irq_event_percpu+0x289/0x980
[  589.815018][ T1305]  handle_irq_event+0x8b/0x1e0
[  589.819770][ T1305]  handle_edge_irq+0x23b/0xa10
[  589.824610][ T1305]  __common_interrupt+0x141/0x1f0
[  589.829640][ T1305]  common_interrupt+0xb6/0xe0
[  589.834299][ T1305]  asm_common_interrupt+0x26/0x40
[  589.839308][ T1305] 
[  589.841615][ T1305] The buggy address belongs to the object at ffff888032a9f000
[  589.841615][ T1305]  which belongs to the cache kmalloc-cg-2k of size 2048
[  589.855930][ T1305] The buggy address is located 1168 bytes inside of
[  589.855930][ T1305]  freed 2048-byte region [ffff888032a9f000, ffff888032a9f800)
[  589.869894][ T1305] 
[  589.872209][ T1305] The buggy address belongs to the physical page:
[  589.878610][ T1305] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888032a9c000 pfn:0x32a98
[  589.888657][ T1305] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  589.897140][ T1305] memcg:ffff88805a420a01
[  589.901365][ T1305] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[  589.909848][ T1305] page_type: f5(slab)
[  589.913816][ T1305] raw: 00fff00000000240 ffff88801a84b3c0 ffffea0001d9aa10 ffffea0001d25e10
[  589.922384][ T1305] raw: ffff888032a9c000 0000000000080006 00000000f5000000 ffff88805a420a01
[  589.930949][ T1305] head: 00fff00000000240 ffff88801a84b3c0 ffffea0001d9aa10 ffffea0001d25e10
[  589.939611][ T1305] head: ffff888032a9c000 0000000000080006 00000000f5000000 ffff88805a420a01
[  589.948267][ T1305] head: 00fff00000000003 ffffea0000caa601 00000000ffffffff 00000000ffffffff
[  589.956926][ T1305] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  589.965578][ T1305] page dumped because: kasan: bad access detected
[  589.971985][ T1305] page_owner tracks the page as allocated
[  589.977685][ T1305] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6135, tgid 6132 (syz.0.30), ts 69068424903, free_ts 66826097113
[  589.998682][ T1305]  post_alloc_hook+0x240/0x2a0
[  590.003440][ T1305]  get_page_from_freelist+0x21e4/0x22c0
[  590.008978][ T1305]  __alloc_frozen_pages_noprof+0x181/0x370
[  590.014776][ T1305]  alloc_pages_mpol+0x232/0x4a0
[  590.019628][ T1305]  allocate_slab+0x8a/0x330
[  590.024125][ T1305]  ___slab_alloc+0xbd1/0x13e0
[  590.028789][ T1305]  __kmalloc_cache_noprof+0x282/0x3a0
[  590.034157][ T1305]  ipv6_add_dev+0x24e/0x1370
[  590.038741][ T1305]  addrconf_notify+0x794/0x1010
[  590.043580][ T1305]  notifier_call_chain+0x1b3/0x3e0
[  590.048681][ T1305]  register_netdevice+0x1608/0x1ae0
[  590.053871][ T1305]  register_netdev+0x40/0x60
[  590.058446][ T1305]  ip6_tnl_init_net+0x259/0x3b0
[  590.063285][ T1305]  ops_init+0x359/0x5c0
[  590.067428][ T1305]  setup_net+0x10c/0x320
[  590.071654][ T1305]  copy_net_ns+0x31b/0x4d0
[  590.076059][ T1305] page last free pid 6086 tgid 6084 stack trace:
[  590.082373][ T1305]  __free_frozen_pages+0xbc4/0xd30
[  590.087483][ T1305]  __put_partials+0x146/0x170
[  590.092147][ T1305]  put_cpu_partial+0x17c/0x250
[  590.096907][ T1305]  __slab_free+0x2b9/0x390
[  590.101357][ T1305]  qlist_free_all+0x97/0x140
[  590.105944][ T1305]  kasan_quarantine_reduce+0x148/0x160
[  590.111394][ T1305]  __kasan_slab_alloc+0x22/0x80
[  590.116242][ T1305]  kmem_cache_alloc_node_noprof+0x1a7/0x390
[  590.122125][ T1305]  __alloc_skb+0x112/0x2d0
[  590.126531][ T1305]  tcp_stream_alloc_skb+0x3d/0x340
[  590.131627][ T1305]  tcp_sendmsg_locked+0xf38/0x5620
[  590.136730][ T1305]  tcp_sendmsg+0x2f/0x50
[  590.140984][ T1305]  __sock_sendmsg+0xe5/0x270
[  590.145558][ T1305]  sock_sendmsg+0x158/0x230
[  590.150046][ T1305]  splice_to_socket+0x8ff/0xf10
[  590.154880][ T1305]  direct_splice_actor+0x101/0x160
[  590.159978][ T1305] 
[  590.162286][ T1305] Memory state around the buggy address:
[  590.167894][ T1305]  ffff888032a9f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  590.175970][ T1305]  ffff888032a9f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  590.184020][ T1305] >ffff888032a9f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  590.192091][ T1305]                          ^
[  590.196662][ T1305]  ffff888032a9f500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  590.204716][ T1305]  ffff888032a9f580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  590.212772][ T1305] ==================================================================
[  590.220916][ T1305] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  590.228119][ T1305] CPU: 0 UID: 0 PID: 1305 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) 
[  590.237146][ T1305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  590.247209][ T1305] Call Trace:
[  590.250508][ T1305]  <TASK>
[  590.253442][ T1305]  dump_stack_lvl+0x99/0x250
[  590.258054][ T1305]  ? __asan_memcpy+0x40/0x70
[  590.262653][ T1305]  ? __pfx_dump_stack_lvl+0x10/0x10
[  590.267864][ T1305]  ? __pfx__printk+0x10/0x10
[  590.272475][ T1305]  vpanic+0x281/0x750
[  590.276478][ T1305]  ? __pfx_vpanic+0x10/0x10
[  590.280989][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.285761][ T1305]  panic+0xb9/0xc0
[  590.289488][ T1305]  ? __pfx_panic+0x10/0x10
[  590.293908][ T1305]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  590.299810][ T1305]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  590.305728][ T1305]  ? is_module_address+0x17/0xf0
[  590.310679][ T1305]  ? handle_tx+0x466/0x610
[  590.315104][ T1305]  check_panic_on_warn+0x89/0xb0
[  590.320051][ T1305]  ? handle_tx+0x466/0x610
[  590.324466][ T1305]  end_report+0x78/0x160
[  590.328704][ T1305]  kasan_report+0x129/0x150
[  590.333218][ T1305]  ? handle_tx+0x466/0x610
[  590.337646][ T1305]  handle_tx+0x466/0x610
[  590.341892][ T1305]  dev_hard_start_xmit+0x2d7/0x830
[  590.347014][ T1305]  __dev_queue_xmit+0x1b8d/0x3b50
[  590.352041][ T1305]  ? __dev_queue_xmit+0x27b/0x3b50
[  590.357152][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.361906][ T1305]  ? trace_sched_exit_tp+0x36/0x110
[  590.367096][ T1305]  ? __schedule+0x17ae/0x4cc0
[  590.371773][ T1305]  ? __pfx___dev_queue_xmit+0x10/0x10
[  590.377143][ T1305]  ? do_raw_spin_lock+0x121/0x290
[  590.382161][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.386916][ T1305]  ? do_raw_spin_unlock+0x122/0x240
[  590.392103][ T1305]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  590.397984][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.402735][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.407483][ T1305]  tx+0x6b/0x190
[  590.411020][ T1305]  ? __pfx_tx+0x10/0x10
[  590.415169][ T1305]  kthread+0x1cd/0x3e0
[  590.419228][ T1305]  ? __pfx_kthread+0x10/0x10
[  590.423820][ T1305]  ? __pfx_default_wake_function+0x10/0x10
[  590.429610][ T1305]  ? __kthread_parkme+0x7b/0x200
[  590.434532][ T1305]  ? __kthread_parkme+0x1a1/0x200
[  590.439541][ T1305]  kthread+0x711/0x8a0
[  590.443597][ T1305]  ? __pfx_kthread+0x10/0x10
[  590.448176][ T1305]  ? __pfx_kthread+0x10/0x10
[  590.452756][ T1305]  ? rcu_is_watching+0x15/0xb0
[  590.457502][ T1305]  ? __pfx_kthread+0x10/0x10
[  590.462083][ T1305]  ret_from_fork+0x47c/0x820
[  590.466678][ T1305]  ? __pfx_ret_from_fork+0x10/0x10
[  590.471869][ T1305]  ? __switch_to_asm+0x39/0x70
[  590.476624][ T1305]  ? __switch_to_asm+0x33/0x70
[  590.481372][ T1305]  ? __pfx_kthread+0x10/0x10
[  590.485955][ T1305]  ret_from_fork_asm+0x1a/0x30
[  590.490713][ T1305]  </TASK>
[  590.493995][ T1305] Kernel Offset: disabled
[  590.498330][ T1305] Rebooting in 86400 seconds..