last executing test programs:

1m13.050630217s ago: executing program 2 (id=188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090589e702008000040905", @ANYBLOB="0237"], 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ptmx\x00', 0x2, 0x0)

1m10.998230309s ago: executing program 2 (id=193):
mknodat(0xffffffffffffff9c, &(0x7f0000000800)='./loop1\x00', 0x61ff, 0x701)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_f2fs\x00', 0x1ed)
mount(&(0x7f0000000c00)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt_f2fs\x00', &(0x7f0000000600)='f2fs\x00', 0x0, &(0x7f0000000700)='compress_algorithm=zstd:6\x00')
syz_usb_connect(0x2, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12015002534ffb08f003070301000102030109023400010106903b0904740f03f2b75e800905800200040f008109050a0000020981000705a1662cbf3609050346"], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})

1m7.201658733s ago: executing program 2 (id=199):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="460f01f80fae04f066baf80cb80698ef8eef66bafc0c66ed0f013c8c6467430f06b9b60000400f32c4e1b9c2210e0f1f4000c402910bc366b8df008ed0", 0x3d}], 0xaaaaaaaaaaaabe2, 0xe, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x4008094)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
dup(r1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="460f01f80fae04f066baf80cb80698ef8eef66bafc0c66ed0f013c8c6467430f06b9b60000400f32c4e1b9c2210e0f1f4000c402910bc366b8df008ed0", 0x3d}], 0xaaaaaaaaaaaabe2, 0xe, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x4008094) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x3, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

1m5.235716312s ago: executing program 2 (id=203):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
pipe(&(0x7f0000002680))
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x2)
fchdir(r1)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
setns(0xffffffffffffffff, 0x10000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00')
r3 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000004c0)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "0011223344557c778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x39}, 0x48, r3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @desc4}, &(0x7f0000000780)={0x0, "1b699af42db92c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c49522f82f6ffcdcf860c0cadb646c435e077ecbbae7968117a70a9a1090", 0x25}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x37, 0x30, 0x31, 0x65, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x3f, 0x64, 0x30, 0x30, 0x30, 0x31, 0x30, 0x66, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r3)
add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r3)

1m4.853327429s ago: executing program 2 (id=205):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000100)) (async, rerun: 64)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (rerun: 64)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64)
bind$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) (async, rerun: 64)
listen(r2, 0x5) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8880}, 0x4)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="02c90012000e00050017420a008000008200020a004000fde5e64210233096b1d5a6ad6ce14fb110c765c35840461ca80ba09befb3d5313a915100b6a1c9688ed2e5feb0dd0695306a29661c070f3813ebce7504667b984f0323c0"], 0x17) (async)
syz_clone3(&(0x7f0000000500)={0x40040000, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
fcntl$setsig(r3, 0xa, 0x11) (async)
fcntl$setlease(r3, 0x400, 0x0) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
getpid() (async)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) (async, rerun: 64)
fcntl$setlease(r3, 0x400, 0x2) (async, rerun: 64)
r5 = accept4(r2, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$team(&(0x7f0000000200), r5)

1m4.019351063s ago: executing program 2 (id=208):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="380000000100", 0x6)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @broadcast}, 0x10)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0xa, 0xb6, {0xb6, 0xb, "37838268573cf28f98321b95b8d7cb953f8225d5e1f5c0eff2a94c120cdaab5e14e9eab62442c8f0d09aa68e8d61a9d45888074981a8e10ff4e78ebbf2c821ef72fa670b658068fd7aa6d708b02ec761f3774590fec2af9cf0fb9b5b6b2469ce989d9edb2fda7ec064e52b62e8d568aa9c0a3fc01b035f3d254ffd136a5e3681dea0b92e39df966453fbb31a304810629c1d18a5e152007e90b708c3164b26211d6a40fcfc2eecee4b553a677bc753be7b33a8de"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x20, 0x1, 0x44, "449bf1e85f8b4fe3ce4b596afaeb4bd49ea81a152766e3a61b0df9de76119070c58021758913f0565f6ab75c5ad6c4512ae5d532da1d27c4f3c178ec812835f8b86f9576"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x6, 0x10, 0x3, 0x40, "9d726ddacef17e81441d220fe0bd40edb4b62483d1c87e95d93f18520c4f24b3"})
syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)

1m1.937604832s ago: executing program 32 (id=208):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="380000000100", 0x6)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x380, 0x0)
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e22, @broadcast}, 0x10)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x40)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x0, 0xa, 0xb6, {0xb6, 0xb, "37838268573cf28f98321b95b8d7cb953f8225d5e1f5c0eff2a94c120cdaab5e14e9eab62442c8f0d09aa68e8d61a9d45888074981a8e10ff4e78ebbf2c821ef72fa670b658068fd7aa6d708b02ec761f3774590fec2af9cf0fb9b5b6b2469ce989d9edb2fda7ec064e52b62e8d568aa9c0a3fc01b035f3d254ffd136a5e3681dea0b92e39df966453fbb31a304810629c1d18a5e152007e90b708c3164b26211d6a40fcfc2eecee4b553a677bc753be7b33a8de"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000340)={0x20, 0x1, 0x44, "449bf1e85f8b4fe3ce4b596afaeb4bd49ea81a152766e3a61b0df9de76119070c58021758913f0565f6ab75c5ad6c4512ae5d532da1d27c4f3c178ec812835f8b86f9576"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xde}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x80}})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0x6, 0x10, 0x3, 0x40, "9d726ddacef17e81441d220fe0bd40edb4b62483d1c87e95d93f18520c4f24b3"})
syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)

11.403341689s ago: executing program 1 (id=332):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x3b3bc2, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{}, 0x2a6, 0xb, 0x7a})
write$binfmt_script(r0, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

10.580466515s ago: executing program 1 (id=334):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000380)=0x17, 0x4)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0xfffffff8)
syz_clone3(&(0x7f0000000e00)={0x121000, 0x0, 0x0, 0x0, {0x1a}, &(0x7f0000000d00), 0x0, 0x0, 0x0}, 0x58)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x240}, 0xe)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100)={0x1, 0x8}, 0x2)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000600)={0xaa, 0x138})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x24d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0xf, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x481}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xf, 0x92, 0x8}}}}}]}}]}}, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x1739, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xca, 0xe8, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xd, 0x0, 0x56, {0x7, 0x25, 0x1, 0x8, 0xf, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x2, 0x8, {0x7, 0x25, 0x1, 0xc, 0x2, 0x8001}}}}}}}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x19, &(0x7f0000000140)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x62, 0x2, 0x9, 0xf00f, 0x3, [0xc0, 0xff0000]}]}})
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0)
read$FUSE(r6, &(0x7f0000000740)={0x2020}, 0x2020)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00003587a0570f00dbc80000000000017c000007000480360a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast})
prctl$PR_MCE_KILL(0x43, 0x0, 0x2)
write$tun(r2, &(0x7f0000002780)={@void, @void, @eth={@multicast, @multicast, @void, {@ipv4={0x800, @esp={{0x2c, 0x4, 0x2, 0x8, 0xa91, 0x66, 0x0, 0x6, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x54, 0xb3, 0x3, 0x1, [{@rand_addr=0x64010101, 0xae}, {@remote, 0x2}, {@broadcast}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x6}, {@multicast2, 0x8}, {@local, 0x5e4}, {@broadcast, 0x8000}, {@local, 0x5}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x27, 0xe9, [@empty, @private=0xa010100, @loopback, @loopback, @loopback, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty]}, @rr={0x7, 0x1b, 0x1d, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1]}, @end]}}, {0x4d2, 0x1, @cc={0x1, 0x0, 0x1, 0xf6, 0x8, 0x4, 0x0, [@ipv6=@gre_packet={0xd, 0x6, "178ea1", 0x2f0, 0x2f, 0xff, @mcast1, @loopback, {[@routing={0x32, 0xc, 0x2, 0x18, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x81, 0x0, [], "f18b08888276b7fb7258b2bfcd784073d542eb8741bbce7c21a612c6db29313475881f956359bdfa92def53cafb6112dac0d864492392b529ec2c851d398599254af0e927fa7801467471972b15e849275fc99cf0c39657d8053d7e357e9f080d45857f6f6384b3eba72010e164e8b02de5d4c95b804cdfe7338cb338467d057d4"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3], "7800d90419c8bb92bce7a7b1a0d3bf774b547ba8c5dc328361c89e4340612c85cbf6fd5778aaa06e492dc836bda48e77138809c01ac0c6f0e357888a3e5e48f721fb2522fbafb0a3a93b7cd411cfe0e710e4f24102fd675d7459ce06ed5754ae7bb8f54673364274c4f8a392f572ef8548f4a2cf918aaead479a3283a081d8599e269778ef4c1ff2f6246439546afd69882542d1c1f2a217ffad024bb2db7316f730261334dd468bcf8b709c1ca6a6eeaf4ed0d3fb3d8f1dcc"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0x3935, 0x1], "47115a4b12eeaff68ef9f0faee170da75575c52ab48d916b7eb292055fdb7bb90d91374dc67ee8ba592ebfd49feb7d81bf432633e7e3ce59c7e0bc26da0f90ac2795ae0aab606bbdfc059871aa2116c9d34bff68e6cac2d49a0403ea00830838d64771566b5c6bf83070a33e69f588f323a633c7af1278a7a9eeb37562ca61dd94be889bc2f8c8b982396567cb81b4c30bc11bbff50211d1d7b8054f45bb2197a3aa72f268af04efc4c9fbbd14c8c0bd0b9e59ecf5e1d3ed9a689b2445839a9c24b133bc618f8d64eb942d8d5c4e36fda6ce178ad6"}, {0x8, 0x88be, 0x3, {{0x4, 0x1, 0x6, 0x3, 0x0, 0x3, 0x1, 0x2}, 0x1, {0x4}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7e, 0x1, 0x0, 0x1, 0x5, 0x4}, 0x2, {0x0, 0x401, 0x3, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "29aeef153d0c1732ec4e9a19a948c058995d01e6ccb045803fdd062506b65e32a5e949a7ad9ba60dcbc9da333a"}}}}, @ipv6=@gre_packet={0x8, 0x6, "130344", 0x34d, 0x2f, 0x0, @remote, @mcast1, {[@hopopts={0xff, 0x9, '\x00', [@calipso={0x7, 0x38, {0x0, 0xc, 0xf, 0x2, [0x8, 0x2, 0x2, 0x1000, 0x634, 0x3]}}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xcd, 0x3, [], "3bae9856b72c36ffda279541d641ec14312976b658d84aae1c00c59a491d81a8bd7838e86afeb8a7973e8b785f4ec9c440e96ae32a0ba0bb34f060552daa2fa546687227efd0aacfe84ff6670eeaf98976418b5577af31bb788e05188e07119184956c77485a38bafe05b83ec47728c57f5759acbeb5fce9a2e0c1e6a8accff07a678c5441443656458b0336cbc07db919cc3b4e203414160f7804fe0cff27985f54c68afe1e236a09ebd3ce8ef09a23a214f68cb06ab6afc6b703eabe63af45d100d555ac25c1d5b62c483e9e"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7, 0x0, 0x1ff], "3a7144b906e35b34e7390cd1591ec61d102e27c7b87d490cb04cc7e17c0fe21aa4f4b4e89c724ecda3859a87aa8546dbd9fb2533ca219807b9ba5ab2902bf06e4226145c2ded9854cc487248daefdc2db0d517f73f78429e610307ea2cc4a46979a47b0b677cbb4d1b368268c1996e75b89268e0ffa4f3d8e2ec40aaa9e9a697d3489b31db86f40dbd512235469616fb2fb57f199a9e77d751"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x31], "60d32690a4366423aefd3002a2c8b51b556bd76f1e6c1c06dd595ec3e951c24ca8a9c3c58515614dc10ab84f1ee12b52027e5a14d713c3437a2bec7ef2ec8f779ba443527407e73c004c7cde43825699b48c73c278f4e555f4bf136cbad4a0479edf09817c88c84d0f15e1f3c15af4302b71c4612a548704e0f8eabc945ac5da826e9ed2fddb5ab8153a2df410"}, {0x8, 0x88be, 0x2, {{0x8, 0x1, 0x8, 0x2, 0x1, 0x1, 0x0, 0x5}, 0x1, {0x7fff}}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x38, 0x3, 0x0, 0x2, 0x6, 0x3d}, 0x2, {0x1f, 0x7, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2, "0fc28737342d64b0a4926d24245acb5581244341aa6e0b5ea6ac6866d747f66ddaa9c9856e7f9347b5b1596216f90e3ba8a697bf28dd98cfb85a62ed0ce5490074153d9848e198d3afdecc64c8b4e3e55a360ececa2cf80996b848348cb20c73c527c4c12f49dd50329918569dc5a2c4d12d034b9dd0c0d3fdd908f45c6757ed58a8944c3d66a5224c65924fa3d99e6b481bf6e64340cf0fb1b8284de4d338b60d5d8d0016d77b91d595ce1b126506239d8f35d4ccfa"}}}}, @runt="1f1b0f3922def089869ac46312e150520bc9335a17b4b999d48924695ef3c8e8fad5be91a571613d0b2cfc91", @ipv6=@icmpv6={0x7, 0x6, "d9a779", 0x2d6, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private0, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xa, {0x3, 0x6, "a696d0", 0x3, 0x3c, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [@routing={0x87, 0x4, 0x2422db4e34cbe77b, 0x0, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x23}]}, @fragment={0x29, 0x0, 0xb, 0x0, 0x0, 0x17, 0x67}, @dstopts={0x16, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x30, {0x1, 0xa, 0x9, 0x6, [0x3, 0x9, 0x3, 0x2, 0xfffffffffffffff7]}}, @generic={0x4, 0x3, "ef962d"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @mcast2}]}, @dstopts={0x2, 0x1, '\x00', [@pad1, @pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xf}]}, @fragment={0x67, 0x0, 0x6a, 0x0, 0x0, 0x3, 0x68}, @srh={0x2b, 0x6, 0x4, 0x3, 0x5, 0x8, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private1]}, @routing={0x2f, 0x12, 0x0, 0x10, 0x0, [@loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @private0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @srh={0x42, 0x6, 0x4, 0x3, 0x6, 0x8, 0x4, [@ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00']}, @hopopts={0x5e, 0x1a, '\x00', [@generic={0x7, 0x6d, "8c69776fa7797de9bf6cc2d4a8529936da8342715b092d5f885fedd57a5d28e9093474cc7ec5a2f7b128212c897ef4e8e6d1bac326ebb791d963cda3a667af406e90e8ca0f927cd90a55871bc2b82f1ee37d87cb6f2266108079a3e22b12cbf9684d816e5c902a95bb41b1cbbc"}, @generic={0x10, 0x5f, "719b5d29a5cfed0de4427b3343f36aa1f3f5105137a53e06f34fa15c5e9c2a69cfadefff5f3f41a197bea6ac06ed0beded3808dbebc794b069ea024ada0c5fcd5e831206bc292e3a3eedc8ee5f7f688e511fc030144b9a3edab310a42b52c2"}]}], "c98ae59cdd0377a5fd23af790716"}}}}]}, "018003f4a3516e39", 0x8}}}}}}, 0xa9f)
syslog(0x2, 0xfffffffffffffffe, 0x27)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_setup(0xffffffff, &(0x7f0000000080))
syslog(0x0, &(0x7f00000001c0)=""/177, 0xb1)
ioctl$UI_BEGIN_FF_ERASE(r7, 0xc00c55ca, &(0x7f0000000040)={0xc, 0x40000, 0xb17e})

10.282981376s ago: executing program 0 (id=336):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000000)={0x20, 0x4, 0xd, "338a6ef8b945ecc45bfd15a1d3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e01020301"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])
syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x20, 0x3d, 0xdf, {0xdf, 0x6, "6e5899a7cd4c85fd05c3897f6a99135853fb4818ec9ce79dbc9056df02e30a3d1db060e220e85f7529f3799302eac1d8ca890c044baf4e2908c5a457b3fa4d7fbbcc6e2362086e111bc8dea89a0045b9d32e493943f3711edbe784a1f4eb03a47c12653afbd34c8dd663ed90015c0e6fc3cc7b6bf5faa508aa043f605b4231963f89772964846b8b8433a9c411b03898b0e589f65fc837f9ec97dc5bf6d72295ad77c947068547f7dd4df0dd015d33cec990f2e626f6d5ccc15eee97237c2e9f9dea971058b6a47c6aff87a1787bfe4125f28391320e614b32b0364cbd"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x40, 0x12, 0x1e, "0a3e917f94180c1d829903c6bdf7fd800a07fdd425909ae2ee53132c3727"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3e}, &(0x7f0000000280)={0x20, 0x81, 0x3, "054461"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "91"}, &(0x7f0000000300)={0x20, 0x83, 0x2, "b7a0"}, &(0x7f0000000340)={0x20, 0x84, 0x2, "b62f"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "549f67"}})

8.299444015s ago: executing program 3 (id=339):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x20201)
syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0)
ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @buffer={0x0, 0x33, 0x0}, &(0x7f0000000240)="1e126500a900", 0x0, 0xfffffe00, 0x0, 0x3, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x19, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100080, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000300)={0x6f, 0x1, 0x200, 0x7fffffffffffffff, "94191cb3d04312af722d5fc2cb6e980f2bab307f088ec567af0e4f46e143d9445b150482b00e762696682c7ec217befa3b5649653576a7168fb6e83a42e9e7a1e7400deb0d635284768a701430634dd1c5fe4d9e92ee38"})
r5 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0)
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000140)={0x9, 0x102, 0x2, {0xffffffef, 0x40200b4, 0x2, 0x9}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
syz_clone(0xa38a1500, 0x0, 0x13, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x10000000007, 0x2, 0xa, 0xd, 0x6, 0x10003, 0x1041, 0x14, 0x9, 0x40000ca, 0xc29, 0xffffffff, 0x4000000000000004, 0x5, 0x0, 0x4], 0xb000, 0x140057})
mprotect(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.803146562s ago: executing program 0 (id=341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000000)={0x0, {0x800, 0x7b, 0x1002, 0x2}})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}})

7.535804565s ago: executing program 0 (id=342):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x2040)
ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000002c0)={0x79, &(0x7f0000000200)="d1b56e0764834b1461cc55298230d1b85e45870b1342f2497af1909264a17d4007e33841493ac13fa6320b8829d1981432e42e745e3b8e5e7b0a81eef07c5df37eebc21faaf9d2d7b99a6a0374dfd81861d8e1deec4db4a391697fcdfb72dcc1013f0b20be6837e61fe886f245634b503cc4e662b353fd65d6"})
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

7.208073997s ago: executing program 1 (id=343):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a0534000000000000010902240001000020000904000501030000000921000040012218c6095751ad669c9ef505"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x8)

7.156018386s ago: executing program 0 (id=344):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2)
fcntl$setsig(r0, 0xa, 0x13)
fcntl$setlease(r0, 0x400, 0x1)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = getpid()
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58)
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=<r3=>0x0)
fcntl$setown(r0, 0x8, r3)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xa2) (async)
fcntl$setsig(r0, 0xa, 0x13) (async)
fcntl$setlease(r0, 0x400, 0x1) (async)
timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
getpid() (async)
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) (async)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)) (async)
fcntl$setown(r0, 0x8, r3) (async)
timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) (async)
truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async)

5.830037613s ago: executing program 4 (id=345):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='erofs\x00', 0x940809, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000005, 0x1010, r0, 0xffff8000)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
fchdir(r1)
mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', &(0x7f00000001c0)={0x40, 0x1d4, 0x5}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006003200000000000000000000000000fe880000000000000000000000000001fc0100000000000000000000000000000400040000000000000000000000000000000000000000000200000000000000"], 0xc0}}, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1800)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB='\x00'], 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_vs\x00')
mmap$usbmon(&(0x7f0000e54000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r3, 0x100000001)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8c, 0x3, 0x40})
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000"], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x1f, 0x0}, 0x0)
preadv(r4, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}], 0x1, 0x80, 0x7ffffffe)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000a, 0x31, 0xffffffffffffffff, 0xfd5e6000)

4.436007919s ago: executing program 3 (id=346):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3a, 0x1, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
creat(&(0x7f0000000080)='./file0\x00', 0x1)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$nci(r2, &(0x7f0000000140)=""/253, 0xfd)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f00000004c0)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})

4.131994946s ago: executing program 3 (id=347):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7) (async)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
write(r0, &(0x7f0000000000)="d9290ae2", 0x4) (async)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0)

3.936085572s ago: executing program 0 (id=348):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x8) (fail_nth: 6)

3.471747721s ago: executing program 0 (id=349):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000100)={0x0, {"032506a7840e6f0e7056d987a1d44a8a", "d3b9a10f79dc9c111699a74e41014f4d", "1fa0053f3d7ce415205f4f7d32bf50a9"}, 0x8, 0x4})
syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r1, &(0x7f00000003c0)={@val={0xa, 0x806}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100, @val=0xd7a919ca9eb57b16}}}}}}}}}, 0x4a) (async)
syz_open_dev$dvb_demux(&(0x7f0000000600), 0x1, 0x0) (async)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000100)={0x0, {"032506a7840e6f0e7056d987a1d44a8a", "d3b9a10f79dc9c111699a74e41014f4d", "1fa0053f3d7ce415205f4f7d32bf50a9"}, 0x8, 0x4}) (async)

3.420549703s ago: executing program 1 (id=350):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x0, {0x800, 0x7b, 0x1002, 0x2}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}})

3.156690127s ago: executing program 1 (id=351):
r0 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRESOCT], 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00030400000004030108"], 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100)

2.676705262s ago: executing program 4 (id=352):
r0 = semget$private(0x0, 0x4, 0x2a1)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x100, 0x4, 0x8, 0x4, 0xffff, 0xe, 0xe, 0x3, 0x6101, 0x7])
clock_gettime(0x0, &(0x7f00000002c0)={<r1=>0x0, <r2=>0x0})
semtimedop(r0, &(0x7f0000000180)=[{0x1, 0x7fff, 0x1800}, {0x1, 0x0, 0x1000}], 0x2, &(0x7f0000000300)={r1, r2+60000000})
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5'])
chdir(&(0x7f0000000140)='./file0\x00')
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
mknod(&(0x7f0000000280)='./file0\x00', 0x8001420, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000002d40)='./file0\x00', 0x101001, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x22842, 0x0)
write$yama_ptrace_scope(r5, &(0x7f0000000000)='1\x00', 0xffffffaf)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)
write$binfmt_script(r6, &(0x7f0000000100), 0x4)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)

2.090770374s ago: executing program 4 (id=353):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/95, 0x5f, 0x1, &(0x7f00000001c0)=""/213, 0xd5}, &(0x7f0000000340)=0x40)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x20, 0x7, 0x1000, 0x2, 0x2, 0x8002, 0xffff, 0x1007, 0xc72d, 0x8, 0x3, 0x2009, 0x8, 0x4ce, 0xfffffffe, 0xfb, 0x80000000, 0x6, 0x8, 0x4, 0xfffffffc, 0x36, 0xfff, 0xffe, 0x200003, 0xaf, 0x0, 0xc, 0x1, 0x4]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9e44d22dfdef96fecf7082f0cb"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x2, 0x7, 0x301, 0x0, 0x0, {0x7}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}}, 0x0)
ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000005c0)={0xa, @raw_data="70b6cb724a91aa1d95ba03f56f68b412e5785e5af65d68994bf5886da387d11d42ddad8a80493a20f2790c9db21191f14cfb97e9b1f8b320419e244ccb1682e3c82f1d1d2eaa4b86b5235e4106979bf039d0110845defca72a2d836c90a11a4c93b640668373bf17ae75be9c7ef85aff7fccfac1f497d9be2bf66bee045b542e7607e6f694dcedcf9a064c052202d911eee15790689e2f53e18dadf2a1607d5e6de41948cc458ba787c022c7bb37bbba44d0820f598a29e27f0c1bdeec2ce0725a31ad4c29520661"})
r5 = epoll_create1(0x0)
epoll_pwait(r5, &(0x7f0000000140)=[{}], 0x1, 0xfe, 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
setreuid(0xee01, 0x0)
ioprio_get$uid(0x3, 0xee01)
landlock_restrict_self(r6, 0xe)

1.815744249s ago: executing program 4 (id=354):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8004000000071, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @start={0x7fffffff, 0x1}})
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x2})

1.744940223s ago: executing program 4 (id=355):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3e0, r1, 0xb7bd91d8ba6650c6, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x25}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x3c, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_TX_RATES={0x284, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x4, 0xa}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x2, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x5}, {0x4, 0x2}, {0x7}, {0x1, 0x5}, {0x1, 0x8}, {0x0, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4}, {}, {0x3, 0x4}, {0x1}, {0x3}, {0x7, 0x5}, {0x6, 0x4}, {0x2, 0x9}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x6}, {0x0, 0x5}, {0x6, 0xa}, {0x2}, {0x2, 0x4}, {0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x5}, {0x1, 0x17}, {0x2}, {0x3, 0x6}, {0x3, 0x7}, {0x7, 0x7}, {0x5}, {0x7, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x4, 0xa}, {0x5, 0x8}, {}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x5}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x20, 0x5, 0xe6f, 0x100, 0xb5, 0x1ff, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x2}, {0x4, 0x9}, {0x5, 0x6}, {0x7, 0x8}, {0x7}, {0x3, 0xa}, {0x5, 0x6}, {0x7, 0x2}, {0x4, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x6, 0x4}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x6}, {0x6, 0x9}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x5}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x4, 0x1}, {0x3, 0x6}, {0x1, 0x5}, {0x6, 0x4}, {0x4, 0x2}, {0x5, 0x4}, {0x1, 0xa}, {0x3, 0x9}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x0, 0x6}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x4}, {0x6, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x1, 0x1}, {0x3, 0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x2, 0x9}, {0x5, 0x5}, {0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x6}, {0x2}, {0x4, 0x1}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x7}, {0x4, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x2}, {0x0, 0x3}, {0x4, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x5}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x6}, {0x3, 0x3}, {}, {0x1, 0x4}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x4}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x7}, {0x0, 0x7}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x2, 0x2, 0x4, 0x8, 0x7, 0x3, 0x8]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x4, 0x2}, {0x2, 0x8}, {0x4, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x6, 0x8}, {0x7, 0x4}, {0x6, 0x1}, {0x5, 0x3}, {0x6, 0x1}, {0x1}, {0x3, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x6, 0x5}, {0x1}, {0x3, 0x8}, {0x6, 0x2}, {0x7, 0xa}, {0x2, 0x1}, {0x1, 0x2}, {0x4}, {0x2, 0x4}, {0x2, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x9}, {0x3, 0x1}, {0x6}, {0x5, 0x8}, {0x5, 0x5}, {0x6, 0x2}, {0x5, 0x2}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x5}, {0x1, 0x8}, {0x5, 0x3}, {0x1}, {0x2, 0xa}, {0x2, 0x4}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0x4}, {0x3, 0xa}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x1, 0x6}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x6, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x5, 0x3, 0x8, 0x1, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0xfff0, 0x0, 0xc8, 0x7, 0x10c5, 0x10]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x6}, {0x1, 0x9}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x9}, {0x4, 0x7}, {0x2, 0x7}, {0x4, 0x4}, {0x0, 0x5}, {0x7, 0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x7, 0x9}, {0x2, 0x8}, {0x3, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x5, 0x6}, {0x6, 0x7}, {0x3, 0x9}, {0x1, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x7}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x1}, {0x6, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x7}, {0x7, 0x9}, {0x2}, {0x1, 0x6}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x1, 0x1}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x1, 0x5, 0x6c, 0xeaf081bc5951adc9]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x4, 0xc, 0x4, 0xb, 0xf2, 0x0, 0x1, 0x6, 0x30, 0x36, 0x9, 0x5, 0x9, 0x6, 0x12, 0x18, 0x3, 0x30, 0x1, 0x24, 0x30, 0x48, 0x6c, 0x36, 0x60, 0x18, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xb, 0x0, 0x226, 0x7, 0x1000, 0x7ff, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0x20, 0x24, [{0x3}, {0x1, 0x1}, {0x1b}, {0x3, 0x1}, {0x60}, {0x2, 0x1}, {0x12}, {0x3, 0x1}, {0x18}, {0x18, 0x1}, {0x18}, {0x2}, {0xd, 0x1}, {0x74, 0x1}, {0x3, 0x1}, {0x36}, {0x5, 0x1}, {0x36}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0xc, 0x1}, {0x4}, {0xb, 0x1}, {0x60, 0x1}, {0x24, 0x1}, {0x36, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_TX_RATES={0x5c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x4, 0x200, 0x9, 0x4, 0x3]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x4, 0x6}, {0x1, 0x4}, {0x6}, {0x7, 0x4}, {0x7, 0xa}, {0x3}, {0x0, 0x1}, {0x6}, {0x5, 0x8}, {0x6, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x5, 0x6}, {0x4, 0x2}, {0x4, 0x5}, {0x5, 0x1}, {0x3, 0x8}, {0x3, 0x2}, {0x7, 0x9}, {0x2, 0x5}, {0x3}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x7}, {0x1, 0x1}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x3}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x9}]}]}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x9}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x20}, @NL80211_MESHCONF_NOLEARN={0x5}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xe5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5d}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0xfffffffc}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xb3}, @NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4}]}]}, 0x3e0}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r3, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x3, 0x1, 0x600, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4040)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r0)
sendmsg$ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x1)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x120, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x200}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x41}, 0xd4)
r6 = socket$kcm(0x29, 0x7, 0x0)
fsetxattr$security_evm(r0, &(0x7f0000000b00), &(0x7f0000000b40)=@md5={0x1, "5aca36ebd8376350255f761b2c157370"}, 0x11, 0x2)
ioctl$XFS_IOC_FSGROWFSLOG(0xffffffffffffffff, 0x4008586f, &(0x7f0000000b80)={0x5, 0x800})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, r7, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x40)
ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'sit0\x00', &(0x7f0000000f80)={'syztnl0\x00', <r8=>0x0, 0x20, 0x8000, 0x0, 0xbec2, {{0xa, 0x4, 0x3, 0x4, 0x28, 0x65, 0x0, 0x49, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x2c, [@loopback, @empty, @rand_addr=0x64010100, @empty]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001180)={'gretap0\x00', &(0x7f0000001040)={'ip_vti0\x00', <r9=>0x0, 0x8, 0x20, 0x9, 0x81, {{0x3b, 0x4, 0x1, 0x31, 0xec, 0x66, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x34, 0x2, [{0x3, 0x9, "1c2ce92164a89d"}, {0x6, 0xd, "b433f9e6c54b39352ba3a1"}, {0x6, 0xd, "8f97699bfe27735e383bb0"}, {0x2, 0xb, "ba7c3271381a8a55fa"}]}, @timestamp_prespec={0x44, 0x3c, 0x83, 0x3, 0x4, [{@local, 0x4}, {@multicast2, 0x8}, {@broadcast, 0x1000}, {@private=0xa010101, 0x3e32}, {@multicast1, 0x9}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0x4}, {@private=0xa010100, 0x4}]}, @timestamp={0x44, 0x8, 0xad, 0x0, 0x8, [0x9]}, @cipso={0x86, 0x5f, 0x2, [{0x1, 0x9, "4bbcd53cab58c7"}, {0x7, 0xe, "edcb302d09c44e775970d38e"}, {0x7, 0x8, "85ab709aefad"}, {0x6, 0x7, "5de558b6cb"}, {0x5, 0xb, "4be6af8142eae0ddf8"}, {0x6, 0x12, "823420eb84c30dcbd8c29a874d0b2015"}, {0x0, 0x6, "14379c32"}, {0x7, 0x10, "a1a1386b125037542aa6c0515060"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000011c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001380)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x13c, r4, 0x9, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x400d1}, 0x4000000)
r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000013c0), 0x4000, 0x0)
read$FUSE(r11, &(0x7f0000001400)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r11, &(0x7f0000003440)={0x10, 0xffffffffffffffda, r12}, 0x10)
r13 = accept4$x25(r0, &(0x7f0000003480)={0x9, @remote}, &(0x7f00000034c0)=0x12, 0x800)
poll(&(0x7f0000003500)=[{r13, 0x400}, {r6, 0x5002}, {r11, 0xa010}], 0x3, 0xfffffff8)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000003540), 0x4)
recvmmsg(r2, &(0x7f0000003580), 0x0, 0x40, &(0x7f00000035c0)={0x77359400})
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000036c0)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000045}, 0x8)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, &(0x7f0000003700)={0x0, @reserved})

1.014148535s ago: executing program 3 (id=356):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x2, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0)
setns(0xc9, 0x0)
r2 = socket(0x2a, 0x2, 0x9)
connect(r2, &(0x7f0000000240)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80)
write$nbd(r2, 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x8)

767.643861ms ago: executing program 4 (id=357):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r3=>0x0})
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) (async)
r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x4, 0x1, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b8, 0x2, 0xfffffff8]}) (async)
ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x4, 0x1, 0x1020, 0xa, 0x5, 0x79, 0x8000, 0x80008, 0x0, 0xffffffff, 0x4, 0x7, 0x3, 0x100, 0x9, 0xfffffffb, 0x9, 0x3, 0x80000000, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x8, 0xa6b8, 0x2, 0xfffffff8]})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0101cda2c445bd7000080008002b00000008", @ANYRES32=r3, @ANYBLOB="080026006c09040000000000000001ff000000000000000900040002fbffff0000035c0100"/48], 0x4c}, 0x1, 0x0, 0x0, 0xf040}, 0x2400c0c0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff32, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200090007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a847)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800002}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800002}, 0x1c)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c) (async)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x1c)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async)
bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) (async)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r11, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c)

597.608557ms ago: executing program 3 (id=358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x8) (fail_nth: 7)

46.89028ms ago: executing program 3 (id=359):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_dev$video(&(0x7f00000000c0), 0x8, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)={0x3c, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x12, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd"}, @nested={0x4, 0x8002}, @nested={0xc, 0x8003, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}]}, 0x3c}}, 0x4000000)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}})

0s ago: executing program 1 (id=360):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0xffff, 0xd55e, 0x4, {0x8, @sdr={0x0, 0x1}}, 0x1})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4a)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@redirect_dir_off}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x8)

kernel console output (not intermixed with test programs):

:syzkaller0>, priority 10
[  189.275970][ T6819] tipc: Resetting bearer <eth:syzkaller0>
[  189.342796][    C0] net_ratelimit: 9594 callbacks suppressed
[  189.342828][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.343419][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.343909][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.344550][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  189.345039][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.346769][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.347398][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.347840][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.348482][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  189.348962][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  189.647444][ T6819] tipc: Disabling bearer <eth:syzkaller0>
[  189.991217][ T6839] netlink: 144 bytes leftover after parsing attributes in process `syz.0.249'.
[  190.202189][ T6622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.542636][ T5714] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  190.732634][ T5714] usb 2-1: Using ep0 maxpacket: 8
[  190.742276][ T5714] usb 2-1: New USB device found: idVendor=1345, idProduct=3008, bcdDevice=0.00
[  190.760171][ T5714] usb 2-1: config index 0 descriptor too short (expected 1060, got 36)
[  190.760220][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.760243][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.760262][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.760299][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.887794][ T5714] usb 2-1: config 0 descriptor??
[  191.262074][ T6622] veth0_vlan: entered promiscuous mode
[  191.303949][ T6622] veth1_vlan: entered promiscuous mode
[  191.407896][ T5714] hid_parser_main: 12 callbacks suppressed
[  191.407923][ T5714] sony 0003:1345:3008.0008: unknown main item tag 0x0
[  191.407954][ T5714] sony 0003:1345:3008.0008: item fetching failed at offset 5/24
[  191.408646][ T5714] sony 0003:1345:3008.0008: parse failed
[  191.408738][ T5714] sony 0003:1345:3008.0008: probe with driver sony failed with error -22
[  191.614410][   T27] usb 2-1: USB disconnect, device number 30
[  191.717693][ T6622] veth0_macvtap: entered promiscuous mode
[  191.759297][ T6622] veth1_macvtap: entered promiscuous mode
[  191.852097][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.887668][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4
[  191.908170][ T6622] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.952175][ T6017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.970430][ T6017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.970760][ T6017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.012823][ T6873] netlink: 'syz.3.255': attribute type 2 has an invalid length.
[  192.012848][ T6873] netlink: 'syz.3.255': attribute type 2 has an invalid length.
[  192.013690][ T6017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.147339][ T4941] sd 0:0:1:0: [sda] tag#9897 sd_setup_read_write_cmnd: block=1050934, count=24
[  192.147401][ T4941] sd 0:0:1:0: [sda] tag#9897 writing 24/24 512 byte blocks.
[  192.147454][ T4941] sd 0:0:1:0: [sda] tag#9897 Send: scmd 0xffff88802fce5ed0
[  192.147497][ T4941] sd 0:0:1:0: [sda] tag#9897 CDB: Write(10) 2a 00 00 10 09 36 00 00 18 00
[  192.169300][    C1] sd 0:0:1:0: [sda] tag#9897 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  192.169351][    C1] sd 0:0:1:0: [sda] tag#9897 CDB: Write(10) 2a 00 00 10 09 36 00 00 18 00
[  192.169406][    C1] sd 0:0:1:0: [sda] tag#9897 scsi host busy 1 failed 0
[  192.169441][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  192.169481][    C1] sd 0:0:1:0: [sda] tag#9897 sd_done: completed 12288 of 12288 bytes
[  192.169518][    C1] sd 0:0:1:0: [sda] tag#9897 24 sectors total, 12288 bytes done.
[  192.170170][ T2000] sd 0:0:1:0: [sda] tag#9898 Send: scmd 0xffff8880274c0110
[  192.170217][ T2000] sd 0:0:1:0: [sda] tag#9898 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  192.170337][    C1] sd 0:0:1:0: [sda] tag#9898 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  192.170386][    C1] sd 0:0:1:0: [sda] tag#9898 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  192.170448][    C1] sd 0:0:1:0: [sda] tag#9898 scsi host busy 1 failed 0
[  192.170490][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  192.170533][    C1] sd 0:0:1:0: [sda] tag#9898 sd_done: completed 0 of 0 bytes
[  192.170594][    C1] sd 0:0:1:0: [sda] tag#9898 0 sectors total, 0 bytes done.
[  192.170740][ T2000] sd 0:0:1:0: [sda] tag#9899 sd_setup_read_write_cmnd: block=1050958, count=8
[  192.170785][ T2000] sd 0:0:1:0: [sda] tag#9899 writing 8/8 512 byte blocks.
[  192.170828][ T2000] sd 0:0:1:0: [sda] tag#9899 Send: scmd 0xffff88802fce6290
[  192.170869][ T2000] sd 0:0:1:0: [sda] tag#9899 CDB: Write(10) 2a 00 00 10 09 4e 00 00 08 00
[  192.180644][    C1] sd 0:0:1:0: [sda] tag#9899 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  192.180698][    C1] sd 0:0:1:0: [sda] tag#9899 CDB: Write(10) 2a 00 00 10 09 4e 00 00 08 00
[  192.180758][    C1] sd 0:0:1:0: [sda] tag#9899 scsi host busy 1 failed 0
[  192.180798][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  192.180842][    C1] sd 0:0:1:0: [sda] tag#9899 sd_done: completed 4096 of 4096 bytes
[  192.180885][    C1] sd 0:0:1:0: [sda] tag#9899 8 sectors total, 4096 bytes done.
[  192.181330][ T2000] sd 0:0:1:0: [sda] tag#9900 Send: scmd 0xffff8880274c0110
[  192.181382][ T2000] sd 0:0:1:0: [sda] tag#9900 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  192.190522][    C1] sd 0:0:1:0: [sda] tag#9900 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  192.190572][    C1] sd 0:0:1:0: [sda] tag#9900 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  192.190628][    C1] sd 0:0:1:0: [sda] tag#9900 scsi host busy 1 failed 0
[  192.190665][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  192.190705][    C1] sd 0:0:1:0: [sda] tag#9900 sd_done: completed 0 of 0 bytes
[  192.190748][    C1] sd 0:0:1:0: [sda] tag#9900 0 sectors total, 0 bytes done.
[  192.704985][ T6874] batadv_slave_1: entered promiscuous mode
[  192.899467][ T6018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.899490][ T6018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.955801][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.956259][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.983449][ T6880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.257'.
[  193.007326][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.010179][ T6883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.013273][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.070832][ T6883] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.080603][ T6870] batadv_slave_1: left promiscuous mode
[  193.121823][ T6882] nvme_fcloop: unknown parameter or missing value 'ww'
[  193.122305][ T6885] nvme_fcloop: unknown parameter or missing value 'ww'
[  193.173589][ T5714] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  193.234262][   T27] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  193.258091][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.258112][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.316698][ T6888] comedi comedi1: pcmda12: I/O base address not correctly aligned
[  193.331504][ T5714] usb 4-1: device descriptor read/64, error -71
[  193.576515][ T5714] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  193.578613][   T27] usb 2-1: Using ep0 maxpacket: 8
[  193.598712][   T27] usb 2-1: New USB device found: idVendor=07ca, idProduct=a868, bcdDevice=c4.d4
[  193.601236][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.655835][   T27] usb 2-1: config 0 descriptor??
[  193.687000][   T27] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state.
[  193.712805][ T5714] usb 4-1: device descriptor read/64, error -71
[  193.823436][ T5714] usb usb4-port1: attempt power cycle
[  193.864072][   T27] cxusb: set interface failed
[  193.864635][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  193.928824][   T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  193.931937][   T27] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R))
[  193.931991][   T27] usb 2-1: media controller created
[  194.021886][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  194.150496][   T27] DVB: Unable to find symbol lgdt330x_attach()
[  194.150528][   T27] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)'
[  194.168362][   T27] dvb-usb: bulk message failed: -22 (1/0)
[  194.168384][   T27] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected.
[  194.188328][ T5714] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  194.202134][   T27] usb 2-1: USB disconnect, device number 31
[  194.221113][ T5714] usb 4-1: device descriptor read/8, error -71
[  194.299615][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  194.299680][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  194.335741][   T27] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.
[  194.352617][    C0] net_ratelimit: 9420 callbacks suppressed
[  194.352635][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.352922][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.353245][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.354249][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  194.355373][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  194.355685][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.356111][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.356427][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  194.356849][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  194.357135][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  194.507356][ T5714] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  194.554803][ T5714] usb 4-1: device descriptor read/8, error -71
[  194.672930][ T5714] usb usb4-port1: unable to enumerate USB device
[  195.044355][   T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  195.196222][   T27] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  195.197865][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.231435][   T27] usb 1-1: config 0 descriptor??
[  195.446515][   T27] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  195.526368][ T6911] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  195.742504][ T6913] netlink: 'syz.1.265': attribute type 2 has an invalid length.
[  195.742529][ T6913] netlink: 'syz.1.265': attribute type 2 has an invalid length.
[  195.849663][   T27] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  195.849690][   T27] [drm] Initialized udl on minor 1
[  196.629763][ T6926] smc: net device erspan0 applied user defined pnetid SYZ1
[  196.648664][ T6926] sd 0:0:1:0: [sg0] sg_open: flags=0x8800
[  196.648752][ T6926] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88807aa40000
[  196.648792][ T6926] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768
[  196.648884][ T6926] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768
[  196.648966][ T6926] sd 0:0:1:0: [sg0] sg_build_indirect: k=0, num=32768, ret_sz=32768
[  196.649030][ T6926] sd 0:0:1:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=0
[  196.649071][ T6926] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1
[  196.649662][ T6926] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2284
[  196.963358][ T6925] sd 0:0:1:0: [sg0] sg_release
[  196.964831][ T5714] sd 0:0:1:0: [sg0] sg_remove_sfp:    bufflen=32768, k_use_sg=1
[  196.964871][ T5714] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1
[  196.964944][ T5714] sd 0:0:1:0: [sg0] sg_remove_scat: k=0, pg=0xffffea0001646400
[  196.965028][ T5714] sd 0:0:1:0: [sg0] sg_remove_sfp: sfp=0xffff88807aa40000
[  197.024064][ T4928] Bluetooth: hci3: command 0x0405 tx timeout
[  197.135544][ T6930] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  197.164712][ T6930] /dev/nullb0: Can't open blockdev
[  197.166578][ T4941] sd 0:0:1:0: [sda] tag#9901 sd_setup_read_write_cmnd: block=1050966, count=64
[  197.166654][ T4941] sd 0:0:1:0: [sda] tag#9901 writing 64/64 512 byte blocks.
[  197.166702][ T4941] sd 0:0:1:0: [sda] tag#9901 Send: scmd 0xffff88802fce6650
[  197.166768][ T4941] sd 0:0:1:0: [sda] tag#9901 CDB: Write(10) 2a 00 00 10 09 56 00 00 40 00
[  197.195922][    C1] sd 0:0:1:0: [sda] tag#9901 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  197.195982][    C1] sd 0:0:1:0: [sda] tag#9901 CDB: Write(10) 2a 00 00 10 09 56 00 00 40 00
[  197.196050][    C1] sd 0:0:1:0: [sda] tag#9901 scsi host busy 1 failed 0
[  197.196098][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  197.196151][    C1] sd 0:0:1:0: [sda] tag#9901 sd_done: completed 32768 of 32768 bytes
[  197.196282][    C1] sd 0:0:1:0: [sda] tag#9901 64 sectors total, 32768 bytes done.
[  197.214813][ T2000] sd 0:0:1:0: [sda] tag#9902 Send: scmd 0xffff8880274c0110
[  197.214907][ T2000] sd 0:0:1:0: [sda] tag#9902 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  197.215062][    C1] sd 0:0:1:0: [sda] tag#9902 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  197.215114][    C1] sd 0:0:1:0: [sda] tag#9902 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  197.215179][    C1] sd 0:0:1:0: [sda] tag#9902 scsi host busy 1 failed 0
[  197.215222][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  197.215270][    C1] sd 0:0:1:0: [sda] tag#9902 sd_done: completed 0 of 0 bytes
[  197.215316][    C1] sd 0:0:1:0: [sda] tag#9902 0 sectors total, 0 bytes done.
[  197.215476][ T2000] sd 0:0:1:0: [sda] tag#9903 sd_setup_read_write_cmnd: block=1051030, count=8
[  197.215546][ T2000] sd 0:0:1:0: [sda] tag#9903 writing 8/8 512 byte blocks.
[  197.215622][ T2000] sd 0:0:1:0: [sda] tag#9903 Send: scmd 0xffff88802fce6a10
[  197.215687][ T2000] sd 0:0:1:0: [sda] tag#9903 CDB: Write(10) 2a 00 00 10 09 96 00 00 08 00
[  197.236055][    C1] sd 0:0:1:0: [sda] tag#9903 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  197.236110][    C1] sd 0:0:1:0: [sda] tag#9903 CDB: Write(10) 2a 00 00 10 09 96 00 00 08 00
[  197.236171][    C1] sd 0:0:1:0: [sda] tag#9903 scsi host busy 1 failed 0
[  197.236211][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  197.236256][    C1] sd 0:0:1:0: [sda] tag#9903 sd_done: completed 4096 of 4096 bytes
[  197.236300][    C1] sd 0:0:1:0: [sda] tag#9903 8 sectors total, 4096 bytes done.
[  197.236706][ T2000] sd 0:0:1:0: [sda] tag#9904 Send: scmd 0xffff8880274c0110
[  197.236751][ T2000] sd 0:0:1:0: [sda] tag#9904 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  197.236882][    C1] sd 0:0:1:0: [sda] tag#9904 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  197.236930][    C1] sd 0:0:1:0: [sda] tag#9904 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  197.237018][    C1] sd 0:0:1:0: [sda] tag#9904 scsi host busy 1 failed 0
[  197.237060][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  197.237103][    C1] sd 0:0:1:0: [sda] tag#9904 sd_done: completed 0 of 0 bytes
[  197.237146][    C1] sd 0:0:1:0: [sda] tag#9904 0 sectors total, 0 bytes done.
[  197.479148][ T5714] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  197.652837][ T5714] usb 5-1: device descriptor read/64, error -71
[  197.835777][ T6935] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  197.912647][ T5714] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  198.045083][ T5714] usb 5-1: device descriptor read/64, error -71
[  198.082327][ T6937] netlink: 'syz.1.275': attribute type 2 has an invalid length.
[  198.082352][ T6937] netlink: 'syz.1.275': attribute type 2 has an invalid length.
[  198.163087][ T5714] usb usb5-port1: attempt power cycle
[  198.502585][ T5714] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  198.550932][ T5714] usb 5-1: device descriptor read/8, error -71
[  198.802635][ T5714] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  198.823389][ T5714] usb 5-1: device descriptor read/8, error -71
[  198.934462][ T5714] usb usb5-port1: unable to enumerate USB device
[  199.362578][    C0] net_ratelimit: 10615 callbacks suppressed
[  199.362593][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.362919][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.363191][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.363489][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  199.363689][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.364701][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.364996][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.365258][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  199.365556][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  199.365779][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  200.067132][ T2000] sd 0:0:1:0: [sda] tag#9905 sd_setup_read_write_cmnd: block=318, count=8
[  200.067207][ T2000] sd 0:0:1:0: [sda] tag#9905 writing 8/8 512 byte blocks.
[  200.067266][ T2000] sd 0:0:1:0: [sda] tag#9905 Send: scmd 0xffff88802fce6dd0
[  200.067327][ T2000] sd 0:0:1:0: [sda] tag#9905 CDB: Write(10) 2a 00 00 00 01 3e 00 00 08 00
[  200.067389][ T2000] sd 0:0:1:0: [sda] tag#9906 sd_setup_read_write_cmnd: block=1342, count=16
[  200.067466][ T2000] sd 0:0:1:0: [sda] tag#9906 writing 16/16 512 byte blocks.
[  200.067508][ T2000] sd 0:0:1:0: [sda] tag#9906 Send: scmd 0xffff88802fce7190
[  200.067546][ T2000] sd 0:0:1:0: [sda] tag#9906 CDB: Write(10) 2a 00 00 00 05 3e 00 00 10 00
[  200.067641][ T2000] sd 0:0:1:0: [sda] tag#9907 sd_setup_read_write_cmnd: block=1366, count=8
[  200.067681][ T2000] sd 0:0:1:0: [sda] tag#9907 writing 8/8 512 byte blocks.
[  200.067720][ T2000] sd 0:0:1:0: [sda] tag#9907 Send: scmd 0xffff88802fce7550
[  200.067781][ T2000] sd 0:0:1:0: [sda] tag#9907 CDB: Write(10) 2a 00 00 00 05 56 00 00 08 00
[  200.067834][ T2000] sd 0:0:1:0: [sda] tag#9908 sd_setup_read_write_cmnd: block=1406, count=8
[  200.067896][ T2000] sd 0:0:1:0: [sda] tag#9908 writing 8/8 512 byte blocks.
[  200.067937][ T2000] sd 0:0:1:0: [sda] tag#9908 Send: scmd 0xffff88802fce7910
[  200.067975][ T2000] sd 0:0:1:0: [sda] tag#9908 CDB: Write(10) 2a 00 00 00 05 7e 00 00 08 00
[  200.068048][ T2000] sd 0:0:1:0: [sda] tag#9909 sd_setup_read_write_cmnd: block=2102, count=8
[  200.068088][ T2000] sd 0:0:1:0: [sda] tag#9909 writing 8/8 512 byte blocks.
[  200.068128][ T2000] sd 0:0:1:0: [sda] tag#9909 Send: scmd 0xffff88802fce7cd0
[  200.068188][ T2000] sd 0:0:1:0: [sda] tag#9909 CDB: Write(10) 2a 00 00 00 08 36 00 00 08 00
[  200.068251][ T2000] sd 0:0:1:0: [sda] tag#9910 sd_setup_read_write_cmnd: block=65974, count=16
[  200.068314][ T2000] sd 0:0:1:0: [sda] tag#9910 writing 16/16 512 byte blocks.
[  200.068358][ T2000] sd 0:0:1:0: [sda] tag#9910 Send: scmd 0xffff88802fce8090
[  200.068397][ T2000] sd 0:0:1:0: [sda] tag#9910 CDB: Write(10) 2a 00 00 01 01 b6 00 00 10 00
[  200.068473][ T2000] sd 0:0:1:0: [sda] tag#9911 sd_setup_read_write_cmnd: block=190110, count=8
[  200.068512][ T2000] sd 0:0:1:0: [sda] tag#9911 writing 8/8 512 byte blocks.
[  200.068553][ T2000] sd 0:0:1:0: [sda] tag#9911 Send: scmd 0xffff88802fce6a10
[  200.068611][ T2000] sd 0:0:1:0: [sda] tag#9911 CDB: Write(10) 2a 00 00 02 e6 9e 00 00 08 00
[  200.068671][ T2000] sd 0:0:1:0: [sda] tag#9912 sd_setup_read_write_cmnd: block=819510, count=8
[  200.068756][ T2000] sd 0:0:1:0: [sda] tag#9912 writing 8/8 512 byte blocks.
[  200.068806][ T2000] sd 0:0:1:0: [sda] tag#9912 Send: scmd 0xffff88802fce8450
[  200.068878][ T2000] sd 0:0:1:0: [sda] tag#9912 CDB: Write(10) 2a 00 00 0c 81 36 00 00 08 00
[  200.070076][    C1] sd 0:0:1:0: [sda] tag#9905 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.070149][    C1] sd 0:0:1:0: [sda] tag#9905 CDB: Write(10) 2a 00 00 00 01 3e 00 00 08 00
[  200.070229][    C1] sd 0:0:1:0: [sda] tag#9905 scsi host busy 8 failed 0
[  200.070281][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.070340][    C1] sd 0:0:1:0: [sda] tag#9905 sd_done: completed 4096 of 4096 bytes
[  200.070395][    C1] sd 0:0:1:0: [sda] tag#9905 8 sectors total, 4096 bytes done.
[  200.070614][    C1] sd 0:0:1:0: [sda] tag#9907 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.070656][    C1] sd 0:0:1:0: [sda] tag#9907 CDB: Write(10) 2a 00 00 00 05 56 00 00 08 00
[  200.070710][    C1] sd 0:0:1:0: [sda] tag#9907 scsi host busy 7 failed 0
[  200.070744][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.070781][    C1] sd 0:0:1:0: [sda] tag#9907 sd_done: completed 4096 of 4096 bytes
[  200.070817][    C1] sd 0:0:1:0: [sda] tag#9907 8 sectors total, 4096 bytes done.
[  200.070927][    C1] sd 0:0:1:0: [sda] tag#9906 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.070967][    C1] sd 0:0:1:0: [sda] tag#9906 CDB: Write(10) 2a 00 00 00 05 3e 00 00 10 00
[  200.071018][    C1] sd 0:0:1:0: [sda] tag#9906 scsi host busy 6 failed 0
[  200.071053][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.071090][    C1] sd 0:0:1:0: [sda] tag#9906 sd_done: completed 8192 of 8192 bytes
[  200.071128][    C1] sd 0:0:1:0: [sda] tag#9906 16 sectors total, 8192 bytes done.
[  200.071267][    C1] sd 0:0:1:0: [sda] tag#9908 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.071308][    C1] sd 0:0:1:0: [sda] tag#9908 CDB: Write(10) 2a 00 00 00 05 7e 00 00 08 00
[  200.071358][    C1] sd 0:0:1:0: [sda] tag#9908 scsi host busy 5 failed 0
[  200.071397][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.071435][    C1] sd 0:0:1:0: [sda] tag#9908 sd_done: completed 4096 of 4096 bytes
[  200.071473][    C1] sd 0:0:1:0: [sda] tag#9908 8 sectors total, 4096 bytes done.
[  200.071566][    C1] sd 0:0:1:0: [sda] tag#9909 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.071607][    C1] sd 0:0:1:0: [sda] tag#9909 CDB: Write(10) 2a 00 00 00 08 36 00 00 08 00
[  200.071656][    C1] sd 0:0:1:0: [sda] tag#9909 scsi host busy 4 failed 0
[  200.071691][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.071728][    C1] sd 0:0:1:0: [sda] tag#9909 sd_done: completed 4096 of 4096 bytes
[  200.071766][    C1] sd 0:0:1:0: [sda] tag#9909 8 sectors total, 4096 bytes done.
[  200.081900][    C1] sd 0:0:1:0: [sda] tag#9911 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.081978][    C1] sd 0:0:1:0: [sda] tag#9911 CDB: Write(10) 2a 00 00 02 e6 9e 00 00 08 00
[  200.082044][    C1] sd 0:0:1:0: [sda] tag#9911 scsi host busy 3 failed 0
[  200.082085][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.082130][    C1] sd 0:0:1:0: [sda] tag#9911 sd_done: completed 4096 of 4096 bytes
[  200.082173][    C1] sd 0:0:1:0: [sda] tag#9911 8 sectors total, 4096 bytes done.
[  200.097634][    C1] sd 0:0:1:0: [sda] tag#9912 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.097687][    C1] sd 0:0:1:0: [sda] tag#9912 CDB: Write(10) 2a 00 00 0c 81 36 00 00 08 00
[  200.097745][    C1] sd 0:0:1:0: [sda] tag#9912 scsi host busy 2 failed 0
[  200.097786][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.097831][    C1] sd 0:0:1:0: [sda] tag#9912 sd_done: completed 4096 of 4096 bytes
[  200.097874][    C1] sd 0:0:1:0: [sda] tag#9912 8 sectors total, 4096 bytes done.
[  200.125865][    C1] sd 0:0:1:0: [sda] tag#9910 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.125915][    C1] sd 0:0:1:0: [sda] tag#9910 CDB: Write(10) 2a 00 00 01 01 b6 00 00 10 00
[  200.125969][    C1] sd 0:0:1:0: [sda] tag#9910 scsi host busy 1 failed 0
[  200.126006][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.126046][    C1] sd 0:0:1:0: [sda] tag#9910 sd_done: completed 8192 of 8192 bytes
[  200.126085][    C1] sd 0:0:1:0: [sda] tag#9910 16 sectors total, 8192 bytes done.
[  200.196265][   T12] sd 0:0:1:0: [sda] tag#9913 sd_setup_read_write_cmnd: block=820014, count=8
[  200.196319][   T12] sd 0:0:1:0: [sda] tag#9913 writing 8/8 512 byte blocks.
[  200.196366][   T12] sd 0:0:1:0: [sda] tag#9913 Send: scmd 0xffff88802fcb8bd0
[  200.196411][   T12] sd 0:0:1:0: [sda] tag#9913 CDB: Write(10) 2a 00 00 0c 83 2e 00 00 08 00
[  200.196475][   T12] sd 0:0:1:0: [sda] tag#9914 sd_setup_read_write_cmnd: block=827694, count=8
[  200.196525][   T12] sd 0:0:1:0: [sda] tag#9914 writing 8/8 512 byte blocks.
[  200.196570][   T12] sd 0:0:1:0: [sda] tag#9914 Send: scmd 0xffff88802fcb8f90
[  200.196612][   T12] sd 0:0:1:0: [sda] tag#9914 CDB: Write(10) 2a 00 00 0c a1 2e 00 00 08 00
[  200.210034][    C1] sd 0:0:1:0: [sda] tag#9913 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.210090][    C1] sd 0:0:1:0: [sda] tag#9913 CDB: Write(10) 2a 00 00 0c 83 2e 00 00 08 00
[  200.210152][    C1] sd 0:0:1:0: [sda] tag#9913 scsi host busy 2 failed 0
[  200.210193][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.210249][    C1] sd 0:0:1:0: [sda] tag#9913 sd_done: completed 4096 of 4096 bytes
[  200.210293][    C1] sd 0:0:1:0: [sda] tag#9913 8 sectors total, 4096 bytes done.
[  200.219428][    C1] sd 0:0:1:0: [sda] tag#9914 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  200.219479][    C1] sd 0:0:1:0: [sda] tag#9914 CDB: Write(10) 2a 00 00 0c a1 2e 00 00 08 00
[  200.219535][    C1] sd 0:0:1:0: [sda] tag#9914 scsi host busy 1 failed 0
[  200.219570][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  200.219610][    C1] sd 0:0:1:0: [sda] tag#9914 sd_done: completed 4096 of 4096 bytes
[  200.219649][    C1] sd 0:0:1:0: [sda] tag#9914 8 sectors total, 4096 bytes done.
[  200.983202][   T27] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  201.001407][   T27] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  201.056385][   T27] usb 1-1: USB disconnect, device number 13
[  201.628578][ T6967] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  202.005331][ T6978] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  202.258054][ T6982] netlink: 'syz.1.284': attribute type 2 has an invalid length.
[  202.258079][ T6982] netlink: 'syz.1.284': attribute type 2 has an invalid length.
[  202.587481][ T4941] sd 0:0:1:0: [sda] tag#9915 sd_setup_read_write_cmnd: block=1051038, count=24
[  202.587536][ T4941] sd 0:0:1:0: [sda] tag#9915 writing 24/24 512 byte blocks.
[  202.587582][ T4941] sd 0:0:1:0: [sda] tag#9915 Send: scmd 0xffff88802fce8810
[  202.587623][ T4941] sd 0:0:1:0: [sda] tag#9915 CDB: Write(10) 2a 00 00 10 09 9e 00 00 18 00
[  202.610105][    C1] sd 0:0:1:0: [sda] tag#9915 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  202.610171][    C1] sd 0:0:1:0: [sda] tag#9915 CDB: Write(10) 2a 00 00 10 09 9e 00 00 18 00
[  202.610226][    C1] sd 0:0:1:0: [sda] tag#9915 scsi host busy 1 failed 0
[  202.610279][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  202.610327][    C1] sd 0:0:1:0: [sda] tag#9915 sd_done: completed 12288 of 12288 bytes
[  202.610376][    C1] sd 0:0:1:0: [sda] tag#9915 24 sectors total, 12288 bytes done.
[  202.610857][ T6991] tmpfs: Unknown parameter '00000000000000000000000'
[  202.766654][ T2000] sd 0:0:1:0: [sda] tag#9916 Send: scmd 0xffff8880274c0110
[  202.766707][ T2000] sd 0:0:1:0: [sda] tag#9916 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  202.766878][    C1] sd 0:0:1:0: [sda] tag#9916 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  202.766929][    C1] sd 0:0:1:0: [sda] tag#9916 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  202.767014][    C1] sd 0:0:1:0: [sda] tag#9916 scsi host busy 1 failed 0
[  202.767058][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  202.767115][    C1] sd 0:0:1:0: [sda] tag#9916 sd_done: completed 0 of 0 bytes
[  202.767161][    C1] sd 0:0:1:0: [sda] tag#9916 0 sectors total, 0 bytes done.
[  202.767479][ T2000] sd 0:0:1:0: [sda] tag#9917 sd_setup_read_write_cmnd: block=1051062, count=8
[  202.767525][ T2000] sd 0:0:1:0: [sda] tag#9917 writing 8/8 512 byte blocks.
[  202.767570][ T2000] sd 0:0:1:0: [sda] tag#9917 Send: scmd 0xffff88802fce8bd0
[  202.767610][ T2000] sd 0:0:1:0: [sda] tag#9917 CDB: Write(10) 2a 00 00 10 09 b6 00 00 08 00
[  202.780546][ T5758] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  202.791241][    C1] sd 0:0:1:0: [sda] tag#9917 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  202.791293][    C1] sd 0:0:1:0: [sda] tag#9917 CDB: Write(10) 2a 00 00 10 09 b6 00 00 08 00
[  202.791348][    C1] sd 0:0:1:0: [sda] tag#9917 scsi host busy 1 failed 0
[  202.791386][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  202.791426][    C1] sd 0:0:1:0: [sda] tag#9917 sd_done: completed 4096 of 4096 bytes
[  202.791461][    C1] sd 0:0:1:0: [sda] tag#9917 8 sectors total, 4096 bytes done.
[  202.792005][ T2000] sd 0:0:1:0: [sda] tag#9918 Send: scmd 0xffff8880274c0110
[  202.792089][ T2000] sd 0:0:1:0: [sda] tag#9918 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  202.792247][    C1] sd 0:0:1:0: [sda] tag#9918 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  202.792297][    C1] sd 0:0:1:0: [sda] tag#9918 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  202.792367][    C1] sd 0:0:1:0: [sda] tag#9918 scsi host busy 1 failed 0
[  202.792407][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  202.792485][    C1] sd 0:0:1:0: [sda] tag#9918 sd_done: completed 0 of 0 bytes
[  202.792527][    C1] sd 0:0:1:0: [sda] tag#9918 0 sectors total, 0 bytes done.
[  203.046757][ T6997] loop6: detected capacity change from 0 to 7
[  203.061583][    C1] blk_print_req_error: 10 callbacks suppressed
[  203.061605][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.061697][    C1] buffer_io_error: 10 callbacks suppressed
[  203.061709][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.062377][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.062498][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.138023][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.138116][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.138594][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.138659][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.138819][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.138877][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.139032][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.139090][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.139232][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.139317][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.139357][ T6997] ldm_validate_partition_table(): Disk read failed.
[  203.139523][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.139583][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.139734][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.139792][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.139931][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  203.139999][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[  203.140720][ T6997] Dev loop6: unable to read RDB block 0
[  203.141693][ T6997]  loop6: unable to read partition table
[  203.141941][ T6997] loop6: partition table beyond EOD, truncated
[  203.335063][ T5758] usb 1-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00
[  203.337600][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  203.352405][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.352608][ T5758] usb 1-1: Product: syz
[  203.352623][ T5758] usb 1-1: Manufacturer: syz
[  203.352636][ T5758] usb 1-1: SerialNumber: syz
[  203.358742][ T6997] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü�¾-ý?‹ºÐ	œëÜ%õ«`Éæˆ{í©³­ô÷5FLQkÝŠA€) failed (rc=-5)
[  203.469697][ T5758] kaweth 1-1:1.0: couldn't find required endpoints
[  203.740666][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.772007][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.821094][ T5758] usb 1-1: USB disconnect, device number 14
[  203.987660][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  204.025517][ T7010] pvfs2: Unknown parameter ''
[  204.336330][ T7016] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  204.364304][   T10] usb 4-1: Using ep0 maxpacket: 32
[  204.372794][    C0] net_ratelimit: 10898 callbacks suppressed
[  204.372816][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  204.373090][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.373491][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.373750][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.374132][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  204.374431][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.376282][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.376682][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.376949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  204.377316][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  204.491702][   T10] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  204.626565][   T10] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  204.626595][   T10] usb 4-1: config 0 has no interface number 0
[  204.797429][ T7024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  204.799412][ T7024] FAULT_INJECTION: forcing a failure.
[  204.799412][ T7024] name failslab, interval 1, probability 0, space 0, times 0
[  204.799440][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.0.295 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  204.799463][ T7024] Tainted: [Y]=FORCED_BIND
[  204.799470][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  204.799480][ T7024] Call Trace:
[  204.799488][ T7024]  <TASK>
[  204.799496][ T7024]  dump_stack_lvl+0xe8/0x150
[  204.799525][ T7024]  should_fail_ex+0x3eb/0x540
[  204.799556][ T7024]  should_failslab+0xa8/0x100
[  204.799579][ T7024]  ? do_getname+0x2e/0x250
[  204.799602][ T7024]  kmem_cache_alloc_noprof+0x9c/0x600
[  204.799630][ T7024]  ? do_getname+0x2e/0x250
[  204.799659][ T7024]  do_getname+0x2e/0x250
[  204.799680][ T7024]  ? getname_flags+0x11/0x20
[  204.799706][ T7024]  do_sys_openat2+0xce/0x200
[  204.799731][ T7024]  ? __pfx_do_sys_openat2+0x10/0x10
[  204.799757][ T7024]  ? ksys_write+0x242/0x270
[  204.799778][ T7024]  ? __pfx_ksys_write+0x10/0x10
[  204.799800][ T7024]  __x64_sys_openat+0x138/0x170
[  204.799838][ T7024]  do_syscall_64+0x166/0x520
[  204.799855][ T7024]  ? trace_irq_disable+0x3b/0x140
[  204.799875][ T7024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.799892][ T7024]  ? clear_bhb_loop+0x70/0xc0
[  204.799913][ T7024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.799930][ T7024] RIP: 0033:0x7f63d4b9e159
[  204.799947][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  204.799962][ T7024] RSP: 002b:00007f63d59a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  204.799982][ T7024] RAX: ffffffffffffffda RBX: 00007f63d4e25fa0 RCX: 00007f63d4b9e159
[  204.799994][ T7024] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  204.800006][ T7024] RBP: 00007f63d59a3090 R08: 0000000000000000 R09: 0000000000000000
[  204.800021][ T7024] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  204.800032][ T7024] R13: 00007f63d4e26038 R14: 00007f63d4e25fa0 R15: 00007fff55a3bb38
[  204.800060][ T7024]  </TASK>
[  205.441955][ T6012] sd 0:0:1:0: [sda] tag#9919 sd_setup_read_write_cmnd: block=880606, count=344
[  205.442045][ T6012] sd 0:0:1:0: [sda] tag#9919 writing 344/344 512 byte blocks.
[  205.467043][ T6012] sd 0:0:1:0: [sda] tag#9919 Send: scmd 0xffff88802fce8f90
[  205.467129][ T6012] sd 0:0:1:0: [sda] tag#9919 CDB: Write(10) 2a 00 00 0d 6f de 00 01 58 00
[  205.515583][    C1] sd 0:0:1:0: [sda] tag#9919 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.515664][    C1] sd 0:0:1:0: [sda] tag#9919 CDB: Write(10) 2a 00 00 0d 6f de 00 01 58 00
[  205.515736][    C1] sd 0:0:1:0: [sda] tag#9919 scsi host busy 1 failed 0
[  205.515783][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.515834][    C1] sd 0:0:1:0: [sda] tag#9919 sd_done: completed 176128 of 176128 bytes
[  205.515902][    C1] sd 0:0:1:0: [sda] tag#9919 344 sectors total, 176128 bytes done.
[  205.571839][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.571866][   T10] usb 4-1: Product: syz
[  205.571878][   T10] usb 4-1: Manufacturer: syz
[  205.571891][   T10] usb 4-1: SerialNumber: syz
[  205.613881][ T6012] sd 0:0:1:0: [sda] tag#9856 sd_setup_read_write_cmnd: block=896990, count=344
[  205.613936][ T6012] sd 0:0:1:0: [sda] tag#9856 writing 344/344 512 byte blocks.
[  205.613987][ T6012] sd 0:0:1:0: [sda] tag#9856 Send: scmd 0xffff88802fce9e90
[  205.614035][ T6012] sd 0:0:1:0: [sda] tag#9856 CDB: Write(10) 2a 00 00 0d af de 00 01 58 00
[  205.614147][ T6012] sd 0:0:1:0: [sda] tag#9857 sd_setup_read_write_cmnd: block=835894, count=8
[  205.614193][ T6012] sd 0:0:1:0: [sda] tag#9857 writing 8/8 512 byte blocks.
[  205.614238][ T6012] sd 0:0:1:0: [sda] tag#9857 Send: scmd 0xffff88802fce9350
[  205.614283][ T6012] sd 0:0:1:0: [sda] tag#9857 CDB: Write(10) 2a 00 00 0c c1 36 00 00 08 00
[  205.614343][ T6012] sd 0:0:1:0: [sda] tag#9858 sd_setup_read_write_cmnd: block=836398, count=8
[  205.614389][ T6012] sd 0:0:1:0: [sda] tag#9858 writing 8/8 512 byte blocks.
[  205.614436][ T6012] sd 0:0:1:0: [sda] tag#9858 Send: scmd 0xffff88802fce9710
[  205.614481][ T6012] sd 0:0:1:0: [sda] tag#9858 CDB: Write(10) 2a 00 00 0c c3 2e 00 00 08 00
[  205.614542][ T6012] sd 0:0:1:0: [sda] tag#9859 sd_setup_read_write_cmnd: block=844070, count=16
[  205.614586][ T6012] sd 0:0:1:0: [sda] tag#9859 writing 16/16 512 byte blocks.
[  205.694814][   T10] usb 4-1: config 0 descriptor??
[  205.791068][ T6012] sd 0:0:1:0: [sda] tag#9859 Send: scmd 0xffff88802fce9ad0
[  205.791133][ T6012] sd 0:0:1:0: [sda] tag#9859 CDB: Write(10) 2a 00 00 0c e1 26 00 00 10 00
[  205.791210][ T6012] sd 0:0:1:0: [sda] tag#9860 sd_setup_read_write_cmnd: block=770358, count=8
[  205.791258][ T6012] sd 0:0:1:0: [sda] tag#9860 writing 8/8 512 byte blocks.
[  205.791308][ T6012] sd 0:0:1:0: [sda] tag#9860 Send: scmd 0xffff88802fcea250
[  205.791353][ T6012] sd 0:0:1:0: [sda] tag#9860 CDB: Write(10) 2a 00 00 0b c1 36 00 00 08 00
[  205.791413][ T6012] sd 0:0:1:0: [sda] tag#9861 sd_setup_read_write_cmnd: block=770862, count=8
[  205.791460][ T6012] sd 0:0:1:0: [sda] tag#9861 writing 8/8 512 byte blocks.
[  205.791506][ T6012] sd 0:0:1:0: [sda] tag#9861 Send: scmd 0xffff88802fcea610
[  205.791552][ T6012] sd 0:0:1:0: [sda] tag#9861 CDB: Write(10) 2a 00 00 0b c3 2e 00 00 08 00
[  205.791610][ T6012] sd 0:0:1:0: [sda] tag#9862 sd_setup_read_write_cmnd: block=778542, count=8
[  205.791657][ T6012] sd 0:0:1:0: [sda] tag#9862 writing 8/8 512 byte blocks.
[  205.791719][ T6012] sd 0:0:1:0: [sda] tag#9862 Send: scmd 0xffff88802fcea9d0
[  205.791764][ T6012] sd 0:0:1:0: [sda] tag#9862 CDB: Write(10) 2a 00 00 0b e1 2e 00 00 08 00
[  205.799875][    C1] sd 0:0:1:0: [sda] tag#9857 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.799930][    C1] sd 0:0:1:0: [sda] tag#9857 CDB: Write(10) 2a 00 00 0c c1 36 00 00 08 00
[  205.799993][    C1] sd 0:0:1:0: [sda] tag#9857 scsi host busy 7 failed 0
[  205.800034][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.800079][    C1] sd 0:0:1:0: [sda] tag#9857 sd_done: completed 4096 of 4096 bytes
[  205.800123][    C1] sd 0:0:1:0: [sda] tag#9857 8 sectors total, 4096 bytes done.
[  205.800269][    C1] sd 0:0:1:0: [sda] tag#9861 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.800314][    C1] sd 0:0:1:0: [sda] tag#9861 CDB: Write(10) 2a 00 00 0b c3 2e 00 00 08 00
[  205.800369][    C1] sd 0:0:1:0: [sda] tag#9861 scsi host busy 6 failed 0
[  205.800408][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.800451][    C1] sd 0:0:1:0: [sda] tag#9861 sd_done: completed 4096 of 4096 bytes
[  205.800494][    C1] sd 0:0:1:0: [sda] tag#9861 8 sectors total, 4096 bytes done.
[  205.800613][    C1] sd 0:0:1:0: [sda] tag#9859 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.800657][    C1] sd 0:0:1:0: [sda] tag#9859 CDB: Write(10) 2a 00 00 0c e1 26 00 00 10 00
[  205.800719][    C1] sd 0:0:1:0: [sda] tag#9859 scsi host busy 5 failed 0
[  205.800758][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.800800][    C1] sd 0:0:1:0: [sda] tag#9859 sd_done: completed 8192 of 8192 bytes
[  205.800842][    C1] sd 0:0:1:0: [sda] tag#9859 16 sectors total, 8192 bytes done.
[  205.800962][    C1] sd 0:0:1:0: [sda] tag#9862 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.801006][    C1] sd 0:0:1:0: [sda] tag#9862 CDB: Write(10) 2a 00 00 0b e1 2e 00 00 08 00
[  205.801060][    C1] sd 0:0:1:0: [sda] tag#9862 scsi host busy 4 failed 0
[  205.801098][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.801141][    C1] sd 0:0:1:0: [sda] tag#9862 sd_done: completed 4096 of 4096 bytes
[  205.801183][    C1] sd 0:0:1:0: [sda] tag#9862 8 sectors total, 4096 bytes done.
[  205.801304][    C1] sd 0:0:1:0: [sda] tag#9858 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.801348][    C1] sd 0:0:1:0: [sda] tag#9858 CDB: Write(10) 2a 00 00 0c c3 2e 00 00 08 00
[  205.801409][    C1] sd 0:0:1:0: [sda] tag#9858 scsi host busy 3 failed 0
[  205.801449][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.801491][    C1] sd 0:0:1:0: [sda] tag#9858 sd_done: completed 4096 of 4096 bytes
[  205.801533][    C1] sd 0:0:1:0: [sda] tag#9858 8 sectors total, 4096 bytes done.
[  205.801670][    C1] sd 0:0:1:0: [sda] tag#9860 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.801721][    C1] sd 0:0:1:0: [sda] tag#9860 CDB: Write(10) 2a 00 00 0b c1 36 00 00 08 00
[  205.801773][    C1] sd 0:0:1:0: [sda] tag#9860 scsi host busy 2 failed 0
[  205.801812][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.801854][    C1] sd 0:0:1:0: [sda] tag#9860 sd_done: completed 4096 of 4096 bytes
[  205.801895][    C1] sd 0:0:1:0: [sda] tag#9860 8 sectors total, 4096 bytes done.
[  205.825002][    C1] sd 0:0:1:0: [sda] tag#9856 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  205.825077][    C1] sd 0:0:1:0: [sda] tag#9856 CDB: Write(10) 2a 00 00 0d af de 00 01 58 00
[  205.825155][    C1] sd 0:0:1:0: [sda] tag#9856 scsi host busy 1 failed 0
[  205.825212][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  205.825275][    C1] sd 0:0:1:0: [sda] tag#9856 sd_done: completed 176128 of 176128 bytes
[  205.825336][    C1] sd 0:0:1:0: [sda] tag#9856 344 sectors total, 176128 bytes done.
[  206.424161][   T10] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71
[  206.424398][   T10] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  206.614580][   T10] usb 4-1: USB disconnect, device number 30
[  206.671696][ T7043] netlink: 'syz.3.297': attribute type 2 has an invalid length.
[  206.671718][ T7043] netlink: 132 bytes leftover after parsing attributes in process `syz.3.297'.
[  206.711622][ T7040] netlink: 'syz.4.294': attribute type 58 has an invalid length.
[  206.733829][ T7042] netlink: 'syz.0.296': attribute type 2 has an invalid length.
[  206.733853][ T7042] netlink: 'syz.0.296': attribute type 2 has an invalid length.
[  207.492227][ T7060] veth0_vlan: entered allmulticast mode
[  208.308356][ T4941] sd 0:0:1:0: [sda] tag#9863 sd_setup_read_write_cmnd: block=1051070, count=64
[  208.308417][ T4941] sd 0:0:1:0: [sda] tag#9863 writing 64/64 512 byte blocks.
[  208.308470][ T4941] sd 0:0:1:0: [sda] tag#9863 Send: scmd 0xffff88802fcead90
[  208.308513][ T4941] sd 0:0:1:0: [sda] tag#9863 CDB: Write(10) 2a 00 00 10 09 be 00 00 40 00
[  208.310306][    C1] sd 0:0:1:0: [sda] tag#9863 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.310371][    C1] sd 0:0:1:0: [sda] tag#9863 CDB: Write(10) 2a 00 00 10 09 be 00 00 40 00
[  208.310471][    C1] sd 0:0:1:0: [sda] tag#9863 scsi host busy 1 failed 0
[  208.310530][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  208.310588][    C1] sd 0:0:1:0: [sda] tag#9863 sd_done: completed 32768 of 32768 bytes
[  208.310643][    C1] sd 0:0:1:0: [sda] tag#9863 64 sectors total, 32768 bytes done.
[  208.422726][ T2000] sd 0:0:1:0: [sda] tag#9864 Send: scmd 0xffff8880274c0110
[  208.422779][ T2000] sd 0:0:1:0: [sda] tag#9864 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  208.422932][    C1] sd 0:0:1:0: [sda] tag#9864 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.422976][    C1] sd 0:0:1:0: [sda] tag#9864 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  208.423032][    C1] sd 0:0:1:0: [sda] tag#9864 scsi host busy 1 failed 0
[  208.423069][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  208.423109][    C1] sd 0:0:1:0: [sda] tag#9864 sd_done: completed 0 of 0 bytes
[  208.423147][    C1] sd 0:0:1:0: [sda] tag#9864 0 sectors total, 0 bytes done.
[  208.423298][ T2000] sd 0:0:1:0: [sda] tag#9865 sd_setup_read_write_cmnd: block=1051134, count=8
[  208.423344][ T2000] sd 0:0:1:0: [sda] tag#9865 writing 8/8 512 byte blocks.
[  208.423397][ T2000] sd 0:0:1:0: [sda] tag#9865 Send: scmd 0xffff88802fceb150
[  208.423439][ T2000] sd 0:0:1:0: [sda] tag#9865 CDB: Write(10) 2a 00 00 10 09 fe 00 00 08 00
[  208.439802][    C1] sd 0:0:1:0: [sda] tag#9865 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.439855][    C1] sd 0:0:1:0: [sda] tag#9865 CDB: Write(10) 2a 00 00 10 09 fe 00 00 08 00
[  208.439913][    C1] sd 0:0:1:0: [sda] tag#9865 scsi host busy 1 failed 0
[  208.439954][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  208.439997][    C1] sd 0:0:1:0: [sda] tag#9865 sd_done: completed 4096 of 4096 bytes
[  208.440040][    C1] sd 0:0:1:0: [sda] tag#9865 8 sectors total, 4096 bytes done.
[  208.440220][ T2000] sd 0:0:1:0: [sda] tag#9866 Send: scmd 0xffff8880274c0110
[  208.440265][ T2000] sd 0:0:1:0: [sda] tag#9866 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  208.460939][    C1] sd 0:0:1:0: [sda] tag#9866 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  208.460996][    C1] sd 0:0:1:0: [sda] tag#9866 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  208.461060][    C1] sd 0:0:1:0: [sda] tag#9866 scsi host busy 1 failed 0
[  208.461110][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  208.461156][    C1] sd 0:0:1:0: [sda] tag#9866 sd_done: completed 0 of 0 bytes
[  208.461202][    C1] sd 0:0:1:0: [sda] tag#9866 0 sectors total, 0 bytes done.
[  208.728615][ T7081] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  209.005789][ T7088] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  209.009484][ T7088] FAULT_INJECTION: forcing a failure.
[  209.009484][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  209.009515][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.3.305 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  209.009538][ T7088] Tainted: [Y]=FORCED_BIND
[  209.009544][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  209.009554][ T7088] Call Trace:
[  209.009561][ T7088]  <TASK>
[  209.009569][ T7088]  dump_stack_lvl+0xe8/0x150
[  209.009597][ T7088]  should_fail_ex+0x3eb/0x540
[  209.009627][ T7088]  strncpy_from_user+0x36/0x2c0
[  209.009655][ T7088]  do_getname+0x77/0x250
[  209.009685][ T7088]  do_sys_openat2+0xce/0x200
[  209.009712][ T7088]  ? __pfx_do_sys_openat2+0x10/0x10
[  209.009737][ T7088]  ? ksys_write+0x242/0x270
[  209.009758][ T7088]  ? __pfx_ksys_write+0x10/0x10
[  209.009780][ T7088]  __x64_sys_openat+0x138/0x170
[  209.009809][ T7088]  do_syscall_64+0x166/0x520
[  209.009825][ T7088]  ? trace_irq_disable+0x3b/0x140
[  209.009844][ T7088]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.009862][ T7088]  ? clear_bhb_loop+0x70/0xc0
[  209.009884][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.009901][ T7088] RIP: 0033:0x7f715ed9e159
[  209.009918][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  209.009933][ T7088] RSP: 002b:00007f715fc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  209.009952][ T7088] RAX: ffffffffffffffda RBX: 00007f715f025fa0 RCX: 00007f715ed9e159
[  209.009965][ T7088] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  209.009977][ T7088] RBP: 00007f715fc4a090 R08: 0000000000000000 R09: 0000000000000000
[  209.009988][ T7088] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  209.009999][ T7088] R13: 00007f715f026038 R14: 00007f715f025fa0 R15: 00007ffe4ff4d458
[  209.010031][ T7088]  </TASK>
[  209.153231][ T5758] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  209.359701][ T5758] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  209.361392][ T5758] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  209.361416][ T5758] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.361433][ T5758] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  209.361475][ T5758] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.382565][    C0] net_ratelimit: 8960 callbacks suppressed
[  209.382584][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.382973][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.383251][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.383638][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  209.383910][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.385817][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.386198][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.386528][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  209.386907][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  209.387232][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  209.554209][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  209.554236][ T5758] usb 1-1: Product: syz
[  209.554249][ T5758] usb 1-1: Manufacturer: syz
[  209.633792][ T5758] cdc_wdm 1-1:1.0: skipping garbage
[  209.633812][ T5758] cdc_wdm 1-1:1.0: skipping garbage
[  209.681444][ T5758] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  209.681466][ T5758] cdc_wdm 1-1:1.0: Unknown control protocol
[  209.921027][   T27] usb 1-1: USB disconnect, device number 15
[  209.975663][ T5758] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  210.133366][ T5758] usb 4-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00
[  210.148292][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.148322][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.149330][ T5758] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  210.149351][ T5758] usb 4-1: Manufacturer: syz
[  210.207529][ T5758] usb 4-1: config 0 descriptor??
[  210.655602][   T27] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  210.831395][   T27] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[  210.842772][   T27] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  210.842797][   T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  210.842813][   T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  210.842854][   T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  210.842876][   T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 101, setting to 64
[  210.846400][   T27] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  210.846423][   T27] usb 1-1: Product: syz
[  210.846436][   T27] usb 1-1: Manufacturer: syz
[  210.978030][ T7107] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  210.980614][   T27] cdc_wdm 1-1:1.0: skipping garbage
[  210.980660][   T27] cdc_wdm 1-1:1.0: skipping garbage
[  211.014240][   T27] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  211.014261][   T27] cdc_wdm 1-1:1.0: Unknown control protocol
[  211.285638][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.286213][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.293189][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.293355][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.293568][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.293587][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.293789][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.293807][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.294034][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.294052][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.302732][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.302756][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.303214][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.303233][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.303439][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.303455][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.303633][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.303650][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.303843][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.303859][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.304222][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  211.304241][    C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  211.548117][ T5758] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0009/input/input11
[  211.704942][ T5758] uclogic 0003:256C:006D.0009: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  211.803624][ T5758] usb 4-1: USB disconnect, device number 31
[  212.045750][ T5693] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  212.210853][ T7134] overlayfs: overlapping lowerdir path
[  212.238182][ T5693] usb 2-1: Using ep0 maxpacket: 32
[  212.242727][ T5693] usb 2-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  212.278177][ T5693] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  212.281897][ T5693] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  212.281927][ T5693] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.281950][ T5693] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  212.347708][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.347733][ T5693] usb 2-1: Product: syz
[  212.347746][ T5693] usb 2-1: Manufacturer: syz
[  212.347759][ T5693] usb 2-1: SerialNumber: syz
[  212.484243][    C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  212.523756][ T5714] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  212.676273][ T5714] usb 5-1: Using ep0 maxpacket: 8
[  212.697181][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short
[  212.699882][ T5714] usb 5-1: New USB device found: idVendor=0c98, idProduct=1140, bcdDevice=8.40
[  212.747527][ T5714] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  212.769324][ T5693] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input12
[  212.791559][ T7132] fido_id[7132]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  212.825095][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.825124][ T5714] usb 5-1: Product: syz
[  212.825138][ T5714] usb 5-1: Manufacturer: syz
[  212.825210][ T5714] usb 5-1: SerialNumber: syz
[  213.034780][ T7137] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  213.122694][ T5693] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  213.122715][ T5693]  (id 0x00)
[  213.380033][ T4941] sd 0:0:1:0: [sda] tag#9867 sd_setup_read_write_cmnd: block=1051142, count=24
[  213.380166][ T4941] sd 0:0:1:0: [sda] tag#9867 writing 24/24 512 byte blocks.
[  213.380214][ T4941] sd 0:0:1:0: [sda] tag#9867 Send: scmd 0xffff88802fceb510
[  213.380327][ T4941] sd 0:0:1:0: [sda] tag#9867 CDB: Write(10) 2a 00 00 10 0a 06 00 00 18 00
[  213.381949][    C1] sd 0:0:1:0: [sda] tag#9867 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  213.382025][    C1] sd 0:0:1:0: [sda] tag#9867 CDB: Write(10) 2a 00 00 10 0a 06 00 00 18 00
[  213.382099][    C1] sd 0:0:1:0: [sda] tag#9867 scsi host busy 1 failed 0
[  213.382153][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  213.382212][    C1] sd 0:0:1:0: [sda] tag#9867 sd_done: completed 12288 of 12288 bytes
[  213.382274][    C1] sd 0:0:1:0: [sda] tag#9867 24 sectors total, 12288 bytes done.
[  213.469342][ T2000] sd 0:0:1:0: [sda] tag#9868 Send: scmd 0xffff8880274c0110
[  213.469394][ T2000] sd 0:0:1:0: [sda] tag#9868 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  213.469580][    C1] sd 0:0:1:0: [sda] tag#9868 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  213.469633][    C1] sd 0:0:1:0: [sda] tag#9868 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  213.469709][    C1] sd 0:0:1:0: [sda] tag#9868 scsi host busy 1 failed 0
[  213.469754][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  213.469803][    C1] sd 0:0:1:0: [sda] tag#9868 sd_done: completed 0 of 0 bytes
[  213.469851][    C1] sd 0:0:1:0: [sda] tag#9868 0 sectors total, 0 bytes done.
[  213.470081][ T2000] sd 0:0:1:0: [sda] tag#9869 sd_setup_read_write_cmnd: block=1051166, count=8
[  213.470206][ T2000] sd 0:0:1:0: [sda] tag#9869 writing 8/8 512 byte blocks.
[  213.470251][ T2000] sd 0:0:1:0: [sda] tag#9869 Send: scmd 0xffff88802fceb8d0
[  213.470295][ T2000] sd 0:0:1:0: [sda] tag#9869 CDB: Write(10) 2a 00 00 10 0a 1e 00 00 08 00
[  213.496976][    C1] sd 0:0:1:0: [sda] tag#9869 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  213.497041][    C1] sd 0:0:1:0: [sda] tag#9869 CDB: Write(10) 2a 00 00 10 0a 1e 00 00 08 00
[  213.497127][    C1] sd 0:0:1:0: [sda] tag#9869 scsi host busy 1 failed 0
[  213.497177][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  213.497230][    C1] sd 0:0:1:0: [sda] tag#9869 sd_done: completed 4096 of 4096 bytes
[  213.497282][    C1] sd 0:0:1:0: [sda] tag#9869 8 sectors total, 4096 bytes done.
[  213.497506][ T2000] sd 0:0:1:0: [sda] tag#9870 Send: scmd 0xffff8880274c0110
[  213.497551][ T2000] sd 0:0:1:0: [sda] tag#9870 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  213.497738][    C1] sd 0:0:1:0: [sda] tag#9870 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  213.497798][    C1] sd 0:0:1:0: [sda] tag#9870 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  213.497859][    C1] sd 0:0:1:0: [sda] tag#9870 scsi host busy 1 failed 0
[  213.497966][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  213.498012][    C1] sd 0:0:1:0: [sda] tag#9870 sd_done: completed 0 of 0 bytes
[  213.498055][    C1] sd 0:0:1:0: [sda] tag#9870 0 sectors total, 0 bytes done.
[  213.765079][ T5714] usb 5-1: USB disconnect, device number 6
[  213.834186][ T7141] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  213.856745][ T7141] FAULT_INJECTION: forcing a failure.
[  213.856745][ T7141] name failslab, interval 1, probability 0, space 0, times 0
[  213.856775][ T7141] CPU: 1 UID: 0 PID: 7141 Comm: syz.3.316 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  213.856798][ T7141] Tainted: [Y]=FORCED_BIND
[  213.856805][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  213.856815][ T7141] Call Trace:
[  213.856822][ T7141]  <TASK>
[  213.856830][ T7141]  dump_stack_lvl+0xe8/0x150
[  213.856868][ T7141]  should_fail_ex+0x3eb/0x540
[  213.856899][ T7141]  should_failslab+0xa8/0x100
[  213.856922][ T7141]  ? alloc_empty_file+0x5b/0x1d0
[  213.856946][ T7141]  kmem_cache_alloc_noprof+0x9c/0x600
[  213.856972][ T7141]  ? stack_depot_save_flags+0x33/0x7f0
[  213.856989][ T7141]  ? _raw_spin_unlock+0x21/0x50
[  213.857011][ T7141]  ? alloc_empty_file+0x5b/0x1d0
[  213.857035][ T7141]  ? kmem_cache_alloc_noprof+0x151/0x600
[  213.857063][ T7141]  alloc_empty_file+0x5b/0x1d0
[  213.857089][ T7141]  path_openat+0x9d/0x1da0
[  213.857127][ T7141]  do_file_open+0x23e/0x4a0
[  213.857152][ T7141]  ? __pfx_do_file_open+0x10/0x10
[  213.857193][ T7141]  ? _raw_spin_unlock+0x28/0x50
[  213.857215][ T7141]  ? alloc_fd+0x6af/0x760
[  213.857251][ T7141]  do_sys_openat2+0x115/0x200
[  213.857279][ T7141]  ? __pfx_do_sys_openat2+0x10/0x10
[  213.857306][ T7141]  ? __irq_exit_rcu+0xcb/0x220
[  213.857327][ T7141]  ? lockdep_softirqs_on+0x11e/0x190
[  213.857351][ T7141]  __x64_sys_openat+0x138/0x170
[  213.857379][ T7141]  do_syscall_64+0x166/0x520
[  213.857395][ T7141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.857413][ T7141]  ? clear_bhb_loop+0x70/0xc0
[  213.857434][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.857452][ T7141] RIP: 0033:0x7f715ed9e159
[  213.857468][ T7141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  213.857483][ T7141] RSP: 002b:00007f715fc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  213.857501][ T7141] RAX: ffffffffffffffda RBX: 00007f715f025fa0 RCX: 00007f715ed9e159
[  213.857514][ T7141] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  213.857526][ T7141] RBP: 00007f715fc4a090 R08: 0000000000000000 R09: 0000000000000000
[  213.857537][ T7141] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  213.857548][ T7141] R13: 00007f715f026038 R14: 00007f715f025fa0 R15: 00007ffe4ff4d458
[  213.857576][ T7141]  </TASK>
[  214.365554][   T27] usb 1-1: USB disconnect, device number 16
[  214.389991][ T5693] rc_core: IR keymap rc-imon-pad not found
[  214.390009][ T5693] Registered IR keymap rc-empty
[  214.390371][ T5693] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  214.390389][ T5693] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  214.392770][    C0] net_ratelimit: 9838 callbacks suppressed
[  214.392784][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.393283][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.393629][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.394095][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.394499][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  214.394867][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.395306][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.395767][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  214.396117][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.396517][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  214.730965][ T5693] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[  214.758295][ T5693] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input13
[  214.806524][ T5693] imon 2-1:155.0: iMON device (15c2:ffdc) on usb<2:32> initialized
[  214.946848][   T27] usb 2-1: USB disconnect, device number 32
[  215.332648][ T5693] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  215.427100][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  215.427526][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.484388][ T5693] usb 4-1: Using ep0 maxpacket: 16
[  215.488041][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short
[  215.488087][ T5693] usb 4-1: New USB device found: idVendor=0582, idProduct=0145, bcdDevice=0.40
[  215.490189][ T5693] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  215.490212][ T5693] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  215.545710][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.545735][ T5693] usb 4-1: Product: syz
[  215.545748][ T5693] usb 4-1: Manufacturer: syz
[  215.545760][ T5693] usb 4-1: SerialNumber: syz
[  215.550386][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  215.550435][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  215.859727][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  215.859789][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  215.983906][   T61] sd 0:0:1:0: [sda] tag#9871 sd_setup_read_write_cmnd: block=799030, count=24
[  215.983988][   T61] sd 0:0:1:0: [sda] tag#9871 writing 24/24 512 byte blocks.
[  215.984045][   T61] sd 0:0:1:0: [sda] tag#9871 Send: scmd 0xffff88802fcebc90
[  215.984093][   T61] sd 0:0:1:0: [sda] tag#9871 CDB: Write(10) 2a 00 00 0c 31 36 00 00 18 00
[  215.984185][   T61] sd 0:0:1:0: [sda] tag#9872 sd_setup_read_write_cmnd: block=803126, count=8
[  215.984240][   T61] sd 0:0:1:0: [sda] tag#9872 writing 8/8 512 byte blocks.
[  216.005040][   T61] sd 0:0:1:0: [sda] tag#9872 Send: scmd 0xffff88802fcec050
[  216.005124][   T61] sd 0:0:1:0: [sda] tag#9872 CDB: Write(10) 2a 00 00 0c 41 36 00 00 08 00
[  216.005210][   T61] sd 0:0:1:0: [sda] tag#9873 sd_setup_read_write_cmnd: block=803630, count=8
[  216.005282][   T61] sd 0:0:1:0: [sda] tag#9873 writing 8/8 512 byte blocks.
[  216.005332][   T61] sd 0:0:1:0: [sda] tag#9873 Send: scmd 0xffff88802fcdd310
[  216.005400][   T61] sd 0:0:1:0: [sda] tag#9873 CDB: Write(10) 2a 00 00 0c 43 2e 00 00 08 00
[  216.005463][   T61] sd 0:0:1:0: [sda] tag#9874 sd_setup_read_write_cmnd: block=811302, count=16
[  216.005534][   T61] sd 0:0:1:0: [sda] tag#9874 writing 16/16 512 byte blocks.
[  216.005582][   T61] sd 0:0:1:0: [sda] tag#9874 Send: scmd 0xffff88802fcdd6d0
[  216.005626][   T61] sd 0:0:1:0: [sda] tag#9874 CDB: Write(10) 2a 00 00 0c 61 26 00 00 10 00
[  216.005807][   T61] sd 0:0:1:0: [sda] tag#9875 sd_setup_read_write_cmnd: block=790838, count=24
[  216.005857][   T61] sd 0:0:1:0: [sda] tag#9875 writing 24/24 512 byte blocks.
[  216.005904][   T61] sd 0:0:1:0: [sda] tag#9875 Send: scmd 0xffff88802fcdda90
[  216.005971][   T61] sd 0:0:1:0: [sda] tag#9875 CDB: Write(10) 2a 00 00 0c 11 36 00 00 18 00
[  216.006036][   T61] sd 0:0:1:0: [sda] tag#9876 sd_setup_read_write_cmnd: block=749878, count=16
[  216.006105][   T61] sd 0:0:1:0: [sda] tag#9876 writing 16/16 512 byte blocks.
[  216.006152][   T61] sd 0:0:1:0: [sda] tag#9876 Send: scmd 0xffff88802fcdde50
[  216.006225][   T61] sd 0:0:1:0: [sda] tag#9876 CDB: Write(10) 2a 00 00 0b 71 36 00 00 10 00
[  216.014380][    C1] sd 0:0:1:0: [sda] tag#9872 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.014459][    C1] sd 0:0:1:0: [sda] tag#9872 CDB: Write(10) 2a 00 00 0c 41 36 00 00 08 00
[  216.014527][    C1] sd 0:0:1:0: [sda] tag#9872 scsi host busy 6 failed 0
[  216.014596][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.014650][    C1] sd 0:0:1:0: [sda] tag#9872 sd_done: completed 4096 of 4096 bytes
[  216.014702][    C1] sd 0:0:1:0: [sda] tag#9872 8 sectors total, 4096 bytes done.
[  216.014873][    C1] sd 0:0:1:0: [sda] tag#9873 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.014925][    C1] sd 0:0:1:0: [sda] tag#9873 CDB: Write(10) 2a 00 00 0c 43 2e 00 00 08 00
[  216.014988][    C1] sd 0:0:1:0: [sda] tag#9873 scsi host busy 5 failed 0
[  216.015093][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.015145][    C1] sd 0:0:1:0: [sda] tag#9873 sd_done: completed 4096 of 4096 bytes
[  216.015202][    C1] sd 0:0:1:0: [sda] tag#9873 8 sectors total, 4096 bytes done.
[  216.015346][    C1] sd 0:0:1:0: [sda] tag#9874 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.015399][    C1] sd 0:0:1:0: [sda] tag#9874 CDB: Write(10) 2a 00 00 0c 61 26 00 00 10 00
[  216.015462][    C1] sd 0:0:1:0: [sda] tag#9874 scsi host busy 4 failed 0
[  216.015508][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.015558][    C1] sd 0:0:1:0: [sda] tag#9874 sd_done: completed 8192 of 8192 bytes
[  216.015609][    C1] sd 0:0:1:0: [sda] tag#9874 16 sectors total, 8192 bytes done.
[  216.024613][    C1] sd 0:0:1:0: [sda] tag#9876 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.024689][    C1] sd 0:0:1:0: [sda] tag#9876 CDB: Write(10) 2a 00 00 0b 71 36 00 00 10 00
[  216.024793][    C1] sd 0:0:1:0: [sda] tag#9876 scsi host busy 3 failed 0
[  216.024840][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.024890][    C1] sd 0:0:1:0: [sda] tag#9876 sd_done: completed 8192 of 8192 bytes
[  216.024939][    C1] sd 0:0:1:0: [sda] tag#9876 16 sectors total, 8192 bytes done.
[  216.034817][    C1] sd 0:0:1:0: [sda] tag#9871 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.034877][    C1] sd 0:0:1:0: [sda] tag#9871 CDB: Write(10) 2a 00 00 0c 31 36 00 00 18 00
[  216.034942][    C1] sd 0:0:1:0: [sda] tag#9871 scsi host busy 2 failed 0
[  216.034986][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.035036][    C1] sd 0:0:1:0: [sda] tag#9871 sd_done: completed 12288 of 12288 bytes
[  216.035083][    C1] sd 0:0:1:0: [sda] tag#9871 24 sectors total, 12288 bytes done.
[  216.035370][    C1] sd 0:0:1:0: [sda] tag#9875 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  216.035419][    C1] sd 0:0:1:0: [sda] tag#9875 CDB: Write(10) 2a 00 00 0c 11 36 00 00 18 00
[  216.035477][    C1] sd 0:0:1:0: [sda] tag#9875 scsi host busy 1 failed 0
[  216.035520][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  216.035567][    C1] sd 0:0:1:0: [sda] tag#9875 sd_done: completed 12288 of 12288 bytes
[  216.035614][    C1] sd 0:0:1:0: [sda] tag#9875 24 sectors total, 12288 bytes done.
[  216.585630][ T7156] dvmrp0: entered allmulticast mode
[  216.728328][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  216.728412][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  216.790478][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  216.790542][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  216.941681][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  216.941742][ T7160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'.
[  217.520663][ T7179] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  217.831030][ T5693] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  217.949969][ T7187] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  217.971960][ T7187] FAULT_INJECTION: forcing a failure.
[  217.971960][ T7187] name failslab, interval 1, probability 0, space 0, times 0
[  217.971991][ T7187] CPU: 1 UID: 0 PID: 7187 Comm: syz.4.326 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  217.972018][ T7187] Tainted: [Y]=FORCED_BIND
[  217.972025][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  217.972036][ T7187] Call Trace:
[  217.972042][ T7187]  <TASK>
[  217.972050][ T7187]  dump_stack_lvl+0xe8/0x150
[  217.972079][ T7187]  should_fail_ex+0x3eb/0x540
[  217.972110][ T7187]  should_failslab+0xa8/0x100
[  217.972133][ T7187]  ? security_file_alloc+0x34/0x310
[  217.972155][ T7187]  kmem_cache_alloc_noprof+0x9c/0x600
[  217.972181][ T7187]  ? rcu_is_watching+0x16/0xb0
[  217.972204][ T7187]  ? security_file_alloc+0x34/0x310
[  217.972230][ T7187]  security_file_alloc+0x34/0x310
[  217.972252][ T7187]  init_file+0x90/0x2b0
[  217.972284][ T7187]  alloc_empty_file+0x74/0x1d0
[  217.972308][ T7187]  path_openat+0x9d/0x1da0
[  217.972347][ T7187]  do_file_open+0x23e/0x4a0
[  217.972372][ T7187]  ? __pfx_do_file_open+0x10/0x10
[  217.972412][ T7187]  ? _raw_spin_unlock+0x28/0x50
[  217.972431][ T7187]  ? alloc_fd+0x6af/0x760
[  217.972468][ T7187]  do_sys_openat2+0x115/0x200
[  217.972495][ T7187]  ? __pfx_do_sys_openat2+0x10/0x10
[  217.972521][ T7187]  ? ksys_write+0x242/0x270
[  217.972542][ T7187]  ? __pfx_ksys_write+0x10/0x10
[  217.972564][ T7187]  __x64_sys_openat+0x138/0x170
[  217.972593][ T7187]  do_syscall_64+0x166/0x520
[  217.972609][ T7187]  ? trace_irq_disable+0x3b/0x140
[  217.972628][ T7187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.972646][ T7187]  ? clear_bhb_loop+0x70/0xc0
[  217.972667][ T7187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.972685][ T7187] RIP: 0033:0x7ff91739e159
[  217.972702][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  217.972715][ T7187] RSP: 002b:00007ff9181bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  217.972735][ T7187] RAX: ffffffffffffffda RBX: 00007ff917625fa0 RCX: 00007ff91739e159
[  217.972748][ T7187] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  217.972760][ T7187] RBP: 00007ff9181bb090 R08: 0000000000000000 R09: 0000000000000000
[  217.972770][ T7187] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  217.972781][ T7187] R13: 00007ff917626038 R14: 00007ff917625fa0 R15: 00007ffd58649f08
[  217.972809][ T7187]  </TASK>
[  218.338824][ T5693] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  218.371058][ T5693] usb 4-1: USB disconnect, device number 32
[  218.398454][ T5893] udevd[5893]: setting mode of /dev/bus/usb/004/032 to 020664 failed: No such file or directory
[  218.398572][ T5893] udevd[5893]: setting owner of /dev/bus/usb/004/032 to uid=0, gid=0 failed: No such file or directory
[  218.508581][ T7195] loop8: detected capacity change from 0 to 8
[  218.527101][ T7195] Dev loop8: unable to read RDB block 8
[  218.527143][ T7195]  loop8: unable to read partition table
[  218.527330][ T7195] loop8: partition table beyond EOD, truncated
[  218.527346][ T7195] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  218.569951][ T4928] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  218.646614][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.678831][ T7193] loop0: detected capacity change from 0 to 2049
[  218.855399][ T4941] sd 0:0:1:0: [sda] tag#9877 sd_setup_read_write_cmnd: block=1051174, count=24
[  218.855454][ T4941] sd 0:0:1:0: [sda] tag#9877 writing 24/24 512 byte blocks.
[  218.855501][ T4941] sd 0:0:1:0: [sda] tag#9877 Send: scmd 0xffff88802fcde210
[  218.855545][ T4941] sd 0:0:1:0: [sda] tag#9877 CDB: Write(10) 2a 00 00 10 0a 26 00 00 18 00
[  218.857333][    C1] sd 0:0:1:0: [sda] tag#9877 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  218.857386][    C1] sd 0:0:1:0: [sda] tag#9877 CDB: Write(10) 2a 00 00 10 0a 26 00 00 18 00
[  218.857451][    C1] sd 0:0:1:0: [sda] tag#9877 scsi host busy 1 failed 0
[  218.857497][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  218.857545][    C1] sd 0:0:1:0: [sda] tag#9877 sd_done: completed 12288 of 12288 bytes
[  218.857592][    C1] sd 0:0:1:0: [sda] tag#9877 24 sectors total, 12288 bytes done.
[  218.858061][ T2000] sd 0:0:1:0: [sda] tag#9878 Send: scmd 0xffff8880274c0110
[  218.858107][ T2000] sd 0:0:1:0: [sda] tag#9878 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  218.858211][    C1] sd 0:0:1:0: [sda] tag#9878 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  218.858258][    C1] sd 0:0:1:0: [sda] tag#9878 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  218.858316][    C1] sd 0:0:1:0: [sda] tag#9878 scsi host busy 1 failed 0
[  218.858355][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  218.858395][    C1] sd 0:0:1:0: [sda] tag#9878 sd_done: completed 0 of 0 bytes
[  218.858451][    C1] sd 0:0:1:0: [sda] tag#9878 0 sectors total, 0 bytes done.
[  218.858572][ T2000] sd 0:0:1:0: [sda] tag#9879 sd_setup_read_write_cmnd: block=1051198, count=8
[  218.858617][ T2000] sd 0:0:1:0: [sda] tag#9879 writing 8/8 512 byte blocks.
[  218.858662][ T2000] sd 0:0:1:0: [sda] tag#9879 Send: scmd 0xffff88802fcde5d0
[  218.858703][ T2000] sd 0:0:1:0: [sda] tag#9879 CDB: Write(10) 2a 00 00 10 0a 3e 00 00 08 00
[  218.883816][    C1] sd 0:0:1:0: [sda] tag#9879 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  218.883910][    C1] sd 0:0:1:0: [sda] tag#9879 CDB: Write(10) 2a 00 00 10 0a 3e 00 00 08 00
[  218.883979][    C1] sd 0:0:1:0: [sda] tag#9879 scsi host busy 1 failed 0
[  218.884030][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  218.884092][    C1] sd 0:0:1:0: [sda] tag#9879 sd_done: completed 4096 of 4096 bytes
[  218.884147][    C1] sd 0:0:1:0: [sda] tag#9879 8 sectors total, 4096 bytes done.
[  218.884989][ T2000] sd 0:0:1:0: [sda] tag#9880 Send: scmd 0xffff8880274c0110
[  218.885036][ T2000] sd 0:0:1:0: [sda] tag#9880 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  218.885152][    C1] sd 0:0:1:0: [sda] tag#9880 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  218.885200][    C1] sd 0:0:1:0: [sda] tag#9880 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  218.885261][    C1] sd 0:0:1:0: [sda] tag#9880 scsi host busy 1 failed 0
[  218.885305][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  218.885350][    C1] sd 0:0:1:0: [sda] tag#9880 sd_done: completed 0 of 0 bytes
[  218.885394][    C1] sd 0:0:1:0: [sda] tag#9880 0 sectors total, 0 bytes done.
[  219.244004][ T5714] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  219.402500][    C0] net_ratelimit: 9923 callbacks suppressed
[  219.402523][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  219.402784][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.403156][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.403376][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.403581][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  219.403751][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.404939][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.405249][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.405481][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  219.405689][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  219.470913][ T5714] usb 4-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[  219.589444][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.589492][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  219.589530][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.704206][ T5714] usb 4-1: config 0 descriptor??
[  219.725309][ T5714] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  219.840106][ T7206] FAULT_INJECTION: forcing a failure.
[  219.840106][ T7206] name failslab, interval 1, probability 0, space 0, times 0
[  219.840137][ T7206] CPU: 1 UID: 0 PID: 7206 Comm: syz.4.333 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  219.840162][ T7206] Tainted: [Y]=FORCED_BIND
[  219.840169][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  219.840180][ T7206] Call Trace:
[  219.840187][ T7206]  <TASK>
[  219.840195][ T7206]  dump_stack_lvl+0xe8/0x150
[  219.840228][ T7206]  should_fail_ex+0x3eb/0x540
[  219.840261][ T7206]  should_failslab+0xa8/0x100
[  219.840284][ T7206]  ? sk_prot_alloc+0x57/0x210
[  219.840311][ T7206]  kmem_cache_alloc_noprof+0x9c/0x600
[  219.840339][ T7206]  ? kmem_cache_alloc_noprof+0x31a/0x600
[  219.840364][ T7206]  ? make_kgid+0x1d1/0x6a0
[  219.840383][ T7206]  ? security_inode_alloc+0x39/0x310
[  219.840410][ T7206]  ? sk_prot_alloc+0x57/0x210
[  219.840440][ T7206]  sk_prot_alloc+0x57/0x210
[  219.840465][ T7206]  ? sk_alloc+0x27/0x390
[  219.840491][ T7206]  sk_alloc+0x3a/0x390
[  219.840520][ T7206]  smc_create+0xf2/0x260
[  219.840541][ T7206]  __sock_create+0x4b5/0xac0
[  219.840571][ T7206]  __sys_socket+0xd6/0x1b0
[  219.840597][ T7206]  __x64_sys_socket+0x7a/0x90
[  219.840621][ T7206]  do_syscall_64+0x166/0x520
[  219.840638][ T7206]  ? trace_irq_disable+0x3b/0x140
[  219.840659][ T7206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.840678][ T7206]  ? clear_bhb_loop+0x70/0xc0
[  219.840700][ T7206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.840718][ T7206] RIP: 0033:0x7ff91739e159
[  219.840735][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.840751][ T7206] RSP: 002b:00007ff9181bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  219.840780][ T7206] RAX: ffffffffffffffda RBX: 00007ff917625fa0 RCX: 00007ff91739e159
[  219.840794][ T7206] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b
[  219.840805][ T7206] RBP: 00007ff91743506b R08: 0000000000000000 R09: 0000000000000000
[  219.840817][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.840828][ T7206] R13: 00007ff917626038 R14: 00007ff917625fa0 R15: 00007ffd58649f08
[  219.840858][ T7206]  </TASK>
[  220.130825][ T5714] usb 4-1: USB disconnect, device number 33
[  220.178935][ T7206] overlay: ./file1/file2 is not a directory
[  220.217539][ T7206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  220.762568][ T5714] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  220.853016][ T5693] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  220.873256][   T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  220.924817][ T5714] usb 2-1: Using ep0 maxpacket: 32
[  220.927335][ T5714] usb 2-1: New USB device found: idVendor=05ac, idProduct=024d, bcdDevice=0.40
[  220.929496][ T5714] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.931671][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.931693][ T5714] usb 2-1: Product: syz
[  220.931706][ T5714] usb 2-1: Manufacturer: syz
[  220.931718][ T5714] usb 2-1: SerialNumber: syz
[  221.004046][ T5693] usb 1-1: Using ep0 maxpacket: 32
[  221.009268][ T5693] usb 1-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  221.027282][ T5693] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  221.027347][ T5693] usb 1-1: config 0 has no interface number 0
[  221.072563][   T27] usb 5-1: Using ep0 maxpacket: 32
[  221.101042][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.101114][ T5693] usb 1-1: Product: syz
[  221.101128][ T5693] usb 1-1: Manufacturer: syz
[  221.101139][ T5693] usb 1-1: SerialNumber: syz
[  221.129560][ T5693] usb 1-1: config 0 descriptor??
[  221.143031][   T27] usb 5-1: New USB device found: idVendor=05ac, idProduct=020f, bcdDevice=0.22
[  221.144400][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.144427][   T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.144446][   T27] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  221.147899][   T27] usb 5-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  221.147964][   T27] usb 5-1: Product: syz
[  221.147978][   T27] usb 5-1: Manufacturer: syz
[  221.147991][   T27] usb 5-1: SerialNumber: syz
[  221.233853][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.256434][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.272746][   T27] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input14
[  221.274458][ T7209] syzkaller1: entered promiscuous mode
[  221.274478][ T7209] syzkaller1: entered allmulticast mode
[  221.321411][ T5693] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  221.441016][ T7218] overlay: filesystem on ./file0 not supported as upperdir
[  221.463205][   T27] usb 5-1: USB disconnect, device number 7
[  221.619566][ T5693] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  221.675106][ T5714] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16
[  221.692326][ T5693] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  221.757003][ T4964] bcm5974 2-1:1.0: could not read from device
[  221.757619][   T27] appletouch 5-1:1.0: input: appletouch disconnected
[  221.791466][ T4964] bcm5974 2-1:1.0: could not read from device
[  221.840018][ T7212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.840510][ T7212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.864329][ T5714] usb 2-1: USB disconnect, device number 33
[  221.903598][ T7222] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  221.905516][ T7222] FAULT_INJECTION: forcing a failure.
[  221.905516][ T7222] name failslab, interval 1, probability 0, space 0, times 0
[  221.905544][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.3.338 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  221.905575][ T7222] Tainted: [Y]=FORCED_BIND
[  221.905582][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.905592][ T7222] Call Trace:
[  221.905599][ T7222]  <TASK>
[  221.905608][ T7222]  dump_stack_lvl+0xe8/0x150
[  221.905640][ T7222]  should_fail_ex+0x3eb/0x540
[  221.905670][ T7222]  should_failslab+0xa8/0x100
[  221.905695][ T7222]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  221.905725][ T7222]  ? __d_alloc+0x37/0x6f0
[  221.905742][ T7222]  ? __d_alloc+0x37/0x6f0
[  221.905767][ T7222]  __d_alloc+0x37/0x6f0
[  221.905791][ T7222]  d_alloc_parallel+0xde/0x16b0
[  221.905814][ T7222]  ? lock_acquire+0x115/0x350
[  221.905843][ T7222]  ? __d_lookup+0x66/0x790
[  221.905865][ T7222]  ? __d_lookup+0x66/0x790
[  221.905885][ T7222]  ? __pfx_d_alloc_parallel+0x10/0x10
[  221.905905][ T7222]  ? d_lookup+0x1f/0xa0
[  221.905927][ T7222]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  221.905954][ T7222]  lookup_open+0x2c7/0x1a40
[  221.906001][ T7222]  path_openat+0x673/0x1da0
[  221.906041][ T7222]  do_file_open+0x23e/0x4a0
[  221.906067][ T7222]  ? __pfx_do_file_open+0x10/0x10
[  221.906109][ T7222]  ? _raw_spin_unlock+0x28/0x50
[  221.906132][ T7222]  ? alloc_fd+0x6af/0x760
[  221.906168][ T7222]  do_sys_openat2+0x115/0x200
[  221.906196][ T7222]  ? __pfx_do_sys_openat2+0x10/0x10
[  221.906222][ T7222]  ? ksys_write+0x242/0x270
[  221.906243][ T7222]  ? __pfx_ksys_write+0x10/0x10
[  221.906266][ T7222]  __x64_sys_openat+0x138/0x170
[  221.906296][ T7222]  do_syscall_64+0x166/0x520
[  221.906312][ T7222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.906330][ T7222]  ? clear_bhb_loop+0x70/0xc0
[  221.906351][ T7222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.906369][ T7222] RIP: 0033:0x7f715ed9e159
[  221.906385][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.906400][ T7222] RSP: 002b:00007f715fc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  221.906419][ T7222] RAX: ffffffffffffffda RBX: 00007f715f025fa0 RCX: 00007f715ed9e159
[  221.906432][ T7222] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  221.906444][ T7222] RBP: 00007f715fc4a090 R08: 0000000000000000 R09: 0000000000000000
[  221.906455][ T7222] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  221.906465][ T7222] R13: 00007f715f026038 R14: 00007f715f025fa0 R15: 00007ffe4ff4d458
[  221.906495][ T7222]  </TASK>
[  221.947258][ T4964] bcm5974 2-1:1.0: could not read from device
[  222.403482][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  222.405262][   T27] usb 1-1: USB disconnect, device number 18
[  222.506770][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  222.563886][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  222.564598][   T27] quatech2 1-1:0.51: device disconnected
[  222.774543][ T7227] sd 0:0:1:0: [sg0] sg_open: flags=0x28201
[  222.774609][ T7227] sd 0:0:1:0: [sg0] sg_add_sfp: sfp=0xffff88802bc60000
[  222.774649][ T7227] sd 0:0:1:0: [sg0] sg_build_reserve: req_size=32768
[  222.774690][ T7227] sd 0:0:1:0: [sg0] sg_build_indirect: buff_size=32768, blk_size=32768
[  222.774770][ T7227] sd 0:0:1:0: [sg0] sg_build_indirect: k=0, num=32768, ret_sz=32768
[  222.774819][ T7227] sd 0:0:1:0: [sg0] sg_build_indirect: k_use_sg=1, rem_sz=0
[  222.774859][ T7227] sd 0:0:1:0: [sg0] sg_add_sfp: bufflen=32768, k_use_sg=1
[  222.803639][  T870] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  223.003571][  T870] usb 5-1: New USB device found: idVendor=0c70, idProduct=f001, bcdDevice=0.40
[  223.004589][  T870] usb 5-1: config 1 interface 0 has no altsetting 0
[  223.010694][  T870] usb 5-1: string descriptor 0 read error: -22
[  223.010820][  T870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.012789][ T5714] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  223.235442][ T5714] usb 4-1: Using ep0 maxpacket: 8
[  223.244313][ T5714] usb 4-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  223.246439][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.246483][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  223.246530][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  223.246552][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  223.246575][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  223.246596][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  223.246614][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  223.250866][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.250888][ T5714] usb 4-1: Product: syz
[  223.250901][ T5714] usb 4-1: Manufacturer: syz
[  223.250937][ T5714] usb 4-1: SerialNumber: syz
[  223.376824][ T5714] usb 4-1: config 0 descriptor??
[  223.389998][ T7227] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  223.405607][ T5714] ati_remote 4-1:0.0: Initializing ati_remote hardware failed.
[  223.405932][ T5714] ati_remote 4-1:0.0: probe with driver ati_remote failed with error -5
[  223.671101][ T7227] sd 0:0:1:0: [sg0] sg_ioctl: cmd=0x2285
[  223.671184][ T7227] sd 0:0:1:0: [sg0] sg_common_write:  scsi opcode=0x1e, cmd_size=6
[  223.671220][ T7227] sd 0:0:1:0: [sg0] sg_start_req: dxfer_len=51
[  223.671576][ T7227] sd 0:0:1:0: [sg0] sg_link_reserve: size=51
[  223.709501][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.712398][ T7227] sd 0:0:1:0: [sda] tag#9881 Send: scmd 0xffff88802fcde990
[  223.712627][ T7227] sd 0:0:1:0: [sda] tag#9881 CDB: Prevent/Allow Medium Removal 1e 12 65 00 a9 00
[  223.721316][    C1] sd 0:0:1:0: [sda] tag#9881 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  223.721377][    C1] sd 0:0:1:0: [sda] tag#9881 CDB: Prevent/Allow Medium Removal 1e 12 65 00 a9 00
[  223.721421][    C1] sd 0:0:1:0: [sda] tag#9881 Sense Key : Illegal Request [current] 
[  223.721466][    C1] sd 0:0:1:0: [sda] tag#9881 Add. Sense: Invalid command operation code
[  223.721521][    C1] sd 0:0:1:0: [sda] tag#9881 scsi host busy 1 failed 0
[  223.721558][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 402)
[  223.721597][    C1] sd 0:0:1:0: [sda] tag#9881 0 sectors total, 51 bytes done.
[  223.721647][    C1] sd 0:0:1:0: [sg0] sg_cmd_done: pack_id=3, res=0x402
[  223.828623][ T7227] sd 0:0:1:0: [sg0] sg_finish_rem_req: res_used=1
[  223.828703][ T7227] sd 0:0:1:0: [sg0] sg_unlink_reserve: req->k_use_sg=1
[  223.910664][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.995984][ T7234] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  224.121890][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.121928][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.121955][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.121979][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122004][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122028][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122053][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122078][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122102][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.122126][  T870] aquacomputer_d5next 0003:0C70:F001.000A: unknown main item tag 0x0
[  224.272609][ T5714] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  224.282248][  T870] aquacomputer_d5next 0003:0C70:F001.000A: hidraw0: USB HID vff.7f Device [HID 0c70:f001] on usb-dummy_hcd.4-1/input0
[  224.412695][    C0] net_ratelimit: 10560 callbacks suppressed
[  224.412714][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.414705][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.415077][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.415358][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.415807][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.416135][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  224.416430][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.416771][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.417139][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  224.417418][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  224.574122][ T5714] usb 2-1: New USB device found: idVendor=056a, idProduct=0034, bcdDevice=0.00
[  224.611855][ T5714] usb 2-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  224.611888][ T5714] usb 2-1: config 0 interface 0 has no altsetting 0
[  224.611919][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.660564][ T5714] usb 2-1: config 0 descriptor??
[  224.682763][ T5714] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  224.704514][  T870] usb 5-1: USB disconnect, device number 8
[  224.813156][ T7243] fido_id[7243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  225.015958][  T870] usb 4-1: USB disconnect, device number 34
[  225.051970][ T7226] sd 0:0:1:0: [sg0] sg_release
[  225.052070][ T5714] sd 0:0:1:0: [sg0] sg_remove_sfp:    bufflen=32768, k_use_sg=1
[  225.052106][ T5714] sd 0:0:1:0: [sg0] sg_remove_scat: k_use_sg=1
[  225.052140][ T5714] sd 0:0:1:0: [sg0] sg_remove_scat: k=0, pg=0xffffea0001491e00
[  225.052214][ T5714] sd 0:0:1:0: [sg0] sg_remove_sfp: sfp=0xffff88802bc60000
[  225.052848][ T4941] sd 0:0:1:0: [sda] tag#9882 sd_setup_read_write_cmnd: block=1051206, count=24
[  225.052898][ T4941] sd 0:0:1:0: [sda] tag#9882 writing 24/24 512 byte blocks.
[  225.052945][ T4941] sd 0:0:1:0: [sda] tag#9882 Send: scmd 0xffff88802fcded50
[  225.052988][ T4941] sd 0:0:1:0: [sda] tag#9882 CDB: Write(10) 2a 00 00 10 0a 46 00 00 18 00
[  225.058821][    C1] sd 0:0:1:0: [sda] tag#9882 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  225.058875][    C1] sd 0:0:1:0: [sda] tag#9882 CDB: Write(10) 2a 00 00 10 0a 46 00 00 18 00
[  225.058936][    C1] sd 0:0:1:0: [sda] tag#9882 scsi host busy 1 failed 0
[  225.058978][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  225.059024][    C1] sd 0:0:1:0: [sda] tag#9882 sd_done: completed 12288 of 12288 bytes
[  225.059067][    C1] sd 0:0:1:0: [sda] tag#9882 24 sectors total, 12288 bytes done.
[  225.059542][ T2000] sd 0:0:1:0: [sda] tag#9883 Send: scmd 0xffff8880274c0110
[  225.059588][ T2000] sd 0:0:1:0: [sda] tag#9883 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  225.059718][    C1] sd 0:0:1:0: [sda] tag#9883 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  225.059779][    C1] sd 0:0:1:0: [sda] tag#9883 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  225.059842][    C1] sd 0:0:1:0: [sda] tag#9883 scsi host busy 1 failed 0
[  225.059887][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  225.059935][    C1] sd 0:0:1:0: [sda] tag#9883 sd_done: completed 0 of 0 bytes
[  225.059983][    C1] sd 0:0:1:0: [sda] tag#9883 0 sectors total, 0 bytes done.
[  225.060129][ T2000] sd 0:0:1:0: [sda] tag#9884 sd_setup_read_write_cmnd: block=1051230, count=8
[  225.060183][ T2000] sd 0:0:1:0: [sda] tag#9884 writing 8/8 512 byte blocks.
[  225.060227][ T2000] sd 0:0:1:0: [sda] tag#9884 Send: scmd 0xffff88802fcdf110
[  225.060284][ T2000] sd 0:0:1:0: [sda] tag#9884 CDB: Write(10) 2a 00 00 10 0a 5e 00 00 08 00
[  225.093133][    C1] sd 0:0:1:0: [sda] tag#9884 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  225.093198][    C1] sd 0:0:1:0: [sda] tag#9884 CDB: Write(10) 2a 00 00 10 0a 5e 00 00 08 00
[  225.093268][    C1] sd 0:0:1:0: [sda] tag#9884 scsi host busy 1 failed 0
[  225.093319][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  225.093374][    C1] sd 0:0:1:0: [sda] tag#9884 sd_done: completed 4096 of 4096 bytes
[  225.093426][    C1] sd 0:0:1:0: [sda] tag#9884 8 sectors total, 4096 bytes done.
[  225.093618][ T2000] sd 0:0:1:0: [sda] tag#9885 Send: scmd 0xffff8880274c0110
[  225.093664][ T2000] sd 0:0:1:0: [sda] tag#9885 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  225.093840][    C1] sd 0:0:1:0: [sda] tag#9885 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  225.093912][    C1] sd 0:0:1:0: [sda] tag#9885 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  225.094010][    C1] sd 0:0:1:0: [sda] tag#9885 scsi host busy 1 failed 0
[  225.094075][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  225.094144][    C1] sd 0:0:1:0: [sda] tag#9885 sd_done: completed 0 of 0 bytes
[  225.094212][    C1] sd 0:0:1:0: [sda] tag#9885 0 sectors total, 0 bytes done.
[  225.712578][ T5714] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  225.843924][ T5714] usb 5-1: device descriptor read/64, error -71
[  226.097288][ T5714] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  226.134899][  T101] sd 0:0:1:0: [sda] tag#9886 sd_setup_read_write_cmnd: block=794934, count=88
[  226.134957][  T101] sd 0:0:1:0: [sda] tag#9886 writing 88/88 512 byte blocks.
[  226.135004][  T101] sd 0:0:1:0: [sda] tag#9886 Send: scmd 0xffff88802fcdf4d0
[  226.135048][  T101] sd 0:0:1:0: [sda] tag#9886 CDB: Write(10) 2a 00 00 0c 21 36 00 00 58 00
[  226.177780][    C1] sd 0:0:1:0: [sda] tag#9886 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  226.177830][    C1] sd 0:0:1:0: [sda] tag#9886 CDB: Write(10) 2a 00 00 0c 21 36 00 00 58 00
[  226.177895][    C1] sd 0:0:1:0: [sda] tag#9886 scsi host busy 1 failed 0
[  226.177932][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  226.177971][    C1] sd 0:0:1:0: [sda] tag#9886 sd_done: completed 45056 of 45056 bytes
[  226.178011][    C1] sd 0:0:1:0: [sda] tag#9886 88 sectors total, 45056 bytes done.
[  226.302583][ T5714] usb 5-1: device descriptor read/64, error -71
[  226.418236][ T5714] usb usb5-port1: attempt power cycle
[  226.762737][ T5714] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  226.793733][ T5714] usb 5-1: device descriptor read/8, error -71
[  226.883183][ T7266] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  226.884992][ T7266] FAULT_INJECTION: forcing a failure.
[  226.884992][ T7266] name failslab, interval 1, probability 0, space 0, times 0
[  226.885020][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.0.348 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  226.885043][ T7266] Tainted: [Y]=FORCED_BIND
[  226.885049][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  226.885058][ T7266] Call Trace:
[  226.885066][ T7266]  <TASK>
[  226.885073][ T7266]  dump_stack_lvl+0xe8/0x150
[  226.885102][ T7266]  should_fail_ex+0x3eb/0x540
[  226.885133][ T7266]  should_failslab+0xa8/0x100
[  226.885159][ T7266]  __kmalloc_noprof+0xf9/0x710
[  226.885176][ T7266]  ? rcu_is_watching+0x16/0xb0
[  226.885199][ T7266]  ? tomoyo_realpath_from_path+0xef/0x640
[  226.885216][ T7266]  ? tomoyo_realpath_from_path+0xef/0x640
[  226.885240][ T7266]  tomoyo_realpath_from_path+0xef/0x640
[  226.885267][ T7266]  ? tomoyo_path_number_perm+0x219/0x5f0
[  226.885291][ T7266]  tomoyo_path_number_perm+0x246/0x5f0
[  226.885317][ T7266]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  226.885345][ T7266]  ? rcu_is_watching+0x16/0xb0
[  226.885400][ T7266]  ? __pfx_current_check_access_path+0x10/0x10
[  226.885437][ T7266]  tomoyo_path_mknod+0x14a/0x1a0
[  226.885457][ T7266]  ? __d_lookup+0x66/0x790
[  226.885478][ T7266]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  226.885498][ T7266]  ? d_lookup+0x1f/0xa0
[  226.885524][ T7266]  security_path_mknod+0x176/0x370
[  226.885546][ T7266]  lookup_open+0x626/0x1a40
[  226.885603][ T7266]  path_openat+0x673/0x1da0
[  226.885643][ T7266]  do_file_open+0x23e/0x4a0
[  226.885670][ T7266]  ? __pfx_do_file_open+0x10/0x10
[  226.885712][ T7266]  ? _raw_spin_unlock+0x28/0x50
[  226.885736][ T7266]  ? alloc_fd+0x6af/0x760
[  226.885776][ T7266]  do_sys_openat2+0x115/0x200
[  226.885804][ T7266]  ? __pfx_do_sys_openat2+0x10/0x10
[  226.885830][ T7266]  ? ksys_write+0x242/0x270
[  226.885851][ T7266]  ? __pfx_ksys_write+0x10/0x10
[  226.885874][ T7266]  __x64_sys_openat+0x138/0x170
[  226.885904][ T7266]  do_syscall_64+0x166/0x520
[  226.885920][ T7266]  ? trace_irq_disable+0x3b/0x140
[  226.885940][ T7266]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.885958][ T7266]  ? clear_bhb_loop+0x70/0xc0
[  226.885980][ T7266]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  226.885997][ T7266] RIP: 0033:0x7f63d4b9e159
[  226.886014][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  226.886028][ T7266] RSP: 002b:00007f63d59a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  226.886047][ T7266] RAX: ffffffffffffffda RBX: 00007f63d4e25fa0 RCX: 00007f63d4b9e159
[  226.886059][ T7266] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  226.886071][ T7266] RBP: 00007f63d59a3090 R08: 0000000000000000 R09: 0000000000000000
[  226.886083][ T7266] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  226.886093][ T7266] R13: 00007f63d4e26038 R14: 00007f63d4e25fa0 R15: 00007fff55a3bb38
[  226.886123][ T7266]  </TASK>
[  226.886208][ T7266] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.079234][ T5693] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  227.146007][ T5714] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  227.157515][   T10] usb 2-1: USB disconnect, device number 34
[  227.287102][ T5714] usb 5-1: device descriptor read/8, error -71
[  227.395376][ T5714] usb usb5-port1: unable to enumerate USB device
[  227.433269][ T5693] usb 4-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  227.437550][ T5693] usb 4-1: config 150 has an invalid interface number: 204 but max is 2
[  227.437575][ T5693] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  227.437593][ T5693] usb 4-1: config 150 has no interface number 0
[  227.437638][ T5693] usb 4-1: config 150 interface 204 has no altsetting 0
[  227.487439][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.487464][ T5693] usb 4-1: Product: syz
[  227.487477][ T5693] usb 4-1: Manufacturer: syz
[  227.487490][ T5693] usb 4-1: SerialNumber: syz
[  227.662750][  T870] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  227.813547][  T870] usb 1-1: Using ep0 maxpacket: 16
[  227.814278][  T870] usb 1-1: New USB device found: idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  227.819133][  T870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.819156][  T870] usb 1-1: Product: syz
[  227.819168][  T870] usb 1-1: Manufacturer: syz
[  227.819264][  T870] usb 1-1: SerialNumber: syz
[  227.828427][  T870] usb 1-1: config 0 descriptor??
[  228.284492][  T870] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  228.301125][  T870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  228.313532][  T870] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  228.313595][  T870] usb 1-1: media controller created
[  228.344493][ T7274] netlink: 'syz.4.352': attribute type 10 has an invalid length.
[  228.344513][ T7274] __nla_validate_parse: 7 callbacks suppressed
[  228.344523][ T7274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.352'.
[  228.344717][ T7274] dummy0: entered promiscuous mode
[  228.344733][ T7274] dummy0: entered allmulticast mode
[  228.397517][ T7274] bridge0: port 3(dummy0) entered blocking state
[  228.397661][ T7274] bridge0: port 3(dummy0) entered disabled state
[  228.427086][ T7274] bridge0: port 3(dummy0) entered blocking state
[  228.427205][ T7274] bridge0: port 3(dummy0) entered forwarding state
[  228.449627][  T870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  228.519392][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.519901][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.554919][  T870] zl10353_read_register: readreg error (reg=127, ret==0)
[  228.555001][  T870] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  228.555013][  T870] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  228.757203][   T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  229.140884][   T10] usb 2-1: Using ep0 maxpacket: 16
[  229.176062][   T10] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=f.89
[  229.250891][   T10] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  229.250917][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  229.344979][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  229.345003][   T10] usb 2-1: SerialNumber: syz
[  229.422642][    C0] net_ratelimit: 10542 callbacks suppressed
[  229.422663][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.423117][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.423599][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.423907][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.424254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  229.424644][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.425023][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.426156][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  229.427352][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:1e:c8:71:9c:4a:48, vlan:0)
[  229.427692][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  229.430706][   T10] usb 2-1: 0:2 : does not exist
[  229.751209][ T5693] xr_serial 4-1:150.204: skipping garbage
[  229.763295][ T5693] xr_serial 4-1:150.204: xr_serial converter detected
[  229.779954][ T5693] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  229.780011][ T5693] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  229.812006][ T5693] usb 4-1: USB disconnect, device number 35
[  229.847620][ T5693] xr_serial 4-1:150.204: device disconnected
[  230.120156][   T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  230.243382][  T870] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  230.268174][ T7296] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  230.269952][ T7296] FAULT_INJECTION: forcing a failure.
[  230.269952][ T7296] name failslab, interval 1, probability 0, space 0, times 0
[  230.269979][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.3.358 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  230.270002][ T7296] Tainted: [Y]=FORCED_BIND
[  230.270009][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  230.270019][ T7296] Call Trace:
[  230.270026][ T7296]  <TASK>
[  230.270034][ T7296]  dump_stack_lvl+0xe8/0x150
[  230.270063][ T7296]  should_fail_ex+0x3eb/0x540
[  230.270094][ T7296]  should_failslab+0xa8/0x100
[  230.270119][ T7296]  __kmalloc_noprof+0xf9/0x710
[  230.270138][ T7296]  ? tomoyo_encode+0x2ad/0x570
[  230.270153][ T7296]  ? tomoyo_encode+0x2ad/0x570
[  230.270176][ T7296]  tomoyo_encode+0x2ad/0x570
[  230.270199][ T7296]  tomoyo_realpath_from_path+0x5fa/0x640
[  230.270234][ T7296]  ? tomoyo_path_number_perm+0x219/0x5f0
[  230.270258][ T7296]  tomoyo_path_number_perm+0x246/0x5f0
[  230.270283][ T7296]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  230.270310][ T7296]  ? rcu_is_watching+0x16/0xb0
[  230.270367][ T7296]  ? __pfx_current_check_access_path+0x10/0x10
[  230.270403][ T7296]  tomoyo_path_mknod+0x14a/0x1a0
[  230.270423][ T7296]  ? __d_lookup+0x66/0x790
[  230.270444][ T7296]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  230.270464][ T7296]  ? d_lookup+0x1f/0xa0
[  230.270491][ T7296]  security_path_mknod+0x176/0x370
[  230.270513][ T7296]  lookup_open+0x626/0x1a40
[  230.270562][ T7296]  path_openat+0x673/0x1da0
[  230.270603][ T7296]  do_file_open+0x23e/0x4a0
[  230.270629][ T7296]  ? __pfx_do_file_open+0x10/0x10
[  230.270672][ T7296]  ? _raw_spin_unlock+0x28/0x50
[  230.270695][ T7296]  ? alloc_fd+0x6af/0x760
[  230.270731][ T7296]  do_sys_openat2+0x115/0x200
[  230.270759][ T7296]  ? __pfx_do_sys_openat2+0x10/0x10
[  230.270788][ T7296]  ? ksys_write+0x242/0x270
[  230.270810][ T7296]  ? __pfx_ksys_write+0x10/0x10
[  230.270833][ T7296]  __x64_sys_openat+0x138/0x170
[  230.270863][ T7296]  do_syscall_64+0x166/0x520
[  230.270880][ T7296]  ? trace_irq_disable+0x3b/0x140
[  230.270900][ T7296]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.270918][ T7296]  ? clear_bhb_loop+0x70/0xc0
[  230.270939][ T7296]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.270957][ T7296] RIP: 0033:0x7f715ed9e159
[  230.270974][ T7296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  230.270988][ T7296] RSP: 002b:00007f715fc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  230.271008][ T7296] RAX: ffffffffffffffda RBX: 00007f715f025fa0 RCX: 00007f715ed9e159
[  230.271020][ T7296] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  230.271032][ T7296] RBP: 00007f715fc4a090 R08: 0000000000000000 R09: 0000000000000000
[  230.271044][ T7296] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  230.271054][ T7296] R13: 00007f715f026038 R14: 00007f715f025fa0 R15: 00007ffe4ff4d458
[  230.271085][ T7296]  </TASK>
[  230.271180][ T7296] ERROR: Out of memory at tomoyo_realpath_from_path.
[  230.518359][  T870] usb 5-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00
[  230.541943][  T870] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  230.541989][  T870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.867931][ T4941] sd 0:0:1:0: [sda] tag#9887 sd_setup_read_write_cmnd: block=1051238, count=24
[  230.867985][ T4941] sd 0:0:1:0: [sda] tag#9887 writing 24/24 512 byte blocks.
[  230.868058][ T4941] sd 0:0:1:0: [sda] tag#9887 Send: scmd 0xffff88802fcdf890
[  230.868103][ T4941] sd 0:0:1:0: [sda] tag#9887 CDB: Write(10) 2a 00 00 10 0a 66 00 00 18 00
[  230.869745][    C1] sd 0:0:1:0: [sda] tag#9887 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  230.869807][    C1] sd 0:0:1:0: [sda] tag#9887 CDB: Write(10) 2a 00 00 10 0a 66 00 00 18 00
[  230.869875][    C1] sd 0:0:1:0: [sda] tag#9887 scsi host busy 1 failed 0
[  230.869925][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  230.869979][    C1] sd 0:0:1:0: [sda] tag#9887 sd_done: completed 12288 of 12288 bytes
[  230.870033][    C1] sd 0:0:1:0: [sda] tag#9887 24 sectors total, 12288 bytes done.
[  230.870591][ T2000] sd 0:0:1:0: [sda] tag#9888 Send: scmd 0xffff8880274c0110
[  230.870645][ T2000] sd 0:0:1:0: [sda] tag#9888 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  230.870754][    C1] sd 0:0:1:0: [sda] tag#9888 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  230.870805][    C1] sd 0:0:1:0: [sda] tag#9888 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  230.870868][    C1] sd 0:0:1:0: [sda] tag#9888 scsi host busy 1 failed 0
[  230.870913][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  230.870961][    C1] sd 0:0:1:0: [sda] tag#9888 sd_done: completed 0 of 0 bytes
[  230.871008][    C1] sd 0:0:1:0: [sda] tag#9888 0 sectors total, 0 bytes done.
[  230.871158][ T2000] sd 0:0:1:0: [sda] tag#9889 sd_setup_read_write_cmnd: block=1051262, count=8
[  230.871213][ T2000] sd 0:0:1:0: [sda] tag#9889 writing 8/8 512 byte blocks.
[  230.871257][ T2000] sd 0:0:1:0: [sda] tag#9889 Send: scmd 0xffff88802fcdfc50
[  230.871298][ T2000] sd 0:0:1:0: [sda] tag#9889 CDB: Write(10) 2a 00 00 10 0a 7e 00 00 08 00
[  230.872564][    C1] sd 0:0:1:0: [sda] tag#9889 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  230.872616][    C1] sd 0:0:1:0: [sda] tag#9889 CDB: Write(10) 2a 00 00 10 0a 7e 00 00 08 00
[  230.872687][    C1] sd 0:0:1:0: [sda] tag#9889 scsi host busy 1 failed 0
[  230.872731][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  230.872777][    C1] sd 0:0:1:0: [sda] tag#9889 sd_done: completed 4096 of 4096 bytes
[  230.872825][    C1] sd 0:0:1:0: [sda] tag#9889 8 sectors total, 4096 bytes done.
[  230.873392][ T2000] sd 0:0:1:0: [sda] tag#9890 Send: scmd 0xffff8880274c0110
[  230.873438][ T2000] sd 0:0:1:0: [sda] tag#9890 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  230.873552][    C1] sd 0:0:1:0: [sda] tag#9890 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  230.873608][    C1] sd 0:0:1:0: [sda] tag#9890 CDB: Synchronize Cache(10) 35 00 00 00 00 00 00 00 00 00
[  230.873664][    C1] sd 0:0:1:0: [sda] tag#9890 scsi host busy 1 failed 0
[  230.873701][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  230.873743][    C1] sd 0:0:1:0: [sda] tag#9890 sd_done: completed 0 of 0 bytes
[  230.873783][    C1] sd 0:0:1:0: [sda] tag#9890 0 sectors total, 0 bytes done.
[  230.887769][   T10] usb 2-1: 5:0: failed to get current value for ch 2 (-22)
[  231.225068][ T1178] sd 0:0:1:0: [sda] tag#9891 sd_setup_read_write_cmnd: block=864254, count=312
[  231.225149][ T1178] sd 0:0:1:0: [sda] tag#9891 writing 312/312 512 byte blocks.
[  231.225219][ T1178] sd 0:0:1:0: [sda] tag#9891 Send: scmd 0xffff88802fce0110
[  231.225280][ T1178] sd 0:0:1:0: [sda] tag#9891 CDB: Write(10) 2a 00 00 0d 2f fe 00 01 38 00
[  231.241943][ T1178] sd 0:0:1:0: [sda] tag#9892 sd_setup_read_write_cmnd: block=819510, count=8
[  231.242000][ T1178] sd 0:0:1:0: [sda] tag#9892 writing 8/8 512 byte blocks.
[  231.242052][ T1178] sd 0:0:1:0: [sda] tag#9892 Send: scmd 0xffff88802fce04d0
[  231.242100][ T1178] sd 0:0:1:0: [sda] tag#9892 CDB: Write(10) 2a 00 00 0c 81 36 00 00 08 00
[  231.242175][ T1178] sd 0:0:1:0: [sda] tag#9893 sd_setup_read_write_cmnd: block=820014, count=8
[  231.242223][ T1178] sd 0:0:1:0: [sda] tag#9893 writing 8/8 512 byte blocks.
[  231.242277][ T1178] sd 0:0:1:0: [sda] tag#9893 Send: scmd 0xffff88802fce0890
[  231.242322][ T1178] sd 0:0:1:0: [sda] tag#9893 CDB: Write(10) 2a 00 00 0c 83 2e 00 00 08 00
[  231.251592][    C1] sd 0:0:1:0: [sda] tag#9891 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  231.251659][    C1] sd 0:0:1:0: [sda] tag#9891 CDB: Write(10) 2a 00 00 0d 2f fe 00 01 38 00
[  231.251718][    C1] sd 0:0:1:0: [sda] tag#9891 scsi host busy 3 failed 0
[  231.251799][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  231.251846][    C1] sd 0:0:1:0: [sda] tag#9891 sd_done: completed 159744 of 159744 bytes
[  231.251889][    C1] sd 0:0:1:0: [sda] tag#9891 312 sectors total, 159744 bytes done.
[  231.260166][    C1] sd 0:0:1:0: [sda] tag#9892 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  231.260222][    C1] sd 0:0:1:0: [sda] tag#9892 CDB: Write(10) 2a 00 00 0c 81 36 00 00 08 00
[  231.260285][    C1] sd 0:0:1:0: [sda] tag#9892 scsi host busy 2 failed 0
[  231.260328][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  231.260375][    C1] sd 0:0:1:0: [sda] tag#9892 sd_done: completed 4096 of 4096 bytes
[  231.260421][    C1] sd 0:0:1:0: [sda] tag#9892 8 sectors total, 4096 bytes done.
[  231.260568][    C1] sd 0:0:1:0: [sda] tag#9893 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  231.260633][    C1] sd 0:0:1:0: [sda] tag#9893 CDB: Write(10) 2a 00 00 0c 83 2e 00 00 08 00
[  231.260691][    C1] sd 0:0:1:0: [sda] tag#9893 scsi host busy 1 failed 0
[  231.260732][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  231.260775][    C1] sd 0:0:1:0: [sda] tag#9893 sd_done: completed 4096 of 4096 bytes
[  231.260829][    C1] sd 0:0:1:0: [sda] tag#9893 8 sectors total, 4096 bytes done.
[  231.261754][ T1178] sd 0:0:1:0: [sda] tag#9894 sd_setup_read_write_cmnd: block=827502, count=200
[  231.261807][ T1178] sd 0:0:1:0: [sda] tag#9894 writing 200/200 512 byte blocks.
[  231.261859][ T1178] sd 0:0:1:0: [sda] tag#9894 Send: scmd 0xffff88802fce0c50
[  231.261906][ T1178] sd 0:0:1:0: [sda] tag#9894 CDB: Write(10) 2a 00 00 0c a0 6e 00 00 c8 00
[  231.317106][    C1] sd 0:0:1:0: [sda] tag#9894 Done: SUCCESS Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[  231.317177][    C1] sd 0:0:1:0: [sda] tag#9894 CDB: Write(10) 2a 00 00 0c a0 6e 00 00 c8 00
[  231.317248][    C1] sd 0:0:1:0: [sda] tag#9894 scsi host busy 1 failed 0
[  231.317297][    C1] sd 0:0:1:0: Notifying upper driver of completion (result 0)
[  231.317350][    C1] sd 0:0:1:0: [sda] tag#9894 sd_done: completed 102400 of 102400 bytes
[  231.317402][    C1] sd 0:0:1:0: [sda] tag#9894 200 sectors total, 102400 bytes done.
[  231.479415][   T10] usb 2-1: 5:0: failed to get current value for ch 3 (-22)
[  231.618539][  T870] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0
[  231.660818][ T7292] ==================================================================
[  231.660834][ T7292] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0
[  231.660859][ T7292] Read of size 1 at addr ffff8880256af180 by task syz.4.357/7292
[  231.660876][ T7292] 
[  231.660887][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.4.357 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  231.660911][ T7292] Tainted: [Y]=FORCED_BIND
[  231.660917][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  231.660928][ T7292] Call Trace:
[  231.660935][ T7292]  <TASK>
[  231.660942][ T7292]  dump_stack_lvl+0xe8/0x150
[  231.660964][ T7292]  print_address_description+0x55/0x1e0
[  231.660988][ T7292]  ? string+0x216/0x2d0
[  231.661006][ T7292]  print_report+0x58/0x70
[  231.661027][ T7292]  kasan_report+0x117/0x150
[  231.661049][ T7292]  ? string+0x216/0x2d0
[  231.661108][ T7292]  string+0x216/0x2d0
[  231.661131][ T7292]  vsnprintf+0x74a/0xef0
[  231.661151][ T7292]  vprintk_store+0x3be/0xd90
[  231.661176][ T7292]  ? __pfx_vprintk_store+0x10/0x10
[  231.661198][ T7292]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  231.661224][ T7292]  ? __mutex_trylock_common+0x15f/0x270
[  231.661248][ T7292]  ? panic_on_this_cpu+0x32/0x40
[  231.661274][ T7292]  vprintk_emit+0x192/0x560
[  231.661296][ T7292]  ? __pfx_vprintk_emit+0x10/0x10
[  231.661319][ T7292]  _printk+0xdd/0x130
[  231.661339][ T7292]  ? __pfx__printk+0x10/0x10
[  231.661357][ T7292]  ? rcu_is_watching+0x16/0xb0
[  231.661381][ T7292]  __setup_irq+0x1015/0x2100
[  231.661405][ T7292]  request_threaded_irq+0x2c1/0x3a0
[  231.661423][ T7292]  ? __pfx_pcl818_interrupt+0x10/0x10
[  231.661448][ T7292]  pcl818_attach+0x261/0x1710
[  231.661472][ T7292]  ? __raw_spin_lock_init+0x45/0x100
[  231.661497][ T7292]  comedi_device_attach+0x52d/0x720
[  231.661520][ T7292]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  231.661542][ T7292]  ? kasan_quarantine_put+0xbb/0x1f0
[  231.661560][ T7292]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  231.661583][ T7292]  ? do_vfs_ioctl+0x116f/0x1530
[  231.661604][ T7292]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  231.661630][ T7292]  ? do_futex+0x3e7/0x4e0
[  231.661659][ T7292]  ? __fget_files+0x2a/0x420
[  231.661677][ T7292]  ? __fget_files+0x2a/0x420
[  231.661693][ T7292]  ? __fget_files+0x2a/0x420
[  231.661710][ T7292]  ? bpf_lsm_file_ioctl+0x9/0x20
[  231.661730][ T7292]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  231.661747][ T7292]  __se_sys_ioctl+0xfc/0x170
[  231.661768][ T7292]  do_syscall_64+0x166/0x520
[  231.661783][ T7292]  ? trace_irq_disable+0x3b/0x140
[  231.661803][ T7292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.661820][ T7292]  ? clear_bhb_loop+0x70/0xc0
[  231.661839][ T7292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  231.661856][ T7292] RIP: 0033:0x7ff91739e159
[  231.661871][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  231.661885][ T7292] RSP: 002b:00007ff9181bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  231.661904][ T7292] RAX: ffffffffffffffda RBX: 00007ff917625fa0 RCX: 00007ff91739e159
[  231.661916][ T7292] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006
[  231.661928][ T7292] RBP: 00007ff91743506b R08: 0000000000000000 R09: 0000000000000000
[  231.661938][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  231.661948][ T7292] R13: 00007ff917626038 R14: 00007ff917625fa0 R15: 00007ffd58649f08
[  231.661968][ T7292]  </TASK>
[  231.661974][ T7292] 
[  231.661978][ T7292] Allocated by task 5693:
[  231.661987][ T7292]  kasan_save_track+0x3e/0x80
[  231.662004][ T7292]  __kasan_kmalloc+0x93/0xb0
[  231.662021][ T7292]  __kmalloc_node_track_caller_noprof+0x4af/0x720
[  231.662038][ T7292]  kstrdup+0x42/0x100
[  231.662051][ T7292]  __kernfs_new_node+0xa9/0x980
[  231.662077][ T7292]  kernfs_create_dir_ns+0xf7/0x220
[  231.662096][ T7292]  sysfs_create_dir_ns+0x12f/0x2a0
[  231.662112][ T7292]  kobject_add_internal+0x622/0xcd0
[  231.662130][ T7292]  kobject_add+0x163/0x240
[  231.662145][ T7292]  device_add+0x3fa/0xb80
[  231.662163][ T7292]  device_create+0x269/0x300
[  231.662181][ T7292]  sound_insert_unit+0x6af/0x700
[  231.662202][ T7292]  register_sound_special_device+0x265/0x480
[  231.662225][ T7292]  snd_register_oss_device+0x354/0x4d0
[  231.662242][ T7292]  snd_mixer_oss_notify_handler+0x19d/0x1050
[  231.662263][ T7292]  snd_card_register+0x589/0x720
[  231.662278][ T7292]  try_to_register_card+0x662/0x820
[  231.662300][ T7292]  usb_audio_probe+0x1cb9/0x2240
[  231.662319][ T7292]  usb_probe_interface+0x788/0xe50
[  231.662336][ T7292]  really_probe+0x254/0xae0
[  231.662356][ T7292]  __driver_probe_device+0x1e8/0x360
[  231.662375][ T7292]  driver_probe_device+0x4f/0x240
[  231.662395][ T7292]  __device_attach_driver+0x270/0x410
[  231.662413][ T7292]  bus_for_each_drv+0x258/0x2f0
[  231.662425][ T7292]  __device_attach+0x2c4/0x450
[  231.662440][ T7292]  device_initial_probe+0xa1/0xd0
[  231.662456][ T7292]  bus_probe_device+0x12a/0x220
[  231.662471][ T7292]  device_add+0x7d7/0xb80
[  231.662486][ T7292]  usb_set_configuration+0x1ad8/0x2180
[  231.662502][ T7292]  usb_generic_driver_probe+0x8d/0x150
[  231.662517][ T7292]  usb_probe_device+0x1c3/0x3b0
[  231.662533][ T7292]  really_probe+0x254/0xae0
[  231.662552][ T7292]  __driver_probe_device+0x1e8/0x360
[  231.662570][ T7292]  driver_probe_device+0x4f/0x240
[  231.662590][ T7292]  __device_attach_driver+0x270/0x410
[  231.662610][ T7292]  bus_for_each_drv+0x258/0x2f0
[  231.662624][ T7292]  __device_attach+0x2c4/0x450
[  231.662642][ T7292]  device_initial_probe+0xa1/0xd0
[  231.662661][ T7292]  bus_probe_device+0x12a/0x220
[  231.662675][ T7292]  device_add+0x7d7/0xb80
[  231.662691][ T7292]  usb_new_device+0x9aa/0x1690
[  231.662712][ T7292]  hub_event+0x28e8/0x4d30
[  231.662727][ T7292]  process_scheduled_works+0xc3d/0x1630
[  231.662747][ T7292]  worker_thread+0xa47/0xfb0
[  231.662766][ T7292]  kthread+0x38b/0x480
[  231.662780][ T7292]  ret_from_fork+0x514/0xb70
[  231.662800][ T7292]  ret_from_fork_asm+0x1a/0x30
[  231.662820][ T7292] 
[  231.662824][ T7292] Freed by task 7190:
[  231.662832][ T7292]  kasan_save_track+0x3e/0x80
[  231.662849][ T7292]  kasan_save_free_info+0x40/0x50
[  231.662870][ T7292]  __kasan_slab_free+0x5c/0x80
[  231.662887][ T7292]  kfree+0x1c5/0x650
[  231.662907][ T7292]  kernfs_free_rcu+0x3b/0xd0
[  231.662925][ T7292]  rcu_core+0x926/0x1260
[  231.662942][ T7292]  handle_softirqs+0x223/0x840
[  231.662960][ T7292]  __irq_exit_rcu+0xcb/0x220
[  231.662976][ T7292]  irq_exit_rcu+0x9/0x30
[  231.662993][ T7292]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  231.663015][ T7292]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  231.663032][ T7292] 
[  231.663036][ T7292] The buggy address belongs to the object at ffff8880256af180
[  231.663036][ T7292]  which belongs to the cache kmalloc-8 of size 8
[  231.663050][ T7292] The buggy address is located 0 bytes inside of
[  231.663050][ T7292]  freed 8-byte region [ffff8880256af180, ffff8880256af188)
[  231.663073][ T7292] 
[  231.663078][ T7292] The buggy address belongs to the physical page:
[  231.663100][ T7292] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880256afac0 pfn:0x256af
[  231.663117][ T7292] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  231.663137][ T7292] page_type: f5(slab)
[  231.663152][ T7292] raw: 00fff00000000200 ffff88813ff24500 ffffea000089b610 ffffea000087af90
[  231.663166][ T7292] raw: ffff8880256afac0 000000000080005d 00000000f5000000 0000000000000000
[  231.663175][ T7292] page dumped because: kasan: bad access detected
[  231.663187][ T7292] page_owner tracks the page as allocated
[  231.663194][ T7292] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5273727263
[  231.663220][ T7292]  post_alloc_hook+0x1f9/0x250
[  231.663243][ T7292]  get_page_from_freelist+0x2209/0x2280
[  231.663260][ T7292]  __alloc_frozen_pages_noprof+0x1fc/0x400
[  231.663276][ T7292]  allocate_slab+0x7d/0x5e0
[  231.663295][ T7292]  refill_objects+0x2d5/0x350
[  231.663315][ T7292]  __pcs_replace_empty_main+0x2c8/0x6c0
[  231.663333][ T7292]  __kmalloc_node_track_caller_noprof+0x543/0x720
[  231.663350][ T7292]  kstrdup+0x42/0x100
[  231.663362][ T7292]  __kernfs_new_node+0xa9/0x980
[  231.663380][ T7292]  kernfs_new_node+0xeb/0x140
[  231.663397][ T7292]  kernfs_create_link+0xe3/0x240
[  231.663418][ T7292]  sysfs_do_create_link_sd+0x83/0x110
[  231.663435][ T7292]  device_create_sys_dev_entry+0x122/0x190
[  231.663453][ T7292]  device_add+0x71e/0xb80
[  231.663469][ T7292]  tty_register_device_attr+0x425/0x990
[  231.663485][ T7292]  tty_register_driver+0x868/0xe50
[  231.663501][ T7292] page last free pid 13 tgid 13 ts 5272380891 stack trace:
[  231.663512][ T7292]  __free_frozen_pages+0xc93/0xd90
[  231.663526][ T7292]  __kasan_populate_vmalloc+0x1a8/0x1c0
[  231.663541][ T7292]  alloc_vmap_area+0xd10/0x1410
[  231.663561][ T7292]  __get_vm_area_node+0x200/0x2f0
[  231.663581][ T7292]  __vmalloc_node_range_noprof+0x36e/0x16f0
[  231.663604][ T7292]  __vmalloc_node_noprof+0xc2/0x100
[  231.663624][ T7292]  dup_task_struct+0x2c6/0xa00
[  231.663641][ T7292]  copy_process+0x7db/0x4430
[  231.663657][ T7292]  kernel_clone+0x2d7/0x940
[  231.663675][ T7292]  user_mode_thread+0x115/0x180
[  231.663693][ T7292]  call_usermodehelper_exec_work+0x5c/0x230
[  231.663711][ T7292]  process_scheduled_works+0xc3d/0x1630
[  231.663730][ T7292]  worker_thread+0xa47/0xfb0
[  231.663749][ T7292]  kthread+0x38b/0x480
[  231.663762][ T7292]  ret_from_fork+0x514/0xb70
[  231.663782][ T7292]  ret_from_fork_asm+0x1a/0x30
[  231.663802][ T7292] 
[  231.663806][ T7292] Memory state around the buggy address:
[  231.663815][ T7292]  ffff8880256af080: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
[  231.663826][ T7292]  ffff8880256af100: 06 fc fc fc 06 fc fc fc 06 fc fc fc 06 fc fc fc
[  231.663837][ T7292] >ffff8880256af180: fa fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc
[  231.663845][ T7292]                    ^
[  231.663854][ T7292]  ffff8880256af200: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc
[  231.663864][ T7292]  ffff8880256af280: 04 fc fc fc 00 fc fc fc 00 fc fc fc 06 fc fc fc
[  231.663872][ T7292] ==================================================================
[  231.663892][ T7292] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  232.636326][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.4.357 Tainted: G                   Y syzkaller #0 PREEMPT(full) 
[  232.647186][ T7292] Tainted: [Y]=FORCED_BIND
[  232.651606][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  232.661662][ T7292] Call Trace:
[  232.664941][ T7292]  <TASK>
[  232.667876][ T7292]  vpanic+0x26f/0x710
[  232.671874][ T7292]  panic+0xc5/0xd0
[  232.675605][ T7292]  ? __pfx_panic+0x10/0x10
[  232.680031][ T7292]  ? string+0x216/0x2d0
[  232.684193][ T7292]  ? rcu_is_watching+0x16/0xb0
[  232.688966][ T7292]  ? string+0x216/0x2d0
[  232.693129][ T7292]  ? string+0x216/0x2d0
[  232.697290][ T7292]  check_panic_on_warn+0x89/0xb0
[  232.702238][ T7292]  ? string+0x216/0x2d0
[  232.706397][ T7292]  end_report+0x73/0x170
[  232.710649][ T7292]  ? string+0x216/0x2d0
[  232.714808][ T7292]  kasan_report+0x128/0x150
[  232.719318][ T7292]  ? string+0x216/0x2d0
[  232.723487][ T7292]  string+0x216/0x2d0
[  232.727474][ T7292]  vsnprintf+0x74a/0xef0
[  232.731723][ T7292]  vprintk_store+0x3be/0xd90
[  232.736324][ T7292]  ? __pfx_vprintk_store+0x10/0x10
[  232.741447][ T7292]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  232.747265][ T7292]  ? __mutex_trylock_common+0x15f/0x270
[  232.752824][ T7292]  ? panic_on_this_cpu+0x32/0x40
[  232.757777][ T7292]  vprintk_emit+0x192/0x560
[  232.762289][ T7292]  ? __pfx_vprintk_emit+0x10/0x10
[  232.767320][ T7292]  _printk+0xdd/0x130
[  232.771303][ T7292]  ? __pfx__printk+0x10/0x10
[  232.775889][ T7292]  ? rcu_is_watching+0x16/0xb0
[  232.780662][ T7292]  __setup_irq+0x1015/0x2100
[  232.785259][ T7292]  request_threaded_irq+0x2c1/0x3a0
[  232.790465][ T7292]  ? __pfx_pcl818_interrupt+0x10/0x10
[  232.795850][ T7292]  pcl818_attach+0x261/0x1710
[  232.800577][ T7292]  ? __raw_spin_lock_init+0x45/0x100
[  232.805877][ T7292]  comedi_device_attach+0x52d/0x720
[  232.811089][ T7292]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  232.816473][ T7292]  ? kasan_quarantine_put+0xbb/0x1f0
[  232.821766][ T7292]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  232.827593][ T7292]  ? do_vfs_ioctl+0x116f/0x1530
[  232.832449][ T7292]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  232.837485][ T7292]  ? do_futex+0x3e7/0x4e0
[  232.841828][ T7292]  ? __fget_files+0x2a/0x420
[  232.846423][ T7292]  ? __fget_files+0x2a/0x420
[  232.851019][ T7292]  ? __fget_files+0x2a/0x420
[  232.855612][ T7292]  ? bpf_lsm_file_ioctl+0x9/0x20
[  232.860559][ T7292]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  232.866368][ T7292]  __se_sys_ioctl+0xfc/0x170
[  232.870971][ T7292]  do_syscall_64+0x166/0x520
[  232.875567][ T7292]  ? trace_irq_disable+0x3b/0x140
[  232.880599][ T7292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.886667][ T7292]  ? clear_bhb_loop+0x70/0xc0
[  232.891355][ T7292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.897252][ T7292] RIP: 0033:0x7ff91739e159
[  232.901670][ T7292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  232.921281][ T7292] RSP: 002b:00007ff9181bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  232.929709][ T7292] RAX: ffffffffffffffda RBX: 00007ff917625fa0 RCX: 00007ff91739e159
[  232.937724][ T7292] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000006
[  232.945706][ T7292] RBP: 00007ff91743506b R08: 0000000000000000 R09: 0000000000000000
[  232.953686][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  232.961663][ T7292] R13: 00007ff917626038 R14: 00007ff917625fa0 R15: 00007ffd58649f08
[  232.969654][ T7292]  </TASK>
[  232.972953][ T7292] Kernel Offset: disabled
[  232.977272][ T7292] Rebooting in 86400 seconds..