last executing test programs:

4m13.177409827s ago: executing program 1 (id=235):
semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m13.066458755s ago: executing program 1 (id=237):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff)
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
write(r1, &(0x7f00000001c0)='functionfs', 0xa)
read(r0, &(0x7f0000000100), 0xb)
mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x8000000000, 0x0)

4m12.93130173s ago: executing program 1 (id=239):
syz_usb_connect$uac1(0x5, 0xa6, &(0x7f0000001400)=ANY=[@ANYBLOB="1201100100000010cc1721104000010203010902940003010a10010904000000010100000a240107003e0001020924030207030401"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})

4m11.741396693s ago: executing program 1 (id=245):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xa, 0x1}, 0x5)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4)
listen(r0, 0x5)
syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="02c90012000e00050014420a008000400003e3ee"], 0x17)
accept4(r0, 0x0, 0x0, 0x0)
close(0x3)

4m11.198557853s ago: executing program 1 (id=249):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='27', 0x2)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r2, 0x65, 0x101, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r5, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x3c}]}, 0x34}}, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102392, 0x18ff8)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019540), 0x2)
r7 = memfd_create(&(0x7f0000019580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f00000195c0)={r7, 0x0, 0x4000, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r8, 0x40086200, &(0x7f0000019600)=0x2)

4m10.144420937s ago: executing program 1 (id=250):
r0 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000025c0)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002640)='./proc_mnt\x00', &(0x7f0000002680)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./proc_mnt/net/ip_vs_conn_sync\x00', 0x0, 0x0)
read(r1, &(0x7f0000002700)=""/1024, 0x400)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000240)={0xec, 0x6, 0x6}})
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x98, &(0x7f0000000340)={0x0, 0x0, 0x1}})
r2 = syz_clone(0x10000480, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000002bc0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000002c00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
getpriority(0x1, 0xffffffffffffffff)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000002c40)={0x2}, 0x2)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000002cc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80201, 0x0, 0x0, {<r5=>0x0, {'syz', 0x0, '0\x00'}}})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
syz_ublk_setup_io_uring(0x636b, &(0x7f0000002e00)={0x0, 0xeacb, 0x8000, 0x0, 0xfb}, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00))
ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000002f40)={0x0, 0xef3e856242ea1fb3})
syz_pidfd_open(r6, 0x0)
ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000002f80)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r5}, [@writecache={0x0, 0xd0, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '512', 0x20, '2 pause_writeback 100'}}]})
open(&(0x7f0000003140)='.\x00', 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000140)={0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0)
syz_fuse_handle_req(r7, &(0x7f0000000440)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$rtc(0xffffffffffffff9c, &(0x7f0000002500), 0x204981, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000002540), 0x10000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000080), 0x4b469528, 0x2a4103)
openat$rtc(0xffffffffffffff9c, &(0x7f0000002580), 0x101000, 0x0)

3m55.155721937s ago: executing program 32 (id=250):
r0 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000025c0)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002640)='./proc_mnt\x00', &(0x7f0000002680)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000026c0)='./proc_mnt/net/ip_vs_conn_sync\x00', 0x0, 0x0)
read(r1, &(0x7f0000002700)=""/1024, 0x400)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000200)={0x1, 0x0, 0x98, &(0x7f0000000240)={0xec, 0x6, 0x6}})
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x98, &(0x7f0000000340)={0x0, 0x0, 0x1}})
r2 = syz_clone(0x10000480, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f0000002bc0)={0x1f, 0x0, @any, 0x4}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000002c00)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
getpriority(0x1, 0xffffffffffffffff)
setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000002c40)={0x2}, 0x2)
r4 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r4, 0xc138fd03, &(0x7f0000002cc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x80201, 0x0, 0x0, {<r5=>0x0, {'syz', 0x0, '0\x00'}}})
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
syz_ublk_setup_io_uring(0x636b, &(0x7f0000002e00)={0x0, 0xeacb, 0x8000, 0x0, 0xfb}, &(0x7f0000002e80), &(0x7f0000002ec0), &(0x7f0000002f00))
ptrace$setregset(0x4205, r6, 0x2, &(0x7f0000002f40)={0x0, 0xef3e856242ea1fb3})
syz_pidfd_open(r6, 0x0)
ioctl$DM_TABLE_LOAD(r4, 0xc138fd09, &(0x7f0000002f80)={0x4, 0x0, 0x0, 0x190, 0x138, 0x1, 0x0, 0x10, 0x0, 0x0, @by_dev={r5}, [@writecache={0x0, 0xd0, 0x0, 0x58, 'writecache\x00', {0x73, 0x20, @ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, '512', 0x20, '2 pause_writeback 100'}}]})
open(&(0x7f0000003140)='.\x00', 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000140)={0x0})
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0)
syz_fuse_handle_req(r7, &(0x7f0000000440)="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", 0x2000, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$rtc(0xffffffffffffff9c, &(0x7f0000002500), 0x204981, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000002540), 0x10000, 0x0)
syz_open_dev$vcsn(&(0x7f0000000080), 0x4b469528, 0x2a4103)
openat$rtc(0xffffffffffffff9c, &(0x7f0000002580), 0x101000, 0x0)

2m11.034264455s ago: executing program 3 (id=910):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, 0x0)

2m10.83452874s ago: executing program 3 (id=911):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000002400)='./bus\x00', &(0x7f0000002440), 0x8, &(0x7f0000002480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000002580)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x40)
write(r0, &(0x7f0000000280)='27', 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)

2m10.660217437s ago: executing program 3 (id=913):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000480), 0x10)
io_setup(0x9, &(0x7f0000000580)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000005c0)=[&(0x7f0000000940)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000980)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}])
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c0001800600010002000000080003"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r5, 0x5de09b6cc0c29b4c, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1c}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48891}, 0x4008000)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffd7110f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x10, 0x103}}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="f000000010000100feffffbf00010000fe8000000000000000000000000000aaff010000000000000000000000000001000100044e230000000000003a000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000000000000000000000fcffffffffffffff020000a3270000001f00000000000000ff0100000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r12, 0xd22800e99f4927f3}, 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x4020)
sendmsg$TIPC_NL_NET_SET(r10, &(0x7f0000000900)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1a8, r12, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xceb6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x891}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9ed}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbd}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3e}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb0858540}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd501}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "e57576d785ebddbb421ecaa5ae123d52cbda11ea9e8141045a9a7c6590e7"}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, 0x0, 0x0)
r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x18, r14, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20008880)

2m9.380271811s ago: executing program 3 (id=925):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x2c, r1, 0x1, 0x1070bf2c, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ']\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x30000, 0x1}, 0x40)

2m9.317661793s ago: executing program 3 (id=926):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2501, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = memfd_create(&(0x7f0000000080)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaf\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6,\x9dk\x1eB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98s\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19X\x1c\x05E%\xb0\x85\xd0\x1e\x87\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\a\x80{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{', 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
r4 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r4, &(0x7f0000000480)={&(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x103000, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000700)={0x4, r6, 0x80000})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000780)={0xc})
ioctl(r8, 0x3b8f, &(0x7f00000007c0)="2800000007000000010000000400000000000000000000000010")
write(r5, &(0x7f00000001c0)='27', 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x105042, 0x1ff)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4, 0x11, r9, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7fffffffffffffff, 0x9, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0)
mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000440)='ntfs3\x00', 0x0, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x149000, 0x19e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r11=>0x0}, 0x2000)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r2, 0x80047210, &(0x7f00000003c0))
setresuid(r11, r11, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r3, 0x0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0)

2m8.792535717s ago: executing program 3 (id=928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc53}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x100}}, 0x0)

1m53.638256338s ago: executing program 33 (id=928):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xc53}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x100}}, 0x0)

57.615438339s ago: executing program 2 (id=1328):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x23}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840)

57.532358923s ago: executing program 2 (id=1329):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f00000006c0)={0x14, &(0x7f0000000500)={0x0, 0x21, 0x89, {0x89, 0xb, "c02b99b1d431cb5279fbfe551e3e549cda15944ecbb61f93feaf9d66e247b3b73ea7c06a16dc411897cc328271cf7607a7d16be39ec6a9e39df386d44a0125556034657d7b2556f61a91bb66c6d19004d6cc01aae9fdbb04ab3ecb94e642bab4920186ab4f4bffd91dd0958c892cff05414eef2c8ac2d5ab6e96c55cbffa013c57bc576c379f0e"}}, &(0x7f00000005c0)={0x0, 0x3, 0x9e, @string={0x9e, 0x3, "18c3b18dd5da6894cf2e7534748b1ca1873d7a14b51f9c60fc52729350199588c5108c7fbdae0a4bed8829d52b5fc947c919f23bb547495e353cc5586d7c507e4dcab8a2c31dfa36e1d2ba92f4ad5c370d6abc9d6c90bc0a9116c3c294fd7178cdda8f8b3637ba1207a2bc6c913678bc9a9c7304472338ef6305d5c467f118790f63f1fa106253a6e63989d92f99902fca264746b4c26fa79db4afca"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x0, 0x9, 0x65, "fec00ccad1792eebd591f817405866f157bc9f085c000e14bd61470e8ade95d43a2200bb4df1e1ee2fb6ae29e36ea321c38a20f386a9efd80721c12b54d61194856297413348180f66684a7f0e2bd2f9801b0ab083a3d40503306a822f31f84930a94ad718"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000800)={0x20, 0x81, 0x1, "8d"}, &(0x7f0000000840)={0x20, 0x82, 0x1, "be"}, &(0x7f0000000880)={0x20, 0x83, 0x2, "279f"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, '_'}, &(0x7f0000000900)={0x20, 0x85, 0x3, "55e3bf"}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@remote, @private0={0xfc, 0x0, '\x00', 0x7}, @loopback, 0x100009, 0x40, 0x5, 0x100, 0x5de0d1e1, 0x8800a2})
syz_usb_control_io(r0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000bc0)={0x0, 0x21, 0xa6, {0xa6, 0x3, "614ab021248b95a39809726cd7df351d83dd6d35d3eae72ef6711f3ca38aff3088058a6082a751237da7a414fb6423ff81eebc561d0b8edccacdfc1495a7ec310056fca931d642206a5b04034069d016edb3efce4d6b59209caaedb7f1c8e2d16da0b42173a73cb3c7a08d9bfcbaa3101f42cc91c4bd31395a415688d091ec8b378bbe5f68ebbfecedd59df96373b6b9e7866e101cebf1c998a264b8fd3758edd62a5891"}}, &(0x7f0000000c80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, &(0x7f0000000cc0)={0x0, 0xf, 0x64, {0x5, 0xf, 0x64, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x5, 0xf, 0x723, [0x808000, 0xf, 0xff3f00, 0xff3f0f, 0xc000, 0xc0f0]}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0x780, 0x3, [0x30, 0x3f00, 0xc0, 0xc00f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x80, 0x0, 0x20, 0x6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x7d, 0xaa, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x5, 0x6}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x4, 0x9, 0x3, "6da56d24", "8aa06842"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x8, 0x0, 0x4, 0x8, 0x3, 0x6886}}}, &(0x7f0000001280)={0x84, &(0x7f0000000e00)={0x40, 0x7, 0x80, "242f52efe2f0c0836e795f6b786c60a949f1bc3bc305d936042aeb5e721d6017661ca7eef864e30a7f53f9bf84ba422edd90536bf71e0e96d92881ebb915d94c5bcd7000152f54b116fdcc75794598c2f727a5efc3aa7a7c90a34a1495da7faa6dea8b37a18105bcb107be778e815434939f756fd5a9481f968a21d8b4512f45"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000f40)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000f80)={0x20, 0x0, 0x8, {0x200, 0x20, [0xf0]}}, &(0x7f0000000fc0)={0x40, 0x7, 0x2, 0xfffa}, &(0x7f0000001000)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001040)={0x40, 0xb, 0x2, '!t'}, &(0x7f0000001080)={0x40, 0xf, 0x2}, &(0x7f00000010c0)={0x40, 0x13, 0x6}, &(0x7f0000001100)={0x40, 0x17, 0x6}, &(0x7f0000001140)={0x40, 0x19, 0x2, "bfcb"}, &(0x7f0000001180)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000011c0)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000001200)={0x40, 0x1e, 0x1, 0xd}, &(0x7f0000001240)={0x40, 0x21, 0x1, 0xaf}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./cgroup\x00', &(0x7f0000000b80)='ufs\x00', 0x200011, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x0, 0x6, 0xc9, {0xc9, 0xd, "937b513922bd18cc33f5f870412913a7b9714aaf8c772370965fa048a8415059e28034ca6cfa4bf3296c86f216c1e3dded44bd81be3ef37c112aca1ea6068479fc0f547fa7b7e5d4bcfbe7a9ab09acf73b5c47a88d82a605174201cd3c8129c59f6614003dadbaa6d3f24ae55f49763dd9f4a4ead27f6d51f5104a83c3114ca015b5c74fb34ef308d2e9beb4daf42d45b17b87c18a072ea2d80c8a23ac5e53b6c4affcfe229de6a302e81b71f58f9fa4d35baf5efaca742bf8e4857bbb7146be4b5316715b3eb2"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}}, &(0x7f0000000300)={0x34, &(0x7f0000000180)={0x0, 0x18, 0x18, "81e4b2c5aa9f934d99a6eb912f8c7d94f5ef58f1b7e5f68b"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x71}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000400)=ANY=[@ANYBLOB="200025000000002393926d1aa1270d3464570edc209430740808f117e759134fe9f9ab87b2d660e17720b3100200000000000000b0aaebe6971122b969aa3056befdaac53360258769e51d240ca1a277d98c65eeda6b244320de0677c1d58be83516976716778383dd3b4b0500dce2ccf658352306639cb59c50ffb86ece213a39b7bc944fdb7259324f0409cd404b98d279f1db8a408daf464772d4a825526d86a3d9aa75cacfa8baeb1bb3bada013083f9045a177f0ed83ca89479b49dfebbcf20d7018f6c18b476d59298555ee98501d080000000a4c643d0c2cea2c4f6070d1a66df220e180ef6266e8796efd0d6c16b8b2234896f522396"], &(0x7f0000000280)={0x20, 0x1, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x0, 0x1, 0x4}})
syz_usb_connect$uac2(0x0, 0x80, &(0x7f00000009c0)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff0904020000010220000904000101010220000905", @ANYBLOB='5='], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0})

55.557602453s ago: executing program 2 (id=1336):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
mkdirat(0xffffffffffffff9c, 0x0, 0x4)
mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r0, &(0x7f0000000780)='9', 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

55.522986295s ago: executing program 2 (id=1337):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r1, 0x80086f53, &(0x7f0000000600)={0x3, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, 0x0)
mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000640), &(0x7f0000000680)=0x4)
r6 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000540)={0xa, 0x4e23, 0x16f3ba41, @mcast2, 0x47}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x6400}}], 0x1, 0x4001c00)
mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000500)='./dev/sda1\x00', &(0x7f0000000380)='f2fs\x00', 0x103410, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0xa0000, 0x14)
ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000440)={0x80})
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x33)
r8 = open(&(0x7f0000000040)='./file0\x00', 0x80140, 0x38)
r9 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2, 0x10, 0x80, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x40000)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x80)
r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r10, 0x29, 0x5, 0x0, &(0x7f0000000580))
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x3, 0x4)
setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x30}, 0x4}, 0x1c)

55.435684121s ago: executing program 2 (id=1338):
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
r1 = fsopen(&(0x7f0000000040)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000080)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = fsmount(r1, 0x0, 0x2) (rerun: 64)
fchdir(r2) (async, rerun: 64)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x244) (async, rerun: 64)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r4, r4) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x6000)
setresuid(0xee01, r5, r5)
setpgid(0x0, r4) (async, rerun: 32)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049370, 0x0) (rerun: 32)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
mkdirat(r0, &(0x7f00000001c0)='./proc\x00', 0x1ff) (async)
mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x4000, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r7, &(0x7f0000000380)='3', 0x4e) (async)
writev(r6, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000400)="e9", 0x1}], 0x2)

55.369363575s ago: executing program 2 (id=1339):
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./sec\x00', 0x1ff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0}, 0x0)
mount(0x0, &(0x7f0000002280)='./sec\x00', &(0x7f00000022c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./sec/tomoyo/query\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000002340)='fd/3\x00')
pselect6(0x40, &(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000940)={0x0, 0x3938700}, 0x0)

55.171015934s ago: executing program 34 (id=1339):
mkdirat(0xffffffffffffff9c, &(0x7f0000002240)='./sec\x00', 0x1ff)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0}, 0x0)
mount(0x0, &(0x7f0000002280)='./sec\x00', &(0x7f00000022c0)='securityfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./sec/tomoyo/query\x00', 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000002340)='fd/3\x00')
pselect6(0x40, &(0x7f00000008c0), 0x0, &(0x7f0000000900)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000940)={0x0, 0x3938700}, 0x0)

38.639793445s ago: executing program 5 (id=1427):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004)

38.501856677s ago: executing program 5 (id=1428):
socket$nl_xfrm(0x10, 0x3, 0x6)
add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f00000003c0)="3cd73fffaee6357dc64544b4c2fad3085bb00a8cc846043790957d39608ae307d3276782732bacbf0000000000000000000000000000a0f766d9599f124b5c003a1f53efbec26d8f35b63cb3b2f4355ae3f43577d3557785e84e4fa10314", 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg0\x00'})
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req={0x4, 0x222a, 0x4, 0x9}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0)
write(r1, &(0x7f0000000300)="010000000000000020", 0x9)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000240), 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000440)={0xfffe, 0x41aa, 0x3, 0x0, 0x8, 0x90, 0xa}, 0xc)
bind$bt_l2cap(r4, &(0x7f0000000580)={0x1f, 0x0, @any, 0xfff8}, 0xe)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x40010)
connect$bt_l2cap(r4, &(0x7f0000000640)={0x1f, 0x0, @any, 0x7ff}, 0xe)
sendmmsg$inet(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0xff80, 0x2400c8c4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x40000, 0x0)
memfd_create(&(0x7f0000000840)='\x02\x00\x00\xc1\xd2\x9c\xfd\xffs\xb6\xbd\xd9\x14\xa4\xf8\x8eB\x0e\x1c\xa2\t\x8f\x8es\xc2\xcb\xb8LZ\xd0\x9a\xa7\xcdy\no\xc96\xba2\x04!\x89\xac\xb9E\xaa\xbff\x90\x8a\x7fy\xf4n\x1d\x03\xbc\x83\xe6iF\x8d+LL,yDu\x9f-w\xc9\x1d\xa3uk\xfd}e\x194{\x1bei\xde\xce\xfbxo(\xe7\xc0\x89\xe3\xb6\xdeE\xfe\xbde\x93\xff\x86\xcf\x89+&,\xf18\xcf\tO\xe0\x99g&^\xbd\xd1J\xd6\x8c\xcc\x9c\xcd\xb5\x8b\xad\b6\xddo\fY6\xf5\xd5}ySeBser\xb8K\x89\xe6\x9eH<\xfe\xe4XW\xee\x1e\x12@\xb1\xa5\xfa\xd5\x91&-\xbc\xa0\x9cO\xc7bqy\xf3\r\x02\x83b\x8f]\xb8R7\xd8\x19\x16w-\x91\xe1\x12Fk[\xa6\xc3\xff\xe5\xbdS\xce\xaa@\x900\x11+\x8b,\xb4_\x81\xbf\x89\xea\xf3\x19\xa8j^\x93\xd5\x03W\x03\r\x17\xe9A\x820;\x93\x96G\b9\x89\xfdT\a\xe5\x1a\xcf\x8d\xc6<\xb8\xf2\x02\xed\x1fg\xc1az\xd7<\xed\xbc\x11W\xa0y\xdc\xeb\xd97\xc5\x06\fMjs\'\x85=8M\xac\xe63\xd8o\xf2\xdeH\x82', 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x4)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x182, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x8000)

38.191948346s ago: executing program 5 (id=1432):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x56401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x5)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0)
syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000200)="660fc7b30b000000c4e3617fd2000f09c744240021000000c74424028000c0fec7442406000000000f011c242e0fae77600f01c2b91a0a0000c4e272f56e00f30f01e8ded266b8a9008ed8", 0x4b}], 0x1, 0x7c, 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f0000000340)={0xc, <r7=>0x0})
ioctl$IOMMU_DESTROY$ioas(r4, 0x3b80, &(0x7f0000000380)={0x8, r7})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r8})
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0xa0602, 0x0)
writev(r9, &(0x7f0000000280)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, r10, 0x3000004, 0x8010, r5, 0x0)

36.85134571s ago: executing program 5 (id=1437):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000500)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000000)={'bond0\x00', 0x0})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
mount$bind(0x0, &(0x7f0000000600)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000680)='./file0\x00', &(0x7f0000000a40)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000700)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x0)

36.707934147s ago: executing program 5 (id=1438):
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x10, 0x803, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x70}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0)
openat$kvm(0x0, &(0x7f00000002c0), 0x8041, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000500)={0x0, 0xffffffff, 0x4000000, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x32c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0x261}}], 0x1, 0x0, 0x0)

36.426401542s ago: executing program 5 (id=1439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='100', 0x3)
r1 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0x40305839, 0x0)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x559, r3)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000980)={r4, 0x79}, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)="7fd90adbd792f0bdec2fa1f66bc250caa1f99c453e2643764e4f85b86b1167f0b24a021f974770566c68df69b45fb25c4d5903c28f8beae1a5c61e0d88b9f8e80efabe6cd43acefbec4d36d550d6f602faf88be49bc96ea0b9e5928d7b7c15a1aa587d2bf43f58f31ef5e2e543a1c37a1268912658204de6bc", 0x0)

36.120277706s ago: executing program 35 (id=1439):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x161)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)='100', 0x3)
r1 = syz_open_procfs$pagemap(0x0, 0x0)
ioctl$PAGEMAP_SCAN(r1, 0x40305839, 0x0)
r2 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r3 = add_key(0x0, &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, r2)
r4 = add_key(&(0x7f00000003c0)='asymmetric\x00', 0x0, &(0x7f0000000400)="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", 0x559, r3)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000980)={r4, 0x79}, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)="7fd90adbd792f0bdec2fa1f66bc250caa1f99c453e2643764e4f85b86b1167f0b24a021f974770566c68df69b45fb25c4d5903c28f8beae1a5c61e0d88b9f8e80efabe6cd43acefbec4d36d550d6f602faf88be49bc96ea0b9e5928d7b7c15a1aa587d2bf43f58f31ef5e2e543a1c37a1268912658204de6bc", 0x0)

10.494473918s ago: executing program 0 (id=1560):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2000, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
landlock_create_ruleset(&(0x7f0000000980)={0x0, 0x3}, 0x10, 0x0)
eventfd(0xd33) (async)
eventfd(0xd33)
socket$unix(0x1, 0x2, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket(0x840000000002, 0x3, 0x100)
socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x800, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
open(0x0, 0x60840, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000cc0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000d00)=<r5=>0x0)
r6 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000d40)={0x0, 0x4, 0x1000}, &(0x7f0000000dc0)=<r7=>0x0, &(0x7f0000000e00), &(0x7f0000000e40))
syz_io_uring_modify_offsets$flags(r7, 0x0, 0x68, 0x1) (async)
syz_io_uring_modify_offsets$flags(r7, 0x0, 0x68, 0x1)
syz_ublk_setup_queues(r4, r5, &(0x7f0000000e80)={0x0, 0x2, 0x100, 0xfffffffe, 0x2d4}, &(0x7f0000005400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x4000, 0x4, 0x143, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x3, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2, 0x0, r3}}], 0x1, 0x0, 0x0) (async)
syz_ublk_setup_queues(r4, r5, &(0x7f0000000e80)={0x0, 0x2, 0x100, 0xfffffffe, 0x2d4}, &(0x7f0000005400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x4000, 0x4, 0x143, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x3, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2, 0x0, r3}}], 0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

10.155731929s ago: executing program 4 (id=1561):
syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYRES16], 0xb)

9.588202937s ago: executing program 4 (id=1563):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x7f510100)

9.501743469s ago: executing program 0 (id=1564):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000080))
ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000200))
r3 = fcntl$dupfd(r0, 0x0, r0)
write$UHID_INPUT(r3, &(0x7f0000001080)={0x8, {"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", 0x1000}}, 0xfffffe11)

9.364262635s ago: executing program 0 (id=1565):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
r1 = syz_usb_connect(0x0, 0x202, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000540)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0xcf, 0xfffffffb, 0x0, 'queue0\x00', 0xa3})
syz_usb_control_io$hid(r1, &(0x7f0000000900)={0x24, &(0x7f0000000740)={0x0, 0x0, 0x23, {0x23, 0x22, "7aca2960dcbfde825c0a99cf4db0c4e799cf8556cc11cd72fdd995501ad13f8619"}}, &(0x7f00000007c0)={0x0, 0x3, 0xb1, @string={0xb1, 0x3, "3991af2d301bbc4faea77510f1015b53950eabe848fee048b9ef1ee77ff18a6b062c8d3ce7e402e9d971ee1f0cb05df93da0a80f544568ca2799f6f5caa50572b74f8029cad2b4e6e8eed47bca010193fc19e103d36dd4ba2a60e4bb484b951534f19832ea49da56c42ab95e98f0e6e0149059422b82acc5ba1957946baed31e48cf892133236df818dfa5a3ec01a383d706cc5786e2836a4a4900b046595366c99790f87faa16c9a464d00ef9c364"}}, &(0x7f0000000880)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0x8, "491121c7"}, @global=@item_4={0x3, 0x1, 0x6, "2ed0bafc"}, @global=@item_012={0x2, 0x1, 0x5, "2391"}, @local=@item_4={0x3, 0x2, 0xa, "142fc7d3"}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xf, 0x1, {0x22, 0x576}}}}, &(0x7f0000000bc0)={0x2c, &(0x7f0000000940)={0x20, 0x14, 0xaf, "8ac89de1e9d9fb9eb123a0159d99c32498aa2625bf8d69b2df46a44436ab96f7b65594a313e4db6429f3b6cce5b935b140d9ccf181cccc4b205e0dbb89d5e3b7e9de0dd62e0068bccdb51ff66287ff5c7a400ec8ec9494f902d70a87c0ce90e63a06da34d5f78332e621de8016913cef5d46b1d241ba5ca358fd94ef7bd7eb625f1a0418362c68dae098c8699d7a1934d7ebb5c7ff7b38cf8f8c7774efe1e6a9b2a566b8fac00392a6b4009f68b083"}, &(0x7f0000000a00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a40)={0x0, 0x8, 0x1}, &(0x7f0000000a80)={0x20, 0x1, 0xe2, "2446b0d3033afe12f1e7d7fa25d73fefcd9ac067b552f7e9d3460f93ee0b97de4c8dde7bca2a249e5a9852ab9ed3dee9a4bc9cf6cec82447e95af31d3ca160cdd030b21f4ec46b040ddfd85c2a93e49731d00b61ac7b4dcfb77d61541320247817b03aef746839589212bb0682c793b630c60405598aacb360baf604843ee392ca015aaa0c779b5fbf1c900b474c380314d3a52ebb7da3105abd2909b4040e70485a5a89c8b70a7c14ea8c4310b34e0b77ca3defb4a5c4168fe3441b1c21bfa09034c511d96c38b027485e704b3ffc01b6341300ec070aa732dce22bc4827f7deca1"}, &(0x7f0000000b80)={0x20, 0x3, 0x1, 0x2}})
write$sndseq(r2, &(0x7f0000000400), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000440)={0x0, 0x5, 0x260, {0x8, 0x6}, 0x3, 0x4})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000003b40), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000005c0)={0x73622a85, 0xeed7e89f6334d838})
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)

6.499111992s ago: executing program 4 (id=1570):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c6050010000000000001090220000101008032090400000208065000070581020002000705020200"], 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x22, 0xc, {0xc, 0x22, "2eedf6c81802eb2e1a6c"}}, &(0x7f0000000080)={0x0, 0x3, 0x69, @string={0x69, 0x3, "b3659176835d45ee658aaa60503e094ef52b503208243a97f2a5fdb0f6194785f0dfd21c56db2ee33d33eccfc658ad501518836d3b7e311ba3b236c97a3066fcb4f0ce98ea18f1be56d3bcd09c7aa6dba0e116e37c6791be31a1460676bd544efd9a8486b746bb"}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000140)={0x40, 0x11, 0xb7, "094382cccb5b31ff4abb6a6b7d142be64b099c753efd9d5549494d098fb8a3685ea7b69a4702e690129d60a7c54ded4e61eee8990de52954bd6ea05f6c27517278eb310208b7634ff62edb215ee9772449b8e6f5c0e2fc1de7bc2341e6cb056ea85bbdb7d92176c7a08422fca41f7c3531feaea4b07f8f7c8c2a5fba8c1c5be749e87412b1ed70520522dca2d38c0ad8b0f2857e6ee4a39ca1f11ee2556d3dbeeaa4bbe024da1058d0d68c731a153e64dc8befd885e348"}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000640)})
sched_setscheduler(0x0, 0x2, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff)
ioprio_set$pid(0x2, r1, 0x4000)

6.243921611s ago: executing program 0 (id=1571):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x309, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@migrate={0xac, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}]}, @policy_type={0xa}]}, 0xac}}, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xe4, 0xc9a, 0x80080000, 0x6, 0x20, "dce4f0020100000000001b347d5c00010200"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0x5, 0x9, 0x80080000, 0x1, 0x17, "b23d84eb32035e9d70cb7628b768f980b57f50"})

6.243504591s ago: executing program 0 (id=1572):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0xa100) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async)
syz_usb_connect(0x1, 0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201f9ffffbccc1842ff02036b5c00000904000000000000"], 0x0) (async)
syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (async)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = dup(r0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000019c0000040042801400016b06000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="04000680"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async, rerun: 64)
write$UHID_INPUT(r1, &(0x7f00000003c0)={0xc, {"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", 0x1000}}, 0x1006) (rerun: 64)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000001580)={"4f90d728f4808accc919710e431a2b3da3b2848aa60b86afa53842cff834", 0x7f, 0x2, 0x0, 0xfffffffc, 0x9, 0xd, 0xb, 0x1, [0x10000, 0x7, 0x6, 0xfffffffd, 0xfffff801, 0x2, 0xf3ac, 0xffffffff, 0x7fff, 0x2002, 0x5, 0x35c, 0xc529, 0x2, 0x3, 0x80000003, 0x1fffc, 0x8893, 0x80000000]})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4010, 0xffffffffffffffff, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) (async, rerun: 64)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/slabinfo\x00', 0x0, 0x0) (rerun: 64)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4) (async, rerun: 64)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$hiddev(&(0x7f0000000140), 0x4, 0x2ab00) (async)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async)
syz_clone(0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r6 = dup(r5)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="04000600"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
write$UHID_INPUT(r6, &(0x7f0000001740)={0xc, {"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", 0x1000}}, 0x1006)

3.434478077s ago: executing program 4 (id=1580):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0)
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203fe"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
bind(r2, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3)
r5 = syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101701)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000480)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca0330ace0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b38905a9727d2001457df7be7e1aefe363590d1f600"})
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1a8, r4, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x179, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\xb8W\n\xd1s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcb\x93\xc9\x8d\x1e\xc5<\xc8m\xa0.`x\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x00\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&K\xcf-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1a8}}, 0x80)
write$char_usb(r1, &(0x7f0000000140)="d68be04bd4735d85f35e28e2af7862967a7033ca152634f8a2b86d55a3ab867d07c6f2cd3534fcbe4ecb69c3977a451cde60a591990d0bacaedf08659825d65ca2fcc1b29762b70492b63c86d4dcab98b32cde573a84a4928df1231eeca38628e5e7f267d990f4e5cafb0f3329ccd304b1fd31b778969996042a6ffe636933201ae655dd1edc052de45d14f7e2a2bd371c70d5f1db0eef0c9b28898b37ff2162aac3b0639adb091bdce1b12d8226eb86c76a5676c368", 0xb6)
r6 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x0)
close_range(r6, r6, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000400)={0x100013, 0xf4, 0x100000, {r6}}, 0x20)
syz_usb_disconnect(r0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd01800905020210020200000905820200"], 0x0) (async)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203fe"], 0x0) (async)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
bind(r2, 0x0, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) (async)
syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x101701) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000480)={0x0, 0x1, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca0330ace0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b38905a9727d2001457df7be7e1aefe363590d1f600"}) (async)
sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1a8, r4, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x179, 0x1, 'n\x01l\xb1\xd7jt/l\xdc\x82{V \xb82cap\x00\x83\xf2\xa6L6\xeb;\xe6\xd9\xa7\x1bsj\xb0$\x96\xda\xf5/\x9ct\xdb@\x82-\x97.O\xd6w\xce\xe5\xe1Ik^\xee\xa9=\x98\xdf\xf0S\x96\x0fr2\x9c\xdc\a\x90\xcc\x198\xf3\r\x96\x8fM*F\xa2Y7\xc3\xfd\x1br.<\x1b\xbd)^\x9f\xaar\xaexpW%\xf7L\xc9\x1d:\xb1\xc5f\xe3K{\xa3\xb1\xd5N\xf4Yj\x9fz\x03w\xd3\x8f\x11\xefC\x8d\xa9\xfe\"T=4\x89\xe6S6G)\xef\x8c\x0fm\xab\xa4\x15\x0f\x84\x15\xdf\x87\xc8\x82$\x18.~\xdf8\x92\xf5\xd9c\xd8.\xceyZ\xed\xfb\xd22\x86\xc7Q\xd5\x99\xf3Mbs\xb4n\x8d#\x04\x99qBF\r\x0f\xa9!<\xben\n\x802l\x05I\x1e\xbf=\xfd\x1a\xff\xaa=R\x19\xc6L\xb3./9\xb8W\n\xd1s\xba\xc5\xf8\xda(\xfe\x9cty\xb0:PE\xee\xd2\x176\x10L\xf9\x9a\x1d\xe8\xcb\x93\xc9\x8d\x1e\xc5<\xc8m\xa0.`x\x88\x18\xe9#\xf4\x0e\xb5t\x825\x94\x1b\xa0\x11a\x00\xab\xbfL\x88\x0e\xfb\xc3\xb1\xab\x04&K\xcf-\x19\xe4\x00\x94\xa8\xc6\xe1L\xb82\x1ed\xa6W\xed|\xafM7\xab\xc9R\xef\xcfgp\x94>]fk\xe9\x15\x93K\xdeUDUdQ\xb7\xc4\x19\xd3\xda\xcd\x91;C`\x90\'\x9b\x80\xf0\xb7\xc7\x1eb\x0e\xe2\xa2\xb9\x8b\x8d\x98\xca\x96\xe1\xbf]\x8b\xc7\xaa\xbb6\xa2f\xd8'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010101}]}, 0x1a8}}, 0x80) (async)
write$char_usb(r1, &(0x7f0000000140)="d68be04bd4735d85f35e28e2af7862967a7033ca152634f8a2b86d55a3ab867d07c6f2cd3534fcbe4ecb69c3977a451cde60a591990d0bacaedf08659825d65ca2fcc1b29762b70492b63c86d4dcab98b32cde573a84a4928df1231eeca38628e5e7f267d990f4e5cafb0f3329ccd304b1fd31b778969996042a6ffe636933201ae655dd1edc052de45d14f7e2a2bd371c70d5f1db0eef0c9b28898b37ff2162aac3b0639adb091bdce1b12d8226eb86c76a5676c368", 0xb6) (async)
open(&(0x7f00000003c0)='.\x00', 0x0, 0x0) (async)
close_range(r6, r6, 0x0) (async)
mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000400)={0x100013, 0xf4, 0x100000, {r6}}, 0x20) (async)
syz_usb_disconnect(r0) (async)

3.302765884s ago: executing program 6 (id=1581):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0xb, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x3, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0x4000bb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x1, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000ee4dc5109bc1b73100000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = open(&(0x7f0000000300)='./file1\x00', 0x60142, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000880), 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000000940)={0x2020, 0x0, <r8=>0x0}, 0x2020)
open(&(0x7f0000002980)='./file1\x00', 0x5482, 0x7e3111f862955f54)
write$FUSE_INIT(r7, &(0x7f00000029c0)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r7, &(0x7f0000002a40)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r7, &(0x7f0000004a80)={0x10, 0xffffffffffffffda, r9}, 0x10)
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000004ac0), 0x20080, 0x0)
dup3(r10, r7, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000004b00)='./file1\x00', 0x103042, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000004b40), 0x4000000004002, 0x0)
r12 = dup(r11)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r12, 0x2000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004b80)={'bond0\x00'})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)

2.995947903s ago: executing program 6 (id=1582):
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='p:s/_ ./file0:0', 0xf)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f00000001c0)='-:s/', 0x4)

2.94981046s ago: executing program 0 (id=1583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0)
syz_usb_connect(0x2, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="1201100192701840101412a05fc4010203010902360002020150cb0904000801ff3a140809050603100001060809047b6f014234b90309050c001000090906090441"], 0x0)
read$FUSE(r0, &(0x7f0000001680)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_STATX(r0, &(0x7f00000036c0)={0x130, 0x0, r1, {0x200, 0x4, 0x0, '\x00', {0x8, 0x8001, 0x5, 0x7, 0xee00, 0xffffffffffffffff, 0xa000, '\x00', 0x80000001, 0x2, 0x1, 0x5, {0x81, 0x100}, {0x5, 0xf}, {0xfffffffffffffff7, 0x1}, {0x0, 0xffffffd2}, 0x10, 0x7, 0x9, 0xfffffffd}}}, 0x130)
write(r0, &(0x7f0000000040)='alps', 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='stat\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0xfffffffffffffffd, 0x0)
renameat(r0, &(0x7f0000000080)='./sys\x00', r2, &(0x7f0000000100)='./sys\x00')
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x82, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000200)="f30fbdae190d000000363e0fc77500bbcfcf3e0f79df67d18fb328280f2ea6846a0000c4c161ef46c8660f3a16eb0e0f329135", 0x33}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$inet(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, [0x0, 0x200000000780, 0x2000000007b0, 0x2000000007e0], 0x0, 0x0, &(0x7f0000000a40)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x11, 0x4, 0x88be, 'syz_tun\x00', 'ip6_vti0\x00', 'veth1_to_bond\x00', 'syzkaller1\x00', @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa8, 0xf8, [], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @common=@log={'log\x00', 0x28, {{0x1, "fa51e082fc9291e560e812385192f97e51259e00b05cbb193a977929a7be", 0xd}}}}, {0x9, 0x8, 0x884c, 'veth0_macvtap\x00', 'dummy0\x00', 'pimreg1\x00', 'vlan1\x00', @random="ee5f7388811a", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local, [0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x5, 0x0, 0x6002, 'bridge_slave_1\x00', 'ip6tnl0\x00', 'batadv_slave_0\x00', 'nicvf0\x00', @empty, [0x0, 0xff, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa0, [], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}, {0x9, 0x55, 0x6003, 'team_slave_0\x00', 'veth1_vlan\x00', 'ipvlan0\x00', 'team_slave_1\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], 0x0, 0x70, 0x70, 0xb8, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"94091a77d09cefc36d8454a20080cfce8b0782f19dbca043a952281864f0"}}}]}]}, 0x428)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x1, 0x4, {0x7f, @usage=0x3, <r8=>0x0, 0x8001, 0xea, 0xfffffffffffffff8, 0x1, 0xc, 0x0, @struct={0x100, 0x8}, 0x7, 0x8, [0x9d0d, 0x5, 0x4, 0xffffffffffff3bff, 0x7, 0x3ff]}, {0xa, @struct={0x3, 0x2}, 0x0, 0x5, 0x60, 0x2f, 0x100, 0x10001, 0x0, @struct={0xffffffff, 0x3}, 0xb791, 0x8, [0x3, 0x81, 0x3a, 0x10000, 0x5cc, 0x7fffffff]}, {0x2, @usage=0xeb0, 0x0, 0x0, 0xe8a, 0x4, 0x100, 0xfffffffffffffffe, 0x3c, @usage=0x4, 0xffffffff, 0x8, [0x1, 0xfd50, 0xa, 0x200, 0x6, 0x2]}, {0x8000, 0x200, 0x5}})
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r9, &(0x7f0000000280), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10)
shutdown(r9, 0x1)
r10 = syz_usb_connect(0x0, 0x32, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000ec0)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000f80)={0x20, 0x15, 0x3, "b5512e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
recvfrom(r9, &(0x7f0000000300)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x40)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000a00)={{r0}, {@val={r8}, @actul_num={@void, 0x9, 0x45}}})

2.87014976s ago: executing program 6 (id=1584):
mkdirat(0xffffffffffffff9c, &(0x7f0000002700)='./pipe\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002740)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000002780)='./pipe\x00', &(0x7f00000027c0)='rpc_pipefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000002800)='./pipe/gssd/clntXX/gssd\x00', 0x2, 0x0)
mount(&(0x7f0000002840)=@filename='127.0.0.1:/\x00', &(0x7f0000002880)='./mnt\x00', &(0x7f00000028c0)='nfs\x00', 0x2e00, &(0x7f0000002900)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00')

2.728934957s ago: executing program 6 (id=1585):
dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='100', 0x3)
syz_open_procfs$pagemap(0x0, 0x0)
r1 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2)
syz_open_dev$evdev(&(0x7f0000000d00), 0x8c, 0x200)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000d40)={r3, 0x1}, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)="7f", 0x0)

2.664603439s ago: executing program 6 (id=1586):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsopen(&(0x7f0000001f80)='tracefs\x00', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, 0x0, 0xa)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
syz_pidfd_open(r3, 0x0)
gettid()
read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020)

2.243651691s ago: executing program 6 (id=1589):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl(r2, 0x4048aecb, &(0x7f0000000040)="070000000000000001000000ffffffff40894088") (async)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) (async)
ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000680))
mount(0x0, &(0x7f0000000c40)='./proc\x00', &(0x7f0000000c80)='9p\x00', 0x29880c4, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
syz_usb_connect(0x0, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000404f1004000001010200010902200001010080320904000002000000000705810200020007050202", @ANYRESOCT=0x0], 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) (async)
sendmsg$inet_sctp(r3, &(0x7f0000000640)={&(0x7f0000000780)=@in={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000280)="b39e9fdaa6eb78a11ff8199282b974f6b025dcb9afd63dc6f72965d5cfbacf77791e25b89975eee3a72b986512d9c6b409546b7778b2c079d58c4f9c5accd5b7e38d9a348cefe91cb472cbb8ee7665078102b8169ae57c80f3cbbf700f4568bf95a4b788931286725b58871797327d103794afff3526709cc3626b0727dfd42b658814cff5bb7f5dd03f179165ee33cd9f09484560b69c44929ecdc1271c903bf66de4d54dc8cbdb2609b9ca4823560f383d3239a9657ebd214787264bd904ebba8f76af37bcaca2f8264962c0775cd797d5", 0xd2}, {&(0x7f0000000380)="b794658f55593449ab450c762a9bf949bbc44c3d901974931e9d", 0x1a}, {&(0x7f00000003c0)="b050241c7be23f1dd671d5bb0f527b818d404a7d7efab0d507ebe463e214a8ca6f50cad7298d9eeb7d682d", 0x2b}, {&(0x7f0000000400)="80f595f0a1073ecccc0ad4ad9b640d3af8695139c225da81086803e35f9d7bd958c6c91322bf17eccbd3223e0257758dbe876f7c947df44274d91c58377253b997dbbc401c06f6e9ebe42bfec78e8688839d404d53f300e5ee27e6bd5eb3889866ce34dda0e6158aa99e6740a4acab33e3c4c30f99df2237923763946cdbea26019487d333580164fae6f0fa7a9932f87c7151d13c37e599a7de3bf53a9ed861dd15b10da20b0c5c3da71e7869cb5c255efb0c5d8d786086b9d61bca3cd6a0f68f3a8e32903c4ab170364aba5d117836a272022452bd0b353299ed77617dfe86093082f3a799c278064e3b2e2a08de181182", 0xf2}, {&(0x7f0000000500)="88171aeabedf8e8d9daa3c1a212beef7e11a139d5b8276265b67381061aaee411704ec5d692547ccfe2a89e054b8780c3f15e7b874c156deb7a8e50b2f88581231d9555dbcfe77aebd2a292b5d6116680d1f133b8e6b9e11ab6903de74946b165acced1250b9fab9", 0x68}], 0x5, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0xfffff800}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x30, 0x80}, 0x44001)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x0, 0x0) (async)
write(r3, &(0x7f0000000d00)='3', 0x4e) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1.599958428s ago: executing program 7 (id=1593):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2982, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001fd85aec1983ff140000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b80140001800c000100636f756e74657200040002802c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
syz_usb_connect(0x0, 0x2f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102b4e98a401320480204eed500030109021d00020407180709047603004354a207090468"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0})

380.358341ms ago: executing program 7 (id=1594):
dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='100', 0x3)
syz_open_procfs$pagemap(0x0, 0x0)
r1 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r1)
r3 = add_key(&(0x7f0000000340)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r2)
syz_open_dev$evdev(&(0x7f0000000d00), 0x8c, 0x200)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000d40)={r3, 0x1}, &(0x7f0000000d80)=ANY=[], &(0x7f0000000dc0)="7f", 0x0)

367.646779ms ago: executing program 7 (id=1595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000000)={0x0, 0x8af9, 0x11c4, 0x2, 0x1003c2}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000380)={0x0, 0x0})
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4c001, 0x1, {0x0, 0x0, 0x5}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000240)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
write(r0, &(0x7f00000001c0)="44000000100001060100000000000000000000000000000001000000ffffffff0c00030000726631303000001800120008000100767266000c0002000800010064000000", 0x44)

335.780664ms ago: executing program 7 (id=1596):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0803, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x2})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./debug/split_huge_pages/file0\x00', &(0x7f0000000240)='befs\x00', 0x7e869, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='20,0x7f0000800000,0x7', 0x15)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc0803, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000040)={0x8f, 0x0, 0x2}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000180)='./debug/split_huge_pages/file0\x00', &(0x7f0000000240)='befs\x00', 0x7e869, 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/split_huge_pages\x00', 0x1, 0x0) (async)
write(r2, &(0x7f0000000200)='20,0x7f0000800000,0x7', 0x15) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)

268.657891ms ago: executing program 4 (id=1597):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fsopen(&(0x7f0000001f80)='tracefs\x00', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f)
write$cgroup_devices(r1, 0x0, 0xa)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001e00)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace(0x8, r3)
syz_pidfd_open(r3, 0x0)
gettid()
read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020}, 0x2020)

112.270918ms ago: executing program 7 (id=1598):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000600)={0xfffffffc, 0x6, 0x0, 'queue1\x00', 0x9})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000700)="268292", 0xff95}], 0x1) (fail_nth: 9)

104.299377ms ago: executing program 4 (id=1599):
syz_usb_connect(0xf5027e15c0f76628, 0x43, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002000000402104341200010000000109023100020100c032090400000002fe000005240600010324ab"], 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0x80480, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000000600)={0x0, 0x0, 0x8b, 0x5f, 0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
keyctl$describe(0x6, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/reboot/force\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000440)={0x65, 0x8}, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000078717f5b8106050041d80102030109021200010707100009041e0400e243e359"], 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x2, 0x1, 0x6})
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [0x67c34cfe, 0xf, 0x1, 0xffff, 0xab00000000000, 0x2c76], 0x1, 0x0, 0x0, [{}]}, 0x88)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000080)=[{&(0x7f00000000c0)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1180015000600142603600e120800110000810401040016fc0a00104004000000036010fab94dcf5c0461c1d67f6f94067134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

0s ago: executing program 7 (id=1600):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000c00)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000c40)={[0x8, 0x3d, 0x9, 0xf, 0x4, 0xf, 0xe5, 0x3ff, 0xfffffffffffffc00, 0x80000001, 0x3, 0x8, 0x0, 0x5, 0x6, 0x84], 0xeeef0000, 0x27a611})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000019a000/0x18000)=nil, &(0x7f0000000d00)=[@textreal={0x8, 0x0}], 0x1, 0x61, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100})
r4 = memfd_create(&(0x7f0000000540)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\x02K\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xf08h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xa5\xfa\xb9\xc8\x85\x16\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\x11\xd8\xb3\xe9\xf2@\x97\xfa\x16\xe9\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-\x04{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\t\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l[$\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98c%\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbf\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\xd4\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xbc-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa6DX\xaf\x7fj\x00\x00\x00\x00\x00\x00U\xbf8\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19#\xc7\xe2\xbeX\xcb\xc9\xb9\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xba\n\x00\x00\x1dw\xa8z8\xe77`!\xf7\xce\x02\xcaC_\x0f\x8e\xd5\xbe.k\x0e\xdf\x86\xda\x00\x00\x00\x00\x00\x00', 0x7)
fallocate(r4, 0x0, 0x6, 0x8)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_int(r6, 0x29, 0x49, 0x0, &(0x7f0000000340))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="08000c00c5030000080001"], 0x38}}, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=[r0, r5, r0, r5], 0x10}, @fda={0x66646185, 0x0, 0x2}, @child_ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000380)={0x0, 0x28, 0x48}}, 0x40}]})
ioctl$NILFS_IOCTL_GET_CPSTAT(r6, 0x80186e83, &(0x7f0000000a80))
syz_usb_connect(0x5, 0x4e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], 0x0)
r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r10, &(0x7f0000000080), 0x8)
listen(r10, 0x5)
r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r11, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
listen(r11, 0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x100, 0x0, &(0x7f0000000440)})

kernel console output (not intermixed with test programs):

T5883] pwc: recv_control_msg error -32 req 02 val 2100
[  578.914296][ T5883] pwc: recv_control_msg error -32 req 04 val 1500
[  578.915260][T10353] ufs: You didn't specify the type of your ufs filesystem
[  578.915260][T10353] 
[  578.915260][T10353] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  578.915260][T10353] 
[  578.915260][T10353] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  578.934513][ T5883] pwc: recv_control_msg error -32 req 02 val 2500
[  579.137157][T10353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.139499][T10353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.167120][ T5883] pwc: recv_control_msg error -71 req 02 val 2600
[  579.167796][ T5883] pwc: recv_control_msg error -71 req 02 val 2900
[  579.168380][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  579.168963][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  579.169364][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  579.175302][ T5883] pwc: Registered as video103.
[  579.182848][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29
[  579.199613][ T5883] usb 3-1: USB disconnect, device number 74
[  579.227968][ T2254] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  579.421199][ T2254] usb 5-1: not running at top speed; connect to a high speed hub
[  579.421238][ T2254] usb 5-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=1.00
[  579.425737][ T2254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.641205][    C0] port100 5-1:1.0: NFC: Received an invalid ack
[  579.644960][ T2254] port100 5-1:1.0: NFC: Could not get supported command types
[  579.844749][T10366] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  579.855776][T10366] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  579.865223][T10366] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  579.876060][ T5800] usb 5-1: USB disconnect, device number 63
[  579.957892][ T7489] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.082311][ T7489] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.188498][T10334] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  580.193413][ T4958] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  580.201051][ T7489] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.226036][ T4958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  580.234663][ T4958] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  580.242852][ T4958] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  580.244260][ T4958] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  580.378872][ T7489] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  580.653175][T10388] netlink: 'syz.4.1343': attribute type 268 has an invalid length.
[  581.185224][T10375] rxe_eth0 speed is unknown, defaulting to 1000
[  581.355211][ T5302] 8021q: adding VLAN 0 to HW filter on device eth5
[  581.427481][T10375] vxcan1 speed is unknown, defaulting to 1000
[  582.138022][ T5302] 8021q: adding VLAN 0 to HW filter on device eth6
[  582.167839][T10431] FAULT_INJECTION: forcing a failure.
[  582.167839][T10431] name failslab, interval 1, probability 0, space 0, times 0
[  582.167874][T10431] CPU: 1 UID: 0 PID: 10431 Comm: syz.4.1349 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  582.167913][T10431] Tainted: [L]=SOFTLOCKUP
[  582.167921][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  582.167932][T10431] Call Trace:
[  582.167939][T10431]  <TASK>
[  582.167948][T10431]  dump_stack_lvl+0xe8/0x150
[  582.167983][T10431]  should_fail_ex+0x3eb/0x540
[  582.168011][T10431]  should_failslab+0xa8/0x100
[  582.168043][T10431]  __kmalloc_noprof+0xf9/0x710
[  582.168066][T10431]  ? tomoyo_encode+0x2ad/0x570
[  582.168085][T10431]  ? tomoyo_encode+0x2ad/0x570
[  582.168113][T10431]  tomoyo_encode+0x2ad/0x570
[  582.168141][T10431]  tomoyo_realpath_from_path+0x5fd/0x640
[  582.168175][T10431]  tomoyo_mount_permission+0x3e9/0x9e0
[  582.168196][T10431]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  582.168221][T10431]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  582.168241][T10431]  ? kasan_save_track+0x51/0x90
[  582.168322][T10431]  ? kasan_quarantine_put+0xbb/0x1f0
[  582.168349][T10431]  security_sb_mount+0xe4/0x320
[  582.168374][T10431]  path_mount+0xbc/0x1050
[  582.168400][T10431]  ? user_path_at+0xd4/0x160
[  582.168427][T10431]  __se_sys_mount+0x31d/0x420
[  582.168457][T10431]  ? __pfx___se_sys_mount+0x10/0x10
[  582.168486][T10431]  ? __x64_sys_mount+0x20/0xc0
[  582.168511][T10431]  do_syscall_64+0x166/0x520
[  582.168536][T10431]  ? trace_irq_disable+0x3b/0x140
[  582.168559][T10431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.168579][T10431]  ? clear_bhb_loop+0x70/0xc0
[  582.168603][T10431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.168621][T10431] RIP: 0033:0x7f67df19fb19
[  582.168639][T10431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.168655][T10431] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  582.168676][T10431] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  582.168690][T10431] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180
[  582.168704][T10431] RBP: 00007f67e00ab090 R08: 0000000000000000 R09: 0000000000000000
[  582.168716][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  582.168727][T10431] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  582.168760][T10431]  </TASK>
[  582.168804][T10431] ERROR: Out of memory at tomoyo_realpath_from_path.
[  582.346605][ T4958] Bluetooth: hci0: command tx timeout
[  582.490131][ T7489] hsr_slave_0: left promiscuous mode
[  582.491869][ T7489] hsr_slave_1: left promiscuous mode
[  582.492794][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  582.492813][ T7489] batman_adv: batadv0: Removing interface: batadv_slave_0
[  582.496210][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  582.496230][ T7489] batman_adv: batadv0: Removing interface: batadv_slave_1
[  582.541917][ T7489] veth1_macvtap: left promiscuous mode
[  582.542002][ T7489] veth0_macvtap: left promiscuous mode
[  582.542208][ T7489] veth1_vlan: left promiscuous mode
[  582.542352][ T7489] veth0_vlan: left promiscuous mode
[  583.258378][T10443] ieee802154 phy1 wpan1: encryption failed: -22
[  583.294301][ T7489] team0 (unregistering): Port device team_slave_1 removed
[  583.314611][ T7489] team0 (unregistering): Port device team_slave_0 removed
[  583.316053][T10461] xt_time: invalid argument - start or stop time greater than 23:59:59
[  583.589021][ T5302] 8021q: adding VLAN 0 to HW filter on device eth7
[  584.042309][ T7489] IPVS: stop unused estimator thread 0...
[  584.090746][T10375] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.094042][T10375] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.094184][T10375] bridge_slave_0: entered allmulticast mode
[  584.103849][T10375] bridge_slave_0: entered promiscuous mode
[  584.111263][T10375] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.113797][T10375] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.113935][T10375] bridge_slave_1: entered allmulticast mode
[  584.120361][T10375] bridge_slave_1: entered promiscuous mode
[  584.254866][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  584.265260][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.354777][ T5302] 8021q: adding VLAN 0 to HW filter on device eth8
[  584.362385][T10375] team0: Port device team_slave_0 added
[  584.369508][T10375] team0: Port device team_slave_1 added
[  584.428838][ T4958] Bluetooth: hci0: command tx timeout
[  584.442288][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  584.442305][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.442330][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  584.444298][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  584.444311][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  584.444339][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  584.493332][T10375] hsr_slave_0: entered promiscuous mode
[  584.494360][T10375] hsr_slave_1: entered promiscuous mode
[  584.495176][T10375] debugfs: 'hsr0' already exists in 'hsr'
[  584.495191][T10375] Cannot create hsr debugfs directory
[  584.775240][T10375] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  584.788722][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  584.789600][T10375] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  584.801367][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  584.802512][T10375] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  584.823026][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  584.824228][T10375] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  584.831718][T10375] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  584.920490][T10375] 8021q: adding VLAN 0 to HW filter on device bond0
[  584.938648][T10375] 8021q: adding VLAN 0 to HW filter on device team0
[  584.943223][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  584.943313][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.962488][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  584.962647][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  585.276375][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  585.494984][T10375] veth0_vlan: entered promiscuous mode
[  585.509960][T10375] veth1_vlan: entered promiscuous mode
[  585.539994][T10375] veth0_macvtap: entered promiscuous mode
[  585.543313][T10375] veth1_macvtap: entered promiscuous mode
[  585.557967][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  585.568491][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  585.607227][ T6152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  585.608696][ T6152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  585.629236][   T53] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  585.629284][   T53] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  585.696214][ T7489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.696233][ T7489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  585.728307][ T7489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  585.728329][ T7489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.076553][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  586.246727][ T5883] usb 7-1: Using ep0 maxpacket: 8
[  586.247264][ T5883] usb 7-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  586.248221][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  586.248266][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.250024][ T5883] usb 7-1: config 0 descriptor??
[  586.460842][ T5883] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  586.506674][ T4958] Bluetooth: hci0: command tx timeout
[  586.659731][ T5801] usb 7-1: USB disconnect, device number 2
[  586.659813][    C1] iowarrior 7-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  587.277979][T10543] kernel profiling enabled (shift: 9)
[  587.280584][T10543] netlink: 360 bytes leftover after parsing attributes in process `syz.4.1366'.
[  587.372494][T10547] FAULT_INJECTION: forcing a failure.
[  587.372494][T10547] name failslab, interval 1, probability 0, space 0, times 0
[  587.372528][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.4.1368 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  587.372556][T10547] Tainted: [L]=SOFTLOCKUP
[  587.372564][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  587.372577][T10547] Call Trace:
[  587.372585][T10547]  <TASK>
[  587.372594][T10547]  dump_stack_lvl+0xe8/0x150
[  587.372629][T10547]  should_fail_ex+0x3eb/0x540
[  587.372659][T10547]  should_failslab+0xa8/0x100
[  587.372691][T10547]  __kmalloc_noprof+0xf9/0x710
[  587.372713][T10547]  ? rcu_is_watching+0x16/0xb0
[  587.372740][T10547]  ? tomoyo_realpath_from_path+0xf2/0x640
[  587.372762][T10547]  ? tomoyo_realpath_from_path+0xf2/0x640
[  587.372793][T10547]  tomoyo_realpath_from_path+0xf2/0x640
[  587.372825][T10547]  ? tomoyo_path_number_perm+0x219/0x5f0
[  587.372854][T10547]  tomoyo_path_number_perm+0x246/0x5f0
[  587.372888][T10547]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  587.372916][T10547]  ? __lock_acquire+0x747/0x2de0
[  587.372945][T10547]  ? vfs_write+0x9d5/0xba0
[  587.372979][T10547]  ? do_futex+0x3e7/0x4e0
[  587.373028][T10547]  ? __fget_files+0x2a/0x420
[  587.373056][T10547]  ? __fget_files+0x2a/0x420
[  587.373079][T10547]  ? __fget_files+0x2a/0x420
[  587.373109][T10547]  security_file_ioctl+0xc3/0x2a0
[  587.373139][T10547]  __se_sys_ioctl+0x47/0x170
[  587.373172][T10547]  do_syscall_64+0x166/0x520
[  587.373198][T10547]  ? trace_irq_disable+0x3b/0x140
[  587.373226][T10547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.373246][T10547]  ? clear_bhb_loop+0x70/0xc0
[  587.373272][T10547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.373292][T10547] RIP: 0033:0x7f67df19fb19
[  587.373312][T10547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.373330][T10547] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  587.373361][T10547] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  587.373376][T10547] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000a
[  587.373389][T10547] RBP: 00007f67df237b70 R08: 0000000000000000 R09: 0000000000000000
[  587.373402][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  587.373415][T10547] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  587.373444][T10547]  </TASK>
[  587.373463][T10547] ERROR: Out of memory at tomoyo_realpath_from_path.
[  587.379703][T10547] input: syz0 as /devices/virtual/input/input30
[  587.759644][T10559] loop5: detected capacity change from 0 to 7
[  587.773415][T10559] Dev loop5: unable to read RDB block 7
[  587.773460][T10559]  loop5: AHDI p1 p2 p4
[  587.773480][T10559] loop5: partition table partially beyond EOD, truncated
[  587.774633][T10559] loop5: p1 size 4261412863 extends beyond EOD, truncated
[  587.784823][T10559] loop5: p4 start 3288604672 is beyond EOD, truncated
[  587.863853][T10565] FAULT_INJECTION: forcing a failure.
[  587.863853][T10565] name failslab, interval 1, probability 0, space 0, times 0
[  587.863886][T10565] CPU: 1 UID: 0 PID: 10565 Comm: syz.6.1375 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  587.863913][T10565] Tainted: [L]=SOFTLOCKUP
[  587.863920][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  587.863931][T10565] Call Trace:
[  587.863938][T10565]  <TASK>
[  587.863947][T10565]  dump_stack_lvl+0xe8/0x150
[  587.863982][T10565]  should_fail_ex+0x3eb/0x540
[  587.864008][T10565]  should_failslab+0xa8/0x100
[  587.864038][T10565]  __kvmalloc_node_noprof+0x171/0x820
[  587.864066][T10565]  ? xt_alloc_table_info+0x40/0xb0
[  587.864094][T10565]  ? xt_alloc_table_info+0x40/0xb0
[  587.864131][T10565]  xt_alloc_table_info+0x40/0xb0
[  587.864159][T10565]  ipt_register_table+0xcd/0x310
[  587.864191][T10565]  ? __pfx_ipt_register_table+0x10/0x10
[  587.864215][T10565]  ? __kmalloc_noprof+0x1a6/0x710
[  587.864242][T10565]  ? __asan_memset+0x22/0x50
[  587.864265][T10565]  ? ipt_alloc_initial_table+0x549/0x6a0
[  587.864311][T10565]  iptable_filter_table_init+0x75/0xb0
[  587.864342][T10565]  xt_find_table_lock+0x311/0x400
[  587.864367][T10565]  do_ipt_get_ctl+0x6bd/0x1300
[  587.864400][T10565]  ? do_ip_getsockopt+0x1294/0x1cf0
[  587.864427][T10565]  ? __local_bh_enable_ip+0xd6/0x140
[  587.864455][T10565]  ? do_ip_getsockopt+0x1034/0x1cf0
[  587.864481][T10565]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  587.864518][T10565]  ? __mutex_trylock_common+0x15f/0x270
[  587.864548][T10565]  ? __pfx___mutex_trylock_common+0x10/0x10
[  587.864577][T10565]  ? rcu_is_watching+0x16/0xb0
[  587.864603][T10565]  ? trace_contention_end+0x3d/0x140
[  587.864640][T10565]  ? nf_getsockopt+0x224/0x290
[  587.864670][T10565]  ? __mutex_unlock_slowpath+0x731/0x900
[  587.864698][T10565]  ? futex_unqueue+0x22/0x240
[  587.864725][T10565]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  587.864768][T10565]  nf_getsockopt+0x26e/0x290
[  587.864801][T10565]  ip_getsockopt+0x19e/0x230
[  587.864836][T10565]  ? __pfx_ip_getsockopt+0x10/0x10
[  587.864875][T10565]  udp_getsockopt+0x138/0x2d0
[  587.864909][T10565]  ? __pfx_udp_getsockopt+0x10/0x10
[  587.864948][T10565]  ? __might_fault+0xaf/0x130
[  587.864979][T10565]  ? sock_common_getsockopt+0x2d/0xb0
[  587.865011][T10565]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  587.865042][T10565]  do_sock_getsockopt+0x4aa/0x640
[  587.865072][T10565]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  587.865111][T10565]  ? __fget_files+0x3a2/0x420
[  587.865135][T10565]  ? __fget_files+0x2a/0x420
[  587.865167][T10565]  __x64_sys_getsockopt+0x1a4/0x240
[  587.865197][T10565]  do_syscall_64+0x166/0x520
[  587.865224][T10565]  ? trace_irq_disable+0x3b/0x140
[  587.865247][T10565]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.865268][T10565]  ? clear_bhb_loop+0x70/0xc0
[  587.865300][T10565]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.865320][T10565] RIP: 0033:0x7fbcd499fb19
[  587.865340][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.865359][T10565] RSP: 002b:00007fbcd578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  587.865381][T10565] RAX: ffffffffffffffda RBX: 00007fbcd4c25fa0 RCX: 00007fbcd499fb19
[  587.865396][T10565] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003
[  587.865409][T10565] RBP: 00007fbcd4a37b70 R08: 00002000000001c0 R09: 0000000000000000
[  587.865423][T10565] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000
[  587.865436][T10565] R13: 00007fbcd4c26038 R14: 00007fbcd4c25fa0 R15: 00007ffe2477cfe8
[  587.865473][T10565]  </TASK>
[  587.874554][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  588.536487][ T5853] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  588.587505][ T4958] Bluetooth: hci0: command tx timeout
[  588.707386][ T5853] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  588.708287][ T5853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.708337][ T5853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.710125][ T5853] usb 7-1: config 0 descriptor??
[  588.714001][ T5853] pwc: Askey VC010 type 2 USB webcam detected.
[  589.116925][ T5853] pwc: recv_control_msg error -32 req 02 val 2b00
[  589.117491][ T5853] pwc: recv_control_msg error -32 req 02 val 2700
[  589.319747][ T5853] pwc: recv_control_msg error -32 req 04 val 1000
[  589.320326][ T5853] pwc: recv_control_msg error -32 req 04 val 1300
[  589.522489][ T5853] pwc: recv_control_msg error -32 req 02 val 2000
[  589.523323][ T5853] pwc: recv_control_msg error -32 req 02 val 2100
[  589.524817][T10576] ufs: You didn't specify the type of your ufs filesystem
[  589.524817][T10576] 
[  589.524817][T10576] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  589.524817][T10576] 
[  589.524817][T10576] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  589.525503][ T5853] pwc: recv_control_msg error -32 req 04 val 1500
[  589.585006][ T5853] pwc: recv_control_msg error -32 req 02 val 2500
[  589.594987][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.595519][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.601174][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1381'.
[  589.603358][T10581] bridge_slave_1: left allmulticast mode
[  589.603386][T10581] bridge_slave_1: left promiscuous mode
[  589.603612][T10581] bridge0: port 2(bridge_slave_1) entered disabled state
[  589.613494][ T5853] pwc: recv_control_msg error -71 req 02 val 2400
[  589.614330][T10581] bridge_slave_0: left allmulticast mode
[  589.614352][T10581] bridge_slave_0: left promiscuous mode
[  589.614598][T10581] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.628614][ T5853] pwc: recv_control_msg error -71 req 02 val 2600
[  589.653853][ T5853] pwc: recv_control_msg error -71 req 02 val 2900
[  589.681698][ T5853] pwc: recv_control_msg error -71 req 02 val 2800
[  589.689387][ T5853] pwc: recv_control_msg error -71 req 04 val 1100
[  589.690136][ T5853] pwc: recv_control_msg error -71 req 04 val 1200
[  589.691892][ T5853] pwc: Registered as video103.
[  589.695582][ T5853] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31
[  589.732092][ T5853] usb 7-1: USB disconnect, device number 3
[  590.173024][T10592] FAULT_INJECTION: forcing a failure.
[  590.173024][T10592] name failslab, interval 1, probability 0, space 0, times 0
[  590.173046][T10592] CPU: 0 UID: 0 PID: 10592 Comm: syz.6.1383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.173061][T10592] Tainted: [L]=SOFTLOCKUP
[  590.173065][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  590.173071][T10592] Call Trace:
[  590.173076][T10592]  <TASK>
[  590.173081][T10592]  dump_stack_lvl+0xe8/0x150
[  590.173109][T10592]  should_fail_ex+0x3eb/0x540
[  590.173125][T10592]  should_failslab+0xa8/0x100
[  590.173142][T10592]  __kmalloc_noprof+0xf9/0x710
[  590.173155][T10592]  ? tomoyo_encode+0x2ad/0x570
[  590.173166][T10592]  ? tomoyo_encode+0x2ad/0x570
[  590.173180][T10592]  tomoyo_encode+0x2ad/0x570
[  590.173194][T10592]  tomoyo_realpath_from_path+0x5fd/0x640
[  590.173213][T10592]  tomoyo_mount_permission+0x3e9/0x9e0
[  590.173223][T10592]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  590.173236][T10592]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  590.173246][T10592]  ? kasan_save_track+0x51/0x90
[  590.173285][T10592]  ? kasan_quarantine_put+0xbb/0x1f0
[  590.173299][T10592]  security_sb_mount+0xe4/0x320
[  590.173313][T10592]  path_mount+0xbc/0x1050
[  590.173327][T10592]  ? user_path_at+0xd4/0x160
[  590.173341][T10592]  __se_sys_mount+0x31d/0x420
[  590.173356][T10592]  ? __pfx___se_sys_mount+0x10/0x10
[  590.173372][T10592]  ? __x64_sys_mount+0x20/0xc0
[  590.173384][T10592]  do_syscall_64+0x166/0x520
[  590.173398][T10592]  ? trace_irq_disable+0x3b/0x140
[  590.173411][T10592]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.173421][T10592]  ? clear_bhb_loop+0x70/0xc0
[  590.173434][T10592]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.173444][T10592] RIP: 0033:0x7fbcd499fb19
[  590.173455][T10592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.173464][T10592] RSP: 002b:00007fbcd578f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  590.173476][T10592] RAX: ffffffffffffffda RBX: 00007fbcd4c25fa0 RCX: 00007fbcd499fb19
[  590.173484][T10592] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240
[  590.173491][T10592] RBP: 00007fbcd578f090 R08: 0000000000000000 R09: 0000000000000000
[  590.173498][T10592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  590.173504][T10592] R13: 00007fbcd4c26038 R14: 00007fbcd4c25fa0 R15: 00007ffe2477cfe8
[  590.173521][T10592]  </TASK>
[  590.173531][T10592] ERROR: Out of memory at tomoyo_realpath_from_path.
[  590.554646][  T174] Bluetooth: hci1: Frame reassembly failed (-84)
[  590.696047][T10613] FAULT_INJECTION: forcing a failure.
[  590.696047][T10613] name failslab, interval 1, probability 0, space 0, times 0
[  590.696069][T10613] CPU: 1 UID: 0 PID: 10613 Comm: syz.4.1389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.696084][T10613] Tainted: [L]=SOFTLOCKUP
[  590.696088][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  590.696095][T10613] Call Trace:
[  590.696100][T10613]  <TASK>
[  590.696105][T10613]  dump_stack_lvl+0xe8/0x150
[  590.696128][T10613]  should_fail_ex+0x3eb/0x540
[  590.696148][T10613]  should_failslab+0xa8/0x100
[  590.696166][T10613]  __kmalloc_noprof+0xf9/0x710
[  590.696179][T10613]  ? mpi_powm+0x1c4/0x2480
[  590.696192][T10613]  ? mpi_powm+0x1c4/0x2480
[  590.696209][T10613]  mpi_powm+0x1c4/0x2480
[  590.696248][T10613]  ? __pfx_mpi_powm+0x10/0x10
[  590.696274][T10613]  ? lockdep_hardirqs_on+0x7b/0x110
[  590.696301][T10613]  ? kfree+0x1c7/0x650
[  590.696317][T10613]  ? rsa_enc+0x2e0/0x480
[  590.696342][T10613]  rsa_enc+0x338/0x480
[  590.696363][T10613]  ? __raw_spin_lock_init+0x45/0x100
[  590.696392][T10613]  ? __pfx_rsa_enc+0x10/0x10
[  590.696425][T10613]  crypto_akcipher_sync_encrypt+0x18d/0x230
[  590.696451][T10613]  ? __pfx_crypto_akcipher_sync_encrypt+0x10/0x10
[  590.696493][T10613]  ? crypto_alloc_tfm_node+0x3b5/0x3e0
[  590.696514][T10613]  ? software_key_eds_op+0x3f0/0xc50
[  590.696535][T10613]  software_key_eds_op+0x841/0xc50
[  590.696566][T10613]  ? __pfx_software_key_eds_op+0x10/0x10
[  590.696601][T10613]  ? __kmalloc_noprof+0x1a6/0x710
[  590.696623][T10613]  ? keyctl_pkey_e_d_s+0x1a6/0x310
[  590.696637][T10613]  ? keyctl_pkey_e_d_s+0x1a6/0x310
[  590.696650][T10613]  ? asymmetric_key_eds_op+0xef/0x130
[  590.696667][T10613]  keyctl_pkey_e_d_s+0x20d/0x310
[  590.696682][T10613]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  590.696703][T10613]  __se_sys_keyctl+0x494/0xbc0
[  590.696720][T10613]  ? __pfx___se_sys_keyctl+0x10/0x10
[  590.696736][T10613]  ? __pfx_do_futex+0x10/0x10
[  590.696750][T10613]  ? kmem_cache_free+0x184/0x660
[  590.696767][T10613]  ? __se_sys_futex+0x3a8/0x450
[  590.696786][T10613]  ? rcu_is_watching+0x16/0xb0
[  590.696820][T10613]  ? __x64_sys_keyctl+0x20/0xc0
[  590.696835][T10613]  do_syscall_64+0x166/0x520
[  590.696851][T10613]  ? trace_irq_disable+0x3b/0x140
[  590.696863][T10613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.696874][T10613]  ? clear_bhb_loop+0x70/0xc0
[  590.696887][T10613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.696898][T10613] RIP: 0033:0x7f67df19fb19
[  590.696909][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.696919][T10613] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  590.696931][T10613] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  590.696939][T10613] RDX: 0000200000000d80 RSI: 0000200000000d40 RDI: 0000000000000019
[  590.696946][T10613] RBP: 00007f67df237b70 R08: 0000000000000000 R09: 0000000000000000
[  590.696953][T10613] R10: 0000200000000dc0 R11: 0000000000000246 R12: 0000000000000000
[  590.696960][T10613] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  590.696977][T10613]  </TASK>
[  591.147617][T10627] netlink: ct family unspecified
[  591.473808][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1398'.
[  591.665593][T10643] openvswitch: netlink: Duplicate key (type 6).
[  591.702261][T10645] FAULT_INJECTION: forcing a failure.
[  591.702261][T10645] name failslab, interval 1, probability 0, space 0, times 0
[  591.702282][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.0.1400 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.702296][T10645] Tainted: [L]=SOFTLOCKUP
[  591.702300][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  591.702307][T10645] Call Trace:
[  591.702311][T10645]  <TASK>
[  591.702316][T10645]  dump_stack_lvl+0xe8/0x150
[  591.702337][T10645]  should_fail_ex+0x3eb/0x540
[  591.702352][T10645]  should_failslab+0xa8/0x100
[  591.702368][T10645]  ? security_file_alloc+0x34/0x310
[  591.702383][T10645]  kmem_cache_alloc_noprof+0x9c/0x600
[  591.702396][T10645]  ? rcu_is_watching+0x16/0xb0
[  591.702410][T10645]  ? security_file_alloc+0x34/0x310
[  591.702427][T10645]  security_file_alloc+0x34/0x310
[  591.702442][T10645]  init_file+0x90/0x2b0
[  591.702455][T10645]  alloc_file_pseudo_noaccount+0x137/0x2b0
[  591.702468][T10645]  ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10
[  591.702479][T10645]  ? iput+0x451/0xf00
[  591.702497][T10645]  bdev_file_open_by_dev+0x181/0x240
[  591.702510][T10645]  setup_bdev_super+0x5a/0x680
[  591.702526][T10645]  get_tree_bdev_flags+0x38e/0x500
[  591.702540][T10645]  ? __pfx_exfat_fill_super+0x10/0x10
[  591.702555][T10645]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  591.702575][T10645]  vfs_get_tree+0x92/0x2a0
[  591.702590][T10645]  do_new_mount+0x325/0xb00
[  591.702605][T10645]  ? __pfx_do_new_mount+0x10/0x10
[  591.702627][T10645]  ? ns_capable+0x84/0xe0
[  591.702641][T10645]  ? path_mount+0x647/0x1050
[  591.702655][T10645]  ? user_path_at+0xd4/0x160
[  591.702669][T10645]  __se_sys_mount+0x31d/0x420
[  591.702684][T10645]  ? __pfx___se_sys_mount+0x10/0x10
[  591.702700][T10645]  ? __x64_sys_mount+0x20/0xc0
[  591.702713][T10645]  do_syscall_64+0x166/0x520
[  591.702727][T10645]  ? trace_irq_disable+0x3b/0x140
[  591.702740][T10645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.702751][T10645]  ? clear_bhb_loop+0x70/0xc0
[  591.702763][T10645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.702774][T10645] RIP: 0033:0x7fb09779fb19
[  591.702784][T10645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.702798][T10645] RSP: 002b:00007fb098716028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  591.702816][T10645] RAX: ffffffffffffffda RBX: 00007fb097a25fa0 RCX: 00007fb09779fb19
[  591.702829][T10645] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000200000000040
[  591.702840][T10645] RBP: 00007fb098716090 R08: 0000000000000000 R09: 0000000000000000
[  591.702851][T10645] R10: 0000000000400080 R11: 0000000000000246 R12: 0000000000000002
[  591.702862][T10645] R13: 00007fb097a26038 R14: 00007fb097a25fa0 R15: 00007ffccb8fdfc8
[  591.702880][T10645]  </TASK>
[  591.702930][T10645] /dev/nullb0: Can't open blockdev
[  591.840844][T10649] tipc: Started in network mode
[  591.840864][T10649] tipc: Node identity 1001001, cluster identity 4711
[  591.840876][T10649] tipc: Node number set to 16781313
[  591.957193][T10652] FAULT_INJECTION: forcing a failure.
[  591.957193][T10652] name failslab, interval 1, probability 0, space 0, times 0
[  591.957227][T10652] CPU: 0 UID: 0 PID: 10652 Comm: syz.0.1403 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  591.957254][T10652] Tainted: [L]=SOFTLOCKUP
[  591.957261][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  591.957273][T10652] Call Trace:
[  591.957281][T10652]  <TASK>
[  591.957289][T10652]  dump_stack_lvl+0xe8/0x150
[  591.957322][T10652]  should_fail_ex+0x3eb/0x540
[  591.957350][T10652]  should_failslab+0xa8/0x100
[  591.957380][T10652]  ? alloc_uid+0x151/0x570
[  591.957407][T10652]  kmem_cache_alloc_noprof+0x9c/0x600
[  591.957431][T10652]  ? alloc_uid+0x151/0x570
[  591.957458][T10652]  ? _raw_spin_unlock_irq+0x23/0x50
[  591.957486][T10652]  alloc_uid+0x151/0x570
[  591.957517][T10652]  __sys_setresuid+0x6e2/0xc20
[  591.957549][T10652]  do_syscall_64+0x166/0x520
[  591.957576][T10652]  ? trace_irq_disable+0x3b/0x140
[  591.957599][T10652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.957619][T10652]  ? clear_bhb_loop+0x70/0xc0
[  591.957641][T10652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  591.957660][T10652] RIP: 0033:0x7fb09779fb19
[  591.957678][T10652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.957694][T10652] RSP: 002b:00007fb098716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000075
[  591.957715][T10652] RAX: ffffffffffffffda RBX: 00007fb097a25fa0 RCX: 00007fb09779fb19
[  591.957732][T10652] RDX: 000000000000ee01 RSI: 000000000000ee01 RDI: 000000000000ee00
[  591.957743][T10652] RBP: 00007fb097837b70 R08: 0000000000000000 R09: 0000000000000000
[  591.957755][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  591.957767][T10652] R13: 00007fb097a26038 R14: 00007fb097a25fa0 R15: 00007ffccb8fdfc8
[  591.957798][T10652]  </TASK>
[  592.047039][T10653] netlink: 'syz.6.1404': attribute type 13 has an invalid length.
[  592.047060][T10653] netlink: 'syz.6.1404': attribute type 13 has an invalid length.
[  592.065915][T10653] vxlan0: entered promiscuous mode
[  592.065938][T10653] vxlan0: entered allmulticast mode
[  592.096669][ T7489] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  592.096732][ T7489] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  592.096764][ T7489] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  592.096795][ T7489] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  592.586597][ T4958] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  592.586637][ T5677] Bluetooth: hci1: command 0x1003 tx timeout
[  592.586981][ T5843] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  592.746430][ T5843] usb 7-1: Using ep0 maxpacket: 16
[  592.747252][ T5843] usb 7-1: New USB device found: idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  592.748170][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  592.748197][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  592.748211][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  592.748223][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  592.749782][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.749795][ T5843] usb 7-1: Product: syz
[  592.749803][ T5843] usb 7-1: Manufacturer: syz
[  592.749810][ T5843] usb 7-1: SerialNumber: syz
[  592.752219][ T5843] usb 7-1: config 0 descriptor??
[  592.755723][ T5843] appledisplay 7-1:0.0: Submitting URB failed
[  592.755884][ T5843] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -5
[  592.980279][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.980763][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  593.008325][T10661] UDC core: g1: couldn't find an available UDC or it's busy
[  593.024521][ T5843] usb 7-1: USB disconnect, device number 4
[  593.574103][T10669] FAULT_INJECTION: forcing a failure.
[  593.574103][T10669] name failslab, interval 1, probability 0, space 0, times 0
[  593.574124][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.6.1410 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  593.574139][T10669] Tainted: [L]=SOFTLOCKUP
[  593.574143][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  593.574149][T10669] Call Trace:
[  593.574154][T10669]  <TASK>
[  593.574158][T10669]  dump_stack_lvl+0xe8/0x150
[  593.574179][T10669]  should_fail_ex+0x3eb/0x540
[  593.574195][T10669]  should_failslab+0xa8/0x100
[  593.574210][T10669]  ? vm_area_alloc+0x24/0x140
[  593.574226][T10669]  kmem_cache_alloc_noprof+0x9c/0x600
[  593.574239][T10669]  ? vma_merge_new_range+0x556/0x810
[  593.574251][T10669]  ? vm_area_alloc+0x24/0x140
[  593.574270][T10669]  vm_area_alloc+0x24/0x140
[  593.574286][T10669]  mmap_region+0x18e8/0x2820
[  593.574299][T10669]  ? lock_acquire+0x115/0x350
[  593.574316][T10669]  ? is_bpf_text_address+0x26/0x2b0
[  593.574335][T10669]  ? is_bpf_text_address+0x292/0x2b0
[  593.574350][T10669]  ? __pfx_mmap_region+0x10/0x10
[  593.574364][T10669]  ? kernel_text_address+0xa5/0xe0
[  593.574379][T10669]  ? __kernel_text_address+0xd/0x30
[  593.574390][T10669]  ? unwind_get_return_address+0x4d/0x90
[  593.574403][T10669]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  593.574415][T10669]  ? arch_stack_walk+0xfb/0x150
[  593.574480][T10669]  ? __mutex_unlock_slowpath+0x731/0x900
[  593.574503][T10669]  ? mm_get_unmapped_area+0xd3/0x100
[  593.574520][T10669]  ? cap_mmap_addr+0xaa/0xf0
[  593.574535][T10669]  ? bpf_lsm_mmap_addr+0x9/0x50
[  593.574548][T10669]  ? security_mmap_addr+0x71/0x240
[  593.574564][T10669]  ? memfd_check_seals_mmap+0x8e/0x1f0
[  593.574577][T10669]  do_mmap+0xe0a/0x1300
[  593.574596][T10669]  ? __pfx_do_mmap+0x10/0x10
[  593.574616][T10669]  ? vm_mmap_pgoff+0x1ed/0x520
[  593.574627][T10669]  ? down_write_killable+0x179/0x230
[  593.574636][T10669]  ? rcu_is_watching+0x16/0xb0
[  593.574651][T10669]  ? __pfx_down_write_killable+0x10/0x10
[  593.574666][T10669]  ? apparmor_mmap_file+0x2e7/0x390
[  593.574683][T10669]  vm_mmap_pgoff+0x27a/0x520
[  593.574699][T10669]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  593.574711][T10669]  ? __fget_files+0x2a/0x420
[  593.574726][T10669]  ? __fget_files+0x3a2/0x420
[  593.574737][T10669]  ? __fget_files+0x2a/0x420
[  593.574751][T10669]  ksys_mmap_pgoff+0x4dc/0x760
[  593.574769][T10669]  do_syscall_64+0x166/0x520
[  593.574783][T10669]  ? trace_irq_disable+0x3b/0x140
[  593.574795][T10669]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.574806][T10669]  ? clear_bhb_loop+0x70/0xc0
[  593.574819][T10669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.574829][T10669] RIP: 0033:0x7fbcd499f882
[  593.574840][T10669] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64
[  593.574849][T10669] RSP: 002b:00007fbcd578eed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  593.574861][T10669] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbcd499f882
[  593.574875][T10669] RDX: 0000000000000003 RSI: 0000000000011080 RDI: 0000000000000000
[  593.574881][T10669] RBP: 0000000000008001 R08: 0000000000000007 R09: 0000000000000000
[  593.574887][T10669] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000c08
[  593.574895][T10669] R13: 0000200000000c10 R14: 00007fbcd578efd8 R15: 0000000000000000
[  593.574911][T10669]  </TASK>
[  593.921973][ T1096] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  593.922042][ T1096] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110
[  593.925867][ T1096] usb 6-1: USB disconnect, device number 2
[  594.246564][ T1096] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  594.286633][ T5883] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  594.338955][T10687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1417'.
[  594.338990][T10687] : renamed from veth1_vlan (while UP)
[  594.397994][ T1096] usb 6-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  594.399101][ T1096] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.399144][ T1096] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  594.399156][ T1096] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  594.399168][ T1096] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  594.399191][ T1096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.451299][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short
[  594.451349][ T5883] usb 7-1: New USB device found: idVendor=0582, idProduct=004c, bcdDevice=0.40
[  594.453448][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  594.453526][ T5883] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  594.457541][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.457566][ T5883] usb 7-1: Product: syz
[  594.457580][ T5883] usb 7-1: Manufacturer: syz
[  594.457593][ T5883] usb 7-1: SerialNumber: syz
[  594.671261][T10680] sg_write: data in/out 831877/136 bytes for SCSI command 0x0-- guessing data in;
[  594.671261][T10680]    program syz.6.1414 not setting count and/or reply_len properly
[  594.692565][ T5883] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  594.693042][ T5883] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  594.693065][ T5883] usb 7-1: 2:1 : unsupported format bits 0xffffd200
[  594.693086][ T5883] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[  594.791142][ T5883] usb 7-1: USB disconnect, device number 5
[  594.926798][ T5688] udevd[5688]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  595.222521][ T1096] gud 6-1:1.0: Failed to get connectors (error=-5)
[  595.222556][ T1096] gud 6-1:1.0: probe with driver gud failed with error -5
[  595.478803][T10698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  595.513953][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'.
[  595.522772][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'.
[  595.777960][T10716] FAULT_INJECTION: forcing a failure.
[  595.777960][T10716] name failslab, interval 1, probability 0, space 0, times 0
[  595.777995][T10716] CPU: 0 UID: 0 PID: 10716 Comm: syz.0.1422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  595.778022][T10716] Tainted: [L]=SOFTLOCKUP
[  595.778030][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  595.778042][T10716] Call Trace:
[  595.778050][T10716]  <TASK>
[  595.778059][T10716]  dump_stack_lvl+0xe8/0x150
[  595.778096][T10716]  should_fail_ex+0x3eb/0x540
[  595.778126][T10716]  should_failslab+0xa8/0x100
[  595.778157][T10716]  __kmalloc_noprof+0xf9/0x710
[  595.778180][T10716]  ? prepare_creds+0x30/0x820
[  595.778202][T10716]  ? security_prepare_creds+0x52/0x360
[  595.778230][T10716]  ? security_prepare_creds+0x52/0x360
[  595.778261][T10716]  ? kmem_cache_alloc_noprof+0x151/0x600
[  595.778285][T10716]  security_prepare_creds+0x52/0x360
[  595.778317][T10716]  prepare_creds+0x57d/0x820
[  595.778356][T10716]  cap_task_prctl+0x7b1/0xa40
[  595.778389][T10716]  security_task_prctl+0xf6/0x190
[  595.778416][T10716]  __se_sys_prctl+0xbf/0x1900
[  595.778442][T10716]  ? __pfx___se_sys_prctl+0x10/0x10
[  595.778469][T10716]  ? __x64_sys_prctl+0x20/0xc0
[  595.778491][T10716]  do_syscall_64+0x166/0x520
[  595.778517][T10716]  ? trace_irq_disable+0x3b/0x140
[  595.778542][T10716]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.778562][T10716]  ? clear_bhb_loop+0x70/0xc0
[  595.778587][T10716]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  595.778607][T10716] RIP: 0033:0x7fb09779fb19
[  595.778624][T10716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  595.778639][T10716] RSP: 002b:00007fb098716028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  595.778660][T10716] RAX: ffffffffffffffda RBX: 00007fb097a25fa0 RCX: 00007fb09779fb19
[  595.778675][T10716] RDX: 0000000000000000 RSI: 000000000000001d RDI: 000000000000001c
[  595.778687][T10716] RBP: 00007fb097837b70 R08: 0000000000000000 R09: 0000000000000000
[  595.778700][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.778712][T10716] R13: 00007fb097a26038 R14: 00007fb097a25fa0 R15: 00007ffccb8fdfc8
[  595.778740][T10716]  </TASK>
[  596.475333][T10737] FAULT_INJECTION: forcing a failure.
[  596.475333][T10737] name failslab, interval 1, probability 0, space 0, times 0
[  596.475366][T10737] CPU: 1 UID: 0 PID: 10737 Comm: syz.4.1425 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  596.475394][T10737] Tainted: [L]=SOFTLOCKUP
[  596.475401][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  596.475414][T10737] Call Trace:
[  596.475422][T10737]  <TASK>
[  596.475431][T10737]  dump_stack_lvl+0xe8/0x150
[  596.475466][T10737]  should_fail_ex+0x3eb/0x540
[  596.475492][T10737]  ? __pfx_sock_alloc_inode+0x10/0x10
[  596.475520][T10737]  should_failslab+0xa8/0x100
[  596.475549][T10737]  ? __pfx_sock_alloc_inode+0x10/0x10
[  596.475574][T10737]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  596.475597][T10737]  ? sock_alloc_inode+0x2c/0x1a0
[  596.475622][T10737]  ? sock_alloc_inode+0x2c/0x1a0
[  596.475653][T10737]  ? __pfx_sock_alloc_inode+0x10/0x10
[  596.475676][T10737]  sock_alloc_inode+0x2c/0x1a0
[  596.475701][T10737]  ? __pfx_sock_alloc_inode+0x10/0x10
[  596.475726][T10737]  alloc_inode+0x6a/0x1b0
[  596.475747][T10737]  __sock_create+0x127/0xac0
[  596.475796][T10737]  __sys_socket+0xd6/0x1b0
[  596.475826][T10737]  __x64_sys_socket+0x7a/0x90
[  596.475856][T10737]  do_syscall_64+0x166/0x520
[  596.475881][T10737]  ? trace_irq_disable+0x3b/0x140
[  596.475904][T10737]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.475923][T10737]  ? clear_bhb_loop+0x70/0xc0
[  596.475945][T10737]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.475964][T10737] RIP: 0033:0x7f67df19fb19
[  596.475983][T10737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  596.476000][T10737] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  596.476023][T10737] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  596.476039][T10737] RDX: 0000000000000300 RSI: 0000000000000002 RDI: 0000000000000011
[  596.476052][T10737] RBP: 00007f67df237b70 R08: 0000000000000000 R09: 0000000000000000
[  596.476065][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.476078][T10737] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  596.476111][T10737]  </TASK>
[  596.476148][T10737] socket: no more sockets
[  596.531459][ T5883] usb 6-1: USB disconnect, device number 3
[  596.860341][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.860807][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.345311][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1435'.
[  597.347038][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1435'.
[  597.357313][ T5770] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  597.517094][ T5770] usb 6-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00
[  597.518111][ T5770] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  597.518142][ T5770] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  597.518167][ T5770] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  597.518216][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.524148][T10759] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  597.738787][T10759] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  597.823886][ T5770] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  597.844256][ T5770] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input32
[  597.889437][ T5770] usb 6-1: USB disconnect, device number 4
[  597.889530][    C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  598.919401][ T5701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.103649][ T5701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.189279][ T5701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.325955][ T5677] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  599.334770][ T5677] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  599.350173][ T5677] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  599.361800][ T5677] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  599.362400][ T5701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.362499][ T5677] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  599.862480][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.886568][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.892927][ T5701] bond0 (unregistering): Released all slaves
[  600.193630][T10815] syz.0.1444(10815): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  600.326248][T10821] FAULT_INJECTION: forcing a failure.
[  600.326248][T10821] name failslab, interval 1, probability 0, space 0, times 0
[  600.327349][T10821] CPU: 0 UID: 0 PID: 10821 Comm: syz.0.1445 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.327380][T10821] Tainted: [L]=SOFTLOCKUP
[  600.327388][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  600.327400][T10821] Call Trace:
[  600.327409][T10821]  <TASK>
[  600.327418][T10821]  dump_stack_lvl+0xe8/0x150
[  600.327453][T10821]  should_fail_ex+0x3eb/0x540
[  600.327482][T10821]  should_failslab+0xa8/0x100
[  600.327515][T10821]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  600.327537][T10821]  ? tty_init_dev+0x74/0x4d0
[  600.327561][T10821]  ? alloc_inode+0xb8/0x1b0
[  600.327581][T10821]  ? alloc_inode+0xb8/0x1b0
[  600.327610][T10821]  alloc_inode+0xb8/0x1b0
[  600.327633][T10821]  new_inode+0x1f/0x170
[  600.327661][T10821]  devpts_pty_new+0xd9/0x5d0
[  600.327691][T10821]  ? __pfx_devpts_pty_new+0x10/0x10
[  600.327721][T10821]  ? do_raw_spin_unlock+0xf5/0x200
[  600.327756][T10821]  ptmx_open+0x1c8/0x2e0
[  600.327782][T10821]  chrdev_open+0x4d9/0x600
[  600.327816][T10821]  ? __pfx_chrdev_open+0x10/0x10
[  600.327845][T10821]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  600.327874][T10821]  ? devcgroup_check_permission+0x31/0x8f0
[  600.327905][T10821]  ? __pfx_chrdev_open+0x10/0x10
[  600.327934][T10821]  do_dentry_open+0x80e/0x1360
[  600.327972][T10821]  vfs_open_consume+0x4a/0x350
[  600.327991][T10821]  ? path_openat+0x16e1/0x20f0
[  600.328021][T10821]  path_openat+0x16fc/0x20f0
[  600.328073][T10821]  do_file_open+0x23e/0x4a0
[  600.328103][T10821]  ? __pfx_do_file_open+0x10/0x10
[  600.328149][T10821]  ? _raw_spin_unlock+0x28/0x50
[  600.328171][T10821]  ? alloc_fd+0x6af/0x760
[  600.328206][T10821]  do_sys_openat2+0x115/0x200
[  600.328228][T10821]  ? __se_sys_futex+0x3a8/0x450
[  600.328257][T10821]  ? __pfx_do_sys_openat2+0x10/0x10
[  600.328282][T10821]  ? rcu_is_watching+0x16/0xb0
[  600.328311][T10821]  __x64_sys_openat+0x138/0x170
[  600.328339][T10821]  do_syscall_64+0x166/0x520
[  600.328365][T10821]  ? trace_irq_disable+0x3b/0x140
[  600.328390][T10821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.328411][T10821]  ? clear_bhb_loop+0x70/0xc0
[  600.328436][T10821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.328457][T10821] RIP: 0033:0x7fb09779fb19
[  600.328476][T10821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.328494][T10821] RSP: 002b:00007fb098716028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  600.328517][T10821] RAX: ffffffffffffffda RBX: 00007fb097a25fa0 RCX: 00007fb09779fb19
[  600.328531][T10821] RDX: 0000000000000041 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  600.328545][T10821] RBP: 00007fb097837b70 R08: 0000000000000000 R09: 0000000000000000
[  600.328558][T10821] R10: 000000000000003f R11: 0000000000000246 R12: 0000000000000000
[  600.328568][T10821] R13: 00007fb097a26038 R14: 00007fb097a25fa0 R15: 00007ffccb8fdfc8
[  600.328598][T10821]  </TASK>
[  600.520736][T10793] rxe_eth0 speed is unknown, defaulting to 1000
[  600.738214][T10827] FAULT_INJECTION: forcing a failure.
[  600.738214][T10827] name failslab, interval 1, probability 0, space 0, times 0
[  600.738250][T10827] CPU: 1 UID: 0 PID: 10827 Comm: syz.4.1447 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.738278][T10827] Tainted: [L]=SOFTLOCKUP
[  600.738286][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  600.738299][T10827] Call Trace:
[  600.738308][T10827]  <TASK>
[  600.738317][T10827]  dump_stack_lvl+0xe8/0x150
[  600.738351][T10827]  should_fail_ex+0x3eb/0x540
[  600.738381][T10827]  should_failslab+0xa8/0x100
[  600.738422][T10827]  __kmalloc_cache_noprof+0x9e/0x600
[  600.738447][T10827]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  600.738476][T10827]  ? kobject_create_and_add+0x58/0x230
[  600.738497][T10827]  ? kobject_create_and_add+0x58/0x230
[  600.738528][T10827]  kobject_create_and_add+0x58/0x230
[  600.738555][T10827]  __add_disk+0x606/0xdb0
[  600.738591][T10827]  add_disk_fwnode+0x143/0x3a0
[  600.738621][T10827]  md_alloc+0x82a/0xf40
[  600.738654][T10827]  md_alloc_and_put+0x1a/0x1f0
[  600.738678][T10827]  add_named_array+0x240/0x350
[  600.738701][T10827]  ? __pfx___mutex_lock+0x10/0x10
[  600.738728][T10827]  ? __pfx_add_named_array+0x10/0x10
[  600.738756][T10827]  ? sysfs_file_kobj+0x1a/0x230
[  600.738796][T10827]  param_attr_store+0x214/0x310
[  600.738829][T10827]  ? __pfx_param_attr_store+0x10/0x10
[  600.738854][T10827]  ? __pfx_sysfs_kf_write+0x10/0x10
[  600.738880][T10827]  module_attr_store+0x65/0x90
[  600.738908][T10827]  kernfs_fop_write_iter+0x3a4/0x540
[  600.738939][T10827]  vfs_write+0x612/0xba0
[  600.738975][T10827]  ? __pfx_vfs_write+0x10/0x10
[  600.739003][T10827]  ? __fget_files+0x3a2/0x420
[  600.739026][T10827]  ? __fget_files+0x2a/0x420
[  600.739054][T10827]  ? fdget+0x1ac/0x250
[  600.739084][T10827]  ksys_write+0x150/0x270
[  600.739113][T10827]  ? __pfx_ksys_write+0x10/0x10
[  600.739152][T10827]  do_syscall_64+0x166/0x520
[  600.739179][T10827]  ? trace_irq_disable+0x3b/0x140
[  600.739200][T10827]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.739220][T10827]  ? clear_bhb_loop+0x70/0xc0
[  600.739243][T10827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  600.739263][T10827] RIP: 0033:0x7f67df19fb19
[  600.739284][T10827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  600.739300][T10827] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  600.739322][T10827] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  600.739336][T10827] RDX: 0000000000000008 RSI: 0000200000000640 RDI: 0000000000000006
[  600.739349][T10827] RBP: 00007f67df237b70 R08: 0000000000000000 R09: 0000000000000000
[  600.739362][T10827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  600.739373][T10827] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  600.739405][T10827]  </TASK>
[  600.978781][T10827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  601.070269][T10832] FAULT_INJECTION: forcing a failure.
[  601.070269][T10832] name failslab, interval 1, probability 0, space 0, times 0
[  601.070300][T10832] CPU: 1 UID: 0 PID: 10832 Comm: syz.6.1448 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.070326][T10832] Tainted: [L]=SOFTLOCKUP
[  601.070334][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  601.070345][T10832] Call Trace:
[  601.070352][T10832]  <TASK>
[  601.070361][T10832]  dump_stack_lvl+0xe8/0x150
[  601.070423][T10832]  should_fail_ex+0x3eb/0x540
[  601.070451][T10832]  should_failslab+0xa8/0x100
[  601.070480][T10832]  __kmalloc_noprof+0xf9/0x710
[  601.070500][T10832]  ? rcu_is_watching+0x16/0xb0
[  601.070526][T10832]  ? tomoyo_realpath_from_path+0xf2/0x640
[  601.070547][T10832]  ? tomoyo_realpath_from_path+0xf2/0x640
[  601.070575][T10832]  tomoyo_realpath_from_path+0xf2/0x640
[  601.070610][T10832]  tomoyo_check_open_permission+0x229/0x470
[  601.070640][T10832]  ? tomoyo_check_open_permission+0x1d3/0x470
[  601.070666][T10832]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  601.070694][T10832]  ? __asan_memset+0x22/0x50
[  601.070720][T10832]  ? seqcount_lockdep_reader_access+0xea/0x100
[  601.070768][T10832]  ? devcgroup_check_permission+0x31/0x8f0
[  601.070797][T10832]  security_file_open+0xa9/0x240
[  601.070822][T10832]  do_dentry_open+0x495/0x1360
[  601.070852][T10832]  vfs_open_consume+0x4a/0x350
[  601.070870][T10832]  ? path_openat+0x16e1/0x20f0
[  601.070897][T10832]  path_openat+0x16fc/0x20f0
[  601.070942][T10832]  do_file_open+0x23e/0x4a0
[  601.070974][T10832]  ? __pfx_do_file_open+0x10/0x10
[  601.071021][T10832]  ? _raw_spin_unlock+0x28/0x50
[  601.071044][T10832]  ? alloc_fd+0x6af/0x760
[  601.071078][T10832]  do_sys_openat2+0x115/0x200
[  601.071101][T10832]  ? __pfx_do_sys_openat2+0x10/0x10
[  601.071123][T10832]  ? ksys_write+0x242/0x270
[  601.071155][T10832]  ? __pfx_ksys_write+0x10/0x10
[  601.071183][T10832]  __x64_sys_openat+0x138/0x170
[  601.071209][T10832]  do_syscall_64+0x166/0x520
[  601.071237][T10832]  ? trace_irq_disable+0x3b/0x140
[  601.071259][T10832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.071278][T10832]  ? clear_bhb_loop+0x70/0xc0
[  601.071302][T10832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.071321][T10832] RIP: 0033:0x7fbcd499fb19
[  601.071340][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.071356][T10832] RSP: 002b:00007fbcd578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  601.071377][T10832] RAX: ffffffffffffffda RBX: 00007fbcd4c25fa0 RCX: 00007fbcd499fb19
[  601.071398][T10832] RDX: 0000000000000041 RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  601.071411][T10832] RBP: 00007fbcd578f090 R08: 0000000000000000 R09: 0000000000000000
[  601.071422][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  601.071434][T10832] R13: 00007fbcd4c26038 R14: 00007fbcd4c25fa0 R15: 00007ffe2477cfe8
[  601.071466][T10832]  </TASK>
[  601.071504][T10832] ERROR: Out of memory at tomoyo_realpath_from_path.
[  601.407195][T10838] FAULT_INJECTION: forcing a failure.
[  601.407195][T10838] name failslab, interval 1, probability 0, space 0, times 0
[  601.407228][T10838] CPU: 0 UID: 0 PID: 10838 Comm: syz.4.1450 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  601.407257][T10838] Tainted: [L]=SOFTLOCKUP
[  601.407265][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  601.407276][T10838] Call Trace:
[  601.407292][T10838]  <TASK>
[  601.407301][T10838]  dump_stack_lvl+0xe8/0x150
[  601.407333][T10838]  should_fail_ex+0x3eb/0x540
[  601.407362][T10838]  should_failslab+0xa8/0x100
[  601.407389][T10838]  ? mas_alloc_nodes+0x291/0x350
[  601.407415][T10838]  kmem_cache_alloc_noprof+0x9c/0x600
[  601.407440][T10838]  ? mas_alloc_nodes+0x291/0x350
[  601.407472][T10838]  mas_alloc_nodes+0x291/0x350
[  601.407502][T10838]  mas_preallocate+0x42a/0x840
[  601.407528][T10838]  ? rcu_is_watching+0x16/0xb0
[  601.407554][T10838]  ? trace_kmem_cache_alloc+0x29/0xe0
[  601.407574][T10838]  ? __pfx_mas_preallocate+0x10/0x10
[  601.407614][T10838]  ? __mas_set_range+0x11a/0x3a0
[  601.407645][T10838]  __split_vma+0x414/0x8a0
[  601.407676][T10838]  ? __pfx___split_vma+0x10/0x10
[  601.407712][T10838]  ? mas_find+0x6d6/0xcb0
[  601.407742][T10838]  vms_gather_munmap_vmas+0x4e3/0x1370
[  601.407782][T10838]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  601.407812][T10838]  ? mas_walk+0x37e/0x490
[  601.407846][T10838]  mmap_region+0x90a/0x2820
[  601.407894][T10838]  ? __pfx_mmap_region+0x10/0x10
[  601.407920][T10838]  ? lock_acquire+0x115/0x350
[  601.407959][T10838]  ? process_measurement+0x7b2/0x1c10
[  601.407989][T10838]  ? up_write+0x19d/0x4a0
[  601.408027][T10838]  ? __lock_acquire+0x747/0x2de0
[  601.408138][T10838]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  601.408168][T10838]  ? __lock_acquire+0x747/0x2de0
[  601.408190][T10838]  ? cap_mmap_addr+0xaa/0xf0
[  601.408217][T10838]  ? bpf_lsm_mmap_addr+0x9/0x50
[  601.408240][T10838]  ? security_mmap_addr+0x71/0x240
[  601.408269][T10838]  ? memfd_check_seals_mmap+0x8e/0x1f0
[  601.408299][T10838]  do_mmap+0xe0a/0x1300
[  601.408325][T10838]  ? get_pid_task+0x20/0x1f0
[  601.408352][T10838]  ? __pfx_do_mmap+0x10/0x10
[  601.408390][T10838]  ? vm_mmap_pgoff+0x1ed/0x520
[  601.408410][T10838]  ? down_write_killable+0x179/0x230
[  601.408432][T10838]  ? __pfx_down_write_killable+0x10/0x10
[  601.408461][T10838]  ? apparmor_mmap_file+0x2e7/0x390
[  601.408493][T10838]  vm_mmap_pgoff+0x27a/0x520
[  601.408522][T10838]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  601.408546][T10838]  ? __fget_files+0x2a/0x420
[  601.408573][T10838]  ? __fget_files+0x3a2/0x420
[  601.408594][T10838]  ? __fget_files+0x2a/0x420
[  601.408622][T10838]  ksys_mmap_pgoff+0x4dc/0x760
[  601.408655][T10838]  do_syscall_64+0x166/0x520
[  601.408680][T10838]  ? trace_irq_disable+0x3b/0x140
[  601.408703][T10838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.408722][T10838]  ? clear_bhb_loop+0x70/0xc0
[  601.408746][T10838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.408764][T10838] RIP: 0033:0x7f67df19fb19
[  601.408783][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.408799][T10838] RSP: 002b:00007f67e00ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  601.408820][T10838] RAX: ffffffffffffffda RBX: 00007f67df425fa0 RCX: 00007f67df19fb19
[  601.408834][T10838] RDX: 0000000000000003 RSI: 0000000000003000 RDI: 0000200000ffc000
[  601.408847][T10838] RBP: 00007f67e00ab090 R08: 0000000000000003 R09: 0000000000000000
[  601.408859][T10838] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[  601.408870][T10838] R13: 00007f67df426038 R14: 00007f67df425fa0 R15: 00007ffd3625e778
[  601.408903][T10838]  </TASK>
[  601.476448][ T4958] Bluetooth: hci1: command tx timeout
[  601.939873][ T5302] 8021q: adding VLAN 0 to HW filter on device eth9
[  601.998629][ T5701] hsr_slave_0: left promiscuous mode
[  602.004061][ T5701] hsr_slave_1: left promiscuous mode
[  602.005047][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  602.005067][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  602.034569][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  602.034592][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  602.057947][ T5843] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  602.062492][ T5701] veth1_macvtap: left promiscuous mode
[  602.062574][ T5701] veth0_macvtap: left promiscuous mode
[  602.065674][ T5701] veth1_vlan: left promiscuous mode
[  602.066174][ T5701] veth0_vlan: left promiscuous mode
[  602.248039][ T5843] usb 7-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  602.250557][ T5843] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  602.250590][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.275927][ T5843] gspca_main: stv0680-2.14.0 probing 041e:4007
[  602.372273][ T5701] team0 (unregistering): Port device team_slave_1 removed
[  602.384539][ T5701] team0 (unregistering): Port device team_slave_0 removed
[  602.494728][T10793] vxcan1 speed is unknown, defaulting to 1000
[  603.230683][T10793] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.232462][T10793] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.232613][T10793] bridge_slave_0: entered allmulticast mode
[  603.235983][T10793] bridge_slave_0: entered promiscuous mode
[  603.269305][T10793] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.269397][T10793] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.269533][T10793] bridge_slave_1: entered allmulticast mode
[  603.272377][T10793] bridge_slave_1: entered promiscuous mode
[  603.279249][ T5302] 8021q: adding VLAN 0 to HW filter on device eth10
[  603.320699][ T5843] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  603.320723][ T5843] stv0680 7-1:4.0: STV(e): camera ping failed!!
[  603.321419][ T5843] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  603.321436][ T5843] stv0680 7-1:4.0: last error: 0,  command = 0x0
[  603.353297][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.360489][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.434252][T10793] team0: Port device team_slave_0 added
[  603.440524][T10793] team0: Port device team_slave_1 added
[  603.525327][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.525344][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.525369][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.566584][ T4958] Bluetooth: hci1: command tx timeout
[  603.583159][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.583176][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.583199][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.677362][ T1096] usb 7-1: USB disconnect, device number 6
[  603.738225][T10793] hsr_slave_0: entered promiscuous mode
[  603.739252][T10793] hsr_slave_1: entered promiscuous mode
[  603.740012][T10793] debugfs: 'hsr0' already exists in 'hsr'
[  603.740028][T10793] Cannot create hsr debugfs directory
[  604.007437][T10793] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  604.011429][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  604.012292][T10793] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  604.015955][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  604.045211][T10793] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  604.058390][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  604.059497][T10793] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  604.063015][T10793] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  604.161085][ T5302] 8021q: adding VLAN 0 to HW filter on device eth11
[  604.183613][T10793] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.218620][T10793] 8021q: adding VLAN 0 to HW filter on device team0
[  604.225929][  T174] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.225991][  T174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.258988][  T174] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.259086][  T174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.061846][T10793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.073064][ T5302] 8021q: adding VLAN 0 to HW filter on device eth12
[  605.509279][T10966] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  605.512439][T10966] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  605.516534][T10966] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  605.516650][T10966] ovl_remap_lower_ino: 136 callbacks suppressed
[  605.519763][T10966] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3)
[  605.519813][T10966] overlayfs: d_ino too big (gadget, ino=4611686018427391269, xinobits=3)
[  605.519836][T10966] overlayfs: d_ino too big (snd_seq, ino=4611686018427391461, xinobits=3)
[  605.519857][T10966] overlayfs: d_ino too big (netdevsim, ino=4611686018427412539, xinobits=3)
[  605.519879][T10966] overlayfs: d_ino too big (serio, ino=4611686018427391286, xinobits=3)
[  605.519900][T10966] overlayfs: d_ino too big (ulpi, ino=4611686018427391221, xinobits=3)
[  605.519921][T10966] overlayfs: d_ino too big (coreboot, ino=4611686018427391372, xinobits=3)
[  605.519942][T10966] overlayfs: d_ino too big (hdaudio, ino=4611686018427391467, xinobits=3)
[  605.519963][T10966] overlayfs: d_ino too big (iio, ino=4611686018427391403, xinobits=3)
[  605.519983][T10966] overlayfs: d_ino too big (firewire, ino=4611686018427412553, xinobits=3)
[  605.612525][T10793] veth0_vlan: entered promiscuous mode
[  605.630960][T10793] veth1_vlan: entered promiscuous mode
[  605.637858][ T4958] Bluetooth: hci1: command tx timeout
[  605.687900][T10970] comedi comedi0: dt2801: I/O base address or length out of range
[  605.692664][T10793] veth0_macvtap: entered promiscuous mode
[  605.709822][T10793] veth1_macvtap: entered promiscuous mode
[  605.725995][T10793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  605.740941][T10793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  605.756464][  T174] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  605.756506][  T174] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  605.756545][  T174] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  605.756576][  T174] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  605.891707][  T174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.891729][  T174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.946632][ T1096] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  605.950075][ T7489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.950096][ T7489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.097554][ T1096] usb 7-1: not running at top speed; connect to a high speed hub
[  606.097593][ T1096] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00
[  606.098606][ T1096] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  606.098653][ T1096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.102384][T10970] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  606.104385][ T1096] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  606.169885][ T1096] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  606.411794][ T5843] usb 7-1: USB disconnect, device number 7
[  606.442689][ T5843] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  606.443448][ T5843] cyberjack 7-1:1.0: device disconnected
[  607.218461][T11010] FAULT_INJECTION: forcing a failure.
[  607.218461][T11010] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  607.218483][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.6.1484 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  607.218497][T11010] Tainted: [L]=SOFTLOCKUP
[  607.218501][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  607.218508][T11010] Call Trace:
[  607.218513][T11010]  <TASK>
[  607.218518][T11010]  dump_stack_lvl+0xe8/0x150
[  607.218538][T11010]  should_fail_ex+0x3eb/0x540
[  607.218554][T11010]  _copy_from_user+0x2d/0xb0
[  607.218568][T11010]  input_event_from_user+0xb1/0x290
[  607.218584][T11010]  ? __pfx_input_event_from_user+0x10/0x10
[  607.218605][T11010]  evdev_write+0x2c7/0x4c0
[  607.218618][T11010]  ? get_pid_task+0x20/0x1f0
[  607.218631][T11010]  ? __pfx_evdev_write+0x10/0x10
[  607.218645][T11010]  ? bpf_lsm_file_permission+0x9/0x20
[  607.218658][T11010]  ? security_file_permission+0x75/0x260
[  607.218674][T11010]  ? rw_verify_area+0x203/0x4c0
[  607.218689][T11010]  ? __pfx_evdev_write+0x10/0x10
[  607.218702][T11010]  vfs_write+0x296/0xba0
[  607.218719][T11010]  ? __pfx_vfs_write+0x10/0x10
[  607.218733][T11010]  ? __fget_files+0x2a/0x420
[  607.218745][T11010]  ? __fget_files+0x3a2/0x420
[  607.218756][T11010]  ? __fget_files+0x2a/0x420
[  607.218770][T11010]  ? fdget+0x1ac/0x250
[  607.218786][T11010]  ksys_write+0x150/0x270
[  607.218800][T11010]  ? __pfx_ksys_write+0x10/0x10
[  607.218820][T11010]  do_syscall_64+0x166/0x520
[  607.218834][T11010]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.218845][T11010]  ? clear_bhb_loop+0x70/0xc0
[  607.218857][T11010]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  607.218867][T11010] RIP: 0033:0x7fbcd499fb19
[  607.218877][T11010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  607.218886][T11010] RSP: 002b:00007fbcd578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  607.218898][T11010] RAX: ffffffffffffffda RBX: 00007fbcd4c25fa0 RCX: 00007fbcd499fb19
[  607.218905][T11010] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  607.218912][T11010] RBP: 00007fbcd578f090 R08: 0000000000000000 R09: 0000000000000000
[  607.218919][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  607.218925][T11010] R13: 00007fbcd4c26038 R14: 00007fbcd4c25fa0 R15: 00007ffe2477cfe8
[  607.218945][T11010]  </TASK>
[  607.409167][T11014] mac80211_hwsim hwsim15 ..ãc¤±: renamed from wlan1 (while UP)
[  607.702057][T11027] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1491'.
[  607.703308][T11027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.717353][ T4958] Bluetooth: hci1: command tx timeout
[  607.745602][T11028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  608.006386][ T5770] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  608.156455][ T5770] usb 7-1: Using ep0 maxpacket: 16
[  608.157614][ T5770] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  608.160203][ T5770] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.160233][ T5770] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.160255][ T5770] usb 7-1: config 0 interface 0 has no altsetting 0
[  608.160275][ T5770] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.162226][ T5770] usb 7-1: config 0 descriptor??
[  608.578039][ T5770] hid_parser_main: 74 callbacks suppressed
[  608.578064][ T5770] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  608.578095][ T5770] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  608.578121][ T5770] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  608.578148][ T5770] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  608.578174][ T5770] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0
[  608.579218][ T5770] mcp2221 0003:04D8:00DD.0011: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  608.648449][T11038] rnbd_client L610: Mapping device /dev/ram0 on session s+, (access_mode: rw, nr_poll_queues: 0)
[  608.709614][T11036] nvme_fabrics: missing parameter 'traddr=%s'
[  608.753675][ T6152] rtrs_client L1784: <s+>: Resolving route failed, err: -ENODEV
[  608.778556][T11031] i2c i2c-1: unsupported multi-msg i2c transaction
[  608.783448][T11031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.783865][T11031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.857033][T11038] rtrs_client L2656: <s+>: init_conns() failed: err=-ENODEV path=<invalid address family>@ip:127.0.0.1 [:0]
[  609.016525][ T5770] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  609.172545][ T5770] usb 8-1: New USB device found: idVendor=0421, idProduct=1234, bcdDevice=1.00
[  609.173512][ T5770] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  609.173548][ T5770] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  609.173596][ T5770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.182167][ T1096] usb 7-1: USB disconnect, device number 8
[  609.205952][ T5770] cdc_phonet 8-1:1.0: probe with driver cdc_phonet failed with error -22
[  609.274109][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1500'.
[  609.275076][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1500'.
[  609.275679][T11058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1500'.
[  609.355385][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'.
[  609.355866][T11060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'.
[  609.413422][ T5770] usb 8-1: USB disconnect, device number 2
[  609.450582][T11066] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1503'.
[  609.453072][T11066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  609.986453][ T2254] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  610.156918][ T2254] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  610.157819][ T2254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.157836][ T2254] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.157848][ T2254] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  610.157872][ T2254] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.160325][ T2254] usb 7-1: config 0 descriptor??
[  610.306606][ T5894] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  610.457702][ T5894] usb 8-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  610.458665][ T5894] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  610.458711][ T5894] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  610.458732][ T5894] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  610.458754][ T5894] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  610.458790][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.565632][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.566148][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.578421][ T2254] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  610.578457][ T2254] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  610.578507][ T2254] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  610.578533][ T2254] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  610.578557][ T2254] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  610.598073][ T2254] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  610.781124][T11072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.782211][T11077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.782651][T11077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.783869][T11072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.873488][   T32] audit: type=1326 audit(1793789187.262:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.7.1507" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70859fb19 code=0x0
[  611.376004][ T5894] gud 8-1:1.0: Failed to get connectors (error=-5)
[  611.376027][ T5894] gud 8-1:1.0: probe with driver gud failed with error -5
[  612.765282][ T5853] usb 7-1: USB disconnect, device number 9
[  612.979560][T11104] FAULT_INJECTION: forcing a failure.
[  612.979560][T11104] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  612.979593][T11104] CPU: 1 UID: 0 PID: 11104 Comm: syz.6.1514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  612.979613][T11104] Tainted: [L]=SOFTLOCKUP
[  612.979617][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  612.979624][T11104] Call Trace:
[  612.979629][T11104]  <TASK>
[  612.979634][T11104]  dump_stack_lvl+0xe8/0x150
[  612.979655][T11104]  should_fail_ex+0x3eb/0x540
[  612.979672][T11104]  _copy_from_user+0x2d/0xb0
[  612.979692][T11104]  copy_folio_from_user+0x1e3/0x320
[  612.979726][T11104]  hugetlb_mfill_atomic_pte+0xead/0x17d0
[  612.979771][T11104]  mfill_atomic_copy+0xcab/0x14e0
[  612.979804][T11104]  ? __pfx_mfill_atomic_copy+0x10/0x10
[  612.979817][T11104]  ? __might_fault+0xaf/0x130
[  612.979836][T11104]  userfaultfd_copy+0x413/0x7e0
[  612.979852][T11104]  ? __pfx_userfaultfd_copy+0x10/0x10
[  612.979875][T11104]  userfaultfd_ioctl+0x49a/0x560
[  612.979888][T11104]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  612.979900][T11104]  ? __fget_files+0x2a/0x420
[  612.979916][T11104]  ? bpf_lsm_file_ioctl+0x9/0x20
[  612.979929][T11104]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  612.979941][T11104]  __se_sys_ioctl+0xfc/0x170
[  612.979958][T11104]  do_syscall_64+0x166/0x520
[  612.979972][T11104]  ? trace_irq_disable+0x3b/0x140
[  612.979985][T11104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.979996][T11104]  ? clear_bhb_loop+0x70/0xc0
[  612.980009][T11104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.980019][T11104] RIP: 0033:0x7fbcd499fb19
[  612.980038][T11104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  612.980046][T11104] RSP: 002b:00007fbcd578f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  612.980058][T11104] RAX: ffffffffffffffda RBX: 00007fbcd4c25fa0 RCX: 00007fbcd499fb19
[  612.980066][T11104] RDX: 0000200000000200 RSI: 00000000c028aa03 RDI: 0000000000000003
[  612.980073][T11104] RBP: 00007fbcd578f090 R08: 0000000000000000 R09: 0000000000000000
[  612.980079][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  612.980085][T11104] R13: 00007fbcd4c26038 R14: 00007fbcd4c25fa0 R15: 00007ffe2477cfe8
[  612.980103][T11104]  </TASK>
[  613.205945][ T5894] usb 8-1: USB disconnect, device number 3
[  613.582605][ T4958] Bluetooth: hci1: unexpected cc 0x042f length: 9 > 7
[  613.836445][ T5894] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  613.997483][ T5894] usb 7-1: not running at top speed; connect to a high speed hub
[  613.997519][ T5894] usb 7-1: New USB device found: idVendor=0c4b, idProduct=0100, bcdDevice=1.00
[  613.998518][ T5894] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  613.998562][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.002082][T11116] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  614.004069][ T5894] cyberjack 7-1:1.0: Reiner SCT Cyberjack USB card reader converter detected
[  614.045590][ T5894] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  614.215251][ T5770] usb 7-1: USB disconnect, device number 10
[  614.230124][ T5770] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  614.230596][ T5770] cyberjack 7-1:1.0: device disconnected
[  614.446473][ T5853] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  614.597585][ T5853] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  614.598460][ T5853] usb 8-1: config index 0 descriptor too short (expected 45, got 36)
[  614.598495][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.598509][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  614.598522][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.598536][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  614.598558][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.600162][ T5853] usb 8-1: config 0 descriptor??
[  614.602291][T11118] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  614.983866][T11120] netlink: 'syz.6.1520': attribute type 1 has an invalid length.
[  615.014054][ T5853] hid_parser_main: 10 callbacks suppressed
[  615.014088][ T5853] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x1
[  615.014119][ T5853] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  615.014146][ T5853] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  615.014170][ T5853] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  615.030724][ T5853] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  615.214394][ T5853] usb 8-1: USB disconnect, device number 4
[  615.308187][ T1096] usb 7-1: new low-speed USB device number 11 using dummy_hcd
[  615.458118][ T1096] usb 7-1: New USB device found: idVendor=0582, idProduct=0582, bcdDevice=0.40
[  615.459850][ T1096] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0
[  615.459893][ T1096] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 96, changing to 4
[  615.459911][ T1096] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0
[  615.463948][ T1096] usb 7-1: string descriptor 0 read error: -22
[  615.464071][ T1096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.502004][ T1096] usb 7-1: Audio class v2/v3 interfaces need an interface association
[  615.574853][ T1096] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  615.673325][T11125] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 (while UP)
[  615.701222][ T1096] usb 7-1: USB disconnect, device number 11
[  615.901437][T11134] futex_wake_op: syz.0.1525 tries to shift op by -1; fix this program
[  616.076381][ T5853] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  616.226590][ T5853] usb 8-1: Using ep0 maxpacket: 16
[  616.228337][ T5853] usb 8-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28
[  616.229515][ T5853] usb 8-1: config 0 has an invalid interface number: 105 but max is 0
[  616.229539][ T5853] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.229557][ T5853] usb 8-1: config 0 has no interface number 0
[  616.233817][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.233841][ T5853] usb 8-1: Product: syz
[  616.233856][ T5853] usb 8-1: Manufacturer: syz
[  616.233869][ T5853] usb 8-1: SerialNumber: syz
[  616.257531][ T5853] usb 8-1: config 0 descriptor??
[  616.270129][ T5853] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  616.270161][ T5853] uvcvideo 8-1:0.105: No valid video chain found.
[  616.464699][ T5770] usb 8-1: USB disconnect, device number 5
[  616.576587][ T5853] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  616.727487][ T5853] usb 7-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  616.731819][ T5853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.731844][ T5853] usb 7-1: Product: syz
[  616.731859][ T5853] usb 7-1: Manufacturer: syz
[  616.731873][ T5853] usb 7-1: SerialNumber: syz
[  616.735353][ T5853] usb 7-1: config 0 descriptor??
[  616.742005][ T5853] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  617.142027][T11150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  617.142626][T11150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  617.296478][ T5801] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  617.447289][ T5801] usb 8-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  617.448547][ T5801] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  617.448594][ T5801] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.460913][ T5801] gspca_main: stv0680-2.14.0 probing 041e:4007
[  618.054475][ T5853] gspca_stk1135: reg_w 0xd err -71
[  618.055674][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055687][ T5853] gspca_stk1135: Sensor write failed
[  618.055713][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055722][ T5853] gspca_stk1135: Sensor write failed
[  618.055748][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055757][ T5853] gspca_stk1135: Sensor read failed
[  618.055783][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055792][ T5853] gspca_stk1135: Sensor read failed
[  618.055800][ T5853] gspca_stk1135: Detected sensor type unknown (0x0)
[  618.055829][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055839][ T5853] gspca_stk1135: Sensor read failed
[  618.055863][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055873][ T5853] gspca_stk1135: Sensor read failed
[  618.055898][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055907][ T5853] gspca_stk1135: Sensor write failed
[  618.055932][ T5853] gspca_stk1135: serial bus timeout: status=0x00
[  618.055941][ T5853] gspca_stk1135: Sensor write failed
[  618.056017][ T5853] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71
[  618.065063][ T5853] usb 7-1: USB disconnect, device number 12
[  618.507543][ T5801] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  618.507559][ T5801] stv0680 8-1:4.0: STV(e): camera ping failed!!
[  618.508006][ T5801] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  618.508018][ T5801] stv0680 8-1:4.0: last error: 0,  command = 0x0
[  618.556127][ T5894] usb 8-1: USB disconnect, device number 6
[  618.956459][ T5843] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  619.106353][ T5843] usb 7-1: Using ep0 maxpacket: 16
[  619.109696][ T5843] usb 7-1: unable to get BOS descriptor or descriptor too short
[  619.109748][ T5843] usb 7-1: New USB device found: idVendor=06e1, idProduct=0709, bcdDevice=2.04
[  619.110895][ T5843] usb 7-1: config 120 has an invalid descriptor of length 227, skipping remainder of the config
[  619.110918][ T5843] usb 7-1: config 120 has 0 interfaces, different from the descriptor's value: 1
[  619.161355][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=6
[  619.161383][ T5843] usb 7-1: Product: syz
[  619.161398][ T5843] usb 7-1: Manufacturer: syz
[  619.161413][ T5843] usb 7-1: SerialNumber: syz
[  619.404120][T11227] binder: Write failure EINVAL in pid:49
[  619.493894][T11229] netlink: 'syz.7.1538': attribute type 29 has an invalid length.
[  619.493946][T11229] netlink: 'syz.7.1538': attribute type 3 has an invalid length.
[  619.493959][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1538'.
[  619.527777][T11230] zonefs (nullb0) ERROR: Not a zoned block device
[  619.856416][ T5894] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  620.006425][ T5894] usb 8-1: Using ep0 maxpacket: 16
[  620.007097][ T5894] usb 8-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  620.008066][ T5894] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  620.008086][ T5894] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  620.010207][ T5894] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.010254][ T5894] usb 8-1: Product: syz
[  620.010292][ T5894] usb 8-1: Manufacturer: syz
[  620.010306][ T5894] usb 8-1: SerialNumber: syz
[  620.012716][ T5894] usb 8-1: config 0 descriptor??
[  620.081769][ T5894] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  620.081801][ T5894] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  620.628577][ T5894] em28xx 8-1:0.0: chip ID is em2840
[  620.829575][ T5894] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  620.830828][ T5894] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  620.830847][ T5894] em28xx 8-1:0.0: No AC97 audio processor
[  620.863830][ T5894] usb 8-1: USB disconnect, device number 7
[  620.874519][ T5894] em28xx 8-1:0.0: Disconnecting em28xx
[  620.898197][ T5894] em28xx: Freeing device
[  621.440132][T11249] FAULT_INJECTION: forcing a failure.
[  621.440132][T11249] name failslab, interval 1, probability 0, space 0, times 0
[  621.440153][T11249] CPU: 0 UID: 0 PID: 11249 Comm: syz.7.1544 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  621.440177][T11249] Tainted: [L]=SOFTLOCKUP
[  621.440184][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  621.440195][T11249] Call Trace:
[  621.440202][T11249]  <TASK>
[  621.440216][T11249]  dump_stack_lvl+0xe8/0x150
[  621.440242][T11249]  should_fail_ex+0x3eb/0x540
[  621.440258][T11249]  should_failslab+0xa8/0x100
[  621.440274][T11249]  __kmalloc_noprof+0xf9/0x710
[  621.440287][T11249]  ? tomoyo_encode+0x2ad/0x570
[  621.440298][T11249]  ? tomoyo_encode+0x2ad/0x570
[  621.440313][T11249]  tomoyo_encode+0x2ad/0x570
[  621.440327][T11249]  tomoyo_realpath_from_path+0x5fd/0x640
[  621.440344][T11249]  ? tomoyo_path_number_perm+0x219/0x5f0
[  621.440359][T11249]  tomoyo_path_number_perm+0x246/0x5f0
[  621.440376][T11249]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  621.440392][T11249]  ? __lock_acquire+0x747/0x2de0
[  621.440425][T11249]  ? __fget_files+0x2a/0x420
[  621.440439][T11249]  ? __fget_files+0x2a/0x420
[  621.440451][T11249]  ? __fget_files+0x2a/0x420
[  621.440475][T11249]  security_file_ioctl+0xc3/0x2a0
[  621.440502][T11249]  __se_sys_ioctl+0x47/0x170
[  621.440531][T11249]  do_syscall_64+0x166/0x520
[  621.440555][T11249]  ? trace_irq_disable+0x3b/0x140
[  621.440569][T11249]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.440580][T11249]  ? clear_bhb_loop+0x70/0xc0
[  621.440593][T11249]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.440603][T11249] RIP: 0033:0x7ff70859fb19
[  621.440614][T11249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.440622][T11249] RSP: 002b:00007ff70949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  621.440634][T11249] RAX: ffffffffffffffda RBX: 00007ff708825fa0 RCX: 00007ff70859fb19
[  621.440641][T11249] RDX: 0000200000000080 RSI: 00000000c02c563a RDI: 0000000000000003
[  621.440648][T11249] RBP: 00007ff70949b090 R08: 0000000000000000 R09: 0000000000000000
[  621.440655][T11249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.440661][T11249] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  621.440677][T11249]  </TASK>
[  621.440729][T11249] ERROR: Out of memory at tomoyo_realpath_from_path.
[  621.701071][ T5843] usb 7-1: USB disconnect, device number 13
[  621.786425][ T5894] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  621.936956][ T5894] usb 8-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  621.937926][ T5894] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  621.937974][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.945069][ T5894] gspca_main: stv0680-2.14.0 probing 041e:4007
[  622.056481][ T5843] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  622.208913][ T5843] usb 7-1: New USB device found: idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  622.209866][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.211497][ T5843] usb 7-1: config 0 descriptor??
[  622.215256][ T5843] gspca_main: sunplus-2.14.0 probing 055f:c420
[  622.762058][ T4958] Bluetooth: hci4: unexpected event for opcode 0x2029
[  622.988952][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  622.989000][ T5894] stv0680 8-1:4.0: STV(e): camera ping failed!!
[  622.991025][ T5894] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  622.991046][ T5894] stv0680 8-1:4.0: last error: 0,  command = 0x0
[  623.153881][ T1096] usb 8-1: USB disconnect, device number 8
[  623.217755][T11276] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1551'.
[  623.303106][T11274] binder: BINDER_SET_CONTEXT_MGR already set
[  623.320174][ T5843] gspca_sunplus: reg_w_riv err -71
[  623.320262][ T5843] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  623.345801][ T5843] usb 7-1: USB disconnect, device number 14
[  623.492206][T11287] fuse: Unknown parameter ''
[  623.840884][T11308] binder: BINDER_SET_CONTEXT_MGR already set
[  624.017341][T11315] FAULT_INJECTION: forcing a failure.
[  624.017341][T11315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.017375][T11315] CPU: 0 UID: 0 PID: 11315 Comm: syz.7.1556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  624.017401][T11315] Tainted: [L]=SOFTLOCKUP
[  624.017408][T11315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  624.017421][T11315] Call Trace:
[  624.017429][T11315]  <TASK>
[  624.017437][T11315]  dump_stack_lvl+0xe8/0x150
[  624.017469][T11315]  should_fail_ex+0x3eb/0x540
[  624.017498][T11315]  strncpy_from_user+0x36/0x2c0
[  624.017525][T11315]  do_getname+0x77/0x250
[  624.017549][T11315]  do_sys_openat2+0xce/0x200
[  624.017572][T11315]  ? __se_sys_futex+0x3a8/0x450
[  624.017602][T11315]  ? __pfx_do_sys_openat2+0x10/0x10
[  624.017632][T11315]  ? rcu_is_watching+0x16/0xb0
[  624.017664][T11315]  __x64_sys_openat+0x138/0x170
[  624.017691][T11315]  do_syscall_64+0x166/0x520
[  624.017718][T11315]  ? trace_irq_disable+0x3b/0x140
[  624.017742][T11315]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.017763][T11315]  ? clear_bhb_loop+0x70/0xc0
[  624.017787][T11315]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.017806][T11315] RIP: 0033:0x7ff70856034e
[  624.017824][T11315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  624.017840][T11315] RSP: 002b:00007ff70949aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  624.017861][T11315] RAX: ffffffffffffffda RBX: 00007ff70949b6c0 RCX: 00007ff70856034e
[  624.017876][T11315] RDX: 0000000000000000 RSI: 00007ff70949af90 RDI: ffffffffffffff9c
[  624.017889][T11315] RBP: 00007ff708637b70 R08: 0000000000000000 R09: 0000000000000000
[  624.017902][T11315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  624.017915][T11315] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  624.017945][T11315]  </TASK>
[  624.079496][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  624.079917][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  624.299240][ T5843] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  624.432954][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  624.446969][ T5843] usb 7-1: Using ep0 maxpacket: 8
[  624.448046][ T5843] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  624.450431][ T5843] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  624.450461][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  624.450486][ T5843] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  624.450507][ T5843] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  624.450545][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.577426][ T5894] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  624.663935][ T5843] usb 7-1: usb_control_msg returned -71
[  624.663990][ T5843] usbtmc 7-1:16.0: can't read capabilities
[  624.712635][ T5843] usb 7-1: USB disconnect, device number 15
[  624.732727][ T5894] usb 8-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  624.734427][ T5894] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  624.734478][ T5894] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.757619][ T5894] usb 8-1: config 0 descriptor??
[  624.779981][ T5894] pwc: Askey VC010 type 2 USB webcam detected.
[  624.833015][T11338] fuse: Bad value for 'user_id'
[  624.833034][T11338] fuse: Bad value for 'user_id'
[  625.167407][ T5894] pwc: recv_control_msg error -32 req 02 val 2b00
[  625.167971][ T5894] pwc: recv_control_msg error -32 req 02 val 2700
[  625.369390][ T5894] pwc: recv_control_msg error -32 req 04 val 1000
[  625.369887][ T5894] pwc: recv_control_msg error -32 req 04 val 1300
[  625.466424][ T5801] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  625.572040][ T5894] pwc: recv_control_msg error -32 req 02 val 2000
[  625.572691][ T5894] pwc: recv_control_msg error -32 req 02 val 2100
[  625.573257][T11324] ufs: You didn't specify the type of your ufs filesystem
[  625.573257][T11324] 
[  625.573257][T11324] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  625.573257][T11324] 
[  625.573257][T11324] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  625.574947][ T5894] pwc: recv_control_msg error -32 req 04 val 1500
[  625.636369][ T5801] usb 7-1: Using ep0 maxpacket: 16
[  625.638393][ T5801] usb 7-1: unable to get BOS descriptor or descriptor too short
[  625.638445][ T5801] usb 7-1: New USB device found: idVendor=046d, idProduct=0a0e, bcdDevice=61.f7
[  625.639408][ T5801] usb 7-1: config 9 has an invalid interface number: 57 but max is 0
[  625.639431][ T5801] usb 7-1: config 9 has no interface number 0
[  625.639460][ T5801] usb 7-1: config 9 interface 57 has no altsetting 0
[  625.641778][ T5801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.641803][ T5801] usb 7-1: Product: syz
[  625.641817][ T5801] usb 7-1: Manufacturer: syz
[  625.641831][ T5801] usb 7-1: SerialNumber: syz
[  625.779395][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.781382][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.783638][ T5894] pwc: recv_control_msg error -71 req 02 val 2400
[  625.784074][ T5894] pwc: recv_control_msg error -71 req 02 val 2600
[  625.784503][ T5894] pwc: recv_control_msg error -71 req 02 val 2900
[  625.786501][ T5894] pwc: recv_control_msg error -71 req 02 val 2800
[  625.789807][ T5894] pwc: recv_control_msg error -71 req 04 val 1100
[  625.790401][ T5894] pwc: recv_control_msg error -71 req 04 val 1200
[  625.793594][ T5894] pwc: Registered as video103.
[  625.797183][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input34
[  625.820189][ T5894] usb 8-1: USB disconnect, device number 9
[  625.900588][ T5801] usbhid 7-1:9.57: couldn't find an input interrupt endpoint
[  625.913896][ T5801] usb 7-1: USB disconnect, device number 16
[  626.329303][T11355] FAULT_INJECTION: forcing a failure.
[  626.329303][T11355] name failslab, interval 1, probability 0, space 0, times 0
[  626.329325][T11355] CPU: 0 UID: 0 PID: 11355 Comm: syz.7.1566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  626.329340][T11355] Tainted: [L]=SOFTLOCKUP
[  626.329344][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  626.329352][T11355] Call Trace:
[  626.329356][T11355]  <TASK>
[  626.329361][T11355]  dump_stack_lvl+0xe8/0x150
[  626.329382][T11355]  should_fail_ex+0x3eb/0x540
[  626.329398][T11355]  should_failslab+0xa8/0x100
[  626.329414][T11355]  ? do_getname+0x2e/0x250
[  626.329425][T11355]  kmem_cache_alloc_noprof+0x9c/0x600
[  626.329438][T11355]  ? kasan_quarantine_put+0xbb/0x1f0
[  626.329450][T11355]  ? lockdep_hardirqs_on+0x7b/0x110
[  626.329464][T11355]  ? do_getname+0x2e/0x250
[  626.329478][T11355]  do_getname+0x2e/0x250
[  626.329487][T11355]  ? getname_flags+0x11/0x20
[  626.329499][T11355]  do_sys_openat2+0xce/0x200
[  626.329511][T11355]  ? __se_sys_futex+0x3a8/0x450
[  626.329529][T11355]  ? __pfx_do_sys_openat2+0x10/0x10
[  626.329541][T11355]  ? ksys_write+0x242/0x270
[  626.329554][T11355]  ? __pfx___se_sys_futex+0x10/0x10
[  626.329569][T11355]  ? __pfx_ksys_write+0x10/0x10
[  626.329585][T11355]  __x64_sys_openat+0x138/0x170
[  626.329599][T11355]  do_syscall_64+0x166/0x520
[  626.329613][T11355]  ? trace_irq_disable+0x3b/0x140
[  626.329625][T11355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.329636][T11355]  ? clear_bhb_loop+0x70/0xc0
[  626.329652][T11355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  626.329663][T11355] RIP: 0033:0x7ff70856034e
[  626.329674][T11355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  626.329682][T11355] RSP: 002b:00007ff70949aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  626.329694][T11355] RAX: ffffffffffffffda RBX: 00007ff70949b6c0 RCX: 00007ff70856034e
[  626.329702][T11355] RDX: 0000000000000000 RSI: 00007ff70949af90 RDI: ffffffffffffff9c
[  626.329709][T11355] RBP: 00007ff708637b70 R08: 0000000000000000 R09: 0000000000000000
[  626.329716][T11355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  626.329722][T11355] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  626.329738][T11355]  </TASK>
[  626.826470][ T5770] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  626.827910][ T5894] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  626.976451][ T5894] usb 7-1: device descriptor read/64, error -71
[  626.977235][ T5770] usb 8-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00
[  626.978226][ T5770] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  626.978253][ T5770] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  626.978264][ T5770] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  626.978276][ T5770] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  626.978299][ T5770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.216449][ T5894] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  627.346432][ T5894] usb 7-1: device descriptor read/64, error -71
[  627.388663][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.389241][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.457797][ T5894] usb usb7-port1: attempt power cycle
[  627.796359][ T5894] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  627.816978][ T5894] usb 7-1: device descriptor read/8, error -71
[  628.056623][ T5894] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  628.077414][ T5894] usb 7-1: device descriptor read/8, error -71
[  628.187388][ T5894] usb usb7-port1: unable to enumerate USB device
[  628.205209][ T5770] [drm] Initialized gud 1.0.0 for 8-1:1.0 on minor 1
[  628.673925][ T5770] Console: switching to colour frame buffer device 128x48
[  628.688968][ T5770] gud 8-1:1.0: [drm] fb0: guddrmfb frame buffer device
[  628.692467][ T5770] usb 8-1: USB disconnect, device number 10
[  628.734935][ T5770] Console: switching to colour VGA+ 80x25
[  629.197613][T11375] FAULT_INJECTION: forcing a failure.
[  629.197613][T11375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.197634][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.7.1573 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.197649][T11375] Tainted: [L]=SOFTLOCKUP
[  629.197653][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  629.197660][T11375] Call Trace:
[  629.197664][T11375]  <TASK>
[  629.197669][T11375]  dump_stack_lvl+0xe8/0x150
[  629.197689][T11375]  should_fail_ex+0x3eb/0x540
[  629.197705][T11375]  _copy_to_user+0x31/0xb0
[  629.197720][T11375]  simple_read_from_buffer+0xe1/0x170
[  629.197737][T11375]  proc_fail_nth_read+0x1bb/0x230
[  629.197750][T11375]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  629.197762][T11375]  ? rw_verify_area+0x24a/0x4c0
[  629.197776][T11375]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  629.197786][T11375]  vfs_read+0x213/0xa80
[  629.197802][T11375]  ? __pfx___mutex_lock+0x10/0x10
[  629.197817][T11375]  ? __pfx_vfs_read+0x10/0x10
[  629.197831][T11375]  ? __fget_files+0x2a/0x420
[  629.197843][T11375]  ? __fget_files+0x3a2/0x420
[  629.197854][T11375]  ? __fget_files+0x2a/0x420
[  629.197868][T11375]  ? fdget+0x1ac/0x250
[  629.197883][T11375]  ksys_read+0x150/0x270
[  629.197898][T11375]  ? __pfx_ksys_read+0x10/0x10
[  629.197917][T11375]  do_syscall_64+0x166/0x520
[  629.197930][T11375]  ? trace_irq_disable+0x3b/0x140
[  629.197943][T11375]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.197953][T11375]  ? clear_bhb_loop+0x70/0xc0
[  629.197966][T11375]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.197976][T11375] RIP: 0033:0x7ff70856034e
[  629.197986][T11375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  629.197996][T11375] RSP: 002b:00007ff70949afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  629.198010][T11375] RAX: ffffffffffffffda RBX: 00007ff70949b6c0 RCX: 00007ff70856034e
[  629.198018][T11375] RDX: 000000000000000f RSI: 00007ff70949b0a0 RDI: 0000000000000004
[  629.198025][T11375] RBP: 00007ff70949b090 R08: 0000000000000000 R09: 0000000000000000
[  629.198031][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  629.198037][T11375] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  629.198054][T11375]  </TASK>
[  629.479628][T11381] FAULT_INJECTION: forcing a failure.
[  629.479628][T11381] name failslab, interval 1, probability 0, space 0, times 0
[  629.479649][T11381] CPU: 1 UID: 0 PID: 11381 Comm: syz.7.1574 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.479663][T11381] Tainted: [L]=SOFTLOCKUP
[  629.479668][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  629.479674][T11381] Call Trace:
[  629.479679][T11381]  <TASK>
[  629.479683][T11381]  dump_stack_lvl+0xe8/0x150
[  629.479705][T11381]  should_fail_ex+0x3eb/0x540
[  629.479720][T11381]  should_failslab+0xa8/0x100
[  629.479737][T11381]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  629.479752][T11381]  ? vfs_parse_fs_qstr+0x11e/0x1e0
[  629.479766][T11381]  ? vfs_parse_fs_qstr+0x11e/0x1e0
[  629.479783][T11381]  kmemdup_nul+0x36/0xf0
[  629.479795][T11381]  vfs_parse_fs_qstr+0x11e/0x1e0
[  629.479817][T11381]  ? jffs2_init_fs_context+0x4f/0xc0
[  629.479833][T11381]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  629.479850][T11381]  ? alloc_fs_context+0x9b2/0xd00
[  629.479868][T11381]  do_new_mount+0x2b2/0xb00
[  629.479884][T11381]  ? __pfx_do_new_mount+0x10/0x10
[  629.479896][T11381]  ? ns_capable+0x84/0xe0
[  629.479910][T11381]  ? path_mount+0x647/0x1050
[  629.479923][T11381]  ? user_path_at+0xd4/0x160
[  629.479938][T11381]  __se_sys_mount+0x31d/0x420
[  629.479953][T11381]  ? __pfx___se_sys_mount+0x10/0x10
[  629.479968][T11381]  ? __x64_sys_mount+0x20/0xc0
[  629.479980][T11381]  do_syscall_64+0x166/0x520
[  629.479995][T11381]  ? trace_irq_disable+0x3b/0x140
[  629.480007][T11381]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.480018][T11381]  ? clear_bhb_loop+0x70/0xc0
[  629.480030][T11381]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.480040][T11381] RIP: 0033:0x7ff70859fb19
[  629.480051][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.480060][T11381] RSP: 002b:00007ff70949b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  629.480072][T11381] RAX: ffffffffffffffda RBX: 00007ff708825fa0 RCX: 00007ff70859fb19
[  629.480080][T11381] RDX: 00002000000015c0 RSI: 0000200000001580 RDI: 0000200000001540
[  629.480087][T11381] RBP: 00007ff70949b090 R08: 0000000000000000 R09: 0000000000000000
[  629.480094][T11381] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002
[  629.480101][T11381] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  629.480117][T11381]  </TASK>
[  629.805687][T11383] FAULT_INJECTION: forcing a failure.
[  629.805687][T11383] name failslab, interval 1, probability 0, space 0, times 0
[  629.805709][T11383] CPU: 1 UID: 0 PID: 11383 Comm: syz.7.1575 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  629.805724][T11383] Tainted: [L]=SOFTLOCKUP
[  629.805729][T11383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  629.805736][T11383] Call Trace:
[  629.805741][T11383]  <TASK>
[  629.805746][T11383]  dump_stack_lvl+0xe8/0x150
[  629.805768][T11383]  should_fail_ex+0x3eb/0x540
[  629.805783][T11383]  should_failslab+0xa8/0x100
[  629.805807][T11383]  ? do_getname+0x2e/0x250
[  629.805819][T11383]  kmem_cache_alloc_noprof+0x9c/0x600
[  629.805831][T11383]  ? kasan_quarantine_put+0xbb/0x1f0
[  629.805845][T11383]  ? lockdep_hardirqs_on+0x7b/0x110
[  629.805859][T11383]  ? do_getname+0x2e/0x250
[  629.805872][T11383]  do_getname+0x2e/0x250
[  629.805881][T11383]  ? getname_flags+0x11/0x20
[  629.805893][T11383]  do_sys_openat2+0xce/0x200
[  629.805904][T11383]  ? __se_sys_futex+0x3a8/0x450
[  629.805921][T11383]  ? __pfx_do_sys_openat2+0x10/0x10
[  629.805934][T11383]  ? rcu_is_watching+0x16/0xb0
[  629.805951][T11383]  __x64_sys_openat+0x138/0x170
[  629.805965][T11383]  do_syscall_64+0x166/0x520
[  629.805979][T11383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.805989][T11383]  ? clear_bhb_loop+0x70/0xc0
[  629.806002][T11383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.806013][T11383] RIP: 0033:0x7ff70856034e
[  629.806024][T11383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  629.806033][T11383] RSP: 002b:00007ff70949aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  629.806045][T11383] RAX: ffffffffffffffda RBX: 00007ff70949b6c0 RCX: 00007ff70856034e
[  629.806053][T11383] RDX: 0000000000000000 RSI: 00007ff70949af90 RDI: ffffffffffffff9c
[  629.806060][T11383] RBP: 00007ff708637b70 R08: 0000000000000000 R09: 0000000000000000
[  629.806067][T11383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.806073][T11383] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  629.806090][T11383]  </TASK>
[  630.165214][T11389] FAULT_INJECTION: forcing a failure.
[  630.165214][T11389] name failslab, interval 1, probability 0, space 0, times 0
[  630.165235][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.7.1578 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  630.165251][T11389] Tainted: [L]=SOFTLOCKUP
[  630.165256][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  630.165263][T11389] Call Trace:
[  630.165268][T11389]  <TASK>
[  630.165274][T11389]  dump_stack_lvl+0xe8/0x150
[  630.165294][T11389]  should_fail_ex+0x3eb/0x540
[  630.165311][T11389]  should_failslab+0xa8/0x100
[  630.165328][T11389]  __kmalloc_cache_noprof+0x9e/0x600
[  630.165342][T11389]  ? jffs2_sum_init+0x72/0x220
[  630.165355][T11389]  ? jffs2_sum_init+0x72/0x220
[  630.165371][T11389]  jffs2_sum_init+0x72/0x220
[  630.165389][T11389]  jffs2_do_mount_fs+0x72b/0x22b0
[  630.165402][T11389]  ? trace_kmalloc+0x2a/0xf0
[  630.165415][T11389]  ? __raw_spin_lock_init+0x45/0x100
[  630.165437][T11389]  jffs2_do_fill_super+0x555/0xc60
[  630.165453][T11389]  ? __pfx_jffs2_fill_super+0x10/0x10
[  630.165469][T11389]  mtd_get_sb+0x195/0x420
[  630.165484][T11389]  ? __pfx_jffs2_fill_super+0x10/0x10
[  630.165498][T11389]  ? __pfx_jffs2_fill_super+0x10/0x10
[  630.165512][T11389]  get_tree_mtd+0x597/0x7d0
[  630.165528][T11389]  ? __pfx_jffs2_fill_super+0x10/0x10
[  630.165542][T11389]  ? __pfx_get_tree_mtd+0x10/0x10
[  630.165566][T11389]  vfs_get_tree+0x92/0x2a0
[  630.165582][T11389]  do_new_mount+0x325/0xb00
[  630.165598][T11389]  ? __pfx_do_new_mount+0x10/0x10
[  630.165611][T11389]  ? ns_capable+0x84/0xe0
[  630.165626][T11389]  ? path_mount+0x647/0x1050
[  630.165640][T11389]  ? user_path_at+0xd4/0x160
[  630.165655][T11389]  __se_sys_mount+0x31d/0x420
[  630.165670][T11389]  ? __pfx___se_sys_mount+0x10/0x10
[  630.165686][T11389]  ? __x64_sys_mount+0x20/0xc0
[  630.165700][T11389]  do_syscall_64+0x166/0x520
[  630.165714][T11389]  ? trace_irq_disable+0x3b/0x140
[  630.165726][T11389]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.165737][T11389]  ? clear_bhb_loop+0x70/0xc0
[  630.165750][T11389]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  630.165761][T11389] RIP: 0033:0x7ff70859fb19
[  630.165772][T11389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.165781][T11389] RSP: 002b:00007ff70949b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  630.165793][T11389] RAX: ffffffffffffffda RBX: 00007ff708825fa0 RCX: 00007ff70859fb19
[  630.165801][T11389] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000180
[  630.165808][T11389] RBP: 00007ff708637b70 R08: 0000000000000000 R09: 0000000000000000
[  630.165815][T11389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  630.165822][T11389] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  630.165839][T11389]  </TASK>
[  630.166701][ T5801] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  630.167857][T11389] jffs2: warning: (11389) jffs2_sum_init: Can't allocate memory for summary information!
[  630.320921][ T5801] usb 7-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  630.325980][ T5801] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  630.326030][ T5801] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.331839][ T5801] usb 7-1: config 0 descriptor??
[  630.350019][ T5801] pwc: Askey VC010 type 2 USB webcam detected.
[  630.698252][ T1096] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  630.740367][ T5801] pwc: recv_control_msg error -32 req 02 val 2b00
[  630.740945][ T5801] pwc: recv_control_msg error -32 req 02 val 2700
[  630.849666][ T1096] usb 8-1: New USB device found: idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  630.851864][ T1096] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  630.851897][ T1096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.888991][ T1096] gspca_main: stv0680-2.14.0 probing 041e:4007
[  630.942233][ T5801] pwc: recv_control_msg error -32 req 04 val 1000
[  630.943083][ T5801] pwc: recv_control_msg error -32 req 04 val 1300
[  631.147319][ T5801] pwc: recv_control_msg error -32 req 02 val 2000
[  631.150580][ T5801] pwc: recv_control_msg error -32 req 02 val 2100
[  631.151900][T11385] ufs: You didn't specify the type of your ufs filesystem
[  631.151900][T11385] 
[  631.151900][T11385] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  631.151900][T11385] 
[  631.151900][T11385] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  631.169068][ T5801] pwc: recv_control_msg error -32 req 04 val 1500
[  631.375895][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.377855][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.384458][ T5801] pwc: recv_control_msg error -71 req 02 val 2400
[  631.385885][ T5801] pwc: recv_control_msg error -71 req 02 val 2600
[  631.386983][ T5801] pwc: recv_control_msg error -71 req 02 val 2900
[  631.389152][ T5801] pwc: recv_control_msg error -71 req 02 val 2800
[  631.391374][ T5801] pwc: recv_control_msg error -71 req 04 val 1100
[  631.392430][ T5801] pwc: recv_control_msg error -71 req 04 val 1200
[  631.405713][ T5801] pwc: Registered as video103.
[  631.415793][ T5801] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input35
[  631.451842][ T5801] usb 7-1: USB disconnect, device number 21
[  631.953684][ T1096] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  631.953700][ T1096] stv0680 8-1:4.0: STV(e): camera ping failed!!
[  631.971331][ T1096] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32
[  631.971346][ T1096] stv0680 8-1:4.0: last error: 0,  command = 0x0
[  632.215034][ T1096] usb 8-1: USB disconnect, device number 11
[  633.266395][ T5801] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  633.396954][ T5801] usb 7-1: device descriptor read/64, error -71
[  633.523317][T11427] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL)
[  633.523359][T11427] device-mapper: ioctl: error adding target to table
[  633.648982][ T5801] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  633.776425][ T5801] usb 7-1: device descriptor read/64, error -71
[  633.886629][ T5801] usb usb7-port1: attempt power cycle
[  633.926463][ T2254] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  634.078474][ T2254] usb 8-1: unable to get BOS descriptor or descriptor too short
[  634.078508][ T2254] usb 8-1: New USB device found: idVendor=2013, idProduct=0248, bcdDevice=ee.04
[  634.079380][ T2254] usb 8-1: config 4 has an invalid interface number: 118 but max is 1
[  634.079403][ T2254] usb 8-1: config 4 has an invalid interface number: 104 but max is 1
[  634.079417][ T2254] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  634.079427][ T2254] usb 8-1: config 4 has no interface number 0
[  634.079436][ T2254] usb 8-1: config 4 has no interface number 1
[  634.079458][ T2254] usb 8-1: config 4 interface 118 has no altsetting 0
[  634.080894][ T2254] usb 8-1: New USB device strings: Mfr=213, Product=0, SerialNumber=3
[  634.080917][ T2254] usb 8-1: Manufacturer: syz
[  634.080931][ T2254] usb 8-1: SerialNumber: syz
[  634.226416][ T5801] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  634.246963][ T5801] usb 7-1: device descriptor read/8, error -71
[  634.291694][ T2254] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware
[  634.319960][ T2254] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  634.320106][ T2254] dib0700: firmware download failed at 7 with -22
[  634.323077][ T2254] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware
[  634.323987][ T2254] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  634.324013][ T2254] dib0700: firmware download failed at 7 with -22
[  634.329737][ T2254] usb 8-1: USB disconnect, device number 12
[  634.496409][ T5801] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  634.516845][ T5801] usb 7-1: device descriptor read/8, error -71
[  634.626596][ T5801] usb usb7-port1: unable to enumerate USB device
[  635.163217][T11449] FAULT_INJECTION: forcing a failure.
[  635.163217][T11449] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.163249][T11449] CPU: 0 UID: 0 PID: 11449 Comm: syz.7.1598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.163275][T11449] Tainted: [L]=SOFTLOCKUP
[  635.163282][T11449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  635.163294][T11449] Call Trace:
[  635.163302][T11449]  <TASK>
[  635.163310][T11449]  dump_stack_lvl+0xe8/0x150
[  635.163342][T11449]  should_fail_ex+0x3eb/0x540
[  635.163370][T11449]  _copy_from_user+0x2d/0xb0
[  635.163394][T11449]  snd_seq_write+0x309/0x820
[  635.163427][T11449]  ? __pfx_snd_seq_write+0x10/0x10
[  635.163448][T11449]  ? bpf_lsm_file_permission+0x9/0x20
[  635.163470][T11449]  ? security_file_permission+0x75/0x260
[  635.163498][T11449]  ? rw_verify_area+0x203/0x4c0
[  635.163527][T11449]  vfs_writev+0x4bc/0x9a0
[  635.163547][T11449]  ? __pfx_snd_seq_write+0x10/0x10
[  635.163571][T11449]  ? __pfx_vfs_writev+0x10/0x10
[  635.163604][T11449]  ? __fget_files+0x2a/0x420
[  635.163626][T11449]  ? __fget_files+0x3a2/0x420
[  635.163653][T11449]  ? fdget+0x1ac/0x250
[  635.163680][T11449]  do_writev+0x154/0x2e0
[  635.163697][T11449]  ? __pfx_do_writev+0x10/0x10
[  635.163722][T11449]  do_syscall_64+0x166/0x520
[  635.163742][T11449]  ? trace_irq_disable+0x3b/0x140
[  635.163760][T11449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.163776][T11449]  ? clear_bhb_loop+0x70/0xc0
[  635.163794][T11449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  635.163809][T11449] RIP: 0033:0x7ff70859fb19
[  635.163824][T11449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  635.163836][T11449] RSP: 002b:00007ff70949b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  635.163853][T11449] RAX: ffffffffffffffda RBX: 00007ff708825fa0 RCX: 00007ff70859fb19
[  635.163865][T11449] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  635.163875][T11449] RBP: 00007ff70949b090 R08: 0000000000000000 R09: 0000000000000000
[  635.163885][T11449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  635.163894][T11449] R13: 00007ff708826038 R14: 00007ff708825fa0 R15: 00007ffe09f3f578
[  635.163919][T11449]  </TASK>
[  635.305430][    C1] 
[  635.327822][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1600'.
[  635.328438][T11453] binder: validate_parent_fixup: fixup_min_offset=8, parent_offset=0
[  635.416451][    C1] =============================
[  635.421289][    C1] [ BUG: Invalid wait context ]
[  635.426140][    C1] syzkaller #0 Tainted: G             L     
[  635.432107][    C1] -----------------------------
[  635.436958][    C1] pr/ttyS0/33 is trying to lock:
[  635.441903][    C1] ffff88807b7ddbc8 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x208/0x8d0
[  635.451398][    C1] other info that might help us debug this:
[  635.457274][    C1] context-{2:2}
[  635.460726][    C1] locks held by pr/ttyS0/33: 2, last CPU#1:
[  635.466613][    C1]  #0: ffffffff90234058 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  635.476457][    C1]  #1: ffff88807b7de118 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1d2/0x8d0
[  635.486393][    C1] stack backtrace:
[  635.490125][    C1] CPU: 1 UID: 0 PID: 33 Comm: pr/ttyS0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  635.500621][    C1] Tainted: [L]=SOFTLOCKUP
[  635.504934][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  635.514994][    C1] Call Trace:
[  635.518274][    C1]  <IRQ>
[  635.521113][    C1]  dump_stack_lvl+0xe8/0x150
[  635.525708][    C1]  __lock_acquire+0xf5b/0x2de0
[  635.530509][    C1]  lock_acquire+0x115/0x350
[  635.535012][    C1]  ? kvm_xen_set_evtchn_fast+0x208/0x8d0
[  635.540654][    C1]  ? xa_load+0x1db/0x210
[  635.544900][    C1]  _raw_read_lock_irqsave+0x48/0x60
[  635.550097][    C1]  ? kvm_xen_set_evtchn_fast+0x208/0x8d0
[  635.555725][    C1]  kvm_xen_set_evtchn_fast+0x208/0x8d0
[  635.561202][    C1]  ? kvm_xen_set_evtchn_fast+0x1d2/0x8d0
[  635.566842][    C1]  xen_timer_callback+0x109/0x220
[  635.571865][    C1]  ? __pfx_xen_timer_callback+0x10/0x10
[  635.577499][    C1]  __hrtimer_run_queues+0x371/0xa10
[  635.582704][    C1]  hrtimer_interrupt+0x4cd/0xaa0
[  635.587641][    C1]  __sysvec_apic_timer_interrupt+0x102/0x430
[  635.593633][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  635.599286][    C1]  </IRQ>
[  635.602210][    C1]  <TASK>
[  635.605133][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  635.606392][ T2254] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  635.618635][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80
[  635.625064][    C1] Code: f7 e8 0d a6 85 f5 f7 c3 00 02 00 00 74 05 e8 60 4b b2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 44 9a 76 f5 65 48 8b 05 ac 51 ec 08 48 85 c0 74 18 5b 41 5e c3
[  635.644673][    C1] RSP: 0018:ffffc90000a97ca8 EFLAGS: 00000206
[  635.650750][    C1] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001
[  635.658719][    C1] RDX: 0000000000000000 RSI: ffffffff8e9efe87 RDI: 0000000000000001
[  635.666692][    C1] RBP: ffffc90000a97e18 R08: ffffffff91e0fcbf R09: 1ffffffff23c1f97
[  635.674671][    C1] R10: dffffc0000000000 R11: fffffbfff23c1f98 R12: 0000000000000002
[  635.682654][    C1] R13: ffff88801fec0000 R14: ffffffff9c4a9120 R15: dffffc0000000000
[  635.690645][    C1]  nbcon_kthread_func+0x724/0x8d0
[  635.695684][    C1]  ? nbcon_kthread_func+0x163/0x8d0
[  635.700880][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  635.706425][    C1]  ? __kthread_parkme+0x71/0x1f0
[  635.711420][    C1]  ? __kthread_parkme+0x199/0x1f0
[  635.716459][    C1]  kthread+0x38b/0x480
[  635.720533][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  635.726070][    C1]  ? __pfx_kthread+0x10/0x10
[  635.730651][    C1]  ret_from_fork+0x514/0xb70
[  635.735241][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  635.740348][    C1]  ? __switch_to+0xc78/0x1410
[  635.745065][    C1]  ? __pfx_kthread+0x10/0x10
[  635.749651][    C1]  ret_from_fork_asm+0x1a/0x30
[  635.754423][    C1]  </TASK>
[  635.797082][ T2254] usb 8-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00
[  635.797932][ T2254] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.797969][ T2254] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  635.797993][ T2254] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  635.798012][ T2254] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  635.798032][ T2254] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  635.798067][ T2254] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.799557][T11453] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22
[  635.801207][ T2254] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected
[  635.802747][ T2254] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84
[  635.802799][ T2254] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2
[  635.804251][ T2254] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  635.805249][ T2254] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88
[  635.805302][ T2254] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6
[  635.809275][ T2254] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  638.248093][ T5843] usb 8-1: USB disconnect, device number 13
[  638.251275][ T5843] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  638.267411][ T5843] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  638.267931][ T5843] keyspan 8-1:1.0: device disconnected