last executing test programs:

7.22005119s ago: executing program 0 (id=785):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xb}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

7.039512357s ago: executing program 0 (id=787):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={<r2=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x7, @local, 0x1}, {0xa, 0x4e22, 0x7ffffffe, @mcast1, 0x8}, r2, 0x2}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000380)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18)

6.79337319s ago: executing program 0 (id=789):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000006c0)={'veth0_to_team\x00', {0x2, 0x4e21, @multicast2}}) (fail_nth: 5)

5.88844392s ago: executing program 0 (id=792):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x180062)
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x800)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000900)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x6, 0x4, 0x0, 0x16, 0x44, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty, {[@rr={0x7, 0x0, 0xbd, [@dev={0xac, 0x14, 0x14, 0xe}, @empty, @local, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x1a}]}]}}}}})
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESHEX, @ANYRES64=r0], 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0)
unshare(0x2c040600)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x2000775)
sendto$inet6(r3, &(0x7f00000002c0)='X', 0x1, 0x0, &(0x7f0000000300)={0xa, 0xfffa, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000340)={0xfd, 0x2, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe)
shutdown(r3, 0x1)
recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x11143, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000500)={0xfffffffa, {{0xa, 0x4e23, 0x4, @mcast2, 0x101598b4}}, {{0xa, 0x4e20, 0x18000001, @mcast2, 0x5}}}, 0x104)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c280000000000000000008004500002a010000007e1a3c82376b707e7043403670beeb220011907800000000e000000100004e20fb10907862c00001000000005426e7d1d21002bd24693e5bdd8e35dcca613f733cef74b374b32545159fbd2e843e1c80aa5484398f8f4a243dfbab6b3b77e1e1d3feba88"], 0x0)
fchdir(0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf2517000000440006803d00040063636d2861657329"], 0x58}, 0x1, 0x0, 0x0, 0x806}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r6, @ANYBLOB="00012abd7000fbdbdf25f8c0efd27a94f09ac4674a013c4295c008000000480007800c0004000500000000000000040003000700000000000008000100008000000000000a0000800008000200030000000c00030000000100000000000800020000001c97240009800800010007000000080001000700000008000200010000000800010009000000300005800700010069620000070001006962000078000100696200001400028000"], 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x40000d0)
syz_emit_ethernet(0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb780000000000119078e0000002e0000001fffd4e20006490780200000004000000030000005cfd34138ae6f66483434775cd006b110bff76eee1befd7013c92f410e77a8ac7c78f9802b06dc4139b18b1b898a8d11175bc40f3a8e052ef51c156cdb7795b373438263a380460d00ab1aba711ad2c8"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
rt_sigsuspend(0xffffffffffffffff, 0x8)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000980)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80))

5.093401319s ago: executing program 2 (id=796):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
socket(0x2, 0x80805, 0x0)
socket(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
splice(r3, 0x0, r0, 0x0, 0x317e, 0x4)
write$P9_RREAD(r1, 0x0, 0xb)
write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0)

4.926467462s ago: executing program 3 (id=798):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000240), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000280), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x258b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f0000000b80)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0), 0x0, 0x10, &(0x7f0000000c00), 0xfffffffffffffd00}, 0x48)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000c40)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r5, 0x4, 0x800)
preadv(r5, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/73, 0x49}], 0x1, 0x5, 0xffe)
sendmmsg$inet6(r3, &(0x7f0000000d40)=[{{&(0x7f0000000d80)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000e00)}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000e40)={0x0, 0x3}, 0x8)
close(r2)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e80), 0x404000)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000fc0))
r6 = getpid()
sched_setattr(r6, &(0x7f0000001080)={0x38, 0x3, 0x1000002d, 0x12000, 0x299d4, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0)
syz_open_dev$vim2m(&(0x7f00000010c0), 0x0, 0x2)
r7 = syz_open_dev$vbi(&(0x7f0000001100), 0x1, 0x2)
r8 = fcntl$dupfd(r7, 0x0, r7)
write$binfmt_script(r8, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000001140), 0xfffffd9d)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="60000000020601040000000000000000010000001400078008001140000000000500150003000000050001000600000005000500020000000500040000000000090002007379"], 0x88}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.556961104s ago: executing program 1 (id=800):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a40)={0xaa, 0x2cc})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vcsu(0x0, 0x4, 0xc02)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r4=>r3, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x20, 0x8, 0x101, 0x7}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/60, 0x3c}], 0x1000000000000367)

4.13441751s ago: executing program 2 (id=801):
unshare(0x22020600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, 0x0, 0x0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_DQBUF(r1, 0xc04c5611, &(0x7f0000000140)=@multiplanar_userptr={0x9a9, 0xe, 0x4, 0x10, 0x1, {}, {0x5, 0x0, 0x4, 0x2a, 0x0, 0xe5, "0df1ffd5"}, 0x9f66, 0x2, {0x0}, 0x7})
sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x8, 0x70bd28, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000)

3.940140785s ago: executing program 2 (id=802):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x106, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x8, r2, 0x0, 0x0, 0x1}}, 0x20)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xd0f)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)="effd74ab2d321f86d1ca6eebd9d5d97cd50a", 0x12}], 0x1, 0x805, 0x1ff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
dup(r3)
mremap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f000043a000/0x1000)=nil)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/bus/input/handlers\x00', 0x0, 0x0)
openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0)
pread64$ublk_ch(r4, &(0x7f0000000600)=@buf_1k, 0x1000, 0x8)
ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000040)={@private=0xa010100, @remote})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0xffffff1d, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f0000000280000012941c52078996e95621476566a4d40c5068546ee689d607de2d1ad3d4bd63dc581b5c8451651a253cff8948398d2df8cdeb85a4bee0cc1a08167d488926e951b166dd84c0e6040395ea01db66a158977ff700170492a4aa72b71798837c4c86046a08b2372bb84842ef5822b821a27a8cddba61df5c000e751de4b5c15748acc1a46df5748357026d7459ae1d0ea157054f1aaf6e4f3be88d0f2895", 0xc8}, {&(0x7f0000000440)="0347387a2a48974f9f5f7b1dc2005e7355ed7561d791bf96382dd1eb19e3ab5c0c3aa8f7a10e99d6db3636f62a6f51a34be681bd1a17bf9347064c77c7bbef074a634b54e5ccf42576904628e1f45647f7b78eba0c262985b0596fdc181e4b084939048cabb5c9dd2ca2321e4210273af8e444bfbbe52a0e31e0f4b537774011ecf121a8a196123b4fc6c64d71d8c8f0205e5bc3d2cfc0dd997c8231e446ca58bab10754b8e60f9b00b0d6adece302708b9de671654f2aab30abcaa9f62e9b8276d774f3f36033ca8cba5d27943030ad67525c0bdbf84e9029cb3d24e8", 0xdd}, {&(0x7f0000000280)="4ee58fa5d649a202b9290905176a83d5d0f889a92404836ee57db22ef232a3e212bad63fa9cb62485ecc716c089355559116225cec379bcf"}]}, 0x20000041)

3.711785808s ago: executing program 1 (id=805):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="3f00050010040400200012800b0001006272696467650000100002800c132e000300000003000000916e13703ddfd8a0bc7cb720ab695eb711113b3b27403ed3dc2217119456371fd1ac24302996e7a7f0e39e98d1f251f3c2583604d348ce9ffd6830f075d8f1e8d74a04e5466d3ff38db6d6c0f0c93acf59620298b72c5ee130df96c8540a84e995877d09370c88d48709838c2acf0795a2d71263741dae160fb6a3873c8d0e814c99253404e9eba452255482c122c167a76a381c7c8c938c46a14bd66cf840e87fee3dcde1873e185e4f94ad98ac65205b"], 0x40}, 0x1, 0x4000, 0x0, 0x440d0}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
write$khugepaged_scan(r1, &(0x7f0000000480), 0x8)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0}, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x2703)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000200), 0x4)
shmget$private(0x0, 0x4000, 0x1, &(0x7f0000007000/0x4000)=nil)
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='c', 0x1}], 0x1}, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='c', 0x1}], 0x1}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0xfffd, 0xe59}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000580)=0xc)
setsockopt$inet6_int(r6, 0x29, 0x43, &(0x7f00000005c0)=0x8, 0x4)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0x1, 0x5, 0x0})
getpgid(0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000680)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x0, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async)
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000680)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x0, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000740)={{0xd000, 0x100000, 0x0, 0x77, 0x8, 0x0, 0xc8, 0x2, 0x0, 0x6, 0x6}, {0x1000, 0x9000, 0xc, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, {0xeeee0000, 0x1000, 0x10, 0x0, 0x7, 0xc4, 0x0, 0x1, 0x45, 0x81, 0x0, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, {0xffff1000, 0x0, 0x0, 0x78, 0x5, 0x0, 0x0, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x3}, {0x5000}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0x0, [0x80000001, 0x80000000000, 0x1, 0xfffffffffffffffe]})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000880)={[0x1, 0x4d7f, 0x7fffffff, 0x5, 0x9, 0x2, 0xfffffffffffffffe, 0x8, 0x2, 0x6, 0x3, 0xfffffffffffffffd, 0x166ed4d9, 0x2, 0x9, 0x8], 0xe000, 0x800})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
chmod(&(0x7f0000000100)='./file0\x00', 0xa3) (async)
chmod(&(0x7f0000000100)='./file0\x00', 0xa3)

3.22068881s ago: executing program 4 (id=806):
syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="120110010000004082050c0040000102030109028b3ff6e0a5b3fa31206e32700003010030050904000000010100000a2400000904010101010200000724010a08000009240201ae0e87c47709050109000203b8"], 0x0)
syz_usb_connect(0x4, 0x5bc, &(0x7f0000000f00)=ANY=[@ANYBLOB="120110016be2caffd219991214a9010203010902aa0502040340070904960402ffffff03090580000000ff057f532241ad85f9fc6053eb2cbed7a48f783c330beb74ff98aa64ee8b2852c5056de43cca0bad3d31a020c1a951603c77644a7e5643136c3a328112e90baad5e9dabd41622c7b550f311b0d7bc8831e2da1491a0507250108a609000905031a0002090606072501e500ff000904de0810ffffff2a09050403200005040709050f10080004020a09050900ff0304075e09050910100001ff80090501011000070507b30048d1f51b81ab5d3631940135e2baedf4fd01b018c7f38d00b3afbfb06104e19ed32f246d1ff76efdfb7106251fb06aca10cfaf2c192816197fd77a915a10fc745ef52472b771db376844210c91072430a972de09c3622291286e1bf1f76d9659461eeef8e8120dc398abc43c19d8e854e076e5a105f4dac869911f773ef8536ea422dd89d1001021b020e48a79523349b18c84fc025b82249a73d8b0a512ad54bf30b4704a85be615526720e6921eb7ada09050400100007083db3219c646c64e3fa71963f530bce72c99eecd713f0635e34303a3f226ce1f395067e27cf17bfebd207b9548d73a9dc17255da3b4aa305bef06ec436ccbe653ae7aa5e15c17203ab92417f808a012fab00f129c8dc3b84262a760a12be3e300931b6b14abd9bd8f153d9469e334c357b1789a5303615cb1d5596ff10eb4efa3a276a21e7b12ce06934c9b4a268f9de737a036ff7235197774c03813edd7868028ad7e22bfa090653d81887b3e2517d74108dc8eec53b4fe0725010c06010009050f002000004df7e2241691322cc924a043f49c2b381345878dce23dcf733b48302369d3163331bf4b72eaf76de08774b6ca21c230f5ddb9112cbec94fc4f806edac2238761f844406b1203f35fb226048aa0a739a65b7f554d575939c7af88bef9688f8e049243908b88ba1e0c59533cf578efff2a530c1ae1fecb4af2ba44535fde8eff61893563fb9446d021f0357f8063d964d672b77d4cc4f32e7d2977aa2ea7f1db1a4f45e584a5d8585c0c6f10d0b7ab138ed826424ca6e8013be01009489ce2e02f81ebd2f7864ecd2f8c89b060156a9ab19157a5ef51d362ec8a60b2a9226413ba016b3069e82459b151c9e5aa2696ef64d2a31df734b9ed4624b88c96801f545ff93414058dcf2b7f38c9c2217d6e2b4835f6a771589c2f2a7c651087339f8ce558b66890df55898b5c367c211367a8cdbe31b885d955b5e7c95b8326da202a1225db3d5210e43fe86645fcdcf9ca6e8b59fe000c826929a0fcb16df114e63f866da0d51c7ab458926befa162ddd2fa9be94c6eedcca35ee31ea2889018ce22ce6b28f801126ea039b02051871c2df1491c9394712197e2285ad29934933548e5369894ff4abab5742da9caf4cea41c2feb20f25cb9858fff99536bf0fc830c136509050000000402090109050f0c10000105805e21cb7657788ed68af60d1ffb5e7a77d0761ce21bbc7f3337ba1f6aa3a2f46e10b733a5a0724e25f80d9ed0a02b54105a5f2b8c1ad30c5218642bff6a77b43ff12a589a38268dfd7a3a9e866052f5960bf1ce853cad6388aa39980831de09050103080004080f8622175a82c80dde51f865ab187ac7660ed63afbf57120c63e3ac1f8c1c389719e69ebeeaae9476be6543b29c397c78b76c1214f1e571308b12322b9f4f8f8294acd1ebea6ac3fd353f932faf05e0d4176607cace31352ae87ca7ca00280473562a0724a956a50ddf815b87adeaca5675475b4ab38fcf9085e0bc408cc83d49e7d7aad0f3b8e09050010ff0317f5f70725010c0ef0015c00304a43a977fbe6f6ecaad638c38ac1eecf4a575ce95f11887f4a468911babedbbf4b2aaa117e9eb1bce62d4bcbb707347a13aaba5825bf18a3194434861aaaaf5d7211e3b5add91ce419065af8a6252eb9ee07e582f1b038b0bb0905093008003de00807250104db400009055a0240000604c309050f10080009080509050004ff0379060307250108057f0009050f08000281060b1cae627bf3ee94d34679df572a0e1932f4a5accb29894a70b3f80f020acf8d92dd0b112884d43bda50144e9db88c5e7d2848dabafef64ace79e44ed697870494fd4c15903390ad983256837d4fd9f0092028b4e0531f48b51fdbde1d926ae18c516f55b7100db7a74642d31d9e8bfee57ca8983a1146912a1bbc721d7575eea22775d5243eb6b00529af03f56f9c06d723ecb1fe4e084d7984dabf2aa7e26614c8837ae5668389f1433ad568a0ae77e1733c6403a7b70f1fe05d8dcb2fffacd9f551eacdc0846d6064fbd32d76e387c937a96244138acd7b20e0fa6b248992e8bf3e00378d50c0d1a50daecfc81eeff7718e506dfa95afd79fa4eb6a88c11e9c6b7e72bd78592fbd236d2d1669155d0f99344ab4563741ec37fd9c3e2de2660f8b6ce80d7b26204c34c6efdbc08c8df20008b3368c553acb100cd749fffb6060ae845977f1c7fe65a8ae4e828a24acb78003acee2c22bb57f45590352151b947488ec05c9c1cdd7f427fa05c87b849"], &(0x7f0000000ec0)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x200, 0x5, 0x5, 0x3, 0x8, 0xc4}, 0xb0, &(0x7f0000000c40)={0x5, 0xf, 0xb0, 0x1, [@generic={0xab, 0x10, 0x4, "3267c91251d256bbd6046dcd710f42c8ac2937326a85f7119de2f9e0323d1c29d6c6ad367473a5a01f3822f8331baf868d98e23145d320eca1e461c93dc25fe6f3b2ae42045d69c72a5e995af9cf71f4c146c7558a100bebbcc4c2de8d123cb354e3e156db87a1c590793b4ea36958013c4a8b3d90d1135d576569ccb4e5bd7e29e37800ecbb0de477b2079c2039925779f52149d4e1f48ca512fc8cdc2e7d12d49ee10fc40e1446"}]}, 0x4, [{0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x409}}, {0xe0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="e003c2c316a3e734bf9719bce80ad1a4f0a86af38d514b7e17cb8e0534d8fd7a1d5912523f0ce43565b97fb44f9c783ec0049a8c558d769e3f0263d1759d3feb46c2407862cd77069d5abc928a580ca55a24d2ab7f5b6410c2d2ec204816446cf639b556006ff6f447e6e0e73a55c9914fa4a8210c37672e3180606a62cd09b2b9604373c52efdfcda5466b58e1b226282788a0df7e2c91f0818249c707c0fa7a98dd9da4c224e31363aa5abcca7607ec27463101db6751c53e4527dbb8778ee488c5bc455c5554b9543ac3ad60842213c92076d00cb463ccb1003acdd537bbc"]}]})
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x18)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="b80000001900010026bd7000fedbdf25fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000000000020a00203000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02ffffffff0000060000000000000000000000000000000009000000000000000400000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000008030000800000000002000000000000080000000000000000010002"], 0xb8}}, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000840)={&(0x7f0000000880)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="f1", 0x1}], 0x1}, 0x40040)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840)
r4 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r4, &(0x7f00000004c0)={&(0x7f0000000640)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x863, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r5, 0x84, 0x76, &(0x7f00000002c0)="1a00000002000000", 0x8)
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x1, 0x0, 0x3, 0x6, 0x3, 0x7, 0x6, 0x4}, {0x0, 0x0, 0x80, 0xfffffffffffffff7, 0x8, 0xfffffffffffffff8, 0x0, 0x5}], 0x2, 0x38, 0x1, 0x9})
r6 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000500)=""/276, 0x114}], 0x1, 0x5, 0x7)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00')
r8 = socket$inet6(0xa, 0x3, 0x3a)
fcntl$F_SET_RW_HINT(r8, 0x40c, 0x0)
fchdir(r7)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12)
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})

2.454530692s ago: executing program 0 (id=807):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000440)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000480)={0x2, 0x0, {&(0x7f0000000500)=""/201, 0xc9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000600)={0x2, 0x0, {&(0x7f0000000680)=""/23, 0x17, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000004b80)={0x2, 0x0, {&(0x7f0000004a40)=""/216, 0xd8, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000740)=""/94, 0x5e, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000007c0)={0x2, 0x0, {&(0x7f0000000840)=""/147, 0xfe5f, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000900)={0x2, 0x0, {&(0x7f0000000980)=""/82, 0x52, 0x0, 0x1, 0x2}}, 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000040)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000000c0), 0x318, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc)
recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000300)=@fragment={0x3b, 0x0, 0x1, 0x0, 0x0, 0x6, 0x68}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x1c1)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000a00), 0x80, &(0x7f0000000a40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="ee04"])
read$FUSE(r5, &(0x7f0000000c40)={0x2020, 0x0, <r6=>0x0, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000002c80)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0xfffc, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
ptrace$ARCH_MAP_VDSO_X32(0x1e, r8, 0x2, 0x2001)
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000002d00)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r5, 0x0, 0x0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r5, &(0x7f0000004c00)="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", 0x2000, &(0x7f0000006c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006c80)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff050000000000000002000000000000000300000000000000020000000000000005000000080000000600000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b00bc3a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b000000000000000000000000005057310a17d6e50c68b4e784b517ac51e265232504cf62d988d202c6d85b4616b4f59adf764b9ff5"], 0x0, 0x0, 0x0})
getdents64(r9, &(0x7f0000006d80)=""/134, 0x86)
getdents(r9, &(0x7f0000006e40)=""/16, 0x10)

2.212398698s ago: executing program 4 (id=808):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)
fsopen(&(0x7f0000000400)='dax\x00', 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

2.09707196s ago: executing program 1 (id=809):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_open_dev$evdev(0x0, 0x0, 0x40)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102)
r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000440)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f00000016c0)=<r3=>0x0, &(0x7f0000001700)=<r4=>0x0, &(0x7f0000001740)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000001780)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001800)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000001840)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000001880)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000001900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000001b80)={0x2e, 0x54, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c00)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94)
r9 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r9, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="b9", 0x7144af7a6faafc5a}], 0x1}}], 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22}, 0x1c)
capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff})
capset(&(0x7f00000002c0)={0x20080522}, &(0x7f0000000300))
listen(r1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x1200, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "3df5e1", 0x11ca, 0x3a, 0x0, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, {[@routing={0x62, 0x6, 0x2, 0x5, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2]}, @dstopts={0x4}, @srh={0xa0, 0xa, 0x4, 0x5, 0x0, 0x50, 0xfbd, [@private0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @empty]}, @fragment={0x3a, 0x0, 0x2, 0x0, 0x0, 0x16, 0x66}], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xf, 0x1, 0x436, 0xbb, [{0x18, 0x10, "5c12600291c82a8d8c911cc12903c895e151f733d293744b9b5b3113e4e96658580fa799a2f9b2bf8ac358d24c69f2eedf65e83afaf94cddb01390670c9733f5b70c82cbb5b8d68fd993b62acffe825d591616ed3edf1126696ea9ebb7dba68d73cc7a618b0e344ca247525d9810d48e54a8090397083d0e4626e35f6bb42b582e"}, {0x4, 0x12, "c78232ed802657a2ff9342fa3b95c37b482c53c7b1a0cf11ab9ef78a8a3c4e262d2b63a3d5abfb6b40d5a1a610786c403ac757aad1d0b5e8293e02a9c0f811a6e26c4c3f6584e35be6cda8d84017fc202e44c8cbd6fa09a8843edb7c646450cb48f9bebc16d52802afa9a6fa4d2e262fb5448c7dc049ddf9c3c182b2bf72c9cb29d44d4ff4a8eb8ef1a12f4c5af206bd792c87"}, {0x5, 0x200, "ca2ef54d4264f905361574adb8ada538328ffcf093a1b5a1a648bd433da0943d46dc6a78b912f73eb123623175679877830f5463a07746f4c1776ae04019908d2bd7a10ab360f21ce5737b54dbc1093c16f76330c245ecd18517d53490958c480ffbbbb2e57d8a026c0674cd7102e74efa96215c4d2a135bc4a751e95fc2880a180e4811435620c3f572cba3b785349753fb584723f6aeee5ba100682135d58c5357c4a1c389275d6600e4d7fd2617b37a3fb21f37d023a4b19d5258a4d3fb1c8e00302b1e6953ece22d9d44e6ee952edeaa5c8f6ab3c631b34e58d178ae97564065156305979e55f0e1465d661a4ad84f781ae7d808317dbd81cb1298e699e77ffde2efd8f03c2f325fe0f2f85ce43cebea816c6e66f5ce096e823842698e51a6a4873db3abde6770e3e66a4f09121fd716cdbf00749cb92f76a21f6e92e9f48ae412e52ccb05d285de3894e408ae72de230b749d28ac8e7717875f3d4219624bbe91052975047794deea229e82836badf835b6ac315b3a15fd6e8065a4f79e5a7d62d71424baecef7bd120e7e120e2212efb86f1557d89329f5d837f5e12a864ce5de35657435136aeff9978f6c429355d5b5caa01986d834960508c297e4541068f16facb98a5d69e1e78af47d38e5f883cc5ee9ab18040a9de3e13f89a3326693598dd90e1f294562404cce3ee6df8e6768ed045d166ac9ab316124e4389daf93912f97eeb9ecafde74ff6f4cd668f583ef9ecf91f81f7fd36dbfca0e02217684ee5bd39afee8cc5845861451938f8a0f1b563e36022f3eea4304849ccd4a189d53f89cb9d70077e6b4a0afd848a23d73e04ece94431597b57051c275779a1d4704ed8972de2a3ecc43f0de37a4cf148ae24a6df16aabf522127c232c0ca471870eec8a3700d5e772fe4e8fd1c7baeafe1034f5b187b645a5b113a786e4bb9c339afe7e37163fdadf43945889a29a0c7ff1f294229c9680be38f2e053ed425f00f40d934040574f817d152737779db6362dc400e265c4d27887d3b3751eb9ca89a801c0e5da6f30c4c96c4488fee2e7eb0588f8c7f3d9495bf4539a27041c5bd873a17f7a238669172b13d2a02bec88c1971e31c229c3b1d558b23f1115b67c0835d6340e601af95411cc991cfbfcc74f7b899836a623de597fd06f89c599e0e04f74c023850043a4c0a4a93221c4dbc71ad48ba495bf2d2910430a4e4048806c617f5281977903a6d4f61006343632240dfb4ce653651262507a99c3521f0788562cf8446878ea6bd7130d55197e015d77163645d9f8400979e77d1f1a660c0940dce542d9e599dee401ae8eb4d6fc437d7d89471e97a840d317b5febe6e731cc28942eb9bea7532d8112b270eccc5aa7bc72346e1a02e2797d764a11d2f73e3a7700fbfb16d71f48705f5b19731a982e8bd599978f46518fcbf4d6f0f4bc8b6207b0d2deb5eb932e373bfecba59e2019313cb0652682c7e1fedabc6f43c458a2133c7bc2f93b599604d2f67f71e4a38572f714c027ab8dd4551464c5f528020dd5487a75ffb961e964e1f4659440149cd43d1e68e5ebb7515f598d1cfc1586ce6b2c33581358d92287f8fd0b745dc700b21114aa1175c61569ef42237babb207fe1864bdf2fcd67e864cc3d42dc1e22ee9452fa73a7632d605bbfca9f221b654603d00d5641eef4ba29bfc5b157e9ec581f613858719b0a20a6771628c22e013106e057715d63fc41a15f6abdc2f96557308abd97910c87af0b4d27cb8043d496f60e342cd9232c7617a93c6bf81d84189d219765f70333182e9cea7d3375348166e47fc943d3a8ad5548f0091bcbbab8c49da9b47c0ce235d3d79d2f096ae60f36640b5d91f9a98347151364ba72734e32162d80f21c4d7d13c24e21c197e23a18054bbb333f824989da452f473d95a9c62c7b8099578a6230652362a52c84fb4cce057cf765e688e895b4ce5892ef8b2874fd09431ad6545780a597234e02463f2f71659a6b7e3dffbbf02f0f0a36aa18183c7fad794d3847fe91d723bc6da7aeb7d80ab74c23d2098dd18f6af93649d1b875cc736aff37c468000e41b44b6bbaa0f8a16c18700040bcbb4c5ae63bfc8ded33cc83cfc476eb64a179c55b5f825f74f33671fcd39aac5056a5dcddcafacd4bd82c6ce29d03e326c3a268016e50fde00b7cffc5e734b6bd41c16986e2a20aae03176194a6c06343f75e7c289e440ba0398439aee503510ad659f4b3d6bd228d55bb8bc99170f7e83242d89e19e34de1c79af2e6935362c5698fcb44809f93a18e40104c3c3196f8e980f80d6e00b6e407da39dc3b0e121d2f7d54a6bfa8b643107d996585c424af99f103d2c42342d49480ceec7b2373cf87b3d16ba531b78b31fc1e77b0cf844c1b42bf2fd79b31cf783805bc0f8b479e57d5d87d79b179953636b63c52197aeb5d92e7d7efe91d0749bb4a15836ec7952f55dab1cf7c8cf5421ffddd7f1f0472e466077b661d82c9bc5399eba8394318a77d97e839e3d549e8aa99af6d3f5a76ff88b14213cecadaa21a1b519cc6c3a8e82b8c54698dc226487d1809f69dbbdcd603ef6ab7f982522f607b6de6581fcdf1ca57d18fcedeb937ca90b14df04088c656add94adcbb66aa2edeb84fa92a24543a605ca6b714d557be9e35fec1e04d429cf50fc5e784037ad213b8f9818a86f1f54cb2b622ae50a873d72c121ed5bf3c38e83ab5e60cc190b26732f8cce948044463871106397055869d1c598ef5c1e1494bc3a5cd470336652b90b13a99d96b527044c99db7bd40118f901e3ff06af0fd025d68b67f7f023dacacb54abf3fa9a625d753085e0a109cc62069eaff6d3c42a3ed07feac0e6aec8b6c1b7ecaf491e3704e257e35bf3969dcd713e027d4ffdb39f58fd8abbd54afe6cd7166bd2c065a71f78bf587309725850a89613ec3b739efc7c0142ecad7b495880a475a672920ea1b6735e6c62ea3204fd4c1bcc147b715a753df43c1ffb9c7645bfa40a73ea32468c41828838307117bbc22dfedc6bc4bdeada4a710525784857ab57f220ebc23d7a1c095972adc66ba795cc571e56e1ddb06c1d2d7d4d212cc3f7319bc0930fccee7e863528d1c8bf8a3f0b51b9aece28d7a6ef8010b587d306fcc545f41ac9ddc63396ec54356b167d24833736a636fee558081cf8789fdcaae304d1fe845a3c2062ef99ffc9b932260e9fa4920bd88f9fa95dcf29aef793153edaa77210dbe491ebf79ddfa79543c2b9fbae637410347d9673dade74f15dc526b8e7fbac848b3a7097de1e41adc48d6ec520acefe3251d0a90cc0ebe13b187941065e1981fbaf444d1970dac58204970eba3edd30ac5028ea0f9329b88ed87917ea644eefaf4f8b39293c6c895924a3a671403fefe548378ef2daad9e58ae428fdbc8094310a55c6fdaef9d6a518b1326824535fe26dbd13422b507a64a4d12991ac73c3d4fada9d58b1aa2659350bc7ffbe002a70a37aba34f1d815bc4cba1ce150955fb3999448f344fcfa99e6bf25019a6ec36bc53c3e74ce997670faaf95cdf2578a726161103d13a336eb60fd973ef8958d08069a802e09a5263de9bef5a320e9d943499f02416328937fbd2b049af8bc07cc1540655c2b043161a1576c5692638b795dce591147dcf76df341c42d67f7cbd25a16a2688701f80b79193961bfbb0e4c5956a3ea31d5da211a4f368be32a0cd7ef39de04b845d56219d7362035c224d7ed1ce5ea9390cf68fa2c890ecda4f78d53f2826e67ddc5346ca9b50d277aab1e7713dbecf99f032a8e21f715392f1e91ad0c98b2aa2a422f26bc26d8dbb7610098e11b80a416837e61f1ecf5a628e51d4a37ceda77ac479d9ef5b0d272a83371fce5fc436d21492d780fe81bbebc591c9e73dfbaf9697442f091171822853101e5e24598e67c60e1188f7bedeb49396822cd7e3eba60c563ae572e33ff8ba459f78521b656da6de5c728c9475cceb7021af08e825119af6686b9f1498e1385e49349d752b1606f48dfc5daa48c3899895eb5d7750abf7bd317d646962cec5207f2bc063c6751bb2b3187b8ddf4cb939eeb03b37214dfcd6d365829defdf305f069da317be360da1825d3d3e483a9d35955838fc0c907812d2e21e471097a2882c8c389608da88a8ac2db6ed6b9175dd13b81a3a8fab7b3b4b122315df6d24ed985f1de2fc05682627997a8cac6aec22702278115b33f9e7005f370933a9422d916fdca61a13f41d9e8d95cc5d571a787f475d529ed4706d411a00ca49c53ed647265708eb3cf0e8cf423fa3c6b81679fbef92571e961e005b242212861af1d3343c0252fe9e1b9fa6f7657ec332afc48d3b1b9128f6c97b9a0e40a1adcbb81509763e4d27f4bb29526acbb8bb8527e4a20d2bda5ec27d169f77593cdfb17aafbeb6ff3ea1940abdcd0af143e2bb9f458a273eb0fe18d8ea4e9262ad8c6ce0edd3dee44179aa75f8a993af2219a05c01b31cf375c8015c17b70922a65480e233127af94d79cc075746ef34f4c68d54d83996b2c106186b303a3fb3c2e92c863b627de6cd57ed5d8cd03e8ad148703a93d1264f6967495b99c3aafb7dd8dea86af43e81115a583a8999c8f023d37322275cb986c313f6674ae829ee6843f80901f9bcf61cec9f17195f508b646d3bbe49a710a181ab8f6ff34491bfcd6f4cd810080da7ac9886cdf42f79f38c75046cc686b119a9ddc307f58f02048ca95679bf82dd0f42734d99910c88800c8d636d820c4761ddd3cf38ea2273dc4dd10e953642d666aa4214d08e9f973627e163480cdc969adae4adea35933ffe214cacf13ecddc32a42ea4e7356cdb36e86a77ed029cdcb7195304a0ee6448a8481341fe953640921e8bdef5da1414a36b79ee29882e7fe259e9718938c4bb48a7b38badc4040a0a793621db1e58b5cd831f925664eb9db5180b54b420f252cc7ab088df3121844e0d9f74faddf6f0d943a876043dc32d3a9da1d27b0d7ba81000cb860b4eb3954f9f9dac9f13689f1749f9b9c51cba03f785c867ca523b72666ad1822946a8c5039d8713b5878ccf1e5c284b6f4842702ef2d0926dce5356733725c7320e26635733bdc1e0967324ce51d3c3cef8f6e02fae26e3baeabb1d52d9d1bc49a4b853504d1ac4a8082c5227a305e7788125e52d853050253bb2c1a9bc42e3468c38def99968f04d913cf8aec163ec617e79e97d6b9af8208143bd7cd4a4229cf678cb19ef0e1e2df3592ff153cd3b36a0a2522af0e0f8e585516d41731ce49de83f1dae83edf42f4643b60f3b5352d137eb32cb08921f0c19a0cb6359fff0802a33dfef2ec2815d5dc49174d61b1c9a825e250a160efb8cb1d719a72dd49aa916b8bc7ab459b929b1ecb0acd69e105e34e5665655b7f8ecd9432c61f0768fe5379aa0d15f6315e49a80c653bedb0c160a7ce82e6ae6d2bd7932883ce72ad0b66386d381895b1b2c0797538a46ba47fe8eb7bd267b2a251cc8c0519d1249ecc5b8a5fcfd1c3d4e0d0a3b4671b0058005e0b569d50bcc7ab7fc99dc1f86efde07809ecd81c60bfe5444a5b64e2ec0bfa9cd3d5288c75c70f5dc9331854817dd9bf45b792be0a924993d09c3ba0a4801b4993deaa8edae46f85077257dc25262617987190c7d15b187852c879532e664f16a7ed9f88331c839c28641e74bd854819f142dd6f9ad794468e4e7a3cdc1ed032d06eae94233636fb1966cd9882819a1c0d2e03385e4f4d590d68a75111bfe22c7869b066425e2f1ee7d355850524bd4524effef9c778307359f10bf8192cce4d0d"}]}}}}}}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r10, 0x84, 0x4, &(0x7f0000000000)=0x14000000, 0x4)
bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @remote, 0x4}, 0x1c)
shutdown(r1, 0x0)
ioctl$EVIOCGVERSION(r0, 0x80044501, 0xfffffffffffffffe)

1.951971848s ago: executing program 4 (id=810):
madvise(0xffffffffffffffff, 0x0, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x10010, 0xffffffffffffffff, 0x6326e000)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c)
syz_emit_ethernet(0x2a, &(0x7f00000008c0)=ANY=[@ANYBLOB="001c00090102ac00000000130000000000000000000000000000cb3b671591b1c326a0cc7d46dc2cd8dc31467b903bf589338b8246c63d1b34cd289588957496ae0b2d5103d051fc2289f2197a177679d32f6cdf8214bc6de68446a596a29c6988eef88f8efc1d3c0dfa9dd39fb82484637eec078dab31ab966f61a4648f8b57f7c1679fef06f3ebc3c40f4a6538d534e65d0bf2df16bf73fd42fdbf07bcbab6b069fd9a324d7d4360cdbf2c096f60d5931c4cabecc01ba976570897c0b05f87"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1327, 0x200400)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x80001e)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000000200)=@attr_pmu_irq={0x0, 0x1, 0x1, 0x0})
r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x2c4001, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022ebd7000fbdbdf25140000000800110000800000080004000300000008000f00050000000800060009000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x850)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000002794cb937bbc491b136e50f96f3da6593d0766ce4a0db871e22142dc6dc0b412ebcf27e009de48af47f398f65c7e"], 0x8)
r5 = socket$netlink(0x10, 0x3, 0x12)
write(r5, &(0x7f0000000880)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="19000000faa687150a9f96cc30aed00400000002", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(0x0, r6)
sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000a00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x224, r8, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x1c0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf8, 0x3, "18b2fbb6027e0131524730cb618d3f611f222d25963574a696230781f59f18ee0fb6cf64fabd2febf85e62d0df34f31f59981bcbe1a73f98b9e71f904e27f9599ac3cd91259b60e14afba3149c0a54ef045cd65b21a19c5e7e86423c08aabebe43ab6bc79cac2d9d73f540c097830b383cf71b276ce62d454a454eb44e1a4d35b66075726afbd2e302c3236bdfa45f9969b7382e63192e812dd769a10ad4a9b4d9b8dabb833e556b6caad0276e148a522d3e4e99ce7f7934a9ea298293452b3eb871e929047bb92ff114bd46a5c57b7edaa19534dde4f74c0177db7f49c9df70385aa649472288f6836b26edfaabca920ffb35a8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "9f9011c122307f85bae0642dd0c8ddb6456f29738e2425caad3fa650430c919453217c4a94491fa290c4f869bc3f13170ac79e8af17e172b1e223e70ff4415535e0a65f55e22a08b0777c41879088741c0ecc6c1f6ed636adf90908f7fc66c942c28b393becfa9703b7a63556b52b028158e09f6c12f6e5ba69f290949a902242ad86b5c8d1d19c94c5635cd31c77e209cb02f8514cff0559c830f36fb13052f652f55b3a1dbc41516a012b53e372e5415b068ecd3dcee601b"}]}]}, 0x224}}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000d40)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d80))
bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYBLOB="000000000000000000004209d2515a693185aee7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_io_uring_setup(0x328d, &(0x7f0000000e40)={0x0, 0xdece, 0x40, 0x1, 0x223}, &(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40))
syz_ublk_setup_io_uring(0x3574, 0x0, 0x0, &(0x7f0000000f80), &(0x7f0000000fc0))
openat(0xffffffffffffff9c, &(0x7f0000001000)='./file1\x00', 0x103a42, 0x32)
sigaltstack(0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)

1.790944045s ago: executing program 2 (id=811):
mmap(&(0x7f0000173000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, 0xffffffffffffffff, 0x8000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil)
r3 = syz_clone3(&(0x7f0000000680)={0x110a43480, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x30)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x60)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8931, &(0x7f0000000100)={'lo\x00', @remote})
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xb, 0x2, 0x1, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x14, 0x0}, 0xffffffff}], 0x1, 0x10123, 0x0)
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
syz_open_procfs(0x0, &(0x7f0000000040)='task\x00')
r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r10, r10, 0x0, 0x20000005)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
sendfile(r5, r10, 0x0, 0x10200103)

1.716146234s ago: executing program 3 (id=812):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x0, {0x0, 0x0, 0x10}}}}}]}, 0x3c}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x5fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040084)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x4804}, 0x10)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x2, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

1.634140077s ago: executing program 4 (id=813):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x60000010})
epoll_pwait2(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000400)={0x28000016, 0x2000000})

1.444976124s ago: executing program 0 (id=814):
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x91})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x2100)
ioctl$HIDIOCGFIELDINFO(r2, 0xc038480a, &(0x7f0000000100)={0x0, 0x200, 0x81, 0x1000, 0x7fffffff, 0x10000, 0x7ff, 0x6051, 0x5, 0x9, 0x7, 0x2, 0x9b4d, 0x6})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

1.404437059s ago: executing program 4 (id=815):
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x110, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000a40)={0xaa, 0x2cc})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$vcsu(0x0, 0x4, 0xc02)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl2\x00', <r4=>r3, 0x29, 0x4, 0x3, 0xcbf, 0x4e, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, 0x20, 0x8, 0x101, 0x7}})
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', r4, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/60, 0x3c}], 0x1000000000000367)

1.145318505s ago: executing program 1 (id=816):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d02}]})

1.049928484s ago: executing program 3 (id=817):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, &(0x7f0000000100)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0x200000, &(0x7f0000000040)={@align=0x30ba79ea, {0x54ba, 0x8000, 0x9, 0x80}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x95})
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000180))
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff84af, 0x79}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000)
write$UHID_INPUT(r0, &(0x7f0000000300)={0x8, {"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", 0x1000}}, 0x1006)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(r0, 0x1f, &(0x7f00000013c0)={0x28, 0x2, 0x0, r0, &(0x7f0000001340)="36e20244380aa19a2cf7f89f0dfd4db4578132fdd3a2cdffd90ee4b0b3196f47f91ceab58863ad0d6da9855e876caf49535068a872d4cc090c6d264805214f88e2ec7a4638da838f6f9f56b739bfb33fe0b9605385e5304b8d8a13efb575a572b8e185bafe", 0x1, 0x8, 0x0, 0x1, {0x0, 0x0, r0, 0x4}}, 0x1)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001400)={{r0}, "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"})
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000003640)={0x9, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002400)=""/38, 0x26}, {&(0x7f0000002440)=""/80, 0x50}, {&(0x7f00000024c0)=""/232, 0xe8}, {&(0x7f00000025c0)=""/4096, 0x1000}], &(0x7f0000003600)=[0x100000000, 0x1], 0x4}, 0x20)
syz_ublk_setup_io_uring(0x56c5, &(0x7f0000003680)={0x0, 0x9468, 0x80, 0x0, 0x3be, 0x0, r0}, &(0x7f0000003700), &(0x7f0000003740), &(0x7f0000003780))
syz_genetlink_get_family_id$ethtool(&(0x7f00000037c0), r0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000003800)=0x200000000)
r3 = syz_open_dev$vcsn(&(0x7f0000003840), 0x2331, 0x80880)
vmsplice(r3, &(0x7f0000003880), 0x0, 0xd)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000038c0)={0x48, 0x10204, 0x9, 0x3, <r4=>0x2}, &(0x7f0000003900)=0x10)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r3, 0x84, 0x7a, &(0x7f0000003940)={r4, 0xffffffffffffffff, 0x800}, &(0x7f0000003980)=0xc)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000003a80)=@get={0x1, &(0x7f00000039c0)=""/186, 0x5})
r5 = openat$pfkey(0xffffff9c, &(0x7f0000003ac0), 0x80000, 0x0)
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000003b00)={0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r5, 0xc02064a5, &(0x7f0000003c00)={r6, 0x2, &(0x7f0000003b40)=[0x3, 0x0], &(0x7f0000003b80)=[0x6ff, 0x5, 0x1, 0x0, 0x200, 0x3, 0xed2, 0x57f4, 0x8], &(0x7f0000003bc0)=[0xf95f, 0x101, 0x8, 0x9, 0x1, 0x80]})
r7 = syz_io_uring_setup(0x4263, &(0x7f0000003c40)={0x0, 0xc115, 0x1000, 0x1, 0x262, 0x0, r5}, &(0x7f0000003cc0), &(0x7f0000003d00), &(0x7f0000003d40))
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000003d80)={0x1, 0x4, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
socket$kcm(0x29, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000003dc0)={0x2200, r0}, 0x1)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01864c2, &(0x7f0000003e00)={<r8=>0x0, 0x0, r3})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01864c2, &(0x7f0000003e40)={<r9=>0x0, 0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01864c2, &(0x7f0000003e80)={<r10=>0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r0, 0xc03064ca, &(0x7f0000003f40)={&(0x7f0000003ec0)=[r8, r9, r10], &(0x7f0000003f00)=[0xd7a], 0x0, 0x3, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000003f80)={r8})

928.725675ms ago: executing program 1 (id=818):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000080)=0x7, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6c00000000082c0100000000000000000000000000000000ff0200000000000008dc6f8200000001ff00000000000000a164559cef276947f5502b47f400f50a90f578a1bc7d1e835abda04496688607c9d5a5840057d60f816b865a5c64ce3a"], 0x0)
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10102, 0x0)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x2}, 0x1)
ioctl$TCSETS(r0, 0x545c, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000780)=0x8001)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

813.806887ms ago: executing program 3 (id=819):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @binary="feffffff"}]}, 0x1c}}, 0x0)

714.864218ms ago: executing program 3 (id=820):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x0)
fsopen(&(0x7f0000000400)='dax\x00', 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118)

500.31465ms ago: executing program 3 (id=821):
listns(&(0x7f0000000040)={0x20, 0x0, 0x3, 0x20000000, 0x0, 0xb}, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000f00)={&(0x7f0000000f40)=""/4096, 0x1000})
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
write$char_usb(r2, &(0x7f0000000080)="10", 0x20)
close(r2)
r3 = socket(0x1e, 0x1, 0x0)
connect$tipc(r3, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r4 = landlock_create_ruleset(&(0x7f0000000100)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r4, 0xe)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82c03, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000020c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f00000021c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r9, 0xffffffffffffffff, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
socket(0x400000000010, 0x3, 0x0)

430.644858ms ago: executing program 4 (id=822):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x1}]})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000440)=0xce, 0x4)
ioprio_get$pid(0x1, 0xffffffffffffffff)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000004c0)=0x4, 0x4)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x14, &(0x7f0000000540)=[{&(0x7f0000000580)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x2, &(0x7f0000000600)=[{&(0x7f0000000640)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
r4 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a30000000000900020073797a3000000000080003000000000a1c0004000600010005b400000500020007000000080003000000000358000000060a01040000000000000000020000000900010073797a30000000000900020073797a31000000002c000400280001000b0001006f626a726566000018000200080001000000000a0900020073797a300000000014000000110001"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r5, &(0x7f0000001640), 0x10106, 0x2, 0x0)
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000016c0)={0x1, &(0x7f0000001700)=[{0x30, 0x6, 0x4, 0xfffff000}]}, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000001780)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001800)={&(0x7f0000001840)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r8, @ANYBLOB="00df250600000380000000000000e8000000ecf703ef971a93b1dd5ed4e73b9352916e9bee29ab9ac74dfb58bc1ff9f9d204000000000000000d62b78c6765e0ee5fffdfe708c273b8e1898043f63ad0cc0000a3eadf73fc350deabc35f5ba657fdc9dc177fbdb3dd2a2a8e4596c88362a0f16b41b37ff830f5dd64efdc582f0990a22af774f1e888b74ad48c23bdefd233bf4c5c9d80628be45df94c41822e5ee78a79324ae8b9d240ebdcdba5b482b07261ba24e05d37c3c41e02087fadc03963c94a90ecfb8b9", @ANYRESOCT=r7, @ANYRESOCT=r5, @ANYRESDEC=0x0], 0xb0}, 0x1, 0x0, 0x0, 0x4084080}, 0x20000004)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r9, &(0x7f0000001640)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r10 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000019c0)={{{@in=@multicast2, @in6=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0x5, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffefffffffff207, 0x5}, {0x0, 0x401, 0x1000, 0x7}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@loopback, 0x4d6, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3507, 0x0, 0x2, 0x4, 0x6, 0x1000, 0xfffffffa}}, 0xe8)

374.709482ms ago: executing program 2 (id=823):
listns(&(0x7f0000000040)={0x20, 0x0, 0x3, 0x20000000, 0x0, 0xb}, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

314.429788ms ago: executing program 2 (id=824):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x9, 0x34324241, 0x1, @discrete={0x3ff, 0x7}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x11c0, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x3, 0x8, 0x6, 0x1, 0xe, 0x6, 0x81, 0x10001, 0x0, 0x86, 0x5, 0x0, 0xd93f, 0x5, 0x5, 0xfffffffc, 0x2, 0x8001, 0x7ff, 0xb, 0x9, 0xfff, 0x1ff, 0x4, 0x800, 0x7, 0x36, 0x6, 0xffff, 0x50000000, 0xb5f]})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1c0)
r2 = landlock_create_ruleset(&(0x7f0000000200)={0x100}, 0x30, 0x0)
r3 = syz_create_resource$futex(&(0x7f0000000440)=0x1)
futex(r3, 0x9, 0x1, 0x0, 0x0, 0x1)
r4 = syz_create_resource$futex(&(0x7f0000000480)=0x1)
futex(r3, 0xb, 0x1, 0x0, r4, 0x2)
futex(r3, 0x5, 0x0, 0x0, r3, 0x1)
landlock_restrict_self(r2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "fff5000000000000"}]}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}], {0x14}}, 0x94}}, 0x0)

0s ago: executing program 1 (id=825):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2) (async)
r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000001c0)={0x1, @pix={0x3, 0x0, 0x38415262, 0x0, 0x1, 0x0, 0x3, 0x13}})
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = landlock_create_ruleset(&(0x7f0000000440)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
umount2(&(0x7f0000000480)='./file0\x00', 0x0)
ioctl(r1, 0x4020ae46, &(0x7f0000000040)="000000000000000000000000000000000010000000000000001000000000007f") (async)
ioctl(r1, 0x4020ae46, &(0x7f0000000040)="000000000000000000000000000000000010000000000000001000000000007f")
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl(r1, 0x4038ae7a, &(0x7f0000000080)=' \x00'/56)
ioctl(r0, 0x4048aec9, &(0x7f00000002c0)="01000000000000040000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000075")
ioctl(r1, 0x400caed0, &(0x7f0000000180)="0100000000000000ffffffff") (async)
ioctl(r1, 0x400caed0, &(0x7f0000000180)="0100000000000000ffffffff")

kernel console output (not intermixed with test programs):

d_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  212.126264][ T7488] lowmem_reserve[]: 0 0 0 0 0
[  212.126294][ T7488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  212.126397][ T7488] Node 0 DMA32: 894*4kB (UM) 1505*8kB (UM) 467*16kB (UME) 272*32kB (UME) 428*64kB (UME) 184*128kB (M) 53*256kB (ME) 12*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 262*4096kB (UM) = 1189936kB
[  212.126538][ T7488] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  212.126625][ T7488] Node 1 Normal: 1*4kB (M) 7*8kB (UM) 7*16kB (UM) 7*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 959*4096kB (M) = 3936268kB
[  212.126764][ T7488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  212.126778][ T7488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.126792][ T7488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  212.126806][ T7488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  212.126820][ T7488] 65609 total pagecache pages
[  212.126827][ T7488] 3 pages in swap cache
[  212.126834][ T7488] Free swap  = 124940kB
[  212.126841][ T7488] Total swap = 124996kB
[  212.126848][ T7488] 2097051 pages RAM
[  212.126854][ T7488] 0 pages HighMem/MovableOnly
[  212.126860][ T7488] 434229 pages reserved
[  212.126866][ T7488] 0 pages cma reserved
[  212.237731][ T7489] netlink: 56 bytes leftover after parsing attributes in process `syz.3.444'.
[  213.358425][ T5728] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  213.508418][ T5728] usb 4-1: Using ep0 maxpacket: 16
[  213.510690][ T5728] usb 4-1: unable to get BOS descriptor or descriptor too short
[  213.510724][ T5728] usb 4-1: New USB device found: idVendor=103d, idProduct=0100, bcdDevice=0.40
[  213.512699][ T5728] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  213.515648][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.515664][ T5728] usb 4-1: Product: syz
[  213.515672][ T5728] usb 4-1: Manufacturer: syz
[  213.515680][ T5728] usb 4-1: SerialNumber: syz
[  213.591221][ T5640] Bluetooth: hci2: command 0x0406 tx timeout
[  213.591245][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  213.591266][ T5640] Bluetooth: hci3: command 0x0406 tx timeout
[  213.591277][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  213.591293][ T5640] Bluetooth: hci1: command 0x0406 tx timeout
[  213.838108][ T5728] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  213.848588][ T5728] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  214.036144][ T5728] usb 4-1: 2:1 : can't get High Capability descriptor
[  214.235266][   T31] kauditd_printk_skb: 24 callbacks suppressed
[  214.235282][   T31] audit: type=1800 audit(1793217244.872:1995): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.441" name="bus" dev="ramfs" ino=20675 res=0 errno=-4
[  214.279090][ T5728] usb 4-1: USB disconnect, device number 28
[  214.950926][ T7523] FAULT_INJECTION: forcing a failure.
[  214.950926][ T7523] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  214.950953][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.2.456 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  214.950971][ T7523] Tainted: [L]=SOFTLOCKUP
[  214.950975][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  214.950982][ T7523] Call Trace:
[  214.950987][ T7523]  <TASK>
[  214.950993][ T7523]  dump_stack_lvl+0xe8/0x150
[  214.951021][ T7523]  should_fail_ex+0x3eb/0x540
[  214.951039][ T7523]  prepare_alloc_pages+0x21e/0x5f0
[  214.951058][ T7523]  __alloc_frozen_pages_noprof+0x17c/0x410
[  214.951076][ T7523]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  214.951103][ T7523]  alloc_pages_mpol+0x21e/0x390
[  214.951122][ T7523]  ? vb2_core_reqbufs+0x931/0x1470
[  214.951146][ T7523]  ___kmalloc_large_node+0x7b/0x170
[  214.951163][ T7523]  __kmalloc_large_node_noprof+0x18/0x90
[  214.951179][ T7523]  __kmalloc_noprof+0x3f6/0x710
[  214.951193][ T7523]  ? vb2_core_reqbufs+0x931/0x1470
[  214.951211][ T7523]  vb2_core_reqbufs+0x931/0x1470
[  214.951234][ T7523]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  214.951251][ T7523]  ? __kmalloc_cache_noprof+0x148/0x600
[  214.951272][ T7523]  ? __vb2_init_fileio+0x1e2/0x1040
[  214.951294][ T7523]  ? __vb2_init_fileio+0x1e2/0x1040
[  214.951325][ T7523]  __vb2_init_fileio+0x310/0x1040
[  214.951367][ T7523]  vb2_core_poll+0x4b0/0x830
[  214.951397][ T7523]  vb2_fop_poll+0x196/0x310
[  214.951427][ T7523]  ? __pfx_vb2_fop_poll+0x10/0x10
[  214.951454][ T7523]  v4l2_poll+0x147/0x2c0
[  214.951482][ T7523]  __io_read+0x4c3/0x1500
[  214.951524][ T7523]  ? __mutex_trylock_common+0x15f/0x270
[  214.951560][ T7523]  ? __lock_acquire+0x747/0x2de0
[  214.951588][ T7523]  ? __pfx___io_read+0x10/0x10
[  214.951622][ T7523]  io_read+0x4a/0x1e0
[  214.951640][ T7523]  ? tctx_task_work_run+0x990/0xd10
[  214.951671][ T7523]  __io_issue_sqe+0x180/0x450
[  214.951705][ T7523]  io_issue_sqe+0x177/0x1290
[  214.951745][ T7523]  io_req_task_submit+0xea/0x190
[  214.951773][ T7523]  ? __pfx_io_req_task_submit+0x10/0x10
[  214.951801][ T7523]  tctx_task_work_run+0x853/0xd10
[  214.951835][ T7523]  ? __pfx_tctx_task_work_run+0x10/0x10
[  214.951872][ T7523]  tctx_task_work+0x3f/0x60
[  214.951897][ T7523]  task_work_run+0x1d9/0x260
[  214.951926][ T7523]  ? __pfx_task_work_run+0x10/0x10
[  214.951956][ T7523]  ? __mutex_unlock_slowpath+0x731/0x900
[  214.951986][ T7523]  get_signal+0x117c/0x12c0
[  214.952025][ T7523]  ? fput+0xa0/0xd0
[  214.952054][ T7523]  arch_do_signal_or_restart+0xbb/0x860
[  214.952080][ T7523]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  214.952127][ T7523]  exit_to_user_mode_loop+0x10e/0x770
[  214.952154][ T7523]  ? rcu_is_watching+0x16/0xb0
[  214.952185][ T7523]  ? do_fast_syscall_32+0x33/0x70
[  214.952209][ T7523]  __do_fast_syscall_32+0x448/0x6c0
[  214.952232][ T7523]  ? do_fast_syscall_32+0x33/0x70
[  214.952253][ T7523]  ? asm_int80_emulation+0x1a/0x20
[  214.952272][ T7523]  ? do_int80_emulation+0x299/0x500
[  214.952293][ T7523]  ? trace_irq_disable+0x3b/0x140
[  214.952325][ T7523]  do_fast_syscall_32+0x33/0x70
[  214.952348][ T7523]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  214.952372][ T7523] RIP: 0023:0xf745ef1c
[  214.952391][ T7523] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  214.952408][ T7523] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa
[  214.952431][ T7523] RAX: 0000000000000002 RBX: 0000000000000004 RCX: 0000000000002000
[  214.952444][ T7523] RDX: 00000000fffffffd RSI: 0000000000000009 RDI: 0000000000000000
[  214.952456][ T7523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  214.952466][ T7523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  214.952478][ T7523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  214.952539][ T7523]  </TASK>
[  215.605994][ T7529] vimc link validate: Sensor A:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  215.685663][ T7529] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15)
[  215.685685][ T7529] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  215.696578][ T7529] vhci_hcd vhci_hcd.0: Device attached
[  215.704586][ T7536] vimc link validate: Sensor B:src:640x480 (0x33424752, 0, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  215.808378][   T30] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  215.869183][ T5713] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  215.929598][ T5713] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  215.979304][   T30] usb 2-1: New USB device found: idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[  215.986833][   T30] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  215.986853][   T30] usb 2-1: config 0 has no interface number 0
[  215.986881][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.025045][   T30] usb 2-1: config 0 descriptor??
[  216.052135][   T30] usb 2-1: selecting invalid altsetting 1
[  216.052317][   T30] dvb_ttusb_budget: ttusb_init_controller: error
[  216.052330][   T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  216.234069][ T7534] vhci_hcd: connection reset by peer
[  216.255337][   T13] vhci_hcd vhci_hcd.3: stop threads
[  216.256108][   T13] vhci_hcd vhci_hcd.3: release socket
[  216.276992][   T13] vhci_hcd vhci_hcd.3: disconnect device
[  216.280675][ T7532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.289181][ T7532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.319330][   T30] DVB: Unable to find symbol ves1820_attach()
[  216.427270][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.427565][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.480940][   T30] DVB: Unable to find symbol stv0297_attach()
[  216.480959][   T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[  216.652086][ T7549] vcan0: tx address claim with different name
[  218.200210][   T10] usb 2-1: USB disconnect, device number 21
[  218.784441][   T30] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  218.932701][   T30] usb 4-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00
[  218.950995][   T30] usb 4-1: config 1 has an invalid interface number: 27 but max is 1
[  218.951016][   T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.951026][   T30] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  218.951039][   T30] usb 4-1: config 1 has no interface number 2
[  218.951080][   T30] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  218.951094][   T30] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.951109][   T30] usb 4-1: config 1 interface 1 has no altsetting 0
[  219.031946][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.031978][   T30] usb 4-1: Product: syz
[  219.031992][   T30] usb 4-1: Manufacturer: syz
[  219.032006][   T30] usb 4-1: SerialNumber: syz
[  220.021153][ T7564] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  220.339443][ T7601] bond1: entered allmulticast mode
[  220.340173][ T7601] 8021q: adding VLAN 0 to HW filter on device bond1
[  220.415208][ T7601] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  220.433234][ T7601] macvlan2: entered allmulticast mode
[  220.433271][ T7601] bond0: entered allmulticast mode
[  220.433279][ T7601] bond_slave_0: entered allmulticast mode
[  220.433289][ T7601] bond_slave_1: entered allmulticast mode
[  220.433416][ T7601] bond_slave_1: entered promiscuous mode
[  220.435456][ T7601] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  220.578073][ T7603] netlink: 14 bytes leftover after parsing attributes in process `syz.1.474'.
[  220.653586][ T7601] ip6gretap1: entered allmulticast mode
[  220.677079][ T7601] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  220.972246][ T7603] bond_slave_1: left promiscuous mode
[  221.050551][ T7603] bond0 (unregistering): left allmulticast mode
[  221.050580][ T7603] bond_slave_0: left allmulticast mode
[  221.050598][ T7603] bond_slave_1: left allmulticast mode
[  221.098068][ T7603] bond1: (slave macvlan2): Removing an active aggregator
[  221.098093][ T7603] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  221.103507][ T5713] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  221.126219][ T7603] bond1: (slave macvlan2): Releasing backup interface
[  221.126262][ T7603] bond1: (slave macvlan2): the permanent HWaddr of slave - c2:21:72:05:2e:6e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  221.160025][ T7603] macvlan2 (unregistering): left allmulticast mode
[  221.193443][ T7603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.246268][ T7603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.265718][ T7603] bond0 (unregistering): Released all slaves
[  221.333771][   T30] speedtch 4-1:1.0: speedtch_bind: device reset failed (-19)!
[  221.333876][   T30] usb 4-1: selecting invalid altsetting 0
[  221.333903][   T30] speedtch 4-1:1.0: usbatm_usb_probe: bind failed: -19!
[  221.366893][   T30] speedtch 4-1:1.27: speedtch_bind: setting interface to  1 failed (-19)!
[  221.379289][   T30] usb 4-1: selecting invalid altsetting 0
[  221.379321][   T30] speedtch 4-1:1.27: usbatm_usb_probe: bind failed: -19!
[  221.383427][   T30] usb 4-1: selecting invalid altsetting 0
[  221.383457][   T30] usbtest 4-1:1.1: probe with driver usbtest failed with error -22
[  221.383806][   T30] usb 4-1: selecting invalid altsetting 0
[  221.383825][   T30] speedtch 4-1:1.1: probe with driver speedtch failed with error -22
[  221.435620][   T30] usb 4-1: USB disconnect, device number 29
[  221.847353][ T7620] random: crng reseeded on system resumption
[  222.248496][   T30] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  222.398503][   T30] usb 4-1: Using ep0 maxpacket: 32
[  222.399264][   T30] usb 4-1: New USB device found: idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  222.426774][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.426794][   T30] usb 4-1: Product: syz
[  222.426803][   T30] usb 4-1: Manufacturer: syz
[  222.426811][   T30] usb 4-1: SerialNumber: syz
[  222.461948][   T30] usb 4-1: config 0 descriptor??
[  222.668764][ T5738] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  222.709821][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.728119][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.832311][ T5738] usb 3-1: New USB device found: idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  222.850984][ T5738] usb 3-1: config 0 has an invalid interface number: 6 but max is 0
[  222.851004][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.851016][ T5738] usb 3-1: config 0 has no interface number 0
[  222.851047][ T5738] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  222.851071][ T5738] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 65054, setting to 64
[  222.858747][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.862493][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.923089][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.923137][ T5738] usb 3-1: Product: syz
[  222.923146][ T5738] usb 3-1: Manufacturer: syz
[  222.923155][ T5738] usb 3-1: SerialNumber: syz
[  222.962616][ T5738] usb 3-1: config 0 descriptor??
[  222.963955][ T7623] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  222.964127][ T7623] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  223.028967][ T5738] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  223.203858][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'.
[  223.231081][   T30] peak_usb 4-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  223.231117][   T30] peak_usb 4-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  223.316573][  T195] usb 3-1: USB disconnect, device number 18
[  223.326011][   T30] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71
[  223.418146][   T30] usb 4-1: USB disconnect, device number 30
[  223.627348][ T7633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.482'.
[  223.693267][ T7627] could not allocate digest TFM handle sha384-ssse3
[  223.757000][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  223.847029][ T7625] could not allocate digest TFM handle xxhash64-generic
[  224.119557][ T7638] overlayfs: option "workdir=/97" is useless in a non-upper mount, ignore
[  224.119591][ T7638] overlayfs: missing 'lowerdir'
[  225.070423][ T7649] netlink: 32 bytes leftover after parsing attributes in process `syz.3.487'.
[  225.230165][ T5738] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  225.379079][ T5738] usb 3-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00
[  225.383667][ T5738] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  225.383696][ T5738] usb 3-1: config 1 has no interface number 0
[  225.383737][ T5738] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64
[  225.383751][ T5738] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  225.440453][ T5738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.440484][ T5738] usb 3-1: Product: syz
[  225.440499][ T5738] usb 3-1: Manufacturer: syz
[  225.440511][ T5738] usb 3-1: SerialNumber: syz
[  225.472318][ T7666] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  225.486668][ T5738] usb 3-1: Error in usbnet_get_endpoints (-22)
[  225.806733][ T5738] usb 3-1: USB disconnect, device number 19
[  225.997655][ T7675] FAULT_INJECTION: forcing a failure.
[  225.997655][ T7675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.997690][ T7675] CPU: 0 UID: 0 PID: 7675 Comm: syz.3.493 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  225.997717][ T7675] Tainted: [L]=SOFTLOCKUP
[  225.997724][ T7675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.997737][ T7675] Call Trace:
[  225.997745][ T7675]  <TASK>
[  225.997753][ T7675]  dump_stack_lvl+0xe8/0x150
[  225.997792][ T7675]  should_fail_ex+0x3eb/0x540
[  225.997822][ T7675]  _copy_from_user+0x2d/0xb0
[  225.997847][ T7675]  get_compat_msghdr+0xb3/0x4c0
[  225.997877][ T7675]  ? __pfx_get_compat_msghdr+0x10/0x10
[  225.997916][ T7675]  ___sys_sendmsg+0x201/0x360
[  225.997935][ T7675]  ? __lock_acquire+0x747/0x2de0
[  225.997974][ T7675]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.997994][ T7675]  ? get_pid_task+0x20/0x1f0
[  225.998016][ T7675]  ? get_pid_task+0x20/0x1f0
[  225.998034][ T7675]  ? get_pid_task+0x20/0x1f0
[  225.998069][ T7675]  ? __fget_files+0x3a2/0x420
[  225.998083][ T7675]  ? __fget_files+0x2a/0x420
[  225.998101][ T7675]  __sys_sendmsg+0x177/0x240
[  225.998115][ T7675]  ? __pfx___sys_sendmsg+0x10/0x10
[  225.998133][ T7675]  ? __might_fault+0xaf/0x130
[  225.998147][ T7675]  __do_fast_syscall_32+0x28b/0x6c0
[  225.998162][ T7675]  ? do_fast_syscall_32+0x33/0x70
[  225.998175][ T7675]  ? asm_int80_emulation+0x1a/0x20
[  225.998186][ T7675]  ? do_int80_emulation+0x299/0x500
[  225.998199][ T7675]  ? trace_irq_disable+0x3b/0x140
[  225.998217][ T7675]  do_fast_syscall_32+0x33/0x70
[  225.998231][ T7675]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.998244][ T7675] RIP: 0023:0xf7fb7f1c
[  225.998263][ T7675] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  225.998279][ T7675] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  225.998301][ T7675] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140
[  225.998315][ T7675] RDX: 0000000004048000 RSI: 0000000000000000 RDI: 0000000000000000
[  225.998346][ T7675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.998358][ T7675] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  225.998369][ T7675] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.998391][ T7675]  </TASK>
[  226.452381][ T7679] FAULT_INJECTION: forcing a failure.
[  226.452381][ T7679] name failslab, interval 1, probability 0, space 0, times 0
[  226.452405][ T7679] CPU: 1 UID: 0 PID: 7679 Comm: syz.3.495 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  226.452426][ T7679] Tainted: [L]=SOFTLOCKUP
[  226.452431][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  226.452438][ T7679] Call Trace:
[  226.452443][ T7679]  <TASK>
[  226.452448][ T7679]  dump_stack_lvl+0xe8/0x150
[  226.452473][ T7679]  should_fail_ex+0x3eb/0x540
[  226.452492][ T7679]  should_failslab+0xa8/0x100
[  226.452511][ T7679]  __kmalloc_noprof+0xf9/0x710
[  226.452524][ T7679]  ? rcu_is_watching+0x16/0xb0
[  226.452542][ T7679]  ? tomoyo_realpath_from_path+0xef/0x640
[  226.452555][ T7679]  ? tomoyo_realpath_from_path+0xef/0x640
[  226.452571][ T7679]  tomoyo_realpath_from_path+0xef/0x640
[  226.452595][ T7679]  ? tomoyo_path_number_perm+0x219/0x5f0
[  226.452612][ T7679]  tomoyo_path_number_perm+0x246/0x5f0
[  226.452631][ T7679]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  226.452646][ T7679]  ? __lock_acquire+0x747/0x2de0
[  226.452684][ T7679]  ? __fget_files+0x2a/0x420
[  226.452700][ T7679]  ? __fget_files+0x2a/0x420
[  226.452713][ T7679]  ? __fget_files+0x3a2/0x420
[  226.452725][ T7679]  ? __fget_files+0x2a/0x420
[  226.452742][ T7679]  security_file_ioctl_compat+0xc3/0x2a0
[  226.452760][ T7679]  __ia32_compat_sys_ioctl+0x139/0x950
[  226.452779][ T7679]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  226.452795][ T7679]  ? __fget_files+0x3a2/0x420
[  226.452808][ T7679]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  226.452825][ T7679]  ? lock_acquire+0x115/0x350
[  226.452848][ T7679]  ? __might_fault+0xaf/0x130
[  226.452862][ T7679]  __do_fast_syscall_32+0x28b/0x6c0
[  226.452876][ T7679]  ? do_fast_syscall_32+0x33/0x70
[  226.452889][ T7679]  ? asm_int80_emulation+0x1a/0x20
[  226.452901][ T7679]  ? do_int80_emulation+0x299/0x500
[  226.452913][ T7679]  ? trace_irq_disable+0x3b/0x140
[  226.452932][ T7679]  do_fast_syscall_32+0x33/0x70
[  226.452945][ T7679]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.452959][ T7679] RIP: 0023:0xf7fb7f1c
[  226.452972][ T7679] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  226.452982][ T7679] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  226.452997][ T7679] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004008ae90
[  226.453005][ T7679] RDX: 0000000080001400 RSI: 0000000000000000 RDI: 0000000000000000
[  226.453013][ T7679] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.453020][ T7679] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  226.453027][ T7679] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.453045][ T7679]  </TASK>
[  226.457450][ T7679] ERROR: Out of memory at tomoyo_realpath_from_path.
[  226.885856][ T7683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.497'.
[  226.892188][ T7686] FAULT_INJECTION: forcing a failure.
[  226.892188][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  226.892219][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.2.498 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  226.892244][ T7686] Tainted: [L]=SOFTLOCKUP
[  226.892251][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  226.892262][ T7686] Call Trace:
[  226.892270][ T7686]  <TASK>
[  226.892278][ T7686]  dump_stack_lvl+0xe8/0x150
[  226.892316][ T7686]  should_fail_ex+0x3eb/0x540
[  226.892342][ T7686]  _copy_from_user+0x2d/0xb0
[  226.892382][ T7686]  get_compat_msghdr+0xb3/0x4c0
[  226.892408][ T7686]  ? __pfx_get_compat_msghdr+0x10/0x10
[  226.892444][ T7686]  ___sys_sendmsg+0x201/0x360
[  226.892461][ T7686]  ? __lock_acquire+0x747/0x2de0
[  226.892487][ T7686]  ? __pfx____sys_sendmsg+0x10/0x10
[  226.892512][ T7686]  ? get_pid_task+0x20/0x1f0
[  226.892532][ T7686]  ? get_pid_task+0x20/0x1f0
[  226.892549][ T7686]  ? get_pid_task+0x20/0x1f0
[  226.892598][ T7686]  ? __fget_files+0x3a2/0x420
[  226.892619][ T7686]  ? __fget_files+0x2a/0x420
[  226.892649][ T7686]  __sys_sendmsg+0x177/0x240
[  226.892670][ T7686]  ? __pfx___sys_sendmsg+0x10/0x10
[  226.892699][ T7686]  ? __might_fault+0xaf/0x130
[  226.892721][ T7686]  __do_fast_syscall_32+0x28b/0x6c0
[  226.892743][ T7686]  ? do_fast_syscall_32+0x33/0x70
[  226.892762][ T7686]  ? asm_int80_emulation+0x1a/0x20
[  226.892779][ T7686]  ? do_int80_emulation+0x299/0x500
[  226.892798][ T7686]  ? trace_irq_disable+0x3b/0x140
[  226.892825][ T7686]  do_fast_syscall_32+0x33/0x70
[  226.892845][ T7686]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  226.892867][ T7686] RIP: 0023:0xf745ef1c
[  226.892884][ T7686] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  226.892900][ T7686] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  226.892920][ T7686] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  226.892933][ T7686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  226.892943][ T7686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  226.892954][ T7686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  226.892964][ T7686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  226.892992][ T7686]  </TASK>
[  227.314258][ T7694] FAULT_INJECTION: forcing a failure.
[  227.314258][ T7694] name failslab, interval 1, probability 0, space 0, times 0
[  227.314292][ T7694] CPU: 1 UID: 0 PID: 7694 Comm: syz.3.501 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  227.314317][ T7694] Tainted: [L]=SOFTLOCKUP
[  227.314323][ T7694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  227.314335][ T7694] Call Trace:
[  227.314343][ T7694]  <TASK>
[  227.314352][ T7694]  dump_stack_lvl+0xe8/0x150
[  227.314389][ T7694]  should_fail_ex+0x3eb/0x540
[  227.314419][ T7694]  should_failslab+0xa8/0x100
[  227.314448][ T7694]  __kmalloc_noprof+0xf9/0x710
[  227.314470][ T7694]  ? rcu_is_watching+0x16/0xb0
[  227.314504][ T7694]  ? tomoyo_realpath_from_path+0xef/0x640
[  227.314525][ T7694]  ? tomoyo_realpath_from_path+0xef/0x640
[  227.314553][ T7694]  tomoyo_realpath_from_path+0xef/0x640
[  227.314585][ T7694]  ? tomoyo_path_number_perm+0x219/0x5f0
[  227.314614][ T7694]  tomoyo_path_number_perm+0x246/0x5f0
[  227.314644][ T7694]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  227.314670][ T7694]  ? __lock_acquire+0x747/0x2de0
[  227.314736][ T7694]  ? __fget_files+0x2a/0x420
[  227.314762][ T7694]  ? __fget_files+0x2a/0x420
[  227.314784][ T7694]  ? __fget_files+0x3a2/0x420
[  227.314806][ T7694]  ? __fget_files+0x2a/0x420
[  227.314834][ T7694]  security_file_ioctl_compat+0xc3/0x2a0
[  227.314863][ T7694]  __ia32_compat_sys_ioctl+0x139/0x950
[  227.314897][ T7694]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  227.314923][ T7694]  ? __fget_files+0x3a2/0x420
[  227.314946][ T7694]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  227.314974][ T7694]  ? lock_acquire+0x115/0x350
[  227.315014][ T7694]  ? __might_fault+0xaf/0x130
[  227.315049][ T7694]  __do_fast_syscall_32+0x28b/0x6c0
[  227.315072][ T7694]  ? do_fast_syscall_32+0x33/0x70
[  227.315093][ T7694]  ? asm_int80_emulation+0x1a/0x20
[  227.315113][ T7694]  ? do_int80_emulation+0x299/0x500
[  227.315133][ T7694]  ? trace_irq_disable+0x3b/0x140
[  227.315164][ T7694]  do_fast_syscall_32+0x33/0x70
[  227.315187][ T7694]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  227.315209][ T7694] RIP: 0023:0xf7fb7f1c
[  227.315228][ T7694] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  227.315245][ T7694] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  227.315267][ T7694] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  227.315281][ T7694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  227.315292][ T7694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  227.315304][ T7694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  227.315315][ T7694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  227.315346][ T7694]  </TASK>
[  227.368845][ T7696] syzkaller0: entered promiscuous mode
[  227.368867][ T7696] syzkaller0: entered allmulticast mode
[  227.369752][ T7694] ERROR: Out of memory at tomoyo_realpath_from_path.
[  227.548461][ T5713] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  227.702875][ T5713] usb 3-1: New USB device found: idVendor=0424, idProduct=cf19, bcdDevice=71.90
[  227.706514][ T5713] usb 3-1: config 255 has an invalid interface number: 97 but max is 1
[  227.706536][ T5713] usb 3-1: config 255 has an invalid interface descriptor of length 2, skipping
[  227.706546][ T5713] usb 3-1: config 255 has an invalid interface number: 227 but max is 1
[  227.706557][ T5713] usb 3-1: config 255 has no interface number 0
[  227.706566][ T5713] usb 3-1: config 255 has no interface number 1
[  227.706597][ T5713] usb 3-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  227.706614][ T5713] usb 3-1: config 255 interface 97 has no altsetting 0
[  227.706624][ T5713] usb 3-1: config 255 interface 227 has no altsetting 0
[  227.715746][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.715774][ T5713] usb 3-1: Product: syz
[  227.715787][ T5713] usb 3-1: Manufacturer: syz
[  227.715799][ T5713] usb 3-1: SerialNumber: syz
[  227.975829][ T5713] rndis_host 3-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  228.039799][ T7710] FAULT_INJECTION: forcing a failure.
[  228.039799][ T7710] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  228.039834][ T7710] CPU: 1 UID: 0 PID: 7710 Comm: syz.1.505 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  228.039860][ T7710] Tainted: [L]=SOFTLOCKUP
[  228.039866][ T7710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  228.039878][ T7710] Call Trace:
[  228.039885][ T7710]  <TASK>
[  228.039894][ T7710]  dump_stack_lvl+0xe8/0x150
[  228.039930][ T7710]  should_fail_ex+0x3eb/0x540
[  228.039959][ T7710]  _copy_from_user+0x2d/0xb0
[  228.039985][ T7710]  get_compat_msghdr+0xb3/0x4c0
[  228.040013][ T7710]  ? __pfx_get_compat_msghdr+0x10/0x10
[  228.040051][ T7710]  ___sys_sendmsg+0x201/0x360
[  228.040069][ T7710]  ? __lock_acquire+0x747/0x2de0
[  228.040099][ T7710]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.040120][ T7710]  ? __lock_acquire+0x747/0x2de0
[  228.040178][ T7710]  ? __fget_files+0x3a2/0x420
[  228.040201][ T7710]  ? __fget_files+0x2a/0x420
[  228.040233][ T7710]  __sys_sendmmsg+0x2de/0x4e0
[  228.040259][ T7710]  ? __pfx___sys_sendmmsg+0x10/0x10
[  228.040316][ T7710]  ? __might_fault+0xaf/0x130
[  228.040338][ T7710]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  228.040366][ T7710]  __do_fast_syscall_32+0x28b/0x6c0
[  228.040390][ T7710]  ? do_fast_syscall_32+0x33/0x70
[  228.040411][ T7710]  ? asm_int80_emulation+0x1a/0x20
[  228.040438][ T7710]  ? do_int80_emulation+0x299/0x500
[  228.040459][ T7710]  ? trace_irq_disable+0x3b/0x140
[  228.040490][ T7710]  do_fast_syscall_32+0x33/0x70
[  228.040512][ T7710]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  228.040535][ T7710] RIP: 0023:0xf73bef1c
[  228.040554][ T7710] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  228.040571][ T7710] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  228.040594][ T7710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080006ac0
[  228.040608][ T7710] RDX: 0000000000000001 RSI: 0000000020080058 RDI: 0000000000000000
[  228.040621][ T7710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  228.040633][ T7710] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  228.040644][ T7710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  228.040675][ T7710]  </TASK>
[  228.086567][ T5713] usb 3-1: USB disconnect, device number 20
[  228.538102][ T7714] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  228.538132][ T7714] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  228.647513][ T7714] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  228.647550][ T7714] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  228.758241][ T7714] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  228.759743][ T7714] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  228.840863][ T7714] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  228.840888][ T7714] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  228.872098][ T7714] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  228.872124][ T7714] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  228.943812][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.944264][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.995928][ T5713] wacom 0003:056A:003F.0005: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  229.005337][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.005810][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.128669][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  229.158789][ T7729] fido_id[7729]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  229.278679][   T10] usb 3-1: Using ep0 maxpacket: 32
[  229.281690][   T10] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  229.285362][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  229.285387][   T10] usb 3-1: config 0 has no interface number 0
[  229.285429][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[  229.295393][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.295419][   T10] usb 3-1: Product: syz
[  229.295432][   T10] usb 3-1: Manufacturer: syz
[  229.295452][   T10] usb 3-1: SerialNumber: syz
[  229.346502][   T10] usb 3-1: config 0 descriptor??
[  229.382366][ T7734] FAULT_INJECTION: forcing a failure.
[  229.382366][ T7734] name failslab, interval 1, probability 0, space 0, times 0
[  229.382391][ T7734] CPU: 0 UID: 0 PID: 7734 Comm: syz.1.510 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  229.382409][ T7734] Tainted: [L]=SOFTLOCKUP
[  229.382413][ T7734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  229.382421][ T7734] Call Trace:
[  229.382426][ T7734]  <TASK>
[  229.382439][ T7734]  dump_stack_lvl+0xe8/0x150
[  229.382463][ T7734]  should_fail_ex+0x3eb/0x540
[  229.382484][ T7734]  should_failslab+0xa8/0x100
[  229.382503][ T7734]  __kmalloc_noprof+0xf9/0x710
[  229.382517][ T7734]  ? rcu_is_watching+0x16/0xb0
[  229.382535][ T7734]  ? tomoyo_realpath_from_path+0xef/0x640
[  229.382547][ T7734]  ? tomoyo_realpath_from_path+0xef/0x640
[  229.382564][ T7734]  tomoyo_realpath_from_path+0xef/0x640
[  229.382582][ T7734]  ? tomoyo_path_number_perm+0x219/0x5f0
[  229.382599][ T7734]  tomoyo_path_number_perm+0x246/0x5f0
[  229.382618][ T7734]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  229.382634][ T7734]  ? __lock_acquire+0x747/0x2de0
[  229.382672][ T7734]  ? __fget_files+0x2a/0x420
[  229.382687][ T7734]  ? __fget_files+0x2a/0x420
[  229.382700][ T7734]  ? __fget_files+0x3a2/0x420
[  229.382713][ T7734]  ? __fget_files+0x2a/0x420
[  229.382729][ T7734]  security_file_ioctl_compat+0xc3/0x2a0
[  229.382747][ T7734]  __ia32_compat_sys_ioctl+0x139/0x950
[  229.382767][ T7734]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  229.382807][ T7734]  ? lock_acquire+0x115/0x350
[  229.382848][ T7734]  ? __might_fault+0xaf/0x130
[  229.382872][ T7734]  __do_fast_syscall_32+0x28b/0x6c0
[  229.382896][ T7734]  ? do_fast_syscall_32+0x33/0x70
[  229.382913][ T7734]  ? asm_int80_emulation+0x1a/0x20
[  229.382924][ T7734]  ? do_int80_emulation+0x299/0x500
[  229.382940][ T7734]  ? trace_irq_disable+0x3b/0x140
[  229.382958][ T7734]  do_fast_syscall_32+0x33/0x70
[  229.382972][ T7734]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  229.382986][ T7734] RIP: 0023:0xf73bef1c
[  229.382998][ T7734] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  229.383009][ T7734] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  229.383024][ T7734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f
[  229.383032][ T7734] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000
[  229.383040][ T7734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  229.383047][ T7734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  229.383054][ T7734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  229.383072][ T7734]  </TASK>
[  229.383104][ T7734] ERROR: Out of memory at tomoyo_realpath_from_path.
[  229.401282][ T7723] tipc: Enabled bearer <udp:syz2>, priority 10
[  229.828543][ T7738] input: syz0 as /devices/virtual/input/input20
[  229.905881][ T7742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.512'.
[  229.906004][ T7742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.512'.
[  229.906021][ T7742] netlink: 52 bytes leftover after parsing attributes in process `syz.0.512'.
[  230.100454][ T5713] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  230.248477][ T5713] usb 2-1: Using ep0 maxpacket: 8
[  230.254015][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short
[  230.254081][ T5713] usb 2-1: New USB device found: idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  230.255858][ T5713] usb 2-1: config 9 has an invalid interface number: 5 but max is 1
[  230.255883][ T5713] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  230.255934][ T5713] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2
[  230.255955][ T5713] usb 2-1: config 9 has no interface number 0
[  230.255999][ T5713] usb 2-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping
[  230.256031][ T5713] usb 2-1: config 9 interface 5 has no altsetting 0
[  230.259973][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.259995][ T5713] usb 2-1: Product: syz
[  230.260008][ T5713] usb 2-1: Manufacturer: syz
[  230.260028][ T5713] usb 2-1: SerialNumber: syz
[  230.543281][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.547072][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.647083][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.514'.
[  230.686070][ T5713] usb 2-1: USB disconnect, device number 22
[  230.862164][ T7761] fuse: Bad value for 'fd'
[  231.221360][   T31] audit: type=1326 audit(1793217261.862:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.221899][   T31] audit: type=1326 audit(1793217261.862:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.221979][   T31] audit: type=1326 audit(1793217261.862:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222023][   T31] audit: type=1326 audit(1793217261.862:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222065][   T31] audit: type=1326 audit(1793217261.862:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222300][   T31] audit: type=1326 audit(1793217261.862:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222747][   T31] audit: type=1326 audit(1793217261.862:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222791][   T31] audit: type=1326 audit(1793217261.862:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.222830][   T31] audit: type=1326 audit(1793217261.862:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71177ab code=0x7ffc0000
[  231.222872][   T31] audit: type=1326 audit(1793217261.862:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.1.518" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  231.560018][ T7771] syzkaller0: entered promiscuous mode
[  231.560074][ T7771] syzkaller0: entered allmulticast mode
[  231.698202][ T7775] FAULT_INJECTION: forcing a failure.
[  231.698202][ T7775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  231.698238][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.1.523 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  231.698269][ T7775] Tainted: [L]=SOFTLOCKUP
[  231.698278][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  231.698289][ T7775] Call Trace:
[  231.698298][ T7775]  <TASK>
[  231.698307][ T7775]  dump_stack_lvl+0xe8/0x150
[  231.698345][ T7775]  should_fail_ex+0x3eb/0x540
[  231.698376][ T7775]  _copy_to_user+0x31/0xb0
[  231.698403][ T7775]  simple_read_from_buffer+0xe1/0x170
[  231.698445][ T7775]  proc_fail_nth_read+0x1bb/0x230
[  231.698479][ T7775]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  231.698511][ T7775]  ? rw_verify_area+0x24a/0x4c0
[  231.698538][ T7775]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  231.698567][ T7775]  vfs_read+0x213/0xa80
[  231.698599][ T7775]  ? __pfx___mutex_lock+0x10/0x10
[  231.698622][ T7775]  ? __pfx_vfs_read+0x10/0x10
[  231.698649][ T7775]  ? __fget_files+0x2a/0x420
[  231.698670][ T7775]  ? __fget_files+0x3a2/0x420
[  231.698692][ T7775]  ? __fget_files+0x2a/0x420
[  231.698721][ T7775]  ? fdget+0x1ac/0x250
[  231.698751][ T7775]  ksys_read+0x150/0x270
[  231.698784][ T7775]  ? __pfx_ksys_read+0x10/0x10
[  231.698814][ T7775]  ? asm_int80_emulation+0x1a/0x20
[  231.698841][ T7775]  do_int80_emulation+0x198/0x500
[  231.698864][ T7775]  ? asm_int80_emulation+0x1a/0x20
[  231.698881][ T7775]  ? clear_bhb_loop+0x70/0xc0
[  231.698900][ T7775]  ? clear_bhb_loop+0x70/0xc0
[  231.698925][ T7775]  asm_int80_emulation+0x1a/0x20
[  231.698943][ T7775] RIP: 0023:0xf71177ab
[  231.698963][ T7775] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  231.698980][ T7775] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  231.699003][ T7775] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0
[  231.699016][ T7775] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  231.699028][ T7775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  231.699039][ T7775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  231.699051][ T7775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  231.699081][ T7775]  </TASK>
[  231.827888][   T10] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -32
[  231.827950][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32
[  231.827965][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32
[  231.828043][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -32
[  232.035886][ T5698] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  232.035997][ T5698] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  232.049445][ T5698] usb 1-1: USB disconnect, device number 10
[  232.065716][   T10] usb 3-1: USB disconnect, device number 21
[  232.183103][ T7784] FAULT_INJECTION: forcing a failure.
[  232.183103][ T7784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  232.183136][ T7784] CPU: 0 UID: 0 PID: 7784 Comm: syz.1.525 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  232.183163][ T7784] Tainted: [L]=SOFTLOCKUP
[  232.183171][ T7784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  232.183183][ T7784] Call Trace:
[  232.183191][ T7784]  <TASK>
[  232.183200][ T7784]  dump_stack_lvl+0xe8/0x150
[  232.183239][ T7784]  should_fail_ex+0x3eb/0x540
[  232.183269][ T7784]  _copy_from_user+0x2d/0xb0
[  232.183295][ T7784]  do_handle_open+0x56e/0xb10
[  232.183324][ T7784]  ? __pfx_do_handle_open+0x10/0x10
[  232.183363][ T7784]  ? __might_fault+0xaf/0x130
[  232.183388][ T7784]  __do_fast_syscall_32+0x28b/0x6c0
[  232.183422][ T7784]  ? do_fast_syscall_32+0x33/0x70
[  232.183444][ T7784]  ? asm_int80_emulation+0x1a/0x20
[  232.183463][ T7784]  ? do_int80_emulation+0x299/0x500
[  232.183484][ T7784]  ? trace_irq_disable+0x3b/0x140
[  232.183516][ T7784]  do_fast_syscall_32+0x33/0x70
[  232.183539][ T7784]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  232.183562][ T7784] RIP: 0023:0xf73bef1c
[  232.183581][ T7784] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  232.183599][ T7784] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000156
[  232.183622][ T7784] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040
[  232.183636][ T7784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  232.183648][ T7784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  232.183660][ T7784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  232.183673][ T7784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  232.183705][ T7784]  </TASK>
[  232.419762][ T5698] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  232.566020][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'.
[  232.571770][ T5698] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  232.573031][ T5698] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  232.573054][ T5698] usb 1-1: config 0 has no interface number 0
[  232.575203][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.575225][ T5698] usb 1-1: Product: syz
[  232.575237][ T5698] usb 1-1: Manufacturer: syz
[  232.575250][ T5698] usb 1-1: SerialNumber: syz
[  232.580539][ T5698] usb 1-1: config 0 descriptor??
[  232.819304][ T5698] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  232.827770][ T5698] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  232.828125][ T5698] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  232.828183][ T5698] usb 1-1: media controller created
[  232.871915][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  232.917707][ T7809] fuse: Bad value for 'fd'
[  233.022954][ T5698] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  233.587900][ T7826] FAULT_INJECTION: forcing a failure.
[  233.587900][ T7826] name failslab, interval 1, probability 0, space 0, times 0
[  233.587939][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.1.539 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  233.587968][ T7826] Tainted: [L]=SOFTLOCKUP
[  233.587976][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  233.587988][ T7826] Call Trace:
[  233.587996][ T7826]  <TASK>
[  233.588005][ T7826]  dump_stack_lvl+0xe8/0x150
[  233.588046][ T7826]  should_fail_ex+0x3eb/0x540
[  233.588076][ T7826]  should_failslab+0xa8/0x100
[  233.588105][ T7826]  ? dst_alloc+0x105/0x170
[  233.588130][ T7826]  kmem_cache_alloc_noprof+0x9c/0x600
[  233.588157][ T7826]  ? dst_alloc+0x105/0x170
[  233.588188][ T7826]  dst_alloc+0x105/0x170
[  233.588218][ T7826]  xfrm_lookup_with_ifid+0x7c8/0x1e30
[  233.588256][ T7826]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  233.588284][ T7826]  ? stack_trace_save+0xa9/0x100
[  233.588320][ T7826]  ? __pfx_stack_trace_save+0x10/0x10
[  233.588351][ T7826]  xfrm_lookup_route+0x3c/0x1c0
[  233.588378][ T7826]  tcp_v6_connect+0x10c7/0x1e60
[  233.588397][ T7826]  ? kasan_save_track+0x3e/0x80
[  233.588421][ T7826]  ? __kasan_kmalloc+0x93/0xb0
[  233.588463][ T7826]  ? __pfx_tcp_v6_connect+0x10/0x10
[  233.588499][ T7826]  __inet_stream_connect+0x28c/0xf50
[  233.588548][ T7826]  ? __pfx___inet_stream_connect+0x10/0x10
[  233.588579][ T7826]  ? __kasan_kmalloc+0x93/0xb0
[  233.588607][ T7826]  ? __kmalloc_cache_noprof+0x31c/0x600
[  233.588631][ T7826]  ? __kmalloc_cache_noprof+0x148/0x600
[  233.588653][ T7826]  ? tcp_sendmsg_fastopen+0x1e7/0x5f0
[  233.588686][ T7826]  tcp_sendmsg_fastopen+0x3af/0x5f0
[  233.588715][ T7826]  tcp_sendmsg_locked+0x4a3b/0x5320
[  233.588738][ T7826]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  233.588772][ T7826]  ? tcp_sendmsg_locked+0x2b1/0x5320
[  233.588796][ T7826]  ? __lock_acquire+0x747/0x2de0
[  233.588837][ T7826]  ? kstrtouint+0x6e/0xe0
[  233.588877][ T7826]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  233.588909][ T7826]  ? tcp_sendmsg+0x21/0x50
[  233.588934][ T7826]  ? __local_bh_enable_ip+0xd6/0x140
[  233.588966][ T7826]  tcp_sendmsg+0x2f/0x50
[  233.588987][ T7826]  ? __pfx_inet6_sendmsg+0x10/0x10
[  233.589004][ T7826]  sock_sendmsg_nosec+0x90/0x190
[  233.589031][ T7826]  __sys_sendto+0x408/0x5a0
[  233.589065][ T7826]  ? __pfx___sys_sendto+0x10/0x10
[  233.589133][ T7826]  __ia32_sys_sendto+0xdd/0x100
[  233.589165][ T7826]  __do_fast_syscall_32+0x28b/0x6c0
[  233.589190][ T7826]  ? do_fast_syscall_32+0x33/0x70
[  233.589211][ T7826]  ? asm_int80_emulation+0x1a/0x20
[  233.589231][ T7826]  ? do_int80_emulation+0x299/0x500
[  233.589251][ T7826]  ? trace_irq_disable+0x3b/0x140
[  233.589281][ T7826]  do_fast_syscall_32+0x33/0x70
[  233.589311][ T7826]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  233.589333][ T7826] RIP: 0023:0xf73bef1c
[  233.589348][ T7826] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  233.589359][ T7826] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  233.589374][ T7826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  233.589383][ T7826] RDX: 0000000000000000 RSI: 0000000020000845 RDI: 0000000080000180
[  233.589390][ T7826] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  233.589398][ T7826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  233.589405][ T7826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  233.589423][ T7826]  </TASK>
[  234.763171][ T7842] fuse: Unknown parameter '@5<'z�p�i7���b[���v���[�B9�s[(N{k���'
[  234.789099][ T5698] usb 1-1: USB disconnect, device number 11
[  234.934617][ T7842] syz_tun: entered promiscuous mode
[  235.338580][ T7849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'.
[  235.434286][ T7851] FAULT_INJECTION: forcing a failure.
[  235.434286][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.434323][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.0.547 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  235.434350][ T7851] Tainted: [L]=SOFTLOCKUP
[  235.434358][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  235.434368][ T7851] Call Trace:
[  235.434376][ T7851]  <TASK>
[  235.434385][ T7851]  dump_stack_lvl+0xe8/0x150
[  235.434422][ T7851]  should_fail_ex+0x3eb/0x540
[  235.434451][ T7851]  _copy_from_user+0x2d/0xb0
[  235.434477][ T7851]  sk_getsockopt+0x1c0/0x2620
[  235.434507][ T7851]  ? __pfx_aa_inet_opt_perm+0x10/0x10
[  235.434536][ T7851]  ? __pfx_sk_getsockopt+0x10/0x10
[  235.434571][ T7851]  ? lock_acquire+0x115/0x350
[  235.434596][ T7851]  ? get_pid_task+0x20/0x1f0
[  235.434626][ T7851]  ? get_pid_task+0x20/0x1f0
[  235.434647][ T7851]  ? get_pid_task+0x20/0x1f0
[  235.434667][ T7851]  ? get_pid_task+0x20/0x1f0
[  235.434698][ T7851]  ? aa_sock_opt_perm+0xe1/0x1e0
[  235.434726][ T7851]  do_sock_getsockopt+0x2b7/0x640
[  235.434765][ T7851]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  235.434795][ T7851]  ? __pfx_vfs_write+0x10/0x10
[  235.434835][ T7851]  ? lock_acquire+0x115/0x350
[  235.434883][ T7851]  __ia32_sys_getsockopt+0x1a4/0x240
[  235.434922][ T7851]  __do_fast_syscall_32+0x28b/0x6c0
[  235.434946][ T7851]  ? do_fast_syscall_32+0x33/0x70
[  235.434966][ T7851]  ? asm_int80_emulation+0x1a/0x20
[  235.434984][ T7851]  ? do_int80_emulation+0x299/0x500
[  235.435004][ T7851]  ? trace_irq_disable+0x3b/0x140
[  235.435033][ T7851]  do_fast_syscall_32+0x33/0x70
[  235.435056][ T7851]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  235.435077][ T7851] RIP: 0023:0xf73def1c
[  235.435096][ T7851] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  235.435113][ T7851] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[  235.435135][ T7851] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001
[  235.435148][ T7851] RDX: 0000000000000054 RSI: 0000000080000040 RDI: 0000000080000100
[  235.435161][ T7851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  235.435172][ T7851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  235.435182][ T7851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  235.435211][ T7851]  </TASK>
[  235.775978][ T7855] FAULT_INJECTION: forcing a failure.
[  235.775978][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  235.776012][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.3.549 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  235.776039][ T7855] Tainted: [L]=SOFTLOCKUP
[  235.776046][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  235.776058][ T7855] Call Trace:
[  235.776066][ T7855]  <TASK>
[  235.776074][ T7855]  dump_stack_lvl+0xe8/0x150
[  235.776111][ T7855]  should_fail_ex+0x3eb/0x540
[  235.776140][ T7855]  _copy_from_user+0x2d/0xb0
[  235.776167][ T7855]  __sys_connect+0x155/0x450
[  235.776198][ T7855]  ? __pfx___sys_connect+0x10/0x10
[  235.776249][ T7855]  __ia32_sys_connect+0x7a/0x90
[  235.776277][ T7855]  __do_fast_syscall_32+0x28b/0x6c0
[  235.776301][ T7855]  ? do_fast_syscall_32+0x33/0x70
[  235.776323][ T7855]  ? asm_int80_emulation+0x1a/0x20
[  235.776342][ T7855]  ? do_int80_emulation+0x299/0x500
[  235.776363][ T7855]  ? trace_irq_disable+0x3b/0x140
[  235.776394][ T7855]  do_fast_syscall_32+0x33/0x70
[  235.776416][ T7855]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  235.776448][ T7855] RIP: 0023:0xf7fb7f1c
[  235.776467][ T7855] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  235.776484][ T7855] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[  235.776507][ T7855] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  235.776521][ T7855] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[  235.776534][ T7855] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  235.776545][ T7855] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  235.776558][ T7855] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  235.776588][ T7855]  </TASK>
[  236.089637][ T7859] fuse: Bad value for 'fd'
[  236.290343][ T7863] netlink: 40 bytes leftover after parsing attributes in process `syz.1.552'.
[  236.569737][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  236.659361][ T7871] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.721261][   T10] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  236.725100][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  236.725153][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.012191][   T10] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device
[  237.064837][   T10] wwan wwan0: port wwan0qmi0 attached
[  237.405869][   T10] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 3a:d5:95:60:ab:c3
[  238.006928][ T7895] FAULT_INJECTION: forcing a failure.
[  238.006928][ T7895] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.006974][ T7895] CPU: 0 UID: 0 PID: 7895 Comm: syz.2.561 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  238.006992][ T7895] Tainted: [L]=SOFTLOCKUP
[  238.006996][ T7895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  238.007004][ T7895] Call Trace:
[  238.007009][ T7895]  <TASK>
[  238.007014][ T7895]  dump_stack_lvl+0xe8/0x150
[  238.007037][ T7895]  should_fail_ex+0x3eb/0x540
[  238.007055][ T7895]  _copy_from_user+0x2d/0xb0
[  238.007071][ T7895]  get_compat_msghdr+0xb3/0x4c0
[  238.007092][ T7895]  ? __pfx_get_compat_msghdr+0x10/0x10
[  238.007115][ T7895]  ___sys_sendmsg+0x201/0x360
[  238.007126][ T7895]  ? __lock_acquire+0x747/0x2de0
[  238.007144][ T7895]  ? __pfx____sys_sendmsg+0x10/0x10
[  238.007155][ T7895]  ? get_pid_task+0x20/0x1f0
[  238.007169][ T7895]  ? get_pid_task+0x20/0x1f0
[  238.007180][ T7895]  ? get_pid_task+0x20/0x1f0
[  238.007210][ T7895]  ? __fget_files+0x3a2/0x420
[  238.007224][ T7895]  ? __fget_files+0x2a/0x420
[  238.007243][ T7895]  __sys_sendmsg+0x177/0x240
[  238.007256][ T7895]  ? __pfx___sys_sendmsg+0x10/0x10
[  238.007279][ T7895]  ? __might_fault+0xaf/0x130
[  238.007293][ T7895]  __do_fast_syscall_32+0x28b/0x6c0
[  238.007308][ T7895]  ? do_fast_syscall_32+0x33/0x70
[  238.007320][ T7895]  ? asm_int80_emulation+0x1a/0x20
[  238.007331][ T7895]  ? do_int80_emulation+0x299/0x500
[  238.007344][ T7895]  ? trace_irq_disable+0x3b/0x140
[  238.007362][ T7895]  do_fast_syscall_32+0x33/0x70
[  238.007376][ T7895]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  238.007390][ T7895] RIP: 0023:0xf745ef1c
[  238.007401][ T7895] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  238.007412][ T7895] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  238.007426][ T7895] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  238.007434][ T7895] RDX: 000000002804c040 RSI: 0000000000000000 RDI: 0000000000000000
[  238.007442][ T7895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  238.007449][ T7895] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  238.007456][ T7895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  238.007474][ T7895]  </TASK>
[  238.286411][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[  238.996979][   T31] kauditd_printk_skb: 38 callbacks suppressed
[  238.996996][   T31] audit: type=1326 audit(1793217269.622:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  238.997030][   T31] audit: type=1326 audit(1793217269.632:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.1.552" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bef1c code=0x7ffc0000
[  239.098307][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  239.184248][ T5713] usb 2-1: USB disconnect, device number 23
[  239.197668][ T5713] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device
[  239.355169][ T5713] wwan wwan0: port wwan0qmi0 disconnected
[  239.386819][ T7914] fuse: Invalid rootmode
[  239.794000][   T30] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  239.822959][   T30] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  241.065428][ T7946] FAULT_INJECTION: forcing a failure.
[  241.065428][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  241.065463][ T7946] CPU: 0 UID: 0 PID: 7946 Comm: syz.2.572 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  241.065490][ T7946] Tainted: [L]=SOFTLOCKUP
[  241.065498][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  241.065509][ T7946] Call Trace:
[  241.065517][ T7946]  <TASK>
[  241.065526][ T7946]  dump_stack_lvl+0xe8/0x150
[  241.065564][ T7946]  should_fail_ex+0x3eb/0x540
[  241.065594][ T7946]  _copy_from_user+0x2d/0xb0
[  241.065619][ T7946]  __sys_sendto+0x2a9/0x5a0
[  241.065655][ T7946]  ? __pfx___sys_sendto+0x10/0x10
[  241.065719][ T7946]  __ia32_sys_sendto+0xdd/0x100
[  241.065761][ T7946]  __do_fast_syscall_32+0x28b/0x6c0
[  241.065785][ T7946]  ? do_fast_syscall_32+0x33/0x70
[  241.065807][ T7946]  ? asm_int80_emulation+0x1a/0x20
[  241.065826][ T7946]  ? do_int80_emulation+0x299/0x500
[  241.065846][ T7946]  ? trace_irq_disable+0x3b/0x140
[  241.065877][ T7946]  do_fast_syscall_32+0x33/0x70
[  241.065900][ T7946]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  241.065923][ T7946] RIP: 0023:0xf745ef1c
[  241.065942][ T7946] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  241.065959][ T7946] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  241.065982][ T7946] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  241.065997][ T7946] RDX: 000000000000ffe6 RSI: 0000000000000040 RDI: 0000000080000040
[  241.066009][ T7946] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  241.066022][ T7946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  241.066035][ T7946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  241.066066][ T7946]  </TASK>
[  241.324973][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.571'.
[  241.453578][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'.
[  241.983491][ T7961] netlink: 'syz.1.576': attribute type 10 has an invalid length.
[  242.185213][ T7973] fuse: Invalid rootmode
[  242.357104][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.3.580'.
[  242.369835][ T7980] netlink: 72 bytes leftover after parsing attributes in process `syz.3.580'.
[  242.738794][ T5738] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  242.758495][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  242.892204][ T5738] usb 1-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  242.894091][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  242.894118][ T5738] usb 1-1: config 0 has no interface number 0
[  242.899715][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.899740][ T5738] usb 1-1: Product: syz
[  242.899753][ T5738] usb 1-1: Manufacturer: syz
[  242.899765][ T5738] usb 1-1: SerialNumber: syz
[  242.908440][   T10] usb 4-1: Using ep0 maxpacket: 32
[  242.957250][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  242.957303][   T10] usb 4-1: New USB device found: idVendor=1410, idProduct=a001, bcdDevice=ec.5b
[  242.957773][ T5738] usb 1-1: config 0 descriptor??
[  242.983044][   T10] usb 4-1: config 6 has an invalid interface number: 3 but max is 2
[  242.983074][   T10] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  242.983093][   T10] usb 4-1: config 6 has no interface number 1
[  242.983149][   T10] usb 4-1: config 6 interface 2 has no altsetting 0
[  243.033353][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.033384][   T10] usb 4-1: Product: syz
[  243.033397][   T10] usb 4-1: Manufacturer: syz
[  243.033412][   T10] usb 4-1: SerialNumber: syz
[  243.179905][ T5713] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  243.200217][ T5713] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  243.241609][ T5738] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  243.261269][ T5738] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  243.261604][ T5738] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  243.261653][ T5738] usb 1-1: media controller created
[  243.368924][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  243.501690][ T5738] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  244.775098][ T8014] netlink: 'syz.1.590': attribute type 10 has an invalid length.
[  244.796546][ T8016] fuse: Unknown parameter '0x0000000000000007'
[  244.877919][ T8014] team0 (unregistering): Port device team_slave_0 removed
[  244.912516][ T8014] team0 (unregistering): Port device team_slave_1 removed
[  245.083956][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.084240][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.084461][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.091457][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.091732][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.105107][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.105392][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.105640][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.105892][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.106145][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'.
[  245.513466][   T10] usb 4-1: selecting invalid altsetting 0
[  245.513494][   T10] usb 4-1: Could not set interface, error -22
[  245.596043][   T10] usb 4-1: USB disconnect, device number 31
[  245.733911][ T5738] usb 1-1: USB disconnect, device number 12
[  246.001144][ T8046] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.024942][ T8046] tipc: Resetting bearer <eth:team0>
[  246.039501][ T8046] 8021q: adding VLAN 0 to HW filter on device team0
[  246.041107][ T8046] tipc: Resetting bearer <eth:team0>
[  246.047865][ T5730] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  246.085049][ T8046] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.117271][ T5730] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  246.170620][ T8046] wireguard: wg1: Could not create IPv4 socket
[  246.170647][ T8046] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  246.722270][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.723012][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.897512][ T8063] fuse: Unknown parameter '0x0000000000000007'
[  246.969799][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.003995][ T8059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.013932][ T8065] capability: warning: `syz.0.605' uses 32-bit capabilities (legacy support in use)
[  247.398828][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.398880][   T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.398914][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.398944][   T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  247.519841][   T31] audit: type=1326 audit(1793217278.162:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.520138][   T31] audit: type=1326 audit(1793217278.162:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.523588][   T31] audit: type=1326 audit(1793217278.162:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.523650][   T31] audit: type=1326 audit(1793217278.162:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.523695][   T31] audit: type=1326 audit(1793217278.162:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.524236][   T31] audit: type=1326 audit(1793217278.162:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.524487][   T31] audit: type=1326 audit(1793217278.162:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  247.524745][   T31] audit: type=1326 audit(1793217278.162:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8077 comm="syz.4.610" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73f1c code=0x7ffc0000
[  249.306072][ T5713] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  249.323179][ T5713] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  249.859600][ T8117] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms
[  249.859626][ T8117] bond3: entered allmulticast mode
[  249.893135][ T8119] bridge2: entered promiscuous mode
[  249.928596][ T8119] bridge2: entered allmulticast mode
[  249.928847][ T8119] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  250.220812][ T8130] __nla_validate_parse: 58 callbacks suppressed
[  250.220837][ T8130] netlink: 300 bytes leftover after parsing attributes in process `syz.2.624'.
[  250.224501][ T8130] netlink: 300 bytes leftover after parsing attributes in process `syz.2.624'.
[  250.807891][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.811205][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.009352][ T8142] netlink: 'syz.4.628': attribute type 2 has an invalid length.
[  251.031439][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'.
[  251.119946][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  251.268907][   T10] usb 4-1: Using ep0 maxpacket: 32
[  251.271148][   T10] usb 4-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  251.272678][   T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  251.272704][   T10] usb 4-1: config 0 has no interface number 0
[  251.272757][   T10] usb 4-1: config 0 interface 12 has no altsetting 0
[  251.275310][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.275335][   T10] usb 4-1: Product: syz
[  251.275350][   T10] usb 4-1: Manufacturer: syz
[  251.275364][   T10] usb 4-1: SerialNumber: syz
[  251.304268][   T10] usb 4-1: config 0 descriptor??
[  251.979213][ T5713] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  252.130589][ T5713] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.41
[  252.134367][ T5713] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  252.147673][ T5713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  252.147700][ T5713] usb 1-1: Product: syz
[  252.147714][ T5713] usb 1-1: Manufacturer: syz
[  252.147728][ T5713] usb 1-1: SerialNumber: syz
[  252.405157][ T5713] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  253.197449][ T5713] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  253.222061][ T5713] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  253.990309][   T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  253.990350][   T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  253.990362][   T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  253.990522][   T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  254.032838][   T10] usb 4-1: USB disconnect, device number 32
[  254.697372][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  254.709595][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  254.723435][ T8196] FAULT_INJECTION: forcing a failure.
[  254.723435][ T8196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.723467][ T8196] CPU: 0 UID: 0 PID: 8196 Comm: syz.1.644 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  254.723496][ T8196] Tainted: [L]=SOFTLOCKUP
[  254.723503][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  254.723514][ T8196] Call Trace:
[  254.723522][ T8196]  <TASK>
[  254.723529][ T8196]  dump_stack_lvl+0xe8/0x150
[  254.723564][ T8196]  should_fail_ex+0x3eb/0x540
[  254.723591][ T8196]  _copy_to_user+0x31/0xb0
[  254.723616][ T8196]  simple_read_from_buffer+0xe1/0x170
[  254.723652][ T8196]  proc_fail_nth_read+0x1bb/0x230
[  254.723683][ T8196]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.723712][ T8196]  ? rw_verify_area+0x24a/0x4c0
[  254.723737][ T8196]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  254.723763][ T8196]  vfs_read+0x213/0xa80
[  254.723791][ T8196]  ? __pfx___mutex_lock+0x10/0x10
[  254.723812][ T8196]  ? __pfx_vfs_read+0x10/0x10
[  254.723837][ T8196]  ? __fget_files+0x2a/0x420
[  254.723857][ T8196]  ? __fget_files+0x3a2/0x420
[  254.723876][ T8196]  ? __fget_files+0x2a/0x420
[  254.723901][ T8196]  ? fdget+0x1ac/0x250
[  254.723928][ T8196]  ksys_read+0x150/0x270
[  254.723953][ T8196]  ? __pfx_ksys_read+0x10/0x10
[  254.723979][ T8196]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  254.724003][ T8196]  do_int80_emulation+0x198/0x500
[  254.724024][ T8196]  ? asm_int80_emulation+0x1a/0x20
[  254.724041][ T8196]  ? clear_bhb_loop+0x70/0xc0
[  254.724059][ T8196]  ? clear_bhb_loop+0x70/0xc0
[  254.724081][ T8196]  asm_int80_emulation+0x1a/0x20
[  254.724097][ T8196] RIP: 0023:0xf71177ab
[  254.724115][ T8196] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  254.724130][ T8196] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  254.724150][ T8196] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0
[  254.724163][ T8196] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  254.724173][ T8196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  254.724184][ T8196] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  254.724194][ T8196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  254.724223][ T8196]  </TASK>
[  255.244208][ T8205] FAULT_INJECTION: forcing a failure.
[  255.244208][ T8205] name failslab, interval 1, probability 0, space 0, times 0
[  255.244245][ T8205] CPU: 0 UID: 0 PID: 8205 Comm: syz.1.649 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  255.244276][ T8205] Tainted: [L]=SOFTLOCKUP
[  255.244284][ T8205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  255.244296][ T8205] Call Trace:
[  255.244305][ T8205]  <TASK>
[  255.244314][ T8205]  dump_stack_lvl+0xe8/0x150
[  255.244351][ T8205]  should_fail_ex+0x3eb/0x540
[  255.244382][ T8205]  should_failslab+0xa8/0x100
[  255.244410][ T8205]  ? skb_clone+0x212/0x3a0
[  255.244432][ T8205]  kmem_cache_alloc_noprof+0x9c/0x600
[  255.244458][ T8205]  ? skb_clone+0x212/0x3a0
[  255.244486][ T8205]  skb_clone+0x212/0x3a0
[  255.244512][ T8205]  __netlink_deliver_tap+0x355/0x6e0
[  255.244551][ T8205]  ? netlink_deliver_tap+0x2e/0x1b0
[  255.244586][ T8205]  netlink_deliver_tap+0x19c/0x1b0
[  255.244615][ T8205]  netlink_unicast+0x8c1/0xa80
[  255.244659][ T8205]  netlink_sendmsg+0x7f0/0xb20
[  255.244693][ T8205]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.244723][ T8205]  ? aa_sock_msg_perm+0x144/0x210
[  255.244749][ T8205]  ? apparmor_socket_sendmsg+0x98/0x360
[  255.244780][ T8205]  ? __pfx_netlink_sendmsg+0x10/0x10
[  255.244805][ T8205]  sock_sendmsg_nosec+0x14e/0x190
[  255.244834][ T8205]  ____sys_sendmsg+0x54e/0x850
[  255.244861][ T8205]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.244901][ T8205]  ___sys_sendmsg+0x2a5/0x360
[  255.244919][ T8205]  ? __lock_acquire+0x747/0x2de0
[  255.244950][ T8205]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.244970][ T8205]  ? get_pid_task+0x20/0x1f0
[  255.244993][ T8205]  ? get_pid_task+0x20/0x1f0
[  255.245012][ T8205]  ? get_pid_task+0x20/0x1f0
[  255.245078][ T8205]  ? __fget_files+0x3a2/0x420
[  255.245101][ T8205]  ? __fget_files+0x2a/0x420
[  255.245136][ T8205]  __sys_sendmsg+0x177/0x240
[  255.245158][ T8205]  ? __pfx___sys_sendmsg+0x10/0x10
[  255.245192][ T8205]  ? __might_fault+0xaf/0x130
[  255.245217][ T8205]  __do_fast_syscall_32+0x28b/0x6c0
[  255.245242][ T8205]  ? do_fast_syscall_32+0x33/0x70
[  255.245263][ T8205]  ? asm_int80_emulation+0x1a/0x20
[  255.245281][ T8205]  ? do_int80_emulation+0x299/0x500
[  255.245302][ T8205]  ? trace_irq_disable+0x3b/0x140
[  255.245333][ T8205]  do_fast_syscall_32+0x33/0x70
[  255.245356][ T8205]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  255.245380][ T8205] RIP: 0023:0xf73bef1c
[  255.245397][ T8205] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  255.245414][ T8205] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  255.245435][ T8205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  255.245448][ T8205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  255.245459][ T8205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  255.245471][ T8205] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  255.245483][ T8205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  255.245514][ T8205]  </TASK>
[  255.666441][ T8213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.652'.
[  255.846738][ T8217] fuse: Unknown parameter 'T����)�'
[  255.861343][   T10] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  255.872933][   T10] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  256.327122][ T8230] FAULT_INJECTION: forcing a failure.
[  256.327122][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  256.327156][ T8230] CPU: 1 UID: 0 PID: 8230 Comm: syz.3.657 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  256.327182][ T8230] Tainted: [L]=SOFTLOCKUP
[  256.327189][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  256.327200][ T8230] Call Trace:
[  256.327208][ T8230]  <TASK>
[  256.327216][ T8230]  dump_stack_lvl+0xe8/0x150
[  256.327241][ T8230]  should_fail_ex+0x3eb/0x540
[  256.327259][ T8230]  _copy_from_user+0x2d/0xb0
[  256.327278][ T8230]  get_compat_msghdr+0xb3/0x4c0
[  256.327307][ T8230]  ? __pfx_get_compat_msghdr+0x10/0x10
[  256.327344][ T8230]  ___sys_sendmsg+0x201/0x360
[  256.327362][ T8230]  ? __lock_acquire+0x747/0x2de0
[  256.327383][ T8230]  ? __pfx____sys_sendmsg+0x10/0x10
[  256.327393][ T8230]  ? lock_acquire+0x115/0x350
[  256.327443][ T8230]  ? __fget_files+0x3a2/0x420
[  256.327466][ T8230]  ? __fget_files+0x2a/0x420
[  256.327498][ T8230]  __sys_sendmsg+0x177/0x240
[  256.327517][ T8230]  ? irqentry_exit+0x2a0/0x9b0
[  256.327538][ T8230]  ? __pfx___sys_sendmsg+0x10/0x10
[  256.327565][ T8230]  ? __might_fault+0xaf/0x130
[  256.327583][ T8230]  __do_fast_syscall_32+0x28b/0x6c0
[  256.327605][ T8230]  ? do_fast_syscall_32+0x33/0x70
[  256.327627][ T8230]  ? asm_int80_emulation+0x1a/0x20
[  256.327653][ T8230]  ? do_int80_emulation+0x299/0x500
[  256.327672][ T8230]  ? trace_irq_disable+0x3b/0x140
[  256.327694][ T8230]  do_fast_syscall_32+0x33/0x70
[  256.327708][ T8230]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  256.327722][ T8230] RIP: 0023:0xf7fb7f1c
[  256.327733][ T8230] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  256.327748][ T8230] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  256.327769][ T8230] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000
[  256.327783][ T8230] RDX: 0000000002040800 RSI: 0000000000000000 RDI: 0000000000000000
[  256.327795][ T8230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  256.327805][ T8230] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  256.327816][ T8230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  256.327846][ T8230]  </TASK>
[  256.423314][ T5730] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  256.618381][ T5730] usb 3-1: Using ep0 maxpacket: 16
[  256.621338][ T5730] usb 3-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  256.623003][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.623054][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  256.623080][ T5730] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  256.623100][ T5730] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  256.623121][ T5730] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  256.699426][ T5730] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  256.699455][ T5730] usb 3-1: Manufacturer: syz
[  256.718458][ T5730] usb 3-1: config 0 descriptor??
[  256.999035][ T5730] rc_core: IR keymap rc-hauppauge not found
[  256.999056][ T5730] Registered IR keymap rc-empty
[  256.999483][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.031914][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.049793][ T5730] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  257.053468][ T5730] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24
[  257.083466][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.098539][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.118652][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.138652][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.159293][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.178540][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.198956][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.219647][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.239049][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.258595][ T5730] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.294487][ T5730] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  257.296378][ T5730] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  257.448802][ T8227] input: syz0 as /devices/virtual/input/input23
[  257.580155][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  257.580219][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  257.742909][ T5730] usb 3-1: USB disconnect, device number 22
[  258.592029][ T8263] vti0: entered promiscuous mode
[  258.828422][ T5730] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  258.981036][ T5730] usb 3-1: not running at top speed; connect to a high speed hub
[  258.981075][ T5730] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00
[  259.017499][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.017529][ T5730] usb 3-1: Product: syz
[  259.017552][ T5730] usb 3-1: Manufacturer: syz
[  259.017566][ T5730] usb 3-1: SerialNumber: syz
[  259.067394][ T5730] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected
[  259.099141][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  259.154352][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  259.182118][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  259.205689][ T5730] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  259.346587][   T10] usb 1-1: USB disconnect, device number 13
[  259.378140][   T10] usblp0: removed
[  259.617722][ T8272] all: renamed from bridge_slave_0 (while UP)
[  259.989496][ T8278] FAULT_INJECTION: forcing a failure.
[  259.989496][ T8278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.989528][ T8278] CPU: 1 UID: 0 PID: 8278 Comm: syz.3.673 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  259.989549][ T8278] Tainted: [L]=SOFTLOCKUP
[  259.989553][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  259.989560][ T8278] Call Trace:
[  259.989566][ T8278]  <TASK>
[  259.989571][ T8278]  dump_stack_lvl+0xe8/0x150
[  259.989595][ T8278]  should_fail_ex+0x3eb/0x540
[  259.989613][ T8278]  _copy_from_user+0x2d/0xb0
[  259.989629][ T8278]  __sys_connect+0x155/0x450
[  259.989649][ T8278]  ? __pfx___sys_connect+0x10/0x10
[  259.989678][ T8278]  __ia32_sys_connect+0x7a/0x90
[  259.989696][ T8278]  __do_fast_syscall_32+0x28b/0x6c0
[  259.989710][ T8278]  ? do_fast_syscall_32+0x33/0x70
[  259.989723][ T8278]  ? asm_int80_emulation+0x1a/0x20
[  259.989734][ T8278]  ? do_int80_emulation+0x299/0x500
[  259.989747][ T8278]  ? trace_irq_disable+0x3b/0x140
[  259.989765][ T8278]  do_fast_syscall_32+0x33/0x70
[  259.989778][ T8278]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  259.989793][ T8278] RIP: 0023:0xf7fb7f1c
[  259.989805][ T8278] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  259.989816][ T8278] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[  259.989830][ T8278] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  259.989839][ T8278] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[  259.989846][ T8278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  259.989853][ T8278] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  259.989860][ T8278] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  259.989878][ T8278]  </TASK>
[  260.031821][ T5728] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  260.281375][ T5728] usb 1-1: not running at top speed; connect to a high speed hub
[  260.281446][ T5728] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  260.284265][ T5728] usb 1-1: config 1 interface 0 altsetting 5 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  260.284288][ T5728] usb 1-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  260.284324][ T5728] usb 1-1: config 1 interface 0 has no altsetting 0
[  260.338421][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.338451][ T5728] usb 1-1: Product: 葽汝轢䀪쮋ॊ遊娂朻틡
[  260.338467][ T5728] usb 1-1: Manufacturer: Э
[  260.338512][ T5728] usb 1-1: SerialNumber: syz
[  260.353598][ T8275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  260.541210][ T8284] ip6gretap0: mtu less than device minimum
[  260.567929][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.569076][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.619392][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.678'.
[  260.620099][ T8288] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  261.135679][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.136204][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.188204][ T8305] loop1: detected capacity change from 0 to 7
[  261.341514][ T8305] Dev loop1: unable to read RDB block 7
[  261.341567][ T8305]  loop1: unable to read partition table
[  261.341724][ T8305] loop1: partition table beyond EOD, truncated
[  261.341753][ T8305] loop_reread_partitions: partition scan of loop1 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  261.343679][ T8306] Invalid logical block size (768)
[  261.522172][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.524223][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.557179][ T8313] netlink: 44 bytes leftover after parsing attributes in process `syz.3.683'.
[  261.601301][ T5730] usb 3-1: USB disconnect, device number 23
[  261.704127][ T5730] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  261.791357][ T5730] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  261.823968][ T5730] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  261.863732][ T5730] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  261.891603][ T5730] keyspan 3-1:1.0: device disconnected
[  262.454760][ T8331] FAULT_INJECTION: forcing a failure.
[  262.454760][ T8331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.454784][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.4.688 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  262.454802][ T8331] Tainted: [L]=SOFTLOCKUP
[  262.454806][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  262.454813][ T8331] Call Trace:
[  262.454818][ T8331]  <TASK>
[  262.454827][ T8331]  dump_stack_lvl+0xe8/0x150
[  262.454852][ T8331]  should_fail_ex+0x3eb/0x540
[  262.454870][ T8331]  _copy_from_user+0x2d/0xb0
[  262.454885][ T8331]  get_compat_msghdr+0xb3/0x4c0
[  262.454904][ T8331]  ? __pfx_get_compat_msghdr+0x10/0x10
[  262.454927][ T8331]  ___sys_sendmsg+0x201/0x360
[  262.454939][ T8331]  ? __lock_acquire+0x747/0x2de0
[  262.454957][ T8331]  ? __pfx____sys_sendmsg+0x10/0x10
[  262.454968][ T8331]  ? get_pid_task+0x20/0x1f0
[  262.454981][ T8331]  ? get_pid_task+0x20/0x1f0
[  262.454992][ T8331]  ? get_pid_task+0x20/0x1f0
[  262.455023][ T8331]  ? __fget_files+0x3a2/0x420
[  262.455037][ T8331]  ? __fget_files+0x2a/0x420
[  262.455056][ T8331]  __sys_sendmsg+0x177/0x240
[  262.455159][ T8331]  ? __pfx___sys_sendmsg+0x10/0x10
[  262.455189][ T8331]  ? __might_fault+0xaf/0x130
[  262.455205][ T8331]  __do_fast_syscall_32+0x28b/0x6c0
[  262.455220][ T8331]  ? do_fast_syscall_32+0x33/0x70
[  262.455233][ T8331]  ? asm_int80_emulation+0x1a/0x20
[  262.455247][ T8331]  ? do_int80_emulation+0x299/0x500
[  262.455264][ T8331]  do_fast_syscall_32+0x33/0x70
[  262.455280][ T8331]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  262.455295][ T8331] RIP: 0023:0xf7f73f1c
[  262.455309][ T8331] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  262.455330][ T8331] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  262.455345][ T8331] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800009c0
[  262.455354][ T8331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  262.455361][ T8331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  262.455368][ T8331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  262.455375][ T8331] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  262.455393][ T8331]  </TASK>
[  262.963983][ T5728] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[  262.996124][ T5728] usb 1-1: USB disconnect, device number 14
[  263.051076][ T5698] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  263.198359][ T5698] usb 3-1: Using ep0 maxpacket: 16
[  263.200720][ T5698] usb 3-1: New USB device found: idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  263.202112][ T5698] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[  263.202138][ T5698] usb 3-1: config 0 has no interface number 0
[  263.202180][ T5698] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  263.202204][ T5698] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  263.202508][ T5698] usb 3-1: config 0 interface 41 has no altsetting 0
[  263.277704][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.277731][ T5698] usb 3-1: Product: syz
[  263.277745][ T5698] usb 3-1: Manufacturer: syz
[  263.277760][ T5698] usb 3-1: SerialNumber: syz
[  263.314496][ T5698] usb 3-1: config 0 descriptor??
[  263.315362][ T8334] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  263.315508][ T8334] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  263.723318][ T8359] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  263.743408][ T5713] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  263.746707][ T5713] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  264.360905][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'.
[  264.708577][ T5728] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  264.889809][ T5728] usb 4-1: New USB device found: idVendor=2b73, idProduct=003c, bcdDevice=0.40
[  264.890893][ T5728] usb 4-1: config index 0 descriptor too short (expected 30955, got 105)
[  264.890924][ T5728] usb 4-1: config 39 has 3 interfaces, different from the descriptor's value: 17
[  264.891010][ T5728] usb 4-1: config 39 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4
[  264.891035][ T5728] usb 4-1: config 39 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  264.894418][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  264.894492][ T5728] usb 4-1: Product: syz
[  264.894507][ T5728] usb 4-1: Manufacturer: syz
[  264.894522][ T5728] usb 4-1: SerialNumber: syz
[  265.107159][ T8375] bridge1: entered promiscuous mode
[  265.115512][ T8375] bridge1: entered allmulticast mode
[  265.269423][ T8365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.293353][ T8365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.434194][ T5728] snd-usb-audio 4-1:39.0: probe with driver snd-usb-audio failed with error -71
[  265.466845][ T5728] usb 4-1: USB disconnect, device number 33
[  265.579465][ T5647] udevd[5647]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:39.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.681234][ T5698] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71
[  265.754491][ T5698] usb 3-1: USB disconnect, device number 24
[  266.300700][   T30] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  266.317609][   T30] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  266.957807][ T8423] loop5: detected capacity change from 0 to 7
[  267.376479][ T8423] Dev loop5: unable to read RDB block 7
[  267.376520][ T8423]  loop5: unable to read partition table
[  267.376775][ T8423] loop5: partition table beyond EOD, truncated
[  267.376807][ T8423] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  267.415695][    C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2
[  267.415798][    C1] buffer_io_error: 478 callbacks suppressed
[  267.415815][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  268.194303][ T5000] Dev loop5: unable to read RDB block 7
[  268.194333][ T5000]  loop5: unable to read partition table
[  268.194473][ T5000] loop5: partition table beyond EOD, truncated
[  268.620051][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  268.768365][   T10] usb 3-1: Using ep0 maxpacket: 32
[  268.771764][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  268.771821][   T10] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  268.773066][   T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  268.773089][   T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  268.773109][   T10] usb 3-1: config 14 has no interface number 0
[  268.773133][   T10] usb 3-1: config 14 has no interface number 1
[  268.773201][   T10] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  268.773224][   T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  268.773249][   T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  268.773275][   T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  268.773301][   T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  268.773327][   T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  268.773354][   T10] usb 3-1: config 14 interface 57 has no altsetting 0
[  268.773372][   T10] usb 3-1: config 14 interface 228 has no altsetting 0
[  268.809378][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.809439][   T10] usb 3-1: Product: syz
[  268.809453][   T10] usb 3-1: Manufacturer: syz
[  268.809465][   T10] usb 3-1: SerialNumber: syz
[  269.436360][   T10] legousbtower 3-1:14.57: interrupt endpoints not found
[  269.852334][   T10] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178
[  269.855232][   T10] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  270.751125][ T8472] fuse: fd is not a fuse device
[  270.847613][ T8472] netlink: 52 bytes leftover after parsing attributes in process `syz.4.729'.
[  271.024068][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'.
[  271.218023][   T30] usb 3-1: USB disconnect, device number 25
[  271.275617][   T30] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  273.535752][ T8523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.559141][ T8523] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.773112][ T8528] netlink: 64 bytes leftover after parsing attributes in process `syz.1.747'.
[  273.851339][ T8528] syzkaller1: entered promiscuous mode
[  273.851363][ T8528] syzkaller1: entered allmulticast mode
[  274.968425][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  275.122571][   T10] usb 4-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01
[  275.126543][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.126610][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.214946][   T10] as10x_usb: device has been detected
[  275.215722][   T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  275.285310][   T10] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  275.411690][   T10] as10x_usb: error during firmware upload part1
[  275.412100][   T10] Registered device Abilis Systems DVB-Titan
[  275.448514][ T5698] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  275.598383][ T5698] usb 2-1: Using ep0 maxpacket: 32
[  275.599377][ T5698] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  275.601435][ T5698] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  275.601461][ T5698] usb 2-1: config 0 has no interface number 0
[  275.606477][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.606511][ T5698] usb 2-1: Product: syz
[  275.606525][ T5698] usb 2-1: Manufacturer: syz
[  275.606539][ T5698] usb 2-1: SerialNumber: syz
[  275.670053][ T5698] usb 2-1: config 0 descriptor??
[  276.036968][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.756'.
[  276.308496][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  276.460507][   T10] usb 1-1: Using ep0 maxpacket: 8
[  276.467653][   T10] usb 1-1: New USB device found: idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  276.496587][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.496607][   T10] usb 1-1: Product: syz
[  276.496616][   T10] usb 1-1: Manufacturer: syz
[  276.496624][   T10] usb 1-1: SerialNumber: syz
[  276.522611][   T10] usb 1-1: config 0 descriptor??
[  276.536617][   T10] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  276.543156][ T5698] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  276.543185][ T5698] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  276.547721][ T5698] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  276.548045][ T5698] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  276.596030][ T5698] usb 2-1: USB disconnect, device number 24
[  277.083667][   T31] audit: type=1326 audit(1793217307.722:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.2.758" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745ef1c code=0x7fc00000
[  277.254382][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'.
[  277.269632][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'.
[  277.467079][   T30] usb 4-1: USB disconnect, device number 34
[  277.541440][   T30] Unregistered device Abilis Systems DVB-Titan
[  277.544719][   T30] as10x_usb: device has been disconnected
[  277.702380][   T10] gspca_sonixj: reg_r err -110
[  277.702476][   T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -110
[  279.387515][ T8600] FAULT_INJECTION: forcing a failure.
[  279.387515][ T8600] name failslab, interval 1, probability 0, space 0, times 0
[  279.387551][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz.3.771 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  279.387578][ T8600] Tainted: [L]=SOFTLOCKUP
[  279.387586][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  279.387598][ T8600] Call Trace:
[  279.387607][ T8600]  <TASK>
[  279.387614][ T8600]  dump_stack_lvl+0xe8/0x150
[  279.387652][ T8600]  should_fail_ex+0x3eb/0x540
[  279.387683][ T8600]  should_failslab+0xa8/0x100
[  279.387710][ T8600]  ? skb_clone+0x212/0x3a0
[  279.387742][ T8600]  kmem_cache_alloc_noprof+0x9c/0x600
[  279.387773][ T8600]  ? skb_clone+0x212/0x3a0
[  279.387801][ T8600]  skb_clone+0x212/0x3a0
[  279.387827][ T8600]  __netlink_deliver_tap+0x355/0x6e0
[  279.387874][ T8600]  ? netlink_deliver_tap+0x2e/0x1b0
[  279.387902][ T8600]  netlink_deliver_tap+0x19c/0x1b0
[  279.387929][ T8600]  netlink_unicast+0x8c1/0xa80
[  279.387970][ T8600]  netlink_sendmsg+0x7f0/0xb20
[  279.388004][ T8600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.388034][ T8600]  ? aa_sock_msg_perm+0x144/0x210
[  279.388060][ T8600]  ? apparmor_socket_sendmsg+0x98/0x360
[  279.388090][ T8600]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.388116][ T8600]  sock_sendmsg_nosec+0x14e/0x190
[  279.388144][ T8600]  ____sys_sendmsg+0x54e/0x850
[  279.388172][ T8600]  ? __pfx_____sys_sendmsg+0x10/0x10
[  279.388211][ T8600]  ___sys_sendmsg+0x2a5/0x360
[  279.388229][ T8600]  ? __lock_acquire+0x747/0x2de0
[  279.388258][ T8600]  ? __pfx____sys_sendmsg+0x10/0x10
[  279.388277][ T8600]  ? get_pid_task+0x20/0x1f0
[  279.388300][ T8600]  ? get_pid_task+0x20/0x1f0
[  279.388318][ T8600]  ? get_pid_task+0x20/0x1f0
[  279.388371][ T8600]  ? __fget_files+0x3a2/0x420
[  279.388394][ T8600]  ? __fget_files+0x2a/0x420
[  279.388427][ T8600]  __sys_sendmsg+0x177/0x240
[  279.388451][ T8600]  ? __pfx___sys_sendmsg+0x10/0x10
[  279.388482][ T8600]  ? __might_fault+0xaf/0x130
[  279.388507][ T8600]  __do_fast_syscall_32+0x28b/0x6c0
[  279.388531][ T8600]  ? do_fast_syscall_32+0x33/0x70
[  279.388552][ T8600]  ? asm_int80_emulation+0x1a/0x20
[  279.388571][ T8600]  ? do_int80_emulation+0x299/0x500
[  279.388591][ T8600]  ? trace_irq_disable+0x3b/0x140
[  279.388637][ T8600]  do_fast_syscall_32+0x33/0x70
[  279.388659][ T8600]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  279.388682][ T8600] RIP: 0023:0xf7fb7f1c
[  279.388701][ T8600] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  279.388718][ T8600] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  279.388740][ T8600] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000f00
[  279.388754][ T8600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  279.388766][ T8600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  279.388776][ T8600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  279.388788][ T8600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  279.388821][ T8600]  </TASK>
[  279.724003][ T5698] usb 1-1: USB disconnect, device number 15
[  279.985277][ T8612] fuse: Bad value for 'user_id'
[  279.985293][ T8612] fuse: Bad value for 'user_id'
[  280.027424][ T8614] netlink: 'syz.2.775': attribute type 2 has an invalid length.
[  280.130477][ T8614] !: entered promiscuous mode
[  280.198388][   T30] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  280.264551][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.778'.
[  280.360959][   T30] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  280.363069][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.363102][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.363124][   T30] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  280.363168][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.415520][   T30] usb 4-1: config 0 descriptor??
[  280.475641][   T31] audit: type=1326 audit(1793217311.112:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.2.779" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf745ef1c code=0x0
[  280.873750][   T30] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  281.283602][   T30] usb 4-1: USB disconnect, device number 35
[  281.339127][ T8641] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.782'.
[  281.364265][ T8640] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.782'.
[  281.364471][ T8636] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.782'.
[  281.370675][ T8635] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.782'.
[  281.967699][ T8656] FAULT_INJECTION: forcing a failure.
[  281.967699][ T8656] name failslab, interval 1, probability 0, space 0, times 0
[  281.967734][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.2.788 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  281.967761][ T8656] Tainted: [L]=SOFTLOCKUP
[  281.967767][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  281.967779][ T8656] Call Trace:
[  281.967787][ T8656]  <TASK>
[  281.967796][ T8656]  dump_stack_lvl+0xe8/0x150
[  281.967833][ T8656]  should_fail_ex+0x3eb/0x540
[  281.967862][ T8656]  should_failslab+0xa8/0x100
[  281.967893][ T8656]  __kmalloc_cache_noprof+0x9e/0x600
[  281.967918][ T8656]  ? rtnl_newlink+0x147/0x1c30
[  281.967936][ T8656]  ? rtnl_newlink+0x147/0x1c30
[  281.967954][ T8656]  ? stack_trace_save+0xa9/0x100
[  281.967983][ T8656]  rtnl_newlink+0x147/0x1c30
[  281.968000][ T8656]  ? stack_depot_save_flags+0x33/0x810
[  281.968022][ T8656]  ? __lock_acquire+0x6c0/0x2de0
[  281.968051][ T8656]  ? kasan_save_track+0x4f/0x80
[  281.968073][ T8656]  ? kasan_save_track+0x3e/0x80
[  281.968095][ T8656]  ? kasan_save_free_info+0x40/0x50
[  281.968114][ T8656]  ? __kasan_slab_free+0x5c/0x80
[  281.968139][ T8656]  ? __pfx_rtnl_newlink+0x10/0x10
[  281.968156][ T8656]  ? __netlink_deliver_tap+0x4f1/0x6e0
[  281.968180][ T8656]  ? netlink_deliver_tap+0x19c/0x1b0
[  281.968204][ T8656]  ? netlink_unicast+0x8c1/0xa80
[  281.968224][ T8656]  ? netlink_sendmsg+0x7f0/0xb20
[  281.968261][ T8656]  ? sock_sendmsg_nosec+0x14e/0x190
[  281.968283][ T8656]  ? ____sys_sendmsg+0x54e/0x850
[  281.968300][ T8656]  ? ___sys_sendmsg+0x2a5/0x360
[  281.968317][ T8656]  ? __sys_sendmsg+0x177/0x240
[  281.968333][ T8656]  ? __do_fast_syscall_32+0x28b/0x6c0
[  281.968355][ T8656]  ? do_fast_syscall_32+0x33/0x70
[  281.968375][ T8656]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.968436][ T8656]  ? kasan_quarantine_put+0xbb/0x1f0
[  281.968459][ T8656]  ? lockdep_hardirqs_on+0x7b/0x110
[  281.968483][ T8656]  ? nlmon_xmit+0xb0/0x100
[  281.968505][ T8656]  ? kmem_cache_free+0x182/0x650
[  281.968537][ T8656]  ? __lock_acquire+0x747/0x2de0
[  281.968568][ T8656]  ? __pfx_hook_capable+0x10/0x10
[  281.968587][ T8656]  ? __dev_queue_xmit+0x29b/0x3920
[  281.968613][ T8656]  ? __pfx_hook_capable+0x10/0x10
[  281.968633][ T8656]  ? lockdep_hardirqs_on+0x7b/0x110
[  281.968661][ T8656]  ? lock_acquire+0x115/0x350
[  281.968685][ T8656]  ? __pfx_rtnl_newlink+0x10/0x10
[  281.968718][ T8656]  ? __pfx_rtnl_newlink+0x10/0x10
[  281.968735][ T8656]  rtnetlink_rcv_msg+0x802/0xc00
[  281.968770][ T8656]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  281.968798][ T8656]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  281.968830][ T8656]  ? __copy_skb_header+0xa3/0x4a0
[  281.968864][ T8656]  netlink_rcv_skb+0x226/0x4a0
[  281.968890][ T8656]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  281.968920][ T8656]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  281.968958][ T8656]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.968983][ T8656]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.969015][ T8656]  netlink_unicast+0x8ef/0xa80
[  281.969058][ T8656]  netlink_sendmsg+0x7f0/0xb20
[  281.969091][ T8656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.969121][ T8656]  ? aa_sock_msg_perm+0x144/0x210
[  281.969145][ T8656]  ? apparmor_socket_sendmsg+0x98/0x360
[  281.969175][ T8656]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.969199][ T8656]  sock_sendmsg_nosec+0x14e/0x190
[  281.969226][ T8656]  ____sys_sendmsg+0x54e/0x850
[  281.969261][ T8656]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.969299][ T8656]  ___sys_sendmsg+0x2a5/0x360
[  281.969318][ T8656]  ? __lock_acquire+0x747/0x2de0
[  281.969347][ T8656]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.969367][ T8656]  ? get_pid_task+0x20/0x1f0
[  281.969389][ T8656]  ? get_pid_task+0x20/0x1f0
[  281.969407][ T8656]  ? get_pid_task+0x20/0x1f0
[  281.969460][ T8656]  ? __fget_files+0x3a2/0x420
[  281.969484][ T8656]  ? __fget_files+0x2a/0x420
[  281.969518][ T8656]  __sys_sendmsg+0x177/0x240
[  281.969541][ T8656]  ? __pfx___sys_sendmsg+0x10/0x10
[  281.969575][ T8656]  ? __might_fault+0xaf/0x130
[  281.969599][ T8656]  __do_fast_syscall_32+0x28b/0x6c0
[  281.969623][ T8656]  ? do_fast_syscall_32+0x33/0x70
[  281.969645][ T8656]  ? asm_int80_emulation+0x1a/0x20
[  281.969663][ T8656]  ? do_int80_emulation+0x299/0x500
[  281.969683][ T8656]  ? trace_irq_disable+0x3b/0x140
[  281.969713][ T8656]  do_fast_syscall_32+0x33/0x70
[  281.969735][ T8656]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.969757][ T8656] RIP: 0023:0xf745ef1c
[  281.969776][ T8656] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  281.969793][ T8656] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  281.969816][ T8656] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000a80
[  281.969830][ T8656] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  281.969842][ T8656] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.969854][ T8656] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.969866][ T8656] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.969897][ T8656]  </TASK>
[  282.496327][ T8658] FAULT_INJECTION: forcing a failure.
[  282.496327][ T8658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.496351][ T8658] CPU: 0 UID: 0 PID: 8658 Comm: syz.0.789 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  282.496368][ T8658] Tainted: [L]=SOFTLOCKUP
[  282.496372][ T8658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  282.496379][ T8658] Call Trace:
[  282.496386][ T8658]  <TASK>
[  282.496393][ T8658]  dump_stack_lvl+0xe8/0x150
[  282.496418][ T8658]  should_fail_ex+0x3eb/0x540
[  282.496436][ T8658]  _copy_from_user+0x2d/0xb0
[  282.496458][ T8658]  kstrtouint_from_user+0xd6/0x180
[  282.496482][ T8658]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  282.496512][ T8658]  ? lock_acquire+0x115/0x350
[  282.496543][ T8658]  proc_fail_nth_write+0x8e/0x210
[  282.496565][ T8658]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  282.496588][ T8658]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  282.496605][ T8658]  vfs_write+0x296/0xba0
[  282.496627][ T8658]  ? __pfx_vfs_write+0x10/0x10
[  282.496643][ T8658]  ? __fget_files+0x2a/0x420
[  282.496656][ T8658]  ? __fget_files+0x3a2/0x420
[  282.496669][ T8658]  ? __fget_files+0x2a/0x420
[  282.496685][ T8658]  ? fdget+0x1ac/0x250
[  282.496703][ T8658]  ksys_write+0x150/0x270
[  282.496720][ T8658]  ? __pfx_ksys_write+0x10/0x10
[  282.496738][ T8658]  ? asm_int80_emulation+0x1a/0x20
[  282.496753][ T8658]  do_int80_emulation+0x198/0x500
[  282.496767][ T8658]  ? trace_irq_disable+0x3b/0x140
[  282.496783][ T8658]  ? asm_int80_emulation+0x1a/0x20
[  282.496794][ T8658]  ? clear_bhb_loop+0x70/0xc0
[  282.496805][ T8658]  ? clear_bhb_loop+0x70/0xc0
[  282.496819][ T8658]  asm_int80_emulation+0x1a/0x20
[  282.496831][ T8658] RIP: 0023:0xf71377ab
[  282.496843][ T8658] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  282.496854][ T8658] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004
[  282.496869][ T8658] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0
[  282.496877][ T8658] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  282.496893][ T8658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  282.496900][ T8658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  282.496907][ T8658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  282.496925][ T8658]  </TASK>
[  282.813508][ T8662] FAULT_INJECTION: forcing a failure.
[  282.813508][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.813541][ T8662] CPU: 1 UID: 0 PID: 8662 Comm: syz.1.790 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  282.813569][ T8662] Tainted: [L]=SOFTLOCKUP
[  282.813576][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  282.813588][ T8662] Call Trace:
[  282.813596][ T8662]  <TASK>
[  282.813605][ T8662]  dump_stack_lvl+0xe8/0x150
[  282.813643][ T8662]  should_fail_ex+0x3eb/0x540
[  282.813673][ T8662]  _copy_from_user+0x2d/0xb0
[  282.813699][ T8662]  video_usercopy+0x359/0x1430
[  282.813745][ T8662]  ? __pfx___video_do_ioctl+0x10/0x10
[  282.813776][ T8662]  ? __pfx_video_usercopy+0x10/0x10
[  282.813818][ T8662]  ? __fget_files+0x2a/0x420
[  282.813846][ T8662]  v4l2_ioctl+0x18d/0x1e0
[  282.813875][ T8662]  v4l2_compat_ioctl32+0x1c4/0x270
[  282.813910][ T8662]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  282.813942][ T8662]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  282.813968][ T8662]  ? __fget_files+0x3a2/0x420
[  282.813990][ T8662]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  282.814017][ T8662]  ? lock_acquire+0x115/0x350
[  282.814056][ T8662]  ? __might_fault+0xaf/0x130
[  282.814080][ T8662]  __do_fast_syscall_32+0x28b/0x6c0
[  282.814102][ T8662]  ? do_fast_syscall_32+0x33/0x70
[  282.814123][ T8662]  ? asm_int80_emulation+0x1a/0x20
[  282.814141][ T8662]  ? do_int80_emulation+0x299/0x500
[  282.814166][ T8662]  do_fast_syscall_32+0x33/0x70
[  282.814188][ T8662]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  282.814211][ T8662] RIP: 0023:0xf73bef1c
[  282.814229][ T8662] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  282.814245][ T8662] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  282.814266][ T8662] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602
[  282.814279][ T8662] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[  282.814291][ T8662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  282.814303][ T8662] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  282.814314][ T8662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  282.814344][ T8662]  </TASK>
[  283.148768][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.155929][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.330592][   T31] audit: type=1326 audit(1793217313.972:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8667 comm="syz.1.794" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bef1c code=0x0
[  283.478432][   T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  283.609312][   T10] usb 1-1: device descriptor read/64, error -71
[  283.849385][   T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  283.979053][   T10] usb 1-1: device descriptor read/64, error -71
[  284.089736][   T10] usb usb1-port1: attempt power cycle
[  284.318359][   T30] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  284.428579][   T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  284.449423][   T10] usb 1-1: device descriptor read/8, error -71
[  284.488559][   T30] usb 4-1: Using ep0 maxpacket: 8
[  284.490611][   T30] usb 4-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  284.492625][   T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  284.492948][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.496532][   T30] usb 4-1: config 0 descriptor??
[  284.688685][   T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  284.709236][   T10] usb 1-1: device descriptor read/8, error -71
[  284.784689][   T30] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  284.821644][   T10] usb usb1-port1: unable to enumerate USB device
[  285.158470][   T10] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  285.221737][ T8702] tipc: Failed to obtain node identity
[  285.221782][ T8702] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  285.311546][   T10] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  285.312752][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  285.312786][   T10] usb 3-1: config 0 has no interface number 0
[  285.312830][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  285.312855][   T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  285.312894][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.316352][   T10] usb 3-1: config 0 descriptor??
[  285.336772][ T8697] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  285.357993][   T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  285.409603][ T5698] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  285.524529][ T8707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.524958][ T8707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.545425][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.806'.
[  285.558631][ T5698] usb 2-1: Using ep0 maxpacket: 16
[  285.560266][ T5698] usb 2-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  285.562889][ T5698] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.562912][ T5698] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.562930][ T5698] usb 2-1: config 0 interface 0 has no altsetting 0
[  285.562965][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.627387][ T5698] usb 2-1: config 0 descriptor??
[  285.911183][ T8707] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  285.915954][ T8707] block device autoloading is deprecated and will be removed.
[  286.039642][ T5698] usbhid 2-1:0.0: can't add hid device: -71
[  286.039761][ T5698] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  286.044667][ T5698] usb 2-1: USB disconnect, device number 25
[  286.057846][ T8711] netlink: 'syz.2.802': attribute type 10 has an invalid length.
[  286.234096][ T5728] usb 3-1: USB disconnect, device number 26
[  286.563212][ T8714] fuse: Bad value for 'group_id'
[  286.563228][ T8714] fuse: Bad value for 'group_id'
[  286.976409][ T8729] bridge0: entered allmulticast mode
[  286.992118][   T30] usb 4-1: USB disconnect, device number 36
[  287.475213][ T8734] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  287.638410][   T30] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  287.788488][   T30] usb 1-1: Using ep0 maxpacket: 32
[  287.789367][   T30] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2d5a, bcdDevice=0.00
[  287.791012][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.791043][   T30] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.791083][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.796879][   T30] usb 1-1: config 0 descriptor??
[  288.272420][   T30] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  288.433453][   T30] usb 1-1: USB disconnect, device number 20
[  288.465772][ T8763] fido_id[8763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  288.560145][ T5698] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  288.708388][ T5698] usb 4-1: Using ep0 maxpacket: 32
[  288.709137][ T5698] usb 4-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  288.712352][ T5698] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  288.712400][ T5698] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  288.712423][ T5698] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  288.712448][ T5698] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  288.717949][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.717977][ T5698] usb 4-1: Product: syz
[  288.717992][ T5698] usb 4-1: Manufacturer: syz
[  288.718007][ T5698] usb 4-1: SerialNumber: syz
[  288.736989][    C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  288.772969][ T5698] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input25
[  288.866355][ T8778] ------------[ cut here ]------------
[  288.866373][ T8778] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[  288.866411][ T8778] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1506/0x1700, CPU#0: syz.1.825/8778
[  288.891988][ T8778] Modules linked in:
[  288.895897][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.1.825 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  288.907867][ T8778] Tainted: [L]=SOFTLOCKUP
[  288.912957][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  288.923703][ T8778] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700
[  288.931104][ T8778] Code: c6 05 02 a4 45 10 01 48 c7 c7 60 55 68 8e be 49 04 00 00 48 c7 c2 40 42 22 8c e8 15 70 63 00 e9 8b ee ff ff e8 6b 15 88 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff
[  288.951835][ T8778] RSP: 0018:ffffc9001d5cef40 EFLAGS: 00010293
[  288.958205][ T8778] RAX: ffffffff8140fe85 RBX: ffff888000000000 RCX: ffff888033410000
[  288.968398][ T8778] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[  288.976567][ T8778] RBP: ffffc9001d5cf0d0 R08: ffffffff919d63bf R09: 1ffffffff233ac77
[  288.985065][ T8778] R10: dffffc0000000000 R11: fffffbfff233ac78 R12: 1ffff92003ab9dfc
[  288.993305][ T8778] R13: ffff8880753a1b78 R14: ffff888000000000 R15: ffffffffffffff01
[  289.002768][ T8778] FS:  0000000000000000(0000) GS:ffff888123622000(0063) knlGS:00000000f53d6b40
[  289.012152][ T8778] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  289.018908][ T8778] CR2: 0000000000000000 CR3: 0000000075284000 CR4: 00000000003526f0
[  289.026932][ T8778] Call Trace:
[  289.030670][ T8778]  <TASK>
[  289.033697][ T8778]  ? lock_acquire+0x115/0x350
[  289.038434][ T8778]  ? kvm_gpc_refresh+0x31/0x110
[  289.043303][ T8778]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  289.048948][ T8778]  ? lock_acquire+0x115/0x350
[  289.053780][ T8778]  kvm_gpc_refresh+0xe1/0x110
[  289.058600][ T8778]  ? kvm_xen_set_evtchn+0x11e/0x220
[  289.063853][ T8778]  kvm_xen_set_evtchn+0x14f/0x220
[  289.069076][ T8778]  kvm_xen_hvm_evtchn_send+0x120/0x1e0
[  289.074685][ T8778]  kvm_arch_vm_ioctl+0xfa5/0x1a10
[  289.079841][ T8778]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  289.085357][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.090617][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.095587][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.100646][ T8778]  ? lock_acquire+0x115/0x350
[  289.105383][ T8778]  ? lock_acquire+0x115/0x350
[  289.110296][ T8778]  ? is_bpf_text_address+0x26/0x2b0
[  289.115540][ T8778]  ? is_bpf_text_address+0x292/0x2b0
[  289.121072][ T8778]  ? is_bpf_text_address+0x26/0x2b0
[  289.126410][ T8778]  ? kernel_text_address+0xa5/0xe0
[  289.131744][ T8778]  ? __kernel_text_address+0xd/0x30
[  289.137004][ T8778]  ? unwind_get_return_address+0x4d/0x90
[  289.142932][ T8778]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  289.149294][ T8778]  ? arch_stack_walk+0xfb/0x150
[  289.154207][ T8778]  ? stack_trace_save+0xa9/0x100
[  289.159441][ T8778]  ? __pfx_stack_trace_save+0x10/0x10
[  289.165110][ T8778]  ? kasan_save_track+0x4f/0x80
[  289.170331][ T8778]  ? stack_depot_save_flags+0x33/0x810
[  289.177145][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.182419][ T8778]  kvm_vm_ioctl+0x883/0xcb0
[  289.187051][ T8778]  ? __kasan_slab_free+0x5c/0x80
[  289.192105][ T8778]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  289.197168][ T8778]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  289.203887][ T8778]  ? kvm_arch_vm_compat_ioctl+0x2b7/0x2f0
[  289.209813][ T8778]  ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10
[  289.216117][ T8778]  ? kasan_quarantine_put+0xbb/0x1f0
[  289.221563][ T8778]  ? tomoyo_path_number_perm+0x219/0x5f0
[  289.227259][ T8778]  ? tomoyo_path_number_perm+0x219/0x5f0
[  289.233011][ T8778]  ? do_vfs_ioctl+0x116f/0x1530
[  289.237922][ T8778]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  289.243082][ T8778]  kvm_vm_compat_ioctl+0x2b1/0x3a0
[  289.248354][ T8778]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  289.254148][ T8778]  ? __fget_files+0x2a/0x420
[  289.258956][ T8778]  ? __fget_files+0x3a2/0x420
[  289.263933][ T8778]  ? __fget_files+0x2a/0x420
[  289.268874][ T8778]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  289.274469][ T8778]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  289.280073][ T8778]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  289.286318][ T8778]  ? lock_acquire+0x115/0x350
[  289.291295][ T8778]  ? __might_fault+0xaf/0x130
[  289.296006][ T8778]  __do_fast_syscall_32+0x28b/0x6c0
[  289.301311][ T8778]  ? do_fast_syscall_32+0x33/0x70
[  289.306372][ T8778]  ? irqentry_exit+0x10f/0x9b0
[  289.311252][ T8778]  do_fast_syscall_32+0x33/0x70
[  289.316238][ T8778]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  289.322650][ T8778] RIP: 0023:0xf73bef1c
[  289.326844][ T8778] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  289.346851][ T8778] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  289.355547][ T8778] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400caed0
[  289.363866][ T8778] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  289.372113][ T8778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  289.380368][ T8778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  289.388542][ T8778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  289.396613][ T8778]  </TASK>
[  289.399793][ T8778] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  289.407243][ T8778] CPU: 0 UID: 0 PID: 8778 Comm: syz.1.825 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  289.418262][ T8778] Tainted: [L]=SOFTLOCKUP
[  289.422717][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  289.432852][ T8778] Call Trace:
[  289.436180][ T8778]  <TASK>
[  289.439128][ T8778]  vpanic+0x26f/0x710
[  289.443153][ T8778]  panic+0xc5/0xd0
[  289.446898][ T8778]  ? __pfx_panic+0x10/0x10
[  289.451427][ T8778]  __warn+0x315/0x4c0
[  289.455634][ T8778]  ? __kvm_gpc_refresh+0x1506/0x1700
[  289.461058][ T8778]  ? __kvm_gpc_refresh+0x1506/0x1700
[  289.467072][ T8778]  __report_bug+0x276/0x570
[  289.471637][ T8778]  ? check_path+0x21/0x40
[  289.476017][ T8778]  ? __kvm_gpc_refresh+0x1506/0x1700
[  289.481409][ T8778]  ? __pfx___report_bug+0x10/0x10
[  289.486445][ T8778]  ? lockdep_unlock+0x5c/0xd0
[  289.491128][ T8778]  ? __lock_acquire+0x1511/0x2de0
[  289.496305][ T8778]  ? irqentry_exit+0x2a0/0x9b0
[  289.501202][ T8778]  ? lockdep_hardirqs_on+0x7b/0x110
[  289.506428][ T8778]  ? __kvm_gpc_refresh+0x1506/0x1700
[  289.511743][ T8778]  report_bug+0x16b/0x220
[  289.516110][ T8778]  ? __kvm_gpc_refresh+0x1506/0x1700
[  289.521424][ T8778]  ? __kvm_gpc_refresh+0x1508/0x1700
[  289.526833][ T8778]  handle_bug+0x9c/0x200
[  289.531096][ T8778]  exc_invalid_op+0x1a/0x50
[  289.535880][ T8778]  asm_exc_invalid_op+0x1a/0x20
[  289.540774][ T8778] RIP: 0010:__kvm_gpc_refresh+0x1506/0x1700
[  289.546790][ T8778] Code: c6 05 02 a4 45 10 01 48 c7 c7 60 55 68 8e be 49 04 00 00 48 c7 c2 40 42 22 8c e8 15 70 63 00 e9 8b ee ff ff e8 6b 15 88 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 55 f6 ff
[  289.566765][ T8778] RSP: 0018:ffffc9001d5cef40 EFLAGS: 00010293
[  289.573133][ T8778] RAX: ffffffff8140fe85 RBX: ffff888000000000 RCX: ffff888033410000
[  289.581223][ T8778] RDX: 0000000000000000 RSI: ffff888000000000 RDI: ffff888000000000
[  289.589575][ T8778] RBP: ffffc9001d5cf0d0 R08: ffffffff919d63bf R09: 1ffffffff233ac77
[  289.597835][ T8778] R10: dffffc0000000000 R11: fffffbfff233ac78 R12: 1ffff92003ab9dfc
[  289.606089][ T8778] R13: ffff8880753a1b78 R14: ffff888000000000 R15: ffffffffffffff01
[  289.614785][ T8778]  ? __kvm_gpc_refresh+0x1505/0x1700
[  289.620290][ T8778]  ? lock_acquire+0x115/0x350
[  289.624984][ T8778]  ? kvm_gpc_refresh+0x31/0x110
[  289.629942][ T8778]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  289.635423][ T8778]  ? lock_acquire+0x115/0x350
[  289.640469][ T8778]  kvm_gpc_refresh+0xe1/0x110
[  289.645207][ T8778]  ? kvm_xen_set_evtchn+0x11e/0x220
[  289.650591][ T8778]  kvm_xen_set_evtchn+0x14f/0x220
[  289.655685][ T8778]  kvm_xen_hvm_evtchn_send+0x120/0x1e0
[  289.661224][ T8778]  kvm_arch_vm_ioctl+0xfa5/0x1a10
[  289.666297][ T8778]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  289.671789][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.676765][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.681729][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.686783][ T8778]  ? lock_acquire+0x115/0x350
[  289.691499][ T8778]  ? lock_acquire+0x115/0x350
[  289.696202][ T8778]  ? is_bpf_text_address+0x26/0x2b0
[  289.701410][ T8778]  ? is_bpf_text_address+0x292/0x2b0
[  289.706789][ T8778]  ? is_bpf_text_address+0x26/0x2b0
[  289.712042][ T8778]  ? kernel_text_address+0xa5/0xe0
[  289.717188][ T8778]  ? __kernel_text_address+0xd/0x30
[  289.722426][ T8778]  ? unwind_get_return_address+0x4d/0x90
[  289.728190][ T8778]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  289.734454][ T8778]  ? arch_stack_walk+0xfb/0x150
[  289.739461][ T8778]  ? stack_trace_save+0xa9/0x100
[  289.744524][ T8778]  ? __pfx_stack_trace_save+0x10/0x10
[  289.749955][ T8778]  ? kasan_save_track+0x4f/0x80
[  289.754832][ T8778]  ? stack_depot_save_flags+0x33/0x810
[  289.760315][ T8778]  ? __lock_acquire+0x747/0x2de0
[  289.765471][ T8778]  kvm_vm_ioctl+0x883/0xcb0
[  289.770080][ T8778]  ? __kasan_slab_free+0x5c/0x80
[  289.775132][ T8778]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  289.780168][ T8778]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  289.786771][ T8778]  ? kvm_arch_vm_compat_ioctl+0x2b7/0x2f0
[  289.792520][ T8778]  ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10
[  289.798903][ T8778]  ? kasan_quarantine_put+0xbb/0x1f0
[  289.804394][ T8778]  ? tomoyo_path_number_perm+0x219/0x5f0
[  289.810059][ T8778]  ? tomoyo_path_number_perm+0x219/0x5f0
[  289.815731][ T8778]  ? do_vfs_ioctl+0x116f/0x1530
[  289.820695][ T8778]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  289.825936][ T8778]  kvm_vm_compat_ioctl+0x2b1/0x3a0
[  289.831249][ T8778]  ? __pfx_kvm_vm_compat_ioctl+0x10/0x10
[  289.836922][ T8778]  ? __fget_files+0x2a/0x420
[  289.841651][ T8778]  ? __fget_files+0x3a2/0x420
[  289.846372][ T8778]  ? __fget_files+0x2a/0x420
[  289.851020][ T8778]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  289.856868][ T8778]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  289.862659][ T8778]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  289.869032][ T8778]  ? lock_acquire+0x115/0x350
[  289.873800][ T8778]  ? __might_fault+0xaf/0x130
[  289.878688][ T8778]  __do_fast_syscall_32+0x28b/0x6c0
[  289.884124][ T8778]  ? do_fast_syscall_32+0x33/0x70
[  289.889299][ T8778]  ? irqentry_exit+0x10f/0x9b0
[  289.894099][ T8778]  do_fast_syscall_32+0x33/0x70
[  289.898985][ T8778]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  289.905538][ T8778] RIP: 0023:0xf73bef1c
[  289.910066][ T8778] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[  289.930059][ T8778] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  289.938596][ T8778] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000400caed0
[  289.946947][ T8778] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000
[  289.954937][ T8778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  289.962946][ T8778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  289.971214][ T8778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  289.979401][ T8778]  </TASK>
[  289.982810][ T8778] Kernel Offset: disabled
[  289.987266][ T8778] Rebooting in 86400 seconds..