last executing test programs:

6m34.556511042s ago: executing program 32 (id=17):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100040000000100000000000000000003800800030000000000140002007663616e3000000000000000000000000800010001000000060007004e240000"], 0x44}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x410, 0x240, 0x240, 0x240, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010101, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 0xa, 0xf, {@mac, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0xff]}}, 0x8, 0x1, 0x5, 0x4, 0x8, 0x1, 'virt_wifi0\x00', 'veth0_to_hsr\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0xe5d8, 0x5, 0x1, 0x0, "42f2a7f73f18469f6f99d3543338cd305e376ff36ec205d57f7a26f5e8d7f1d42fc287a93dc4c6ce204753c729b6cf6e19c5ab81d0d3f81deb02191e0afd884e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}, {{@arp={@private=0xa010101, @multicast1, 0x0, 0xffffffff, 0x7, 0x0, {@mac=@multicast, {[0x0, 0xff, 0x2199ebde74bcf213, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x21d, 0x6, 0x4, 0x8, 0x6, '\x00', 'xfrm0\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async)
epoll_create1(0x0)

5m43.101473208s ago: executing program 3 (id=236):
ptrace$setregs(0xf, 0x0, 0x6000000000000000, &(0x7f0000000100)="18f74c501eade4973e7ca62e0ebf88bee307481204")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x68b6ea9042ff3741, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fb, 0x2800, 0x440, 0x3, 0xd, 0x3, {0x45, 0x80}, 0xcd, 0x3}})
r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="a3")
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)=0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xb3)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x1)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r2, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000000))
fchdir(r4)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x25)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))

5m40.791690898s ago: executing program 3 (id=240):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="000604"], 0x0, 0x0})

5m37.543262219s ago: executing program 3 (id=248):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)}, 0x4102}], 0x3, 0x119e75c40673edef)

5m37.407630924s ago: executing program 3 (id=249):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000'])
syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f07000000000009058303"], 0x0)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8000, 0x100000000}) (async)
r0 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x8000, 0x100000000})
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x400, 0x4, 0x7f, 0xffff, 0x1})

5m35.811068084s ago: executing program 3 (id=258):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
socket$netlink(0x10, 0x3, 0xc) (async)
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)

5m35.438204175s ago: executing program 3 (id=259):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r0)

5m30.855062488s ago: executing program 2 (id=264):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi1\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f000000bf80)={'adq12b\x00', [0x9, 0xfffffffc, 0xb, 0x7, 0x6, 0x3, 0xf, 0x9, 0xffff6cd2, 0x4, 0x3, 0x81, 0x2, 0x800, 0x35, 0xffffffff, 0x6, 0x5, 0x1ff, 0xffff, 0x80000000, 0x500, 0x7, 0x8, 0x3, 0x5, 0xe, 0x8, 0x0, 0x4, 0x8001]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='ubifs\x00', 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x11012, r1, 0x0)

5m30.695750061s ago: executing program 2 (id=265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000001800)={@void, @void, @eth={@broadcast, @broadcast, @val={@val={0x88a8, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x20, 0x65, 0x0, 0x82, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}, {0x4e22, 0x5e23, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x9, 0x300, @void}}}}}}}}, 0x36)

5m30.146444354s ago: executing program 2 (id=266):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x4000, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x20000000000000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfd}, 0x2}]}, 0x0)

5m29.560996404s ago: executing program 2 (id=267):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3'])
chdir(&(0x7f0000000100)='./file0\x00')
creat(&(0x7f0000000100)='./file0\x00', 0x48)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000040)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0xf5, {0xf5, 0x7, "43c2160dd80e06ff2c8b96ecc206046e8de6656c396a0246dd60e8bb4fe42f716a7fa2352d6131ddd988e5c2218d45acfabb54d9342795d9143f287e5d6fb6a9d50406dc2a70df41a799d4960a64212a35819d230bc1c8605c9f9ca7481960e29b7e15da5b0d66a468ae24668b551707e9e920e4e04083987d8c7cf2cbb86c63298f89fe9f1ae1bce15c4bb0188b0a90adbea04dd5752d6246761f9bb7b12b920e5267c67359f908549a1a0744655578ac5d407e4d8aa87cf33c68e8ee48d4edf682305dcf74eced3292d7ee19b0063b3cf22fb6891101e44d596faac6678a1db8ce6f4cd7715777f2c26a72aee1f0f4cbe656"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}, &(0x7f0000000240)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x60, 0x6, 0x4, "866f642c", "4b801afa"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x70, 0x18, 0x8, 0x5, 0x1, 0x2}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x40, 0x10, 0x24, "b07eb7f5f4e7e99b87fcb7d88aed0b0a4da46c50023e4f6019d57afd54cecbec67118870"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x8, 0x1, [0xf0]}}, &(0x7f0000001100)={0x40, 0x7, 0x2, 0xf}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000580)={0x40, 0xb, 0x2, "42dc"}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "d53f"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6f}})
mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000008c0)={0x20, 0x8, 0x33, {0x33, 0x2, "c17f7e6c0280e59ac99ae9aee92861e6636ace21409cfa74bf2be20706305911fe7dca2f456d9935bb17cf5ca69b59cec6"}}, &(0x7f0000000900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f0000000a40)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x3, 0x5}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc8, 0x5, 0x80, 0xfff9, 0x51}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x5, 0xff, "b3be9e80", "aceee0f3"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x4, 0x80, 0x5, 0x0, 0x1400, 0x2}}}, &(0x7f0000001000)={0x84, &(0x7f0000000b40)={0x40, 0x1, 0xb7, "bb0edab68940d8e73f5c4f422f59d2a111341563093efe5f60802958d71e4cc8cf9beb9f2edcdc7bec8359083aeeabb0f73e766704ef7dff5d5c7ad43316bbe2ce92592494f4bb053a8a9cf4572422ae1e05e5d4e4aedd25181624922bdc64c9ce51b3a30e371e2bd18ea0cef438c33100172dd06a8160c9ec4429d140f3f5c8788d7b8ed10f086bff00944b45537d45c30f6fae4633917d56de6d1fb3692f26f0158ee432ed18071b4e8f8e4cfcaa7141009f929e6df6"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xb0}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000000cc0)={0x20, 0x0, 0x8, {0x40, 0x80, [0xf00]}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "2416"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0x13}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @local}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, '8w'}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x92}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000fc0)={0x40, 0x21, 0x1, 0xa8}})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xb, 0x2, 0x400, 0x7, 0xa, 0xe}, {0x9, 0x5, 0x0, 0x2, 0x400, 0x1c, 0x4, 0x4}, {0x9, 0x5, 0xc, 0x3, 0x10, 0x8, 0x2, 0x6}}}}}}]}}, 0x0)
write(r1, &(0x7f0000000300)="04080076657273696f6e00020548000004080070726f66696c650007050400666f6f00040600666c61677300070200000000020000000002000000000802000000000200000000020000000004001d", 0x4f)

5m25.724319309s ago: executing program 2 (id=278):
r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x7)
ftruncate(r0, 0x2000000)
fcntl$addseals(r0, 0x409, 0x7)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r0, 0x0, 0x4041, 0x1000000})

5m24.677934083s ago: executing program 2 (id=281):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}, 0x4000}], 0x1, 0x0)

5m24.213831848s ago: executing program 33 (id=281):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}, 0x4000}], 0x1, 0x0)

5m20.343437365s ago: executing program 34 (id=259):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000840)="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", 0x559, r0)

4m23.265597899s ago: executing program 6 (id=537):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, &(0x7f0000000200)={0x2}, 0x14)

4m22.953899819s ago: executing program 6 (id=539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0xfffffff5}}, 0x3c}}, 0x0)

4m22.677944858s ago: executing program 6 (id=542):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"a2e3ad0e090d07f91b5e1b1887f70706d038e7ff7fc6e5539b0d3e0a8b089b3f32356c030890e0879b0a4cc6e70a9b3d4a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07732f0acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973725b36d5b1b7ddd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fde70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399dfc427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe090064f11e4fe852c3f7c4239963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632bcfaaa5ae6c07a236d9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79ca389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e55fc4a41ea4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb0600f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff577050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10e2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180610117a13638e9a14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0036327bd1f4108b7807fb33b72685ec37a2d3f766413a60459516247e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7d78aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e9fbfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741d0fe1c972fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c675879c4ff516a9c861a0e7e65868fcb2bf1cb9aea7f000000000000002b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885594ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dc8cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)

4m22.551741952s ago: executing program 6 (id=543):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0)
mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
syz_usb_connect(0x0, 0x721, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x77, 0x3b, 0xa0, 0x10, 0x134c, 0x4, 0x46e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70f, 0x3, 0x81, 0x21, 0xb8, 0xfe, "", [{{0x9, 0x4, 0x9d, 0x2, 0x2, 0x59, 0x91, 0xda, 0x1, [], [{{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x40, 0xfe, 0x40, [@generic={0x92, 0x7, "d3d0614b9ebef367b2792bcfd35b3123d4fe80a03865e9b67000b68207bbc4f21804bb43db86df7b8c10c092017a3f69d6e298b2538616f4a7a26d8a9cfe715a9398aef1b692631a77792d50db88ab1647445fbf75fc0fd8720c3d3cca0248df399dbcebff2e4f4aca26ff86ef6ab631e98fba1757096f4fcb600a233eb7e276c0198767995a0e59b3d6cb29d82fc1fc"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x5}]}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x61, 0x9, 0x8}}]}}, {{0x9, 0x4, 0xba, 0x9, 0x1, 0x1, 0x1, 0xa0, 0x2, [@generic={0xfe, 0x6, "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"}, @hid_hid={0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0x7fe}}], [{{0x9, 0x5, 0x5, 0x10, 0x40, 0xb1, 0x3, 0x59}}]}}, {{0x9, 0x4, 0xf4, 0x1a, 0xb, 0x25, 0x8b, 0x1b, 0x40, [], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0xd, 0x6, 0x1, [@generic={0xac, 0x10, "2c60727051dfc11cd07d972dfce11a60ff6f50f69acd3b3256176d7d203be32786a6e12908082e57ec6c22e4a3a931dc2e8a585ac1469af118589e218d132c8b462b54da661722115120c5ef149fa1f7293e4ff0a6b075e638e5dbf1713aaa98e6dfc109d278287de7da998f5f7c9ca2b1dd136c2eaec73ef625c0d5a228bfcd5e4b0945f4cf5dab70f140f01869b2af6553c64949b52b1be6096088befeecc489dc0387c91f7d42d02e"}, @generic={0x35, 0x5, "358c7f1d9f633e586bd66284e17fa64391234b09cea945c902d577ee9ed02a4e360083539e8e1b17dd035d22e7620d53f1faed"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x9, 0x7, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x408, 0x6, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x3}, @generic={0x2f, 0x23, "90c33f81e084cdd5f7accf3ccafed5fcf2215d77796e1777feea6cb5aa65a3130878b51b2a59b29406e03ec4f8"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x1, 0x8, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7fff}, @generic={0x92, 0x3, "8acc97eea881766d5019348b7ed280d1df645a72de5995b9c3d9074415cfa6f289a9c6ac746a7dd3c4a8ea5f3a58daacf7a4ea385684751421973532748251b207fac82b127c65346f6c1eccc19e39217a0ec13ba0fe61f1c4bf6ac758c2bbb3bc292dddd7a94488a1760d829f2b23c13dabc3b8417760869d0ba3b61fcd9fa0aeda8a3f39dd081ac711ea24af8f4de1"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x4, 0x1, 0x5e, [@generic={0x92, 0x11, "98068243024415c090117dc52459997a0a3ff8538c2f1f8db59eacf5ac51133917984fc6fb2409da11e4f6666b5b9ac6fe37762742843b622d570a70e6c1a5842927c04525cf6c53f4622d95c3b0136e3cfaa7ea8bf01f5d37f237a189362294143cd06c9669405efaa77813fb940818962d69a15c2e7ffb38f4871d36020156359cdcbb2c9de77b5ca28e43be666037"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x7af, 0x9, 0x6, 0xc, [@generic={0xa8, 0x8, "1e8811bc20a91aaca1f6a74e5c1403ff2639f86243ccce196c7fe7b4f5a7279cd9a40b971ce3c99fb3d771bdb5e4a8cdd93825dfe52f17ddfd194c7cc7af199b5994b1f02fb72ab635860e7b12befbb1bc4b306dcf0da1e8e8bcbd32b1db2ce7d10d1c767b898698619fe4a77a4105b5b448c1bd8d51279492ea862aabdd7a4acc0c6ed411c005600254fc9244391ff2409ebe2f918517b99776350e78cb3ec7ee8eadcbcab4"}, @generic={0xe0, 0x34, "02df1221cd3cffacefa957e19c539dfa5686eebbf44ddc764c55da95bace65ecb1427440c7fbbc1a20f280a103201df61602ce50f0a086defa3f0ccb4677fe77616cca282ce30ed5b26b13f9174ae52aac8fd54acb80b5a759009f21b5173e848f898551d941f32a6ede4a7ea0ef54d2c169c5d5fa1e19585884c800a49c31277c3d6a898cf44e0cc306c12286bac3894a4e44bf1bd25cb4e8f9a116bb24191ec8ddc9505cf90af80e477ef00384ce1dd58bbb35b23c4009bad8877049d27371b5af176c3620b95affa94e56424803590d43fe78cbbe940b395691a57242"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x81, 0x81, 0xff}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x0, 0x3, 0xc, [@generic={0xee, 0x31, "191d48ca41b8072a7e7e785bed3c1c2a53ebdc7858e4b7438d57408b2a3f9fbc870ac63cf4e785de420b078ff89a33c988118ed1eb5f9a164e4ce681e22bb205f71e9d22b6a32d65747e9fbc9774f6415c743d2899731a83627ad8ce918886f77ea67b0b8e127b2614b98722fe76c4ee9cfb45b63f4a475ec6081807b96dcdd0d7f206ce949a98be0a802e22c7030349be3dd7c628b3fed8b779754471656040495924d35a8b5fe20688571983884f911505e971dda667a3bf0fb373a99c932abced4c36ef8b18b3ee54c608f18e72a5f27010e63afee5f48f4c6ad3d9a78bdcb8966671f0cc56ea54e0e2e9"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x8, 0x7b, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xe, 0x7fff}]}}, {{0x9, 0x5, 0x88, 0xc, 0x40, 0x46, 0xc, 0xa}}, {{0x9, 0x5, 0xf96cc1a37bbb90af, 0x10, 0x3ff, 0x4, 0x86, 0x8}}]}}]}}]}}, &(0x7f0000008980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

4m19.394452693s ago: executing program 6 (id=556):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xfffb, 0xffff, 0x1, "8003e3ffff072000"})
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0)
write(r1, &(0x7f0000000000)="2d2519d010bae03d46fdca85c1a1862b9b169e", 0x13)
r2 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r2, &(0x7f00000091c0)=""/16384, 0x4000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x4, 0x69f3, 0x4}, &(0x7f0000000140)=0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003fdfffffffddbdf251d00000008000300d9026c44f227295b1b73d200722047849c581d980708a46a663c93e70506f146fe34b02acca0fb40fb17e3ba174950463264144604cb5842a877663f3b4567f61e19acac847a72bee8a2fa57508d658473fddbb6c63aa5a33dc08cd52bedb3d61af7ac55bdd37136a1dd2962820d44b60f5c2a013e56584fb93e47f7412b88a4caeb1ef15d6d365d5f09000000e505bb39c089f5bba95bb95cf9bb59ef4d028f6c397fd5eef294a7ed74d520f6c80f523534107d76a80abd4281431a00"/218, @ANYRES32=0x0, @ANYBLOB="10002f800c0003800800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r10, r9, <r11=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r8, 0x3b8c, &(0x7f0000000040)={0x30, r11, 0x1, 0x0, 0x0, 0x2080140000, 0x49bd, 0x0})
r12 = syz_open_pts(r0, 0x200)
r13 = dup3(r12, r0, 0x0)
ioctl$TIOCSTI(r13, 0x5412, &(0x7f0000000000)=0xff)

4m17.121805518s ago: executing program 6 (id=563):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x44, 0x2, 0x7}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)

4m16.244154425s ago: executing program 35 (id=563):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_modinfo={0x44, 0x2, 0x7}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)

2m54.415963885s ago: executing program 7 (id=906):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0xf000000, 0x0, 0x20000084}, 0x44)

2m54.108773653s ago: executing program 7 (id=909):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]]}, 0x38}}, 0x20000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001})
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c000280050001003a"], 0xc0}}, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000140))
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1})
ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
recvmmsg(r6, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7e0}], 0x1, 0x40000102, 0x0)
write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="01051c0010f4140006004500002d0000000040119078ac140002ac14000112344e20001990780000800000a497aaf51b06323a78cb2ff6"], 0x37)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x4, 0x0, 0x32315659, 0x4, 0x0, 0x0, 0xb, 0xfeedcafe, 0x3}})
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x79, 0x3004, 0x1})

2m53.094939999s ago: executing program 7 (id=918):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = dup(r2)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c)
r4 = dup(r2)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000740)='team_slave_1\x00', 0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000014c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x2, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000480)={0x15, 0xfffffffffffffe75, 0xfa00, {0xffffffffffffffff, 0xee9, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7}}}, 0x118)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r6, 0x0, 0x0}, 0x10)
sendmsg$xdp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x8081, 0x3, 0x0, 0x811, 0x1}, 0x30, 0x0)
landlock_restrict_self(r7, 0x0)
r8 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r8, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r4, &(0x7f0000000000)='./file0\x00', 0x4)

2m52.779792061s ago: executing program 7 (id=919):
recvmmsg(0xffffffffffffffff, &(0x7f0000007280)=[{{0x0, 0x0, 0x0}, 0xe9}, {{0x0, 0x0, 0x0}, 0x20e8bd}], 0x2, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, r2, 0x47550000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x3, 0x8, 0x0, 0x5, 0xa, 0x98, 0x3, 0x3, 0x0, 0x9, 0x40, 0x0, 0x7, 0x1, 0x7, 0x2, 0xad, 0xda, '\x00', 0x4, 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x4100000000000000)

2m52.401913376s ago: executing program 7 (id=920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x10810)
ioctl$KVM_RUN(r2, 0xae80, 0x20000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)

2m52.309705105s ago: executing program 7 (id=921):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async)
socket$pptp(0x18, 0x1, 0x2)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) (async)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) (async, rerun: 32)
inotify_init1(0x0) (rerun: 32)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x3, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41}) (async, rerun: 32)
r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4000041)
write(r2, &(0x7f0000000500)='udp 2', 0x5) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x4003, 0x5, 0xa001}, 'syz1\x00', 0x40004}) (async)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000000)={0x1, "50fc110000601a4a7e7d2582d97f67232159f4bdb1a73a4f4553bc72cdf6d5d2", 0x3, 0x9, 0x1, 0x200, 0x8}) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3e)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b010203010902"], 0x0) (async)
syz_usb_disconnect(r6)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000087d1e040000000224001100008071090400fe010300030009218100030122280009058103400002c1017dac4b61a5a20a821f47c2556526a62493df8545025ef2daf4002641ac5caf4c3f"], 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f0000000040)=0x401) (async)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) (async)
mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,')

2m43.501626033s ago: executing program 4 (id=971):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0xc005}, 0x20040004)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x44)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r3, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
openat(r4, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1014020}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001854}, 0x90)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000100)=ANY=[@ANYBLOB="740000db4e206c8d369d8297a32661ba18c2426fc0586e524de38a17395543636635a3faec19d2b47192a07f8c6c753895e6b4149955c9c8459a66f6a82c358a26569c3c", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000013140100"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40000014)
r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
read$FUSE(r7, &(0x7f0000005800)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

2m43.270690112s ago: executing program 4 (id=972):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0xf5, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10)

2m43.126798286s ago: executing program 4 (id=973):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r1, 0x0, 0x97, 0x80000001})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000b33000/0x13000)=nil, 0x13000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0xeaffffff, 0x0, 0x0, 0x0, 0x1})

2m42.877622278s ago: executing program 4 (id=975):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)='=\x8d5\x10\xe4\x00\bj\xfb']}, 0x0) (fail_nth: 15)

2m42.463723535s ago: executing program 4 (id=976):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000080)={0x0, 0x3, 0x647, 0x110000, 0x40ffc, 0xc})
mount$cgroup(0xfffffffffffffff6, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x2008010, &(0x7f0000000340)={[{@release_agent={'release_agent', 0x3d, './bus'}}]})

2m42.179822496s ago: executing program 4 (id=977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='tcp 2', 0x5) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)

2m36.326453136s ago: executing program 36 (id=921):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) (async)
socket$pptp(0x18, 0x1, 0x2)
ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x4a) (async)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x1, 0x0) (async, rerun: 32)
inotify_init1(0x0) (rerun: 32)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x3, @multicast1}, {0x2, 0x0, @local}, {0x2, 0x0, @multicast2}, 0xa4, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe41}) (async, rerun: 32)
r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4000041)
write(r2, &(0x7f0000000500)='udp 2', 0x5) (async)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000001c0)={{0x1000, 0x4003, 0x5, 0xa001}, 'syz1\x00', 0x40004}) (async)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_ENUMOUTPUT(r5, 0xc0485630, &(0x7f0000000000)={0x1, "50fc110000601a4a7e7d2582d97f67232159f4bdb1a73a4f4553bc72cdf6d5d2", 0x3, 0x9, 0x1, 0x200, 0x8}) (async)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3e)
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b010203010902"], 0x0) (async)
syz_usb_disconnect(r6)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12011001000000087d1e040000000224001100008071090400fe010300030009218100030122280009058103400002c1017dac4b61a5a20a821f47c2556526a62493df8545025ef2daf4002641ac5caf4c3f"], 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCRMFF(r6, 0xc0085508, &(0x7f0000000040)=0x401) (async)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) (async)
mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,')

2m27.067326144s ago: executing program 37 (id=977):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='tcp 2', 0x5) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/threads\x00', 0x1, 0x0)
write(r2, 0x0, 0x0)

1m54.658223137s ago: executing program 5 (id=1164):
r0 = socket(0x1, 0x5, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r1=>0x0}, &(0x7f0000000200)=0x5)
setreuid(r1, 0x0)
setpriority(0x2, 0xff, 0x0)
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000001440)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x145, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x3, 0x80, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x4c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x2, 0xbd, {0xa, 0x25, 0x25, 0x0, 0xc4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6f, 0xb, 0x1, {0xa, 0x25, 0x25, 0x38d, 0x9, 0x8}}}}}}}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0})

1m53.297876567s ago: executing program 5 (id=1168):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/mtrr\x00', &(0x7f0000000200)={0x8800, 0x0, 0x20}, 0x18) (fail_nth: 3)

1m52.713887407s ago: executing program 5 (id=1172):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000009080)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002740), 0x0, &(0x7f0000002780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000005ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x30}, 0x1000000}, {{0x0, 0x0, 0x0}}], 0x3, 0x40010)

1m52.434007509s ago: executing program 5 (id=1174):
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000040)="2400000058004100f4f90085b3a85c91fddf020000000000000008000280010000000000f6be", 0x26) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYBLOB="9facb638cf60bce4e40f60e81ce54bfc888e63ff78d11efb77824156ad75ebb23364816b165e8676d42c07b359bb18a725de29db1c226035a78417e76aee9d621aa20613f6faf5e718"], 0x38}}, 0x0)

1m52.285945115s ago: executing program 5 (id=1175):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4)
sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c)
recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000001)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0401, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r2, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x4, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1})

1m51.350688173s ago: executing program 5 (id=1180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfff4, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910)

1m36.247279317s ago: executing program 38 (id=1180):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xfff4, &(0x7f0000000480)={&(0x7f0000009680)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910)

5.325957466s ago: executing program 0 (id=1722):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x2000)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1d000, 0x2, 0x158}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000140))
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0xfffffffffffffffd, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r2, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

4.33553608s ago: executing program 0 (id=1733):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x4000], [], [0x400000000000000]})

4.197913032s ago: executing program 1 (id=1735):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x97ff)

3.773750376s ago: executing program 1 (id=1739):
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x5, 0x7}, 0x401, 0x6e6bba, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast2, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
gettid()
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050)
recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000)

2.989414431s ago: executing program 9 (id=1744):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0xefff, 0x0, 0x0, 0x0, 0x1})

2.864355632s ago: executing program 9 (id=1745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x891f}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x64, 0x0, 0x9, 0x2, 0x0, @empty, @broadcast}, {0x16, 0x80, 0x0, @loopback}}}}}}, 0x2e) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'hsr0\x00'}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000001100)={[{@noswap}]}) (async)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1f7)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002a80)={0x2020}, 0x2020) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000001140)=0x5, 0x4) (async)
r6 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000080)=0x12, 0x80000)
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r7, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, @value=0x1013}) (async)
r8 = socket$packet(0x11, 0x3, 0x300) (async)
r9 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x74, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000002c0)={0xb, 0x1, 0x80, "bcb5534299000093a347f1e4810079a74c06000000bf000000000009744f9300", 0x494e4f4b}) (async)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000100)=@req={0x40, 0x0, 0x7fff, 0x5}, 0x10)
ioctl(r6, 0x0, &(0x7f0000000100)="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")
read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0, <r10=>0x0}, 0x2020)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000004280)={[{@gid={'gid', 0x3d, r10}}]})

2.809865938s ago: executing program 1 (id=1746):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)
syz_usb_connect$uac2(0x2, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010102000000081e04003040000102030109027e0003010e4004080b000201062003090400000001012000092401ff03091e00000c2403030304c7020307007f09240502"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0)
write(r1, &(0x7f0000000100)='10', 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020, 0x0, <r2=>0x0}, 0x2020)
fcntl$getownex(r0, 0x10, &(0x7f0000003780)={0x0, <r3=>0x0})
write$FUSE_LK(r1, &(0x7f00000037c0)={0x28, 0xffffffffffffffda, r2, {{0x10001, 0x8000, 0x2, r3}}}, 0x28)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
epoll_create1(0x80000)

2.656166605s ago: executing program 9 (id=1747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000010201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff080002"], 0xc8}}, 0x0)

2.580832835s ago: executing program 9 (id=1748):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000001000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xb, 0x83, 0xfffd, 0x9dff, 0xe, "96ca676bc0d8a891"})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a40)={&(0x7f0000196000/0x1000)=nil, &(0x7f00000bd000/0x4000)=nil, &(0x7f00000b7000/0x4000)=nil, &(0x7f000014b000/0x1000)=nil, &(0x7f000007f000/0x4000)=nil, &(0x7f0000064000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000070000/0x3000)=nil, &(0x7f00001b2000/0x4000)=nil, &(0x7f00001ba000/0x2000)=nil, &(0x7f00000d0000/0x1000)=nil, 0x0}, 0x68)
exit(0x967)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000001480)={0x3, 0x0, @ioapic={0x4, 0x1, 0xfffffffd, 0x15eb95fb, 0x0, [{0x8, 0x7, 0x2, '\x00', 0x5}, {0x7, 0x2, 0x7, '\x00', 0x4}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x8, 0x6, 0x40, '\x00', 0x9}, {0x1, 0x4, 0x4, '\x00', 0x10}, {0x8, 0x6, 0x2, '\x00', 0x2b}, {0x5, 0x7, 0x3, '\x00', 0x4}, {0xb4, 0x3, 0x7f, '\x00', 0x9}, {0x80, 0x3, 0x7, '\x00', 0x4}, {0x9, 0xa, 0xa, '\x00', 0x1b}, {0x2, 0x33, 0xde, '\x00', 0x2}, {0x0, 0xa3, 0x3, '\x00', 0x4}, {0x6, 0x9, 0x6, '\x00', 0x4}, {0x20, 0x3, 0x10, '\x00', 0x7}, {0x6, 0x1, 0xcd, '\x00', 0xc}, {0x8, 0x5, 0x4, '\x00', 0x2}, {0x9, 0x2, 0x1, '\x00', 0x52}, {0x10, 0x5, 0xa0}, {0xca, 0x4, 0x4, '\x00', 0xe6}, {0x50, 0x7, 0x44, '\x00', 0xc}, {0x8d, 0x5, 0x0, '\x00', 0xf3}, {0x6, 0x0, 0x5, '\x00', 0x3}, {0x40, 0xe, 0xa, '\x00', 0x1}, {0x9, 0x5, 0x1, '\x00', 0x7f}]}})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x5, 0x7, 0x16, "b0bf2ebb48c849ac4000"})
r2 = syz_open_pts(r0, 0x0)
epoll_create1(0x0)
r3 = dup3(r2, r0, 0x0)
read$FUSE(r3, &(0x7f0000002f00)={0x2020}, 0x2020)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf252e000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140)
r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000000)={0x210a, r6}, 0x0)
landlock_restrict_self(r7, 0x0)
landlock_restrict_self(r7, 0x0)
read$FUSE(r3, &(0x7f00000008c0)={0x2020}, 0x2020)

1.603073151s ago: executing program 8 (id=1753):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000180)={0xa11, 0x20, "77205a7d6471e3e6caa48d42c5652db1fa7b8ec53534ffbc", {0x0, 0x3}, 0x677ee582}) (async)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = socket(0x2d, 0x2, 0x0)
connect$netlink(r3, &(0x7f0000000080)=@proc={0x2d, 0x0, 0x25dfdbfe, 0x8000}, 0xc)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r5, 0x942e, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.566385513s ago: executing program 9 (id=1754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r1, &(0x7f0000003440)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000480)="562185d6215f1831c8c49d949e282c1aa322d4bca02043fecb5b8f866ffb8d8ade1fffa3d9c9a857e09a8b5f4a6b0231f004e95f732625ccdb862f305dea21456a464912928f225fc39b2db3237b0d972f0378337052df4464cfa28a0da8883b1805eb838aff56a5406c8d6e283dea267885125a75c752c9e5da3dc45dedc05914c9dfef268faec245d745f5538bbe74bc337d69cce2e25e2c414375c9bb5a", 0x9f}, {&(0x7f0000000a40)="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", 0x52a}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x20, 0xf00}}], 0x1, 0x0)

1.402008938s ago: executing program 8 (id=1755):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0xc3ff, 0x2)

1.401694926s ago: executing program 9 (id=1756):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc343, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x80, 0x1, 0x3, 0x1, 0x3, 0x95, {0x9, 0x21, 0x3ff, 0x2, 0x1, {0x22, 0xebe}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x64, 0xd1, 0x9}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$read(0xb, r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x50, @string={0x50, 0x3, "fc7550bf09c501c4231e08354a7b961d9600ca6aa591d96157d5696123176791e75bdebb2ae4c0ad4bd0ab2503f3bcf0b76f1905838aa1312db32aa77dd535a23de04b263c5aef8608cd67de38d9"}}, 0x0, 0x0}, 0x0)
syz_usb_connect(0x1, 0xb60, &(0x7f000000a980)=ANY=[@ANYBLOB="12015002fc9f5108480b032088730102030109024e0b04080600810904"], &(0x7f000000a900)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$FE_SET_FRONTEND(r2, 0x40246f4c, &(0x7f0000000080)={0x30a32d4, 0x0, @vsb={0x13}})
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r1, 0xb2, 0xb8}, &(0x7f0000000040)={'enc=', 'raw', ' hash=', {'blake2b-160-generic\x00'}}, &(0x7f00000001c0)="4331ab5005852f2b4ec9c9937bd4174ea1be0fdc3898f9c62324a8bdc701d8043ed1c0a3aca916f04de416f3a01a5e8a1b06825c5519e5ccae15e7323942e5057a9e9d05533714009e57dde66e30d33c4ed42880de8751bf69562b7204acd031be58344fc9de59e896891fbd8caf099aa58f24d48f0d4c125c4dbcb32f5295fd77b804a84ef25d3cef7602ea798feacff7ef78d163108c9ff308d248f9a8b83fd2a0f4c46a38fa14ecf72c1e0890ea03985f", &(0x7f0000000280)=""/184)

1.325037001s ago: executing program 8 (id=1757):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f0000000540)=""/38, 0x26}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000200)=""/23, 0x17}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0xb919}], 0x4, 0x0, 0x0)

1.22838465s ago: executing program 0 (id=1758):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100")

1.135317202s ago: executing program 0 (id=1759):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400006024000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB="d581ac00f1ffffff38afd1bdfc6833c11078954b050000006a3100"], 0x24}], 0x1}, 0x80)

981.794675ms ago: executing program 0 (id=1760):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x8800)
ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x2000)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1d000, 0x2, 0x158}, &(0x7f00000002c0), &(0x7f00000003c0), &(0x7f0000000140))
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, 0xfffffffffffffffd, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

775.561934ms ago: executing program 1 (id=1761):
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000040)="1b", 0x1}], 0x1)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0xc1403008e42d4348})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x80, 0xe)
write$cgroup_devices(r3, 0x0, 0x9)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "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"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
write(r4, &(0x7f0000000100)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40)

551.695487ms ago: executing program 1 (id=1762):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0x7f, @media='udp\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x4040)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000580)={&(0x7f0000000040)=0xfffffffffffffff9, 0x3, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000540)})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}})
read(r3, &(0x7f0000002280)=""/4103, 0x1007)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r4, 0x40086e8b, &(0x7f0000000040)=0x800)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40091}, 0x48854)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000840)

301.89755ms ago: executing program 8 (id=1763):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}, 0x34565348})

239.505339ms ago: executing program 8 (id=1764):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000))
futex$unlock_wake_list64(&(0x7f0000000040)=0x3, 0x20a, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0xa, 0x8000)

217.123079ms ago: executing program 1 (id=1765):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001f40)=[{{&(0x7f0000001ac0)={0xa, 0x4c20, 0x9, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8001}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001b00)=')', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x3, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x5}, 0x2}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)='q', 0x1}], 0x1}}], 0x2, 0x4008050)
close(0x3)
r1 = memfd_create(&(0x7f0000000040)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x12\x9b\xf4\x01\x9f^\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1j\xd7n\x97]||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xcdq#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6O\x17N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\\\xae\x1c\xbc\xcfNA@\xa1\xa0\x87wL3\xb7\xb0\xa5Z\x9d\xce\xbac\xab\xf5q\xa9\xfd\xebq\xc1b%\'=\xdb3\x15\xbef\xbe1\xae,\xaaS\x955\xa2\x15\x16\rl\x9e\xa5\xca\xf8\x96\xbcg2\xd1\xb3\xc5\xf7\xda\xf1h\xdfB9\xfaFq\xe4\xdf\x19M\xac4\xd8\xa2i\xf7\xe4\' F\xdd\xf9\xa2\xe6\xd4\xaa:\xcf', 0x1)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8, 0x0, <r3=>0x0})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000180)={r5})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4d, 0x2ba8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9})
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000380)={0x200, 0x4f, 0x4, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f00000001c0)={r8})
r9 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000180)={r3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x7, 0xfffffffb, 0xa})
r10 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$apparmor_exec(r10, &(0x7f0000000180)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6[Wk\x8c\xe9\x1e\xf3\xf8-\b\xd4-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd\x10\xd5m\x0e,B{<\xa7:\xc2\njN\f\xf5}\xdes\xab\xc9\xd5\x9b\x80I\x83\x8b\x1c\x00\x9ci\x9a\x03\xdd\xd6t\xe5we\n\xb0(L\x95\xf7P\x1f\x95\x06\x01\xb8\xa3\"\xc7M\x9e\xdfk\xc0j\xea\x1f\xf1\xa4&\x95)\xff\xa5\xe9\b\x80\xf10t\xc5B\xe5an\xb8+;\x86\v_\x18tX\xe5\f\xef\x0fO\x10Y!\a\xad\xe7\x94\x96gPs\'Y!7\xc2\v^wt\xe5\x1a\xdc`\xeeQo\xd2|<\xd9\x84\v\x1c%V8\"\x14\xea(tm\xf6\xa5\xd6\xd7\xd5\xec\x9b\x12\xa6\xd5\x1c\x19\x99\xe7\xa0\t\x1b\xfd\nZ%\xfeC\x06^\'^K\x8c\x97\x13\x9e\x8a\f+\x83c\xc0\xfd}k\x06\xd0\xbfr\xd6\xe5\x84\x8eS\x97\xc7\x01\x00\x13\xe5\xc0\xa7;\x1d\xfegw\xcc\xf6/\xc9\xd8\x14y\x1b\x91\xbb\b\xd6\x12u\xa5\xdd\xdf\x90l\xa7\x8d\xe3,\xfci\xa38\xae~\xe4\x99\x9a\x91Q\xa5{\xce\xbe\x02l\xedS\xf6\xc8\xf0.D&\xdd$\xaee\xe5\x9eE\xbeo\x05\x12\xfb\xea\xef\xa8\xe4\x00\xe1z\xf7\xef\xc3\xae\x90\xd5SC\x88xM\xef\n\x99,F\xd4\x06\x10\x8d~\x17\xfc\xad\x8e\xa1R\x06\x85s\x93\x807\xfc\x84\a\xceU\xe9\xba\x81eF\xab\xf4\xe8O`\xbd\xf0=z[\x82\x13\xe0\x84\x05\xe2C\x93\xe8\x1f'}, 0x17c)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

172.490582ms ago: executing program 0 (id=1766):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x34325241, 0x3, [0x2], [0x80ffff, 0x0, 0x4000], [], [0x400000000000000]})

0s ago: executing program 8 (id=1767):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e010000380100000100")

kernel console output (not intermixed with test programs):

T16602]  dump_stack_lvl+0xe8/0x150
[  409.012557][T16602]  should_fail_ex+0x3eb/0x540
[  409.012580][T16602]  should_failslab+0xa8/0x100
[  409.012599][T16602]  __kmalloc_noprof+0xf9/0x710
[  409.012623][T16602]  ? kobject_get_path+0xc5/0x2f0
[  409.012640][T16602]  ? kobject_get_path+0xc5/0x2f0
[  409.012661][T16602]  kobject_get_path+0xc5/0x2f0
[  409.012682][T16602]  kobject_uevent_env+0x29e/0x9e0
[  409.012708][T16602]  swnode_register+0x4ea/0x590
[  409.012730][T16602]  fwnode_create_software_node+0x194/0x1f0
[  409.012751][T16602]  device_create_managed_software_node+0xce/0x1f0
[  409.012773][T16602]  iommufd_test+0x38a1/0x6360
[  409.012803][T16602]  ? __lock_acquire+0x747/0x2de0
[  409.012827][T16602]  ? __pfx_iommufd_test+0x10/0x10
[  409.012880][T16602]  ? tomoyo_path_number_perm+0x219/0x5f0
[  409.012898][T16602]  ? tomoyo_path_number_perm+0x219/0x5f0
[  409.012916][T16602]  ? lock_acquire+0x115/0x350
[  409.012949][T16602]  ? __might_fault+0xaf/0x130
[  409.012973][T16602]  iommufd_fops_ioctl+0x465/0x600
[  409.012995][T16602]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  409.013015][T16602]  ? __fget_files+0x2a/0x420
[  409.013040][T16602]  ? __fget_files+0x2a/0x420
[  409.013062][T16602]  ? bpf_lsm_file_ioctl+0x9/0x20
[  409.013082][T16602]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  409.013099][T16602]  __se_sys_ioctl+0xfc/0x170
[  409.013125][T16602]  do_syscall_64+0x166/0x520
[  409.013139][T16602]  ? trace_irq_disable+0x3b/0x140
[  409.013161][T16602]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.013177][T16602]  ? clear_bhb_loop+0x70/0xc0
[  409.013196][T16602]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.013212][T16602] RIP: 0033:0x7f5919b9e159
[  409.013226][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.013240][T16602] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  409.013257][T16602] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  409.013280][T16602] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003
[  409.013290][T16602] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  409.013299][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  409.013308][T16602] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  409.013330][T16602]  </TASK>
[  409.425746][T16602] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  409.528748][ T5718] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  409.529041][ T5718] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  409.567100][ T5718] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  409.573317][   T10] usb 9-1: USB disconnect, device number 21
[  409.590021][ T5718] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  409.590159][ T5718] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  409.817227][ T5760] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[  409.980367][ T5760] usb 10-1: unable to get BOS descriptor or descriptor too short
[  409.980607][T16634] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  409.982943][ T5760] usb 10-1: not running at top speed; connect to a high speed hub
[  409.982967][ T5760] usb 10-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40
[  410.004687][ T5760] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  410.004743][ T5760] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  410.056146][ T5760] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.056166][ T5760] usb 10-1: Product: syz
[  410.056177][ T5760] usb 10-1: Manufacturer: syz
[  410.056188][ T5760] usb 10-1: SerialNumber: syz
[  410.221956][ T5760] snd-ua101 10-1:1.1: sample format descriptor not found
[  410.221977][ T5760] snd-ua101 10-1:1.0: sample format descriptor not found
[  410.245239][T16634] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  410.695153][T16662] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  411.253650][T16679] FAULT_INJECTION: forcing a failure.
[  411.253650][T16679] name failslab, interval 1, probability 0, space 0, times 0
[  411.253676][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.1.1336 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  411.253699][T16679] Tainted: [L]=SOFTLOCKUP
[  411.253704][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  411.253715][T16679] Call Trace:
[  411.253721][T16679]  <TASK>
[  411.253728][T16679]  dump_stack_lvl+0xe8/0x150
[  411.253753][T16679]  should_fail_ex+0x3eb/0x540
[  411.253774][T16679]  should_failslab+0xa8/0x100
[  411.253793][T16679]  __kmalloc_noprof+0xf9/0x710
[  411.253817][T16679]  ? sk_prot_alloc+0xe7/0x210
[  411.253833][T16679]  ? sk_prot_alloc+0xe7/0x210
[  411.253853][T16679]  sk_prot_alloc+0xe7/0x210
[  411.253868][T16679]  ? sk_alloc+0x27/0x390
[  411.253885][T16679]  sk_alloc+0x3a/0x390
[  411.253904][T16679]  __netlink_create+0x62/0x260
[  411.254007][T16679]  netlink_create+0x3ca/0x590
[  411.254045][T16679]  ? __pfx_nfnetlink_unbind+0x10/0x10
[  411.254093][T16679]  ? __pfx_nfnetlink_bind+0x10/0x10
[  411.254112][T16679]  __sock_create+0x4b5/0xac0
[  411.254141][T16679]  __sys_socket+0xd6/0x1b0
[  411.254166][T16679]  __x64_sys_socket+0x7a/0x90
[  411.254190][T16679]  do_syscall_64+0x166/0x520
[  411.254205][T16679]  ? trace_irq_disable+0x3b/0x140
[  411.254227][T16679]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.254243][T16679]  ? clear_bhb_loop+0x70/0xc0
[  411.254282][T16679]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  411.254300][T16679] RIP: 0033:0x7f5919b9e159
[  411.254314][T16679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  411.254344][T16679] RSP: 002b:00007f591aaf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  411.254373][T16679] RAX: ffffffffffffffda RBX: 00007f5919e26090 RCX: 00007f5919b9e159
[  411.254385][T16679] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  411.254395][T16679] RBP: 00007f5919c3503b R08: 0000000000000000 R09: 0000000000000000
[  411.254404][T16679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  411.254414][T16679] R13: 00007f5919e26128 R14: 00007f5919e26090 R15: 00007ffdd0b1d608
[  411.254437][T16679]  </TASK>
[  411.760722][T16688] jffs2: notice: (16688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 4 orphan) and 8 of xref (4 dead, 0 orphan) found.
[  411.880664][T16691] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups)
[  412.040985][ T5718] usb 10-1: USB disconnect, device number 12
[  412.648667][ T5718] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  412.787805][ T5718] usb 2-1: device descriptor read/64, error -71
[  412.811571][T16726] bond0: entered promiscuous mode
[  412.811589][T16726] bond0: entered allmulticast mode
[  413.026631][ T5718] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  413.156659][ T5718] usb 2-1: device descriptor read/64, error -71
[  413.267235][ T5718] usb usb2-port1: attempt power cycle
[  413.287647][ T5760] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  413.437406][ T5760] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  413.438277][ T5760] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  413.438307][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.479006][ T5760] usb 9-1: config 0 descriptor??
[  413.579130][T16761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1352'.
[  413.607328][ T5718] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  413.628102][ T5718] usb 2-1: device descriptor read/8, error -71
[  413.819799][T16767] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  413.867839][ T5718] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  413.887737][ T5718] usb 2-1: device descriptor read/8, error -71
[  413.972567][ T5760] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor
[  413.998346][ T5718] usb usb2-port1: unable to enumerate USB device
[  414.017365][ T5760] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.001A/input/input33
[  414.405900][ T5760] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  414.435045][ T5760] usb 9-1: USB disconnect, device number 22
[  414.797687][T16803] fido_id[16803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  415.237024][ T5760] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  415.241087][T16841] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1362'.
[  415.388815][ T5760] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  415.390358][ T5760] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  415.390394][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.457872][ T5760] gspca_main: stv0680-2.14.0 probing 041e:4007
[  415.908413][ T6792] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  415.996657][   T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  416.057729][ T6792] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40
[  416.059391][ T6792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.059435][ T6792] usb 2-1: config 1 interface 1 has no altsetting 0
[  416.094416][T16881] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer.
[  416.122386][ T6792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.122406][ T6792] usb 2-1: Product: syz
[  416.122416][ T6792] usb 2-1: Manufacturer: syz
[  416.122426][ T6792] usb 2-1: SerialNumber: syz
[  416.153380][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  416.154927][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.154949][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.154976][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.206221][   T10] usb 1-1: config 0 descriptor??
[  416.435563][ T6792] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  416.435588][ T6792] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  416.435619][ T6792] usb 2-1: selecting invalid altsetting 0
[  416.435630][ T6792] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  416.435982][ T6792] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  416.503924][ T5760] stv0680 9-1:4.0: Could not get descriptor 0200
[  416.552756][ T6792] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  416.552777][ T6792] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  416.552823][ T6792] usb 2-1: selecting invalid altsetting 0
[  416.552835][ T6792] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  416.553225][ T6792] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  416.602971][ T6792] usb 2-1: 1:1 : format type 0 is detected, processed as PCM
[  416.602990][ T6792] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  416.603019][ T6792] usb 2-1: selecting invalid altsetting 0
[  416.603049][ T6792] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  416.690395][   T10] hid_parser_main: 2 callbacks suppressed
[  416.690413][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690452][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690471][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690489][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690507][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690526][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.690544][   T10] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0
[  416.749758][T16827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.750140][T16827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.794116][   T10] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  416.847555][ T5760] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  416.847572][ T5760] stv0680 9-1:4.0: last error: 9,  command = 0xe
[  416.879794][ T5760] usb 9-1: USB disconnect, device number 23
[  416.913016][   T10] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00
[  417.040815][ T6792] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  417.069141][ T6792] usb 2-1: USB disconnect, device number 3
[  417.184769][T16934] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1372'.
[  417.224269][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  417.526840][T16870] cp2112 0003:10C4:EA90.001B: Error starting transaction: -38
[  417.548859][   T10] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71
[  417.573559][   T10] usb 1-1: USB disconnect, device number 3
[  417.602607][T16946] FAULT_INJECTION: forcing a failure.
[  417.602607][T16946] name failslab, interval 1, probability 0, space 0, times 0
[  417.602633][T16946] CPU: 0 UID: 0 PID: 16946 Comm: syz.9.1374 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  417.602655][T16946] Tainted: [L]=SOFTLOCKUP
[  417.602661][T16946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  417.602672][T16946] Call Trace:
[  417.602679][T16946]  <TASK>
[  417.602686][T16946]  dump_stack_lvl+0xe8/0x150
[  417.602712][T16946]  should_fail_ex+0x3eb/0x540
[  417.602735][T16946]  should_failslab+0xa8/0x100
[  417.602754][T16946]  __kmalloc_cache_noprof+0x9e/0x600
[  417.602780][T16946]  ? __kmalloc_cache_noprof+0x148/0x600
[  417.602803][T16946]  ? kvm_dev_ioctl+0xafb/0x1770
[  417.602853][T16946]  ? kvm_dev_ioctl+0xafb/0x1770
[  417.602881][T16946]  kvm_dev_ioctl+0xafb/0x1770
[  417.602910][T16946]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  417.602932][T16946]  ? __fget_files+0x2a/0x420
[  417.602957][T16946]  ? bpf_lsm_file_ioctl+0x9/0x20
[  417.602978][T16946]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  417.603001][T16946]  __se_sys_ioctl+0xfc/0x170
[  417.603029][T16946]  do_syscall_64+0x166/0x520
[  417.603045][T16946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.603063][T16946]  ? clear_bhb_loop+0x70/0xc0
[  417.603083][T16946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.603099][T16946] RIP: 0033:0x7f01c819e159
[  417.603115][T16946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  417.603129][T16946] RSP: 002b:00007f01c63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  417.603147][T16946] RAX: ffffffffffffffda RBX: 00007f01c8425fa0 RCX: 00007f01c819e159
[  417.603159][T16946] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009
[  417.603169][T16946] RBP: 00007f01c823503b R08: 0000000000000000 R09: 0000000000000000
[  417.603180][T16946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.603190][T16946] R13: 00007f01c8426038 R14: 00007f01c8425fa0 R15: 00007fffaf2ed2e8
[  417.603214][T16946]  </TASK>
[  417.919281][T16957] tipc: Can't bind to reserved service type 0
[  417.983843][T16971] : entered promiscuous mode
[  418.416940][ T5760] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  418.552681][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1382'.
[  418.570751][ T5760] usb 9-1: Using ep0 maxpacket: 8
[  418.572644][ T5760] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03
[  418.575174][ T5760] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.575190][ T5760] usb 9-1: Product: syz
[  418.575200][ T5760] usb 9-1: Manufacturer: syz
[  418.575211][ T5760] usb 9-1: SerialNumber: syz
[  418.624721][ T5760] usb 9-1: config 0 descriptor??
[  418.653418][ T5760] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  418.653466][ T5760] dvb-usb: bulk message failed: -22 (2/0)
[  418.653477][ T5760] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  418.655608][ T5760] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver)
[  418.655642][ T5760] usb 9-1: media controller created
[  418.709088][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  418.777171][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  418.860963][T17010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  418.861292][T17010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  418.887318][   T10] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  418.894571][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.894590][   T10] usb 1-1: Product: syz
[  418.894601][   T10] usb 1-1: Manufacturer: syz
[  418.894611][   T10] usb 1-1: SerialNumber: syz
[  418.961354][   T10] usb 1-1: USB2VGA dongle found at address 4
[  418.983249][   T10] usb 1-1: Allocated 8 output buffers
[  419.012371][ T5760] dvb-usb: bulk message failed: -22 (1/0)
[  419.040021][T17022] FAULT_INJECTION: forcing a failure.
[  419.040021][T17022] name failslab, interval 1, probability 0, space 0, times 0
[  419.040046][T17022] CPU: 0 UID: 0 PID: 17022 Comm: syz.1.1384 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.040065][T17022] Tainted: [L]=SOFTLOCKUP
[  419.040073][T17022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  419.040083][T17022] Call Trace:
[  419.040089][T17022]  <TASK>
[  419.040096][T17022]  dump_stack_lvl+0xe8/0x150
[  419.040121][T17022]  should_fail_ex+0x3eb/0x540
[  419.040141][T17022]  should_failslab+0xa8/0x100
[  419.040157][T17022]  ? __kernfs_new_node+0xe6/0x980
[  419.040181][T17022]  kmem_cache_alloc_noprof+0x9c/0x600
[  419.040203][T17022]  ? __kernfs_new_node+0xe6/0x980
[  419.040230][T17022]  __kernfs_new_node+0xe6/0x980
[  419.040251][T17022]  ? lock_acquire+0x115/0x350
[  419.040278][T17022]  ? __pfx___kernfs_new_node+0x10/0x10
[  419.040301][T17022]  ? kernfs_root+0x1c/0x230
[  419.040345][T17022]  ? kernfs_root+0x1c/0x230
[  419.040367][T17022]  ? kernfs_root+0x1c/0x230
[  419.040388][T17022]  ? kernfs_root+0x1c/0x230
[  419.040414][T17022]  kernfs_new_node+0xea/0x140
[  419.040441][T17022]  __kernfs_create_file+0x4b/0x2e0
[  419.040462][T17022]  sysfs_add_file_mode_ns+0x237/0x300
[  419.040488][T17022]  sysfs_create_file_ns+0x12b/0x1b0
[  419.040509][T17022]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  419.040528][T17022]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  419.040555][T17022]  ? device_create_file+0xf4/0x1b0
[  419.040575][T17022]  device_add+0x5bf/0xb80
[  419.040595][T17022]  tty_register_device_attr+0x425/0x990
[  419.040618][T17022]  ? __pfx_tty_register_device_attr+0x10/0x10
[  419.040643][T17022]  ? tty_port_register_device+0xca/0x150
[  419.040664][T17022]  rfcomm_dev_ioctl+0x1b6c/0x21c0
[  419.040692][T17022]  ? kasan_quarantine_put+0xbb/0x1f0
[  419.040715][T17022]  ? __pfx_rfcomm_dev_ioctl+0x10/0x10
[  419.040742][T17022]  ? tomoyo_path_number_perm+0x219/0x5f0
[  419.040760][T17022]  ? tomoyo_path_number_perm+0x219/0x5f0
[  419.040782][T17022]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  419.040802][T17022]  sock_do_ioctl+0x101/0x320
[  419.040826][T17022]  ? __pfx_sock_do_ioctl+0x10/0x10
[  419.040865][T17022]  ? hook_file_ioctl+0x1f2/0x600
[  419.040893][T17022]  sock_ioctl+0x57a/0x7e0
[  419.040914][T17022]  ? __pfx_sock_ioctl+0x10/0x10
[  419.040935][T17022]  ? __fget_files+0x2a/0x420
[  419.040954][T17022]  ? __fget_files+0x3a2/0x420
[  419.040973][T17022]  ? __fget_files+0x2a/0x420
[  419.040995][T17022]  ? bpf_lsm_file_ioctl+0x9/0x20
[  419.041014][T17022]  ? __pfx_sock_ioctl+0x10/0x10
[  419.041034][T17022]  __se_sys_ioctl+0xfc/0x170
[  419.041060][T17022]  do_syscall_64+0x166/0x520
[  419.041074][T17022]  ? trace_irq_disable+0x3b/0x140
[  419.041097][T17022]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.041113][T17022]  ? clear_bhb_loop+0x70/0xc0
[  419.041133][T17022]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.041148][T17022] RIP: 0033:0x7f5919b9e159
[  419.041162][T17022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.041176][T17022] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  419.041194][T17022] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  419.041206][T17022] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004
[  419.041217][T17022] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  419.041227][T17022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  419.041237][T17022] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  419.041261][T17022]  </TASK>
[  419.374108][ T5760] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver'
[  419.493325][ T5760] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input34
[  419.520059][ T5760] dvb-usb: schedule remote query interval to 50 msecs.
[  419.520080][ T5760] dvb-usb: bulk message failed: -22 (2/0)
[  419.520091][ T5760] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected.
[  419.565112][ T5760] usb 9-1: USB disconnect, device number 24
[  419.608342][T17025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.845703][ T5760] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected.
[  420.008670][   T10] usb 1-1: Failed to early initialize device
[  420.040887][ T5718] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  420.065188][   T10] usb 1-1: USB disconnect, device number 4
[  420.100272][T17054] nvmet: adding nsid 1 to subsystem testsubsys
[  420.201161][ T5718] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  420.223413][ T5718] usb 10-1: config index 0 descriptor too short (expected 23569, got 27)
[  420.223446][ T5718] usb 10-1: config 0 has an invalid interface number: 153 but max is 0
[  420.223461][ T5718] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  420.223475][ T5718] usb 10-1: config 0 has no interface number 0
[  420.223496][ T5718] usb 10-1: too many endpoints for config 0 interface 153 altsetting 170: 187, using maximum allowed: 30
[  420.223522][ T5718] usb 10-1: config 0 interface 153 altsetting 170 has 0 endpoint descriptors, different from the interface descriptor's value: 187
[  420.223543][ T5718] usb 10-1: config 0 interface 153 has no altsetting 0
[  420.265273][ T5718] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  420.265292][ T5718] usb 10-1: Manufacturer: syz
[  420.335176][ T5718] usb 10-1: config 0 descriptor??
[  420.399461][T17071] device-mapper: ioctl: Target spec extends beyond end of parameters
[  420.399474][T17071] device-mapper: ioctl: unable to find target
[  420.919960][T17091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'.
[  421.180920][ T5718] igorplugusb 10-1:0.153: incorrect number of endpoints
[  421.210719][ T5718] usb 10-1: USB disconnect, device number 13
[  421.995750][T17136] FAULT_INJECTION: forcing a failure.
[  421.995750][T17136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  421.995779][T17136] CPU: 0 UID: 0 PID: 17136 Comm: syz.1.1401 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  421.995803][T17136] Tainted: [L]=SOFTLOCKUP
[  421.995810][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  421.995820][T17136] Call Trace:
[  421.995829][T17136]  <TASK>
[  421.995836][T17136]  dump_stack_lvl+0xe8/0x150
[  421.995862][T17136]  should_fail_ex+0x3eb/0x540
[  421.995884][T17136]  _copy_to_user+0x31/0xb0
[  421.995907][T17136]  simple_read_from_buffer+0xe1/0x170
[  421.995937][T17136]  proc_fail_nth_read+0x1bb/0x230
[  421.995965][T17136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  421.995992][T17136]  ? rw_verify_area+0x24a/0x4c0
[  421.996015][T17136]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  421.996041][T17136]  vfs_read+0x213/0xa80
[  421.996067][T17136]  ? __pfx___mutex_lock+0x10/0x10
[  421.996084][T17136]  ? __pfx_vfs_read+0x10/0x10
[  421.996107][T17136]  ? __fget_files+0x2a/0x420
[  421.996131][T17136]  ? __fget_files+0x3a2/0x420
[  421.996150][T17136]  ? __fget_files+0x2a/0x420
[  421.996177][T17136]  ksys_read+0x150/0x270
[  421.996201][T17136]  ? __pfx_ksys_read+0x10/0x10
[  421.996231][T17136]  do_syscall_64+0x166/0x520
[  421.996246][T17136]  ? trace_irq_disable+0x3b/0x140
[  421.996270][T17136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.996287][T17136]  ? clear_bhb_loop+0x70/0xc0
[  421.996307][T17136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.996324][T17136] RIP: 0033:0x7f5919b5e98e
[  421.996339][T17136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  421.996354][T17136] RSP: 002b:00007f591ab10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  421.996372][T17136] RAX: ffffffffffffffda RBX: 00007f591ab116c0 RCX: 00007f5919b5e98e
[  421.996384][T17136] RDX: 000000000000000f RSI: 00007f591ab110a0 RDI: 0000000000000003
[  421.996395][T17136] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  421.996405][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  421.996415][T17136] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  421.996440][T17136]  </TASK>
[  422.305004][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1402'.
[  422.575098][T17154] FAULT_INJECTION: forcing a failure.
[  422.575098][T17154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  422.575123][T17154] CPU: 0 UID: 0 PID: 17154 Comm: syz.9.1406 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.575142][T17154] Tainted: [L]=SOFTLOCKUP
[  422.575148][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  422.575157][T17154] Call Trace:
[  422.575163][T17154]  <TASK>
[  422.575170][T17154]  dump_stack_lvl+0xe8/0x150
[  422.575195][T17154]  should_fail_ex+0x3eb/0x540
[  422.575215][T17154]  _copy_from_user+0x2d/0xb0
[  422.575235][T17154]  input_event_from_user+0xb1/0x290
[  422.575332][T17154]  ? __pfx_input_event_from_user+0x10/0x10
[  422.575361][T17154]  evdev_write+0x2c7/0x4c0
[  422.575400][T17154]  ? __lock_acquire+0x747/0x2de0
[  422.575426][T17154]  ? __pfx_evdev_write+0x10/0x10
[  422.575447][T17154]  ? bpf_lsm_file_permission+0x9/0x20
[  422.575465][T17154]  ? security_file_permission+0x75/0x260
[  422.575490][T17154]  ? rw_verify_area+0x203/0x4c0
[  422.575518][T17154]  ? __pfx_evdev_write+0x10/0x10
[  422.575539][T17154]  vfs_write+0x296/0xba0
[  422.575564][T17154]  ? __pfx_vfs_write+0x10/0x10
[  422.575586][T17154]  ? __fget_files+0x2a/0x420
[  422.575606][T17154]  ? __fget_files+0x2a/0x420
[  422.575624][T17154]  ? __fget_files+0x3a2/0x420
[  422.575642][T17154]  ? __fget_files+0x2a/0x420
[  422.575666][T17154]  ksys_write+0x150/0x270
[  422.575688][T17154]  ? __pfx_ksys_write+0x10/0x10
[  422.575716][T17154]  do_syscall_64+0x166/0x520
[  422.575729][T17154]  ? trace_irq_disable+0x3b/0x140
[  422.575751][T17154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.575784][T17154]  ? clear_bhb_loop+0x70/0xc0
[  422.575803][T17154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.575819][T17154] RIP: 0033:0x7f01c819e159
[  422.575834][T17154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.575848][T17154] RSP: 002b:00007f01c63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  422.575864][T17154] RAX: ffffffffffffffda RBX: 00007f01c8425fa0 RCX: 00007f01c819e159
[  422.575876][T17154] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003
[  422.575887][T17154] RBP: 00007f01c63f6090 R08: 0000000000000000 R09: 0000000000000000
[  422.575897][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  422.575906][T17154] R13: 00007f01c8426038 R14: 00007f01c8425fa0 R15: 00007fffaf2ed2e8
[  422.575930][T17154]  </TASK>
[  423.123480][T17167] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000
[  423.181429][T17173] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000
[  423.238361][T17167] netdevsim netdevsim9 
3
0
: renamed from netdevsim0 (while UP)
[  423.523311][T17190] syzkaller1: entered promiscuous mode
[  423.523330][T17190] syzkaller1: entered allmulticast mode
[  423.597783][ T5718] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  423.750673][ T5718] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  423.752053][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.778018][ T5718] usb 9-1: config 0 descriptor??
[  423.840082][T17204] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'.
[  424.007758][ T5718] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  424.277763][ T5718] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1
[  424.277782][ T5718] [drm] Initialized udl on minor 1
[  424.442103][ T5718] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  424.442381][ T5718] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  424.485184][   T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  424.486234][   T10] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  424.486741][   T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  424.514771][ T5718] usb 9-1: USB disconnect, device number 25
[  424.625532][T17179] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  425.303245][T17281] cgroup: none used incorrectly
[  425.816690][T17300] overlay: ./file0 is not a directory
[  426.815341][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1423'.
[  427.246681][ T5760] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[  427.331203][T17359] MTD: Couldn't look up 'mtd0/file0': -2
[  427.398535][ T5760] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  427.410576][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.415198][ T5760] usb 9-1: config 0 descriptor??
[  427.578090][ T5718] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  427.637755][ T5760] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  427.737105][ T5718] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  427.737985][ T5718] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  427.738021][ T5718] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  427.738063][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.742810][T17361] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  427.769643][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  427.901192][ T5760] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1
[  427.901212][ T5760] [drm] Initialized udl on minor 1
[  428.049925][ T5760] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  428.050225][ T5760] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  428.082623][ T5760] usb 9-1: USB disconnect, device number 26
[  428.132738][ T5718] usb 2-1: USB disconnect, device number 4
[  428.243594][   T10] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  428.517453][T17441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'.
[  428.739206][ T1399] IPVS: starting estimator thread 0...
[  428.826457][T17462] IPVS: using max 41 ests per chain, 98400 per kthread
[  428.876542][    T9] usb 10-1: new low-speed USB device number 14 using dummy_hcd
[  428.954824][T17471] FAULT_INJECTION: forcing a failure.
[  428.954824][T17471] name failslab, interval 1, probability 0, space 0, times 0
[  428.954857][T17471] CPU: 0 UID: 0 PID: 17471 Comm: syz.0.1440 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  428.954879][T17471] Tainted: [L]=SOFTLOCKUP
[  428.954886][T17471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  428.954896][T17471] Call Trace:
[  428.954903][T17471]  <TASK>
[  428.954910][T17471]  dump_stack_lvl+0xe8/0x150
[  428.954937][T17471]  should_fail_ex+0x3eb/0x540
[  428.954959][T17471]  should_failslab+0xa8/0x100
[  428.954983][T17471]  __kmalloc_cache_noprof+0x9e/0x600
[  428.955009][T17471]  ? allocate_file_region_entries+0x217/0x610
[  428.955031][T17471]  ? allocate_file_region_entries+0x217/0x610
[  428.955058][T17471]  allocate_file_region_entries+0x217/0x610
[  428.955091][T17471]  ? __pfx_allocate_file_region_entries+0x10/0x10
[  428.955121][T17471]  __vma_reservation_common+0x7b3/0x960
[  428.955151][T17471]  alloc_hugetlb_folio+0x2a5/0x940
[  428.955171][T17471]  ? trace_contention_end+0x3d/0x140
[  428.955191][T17471]  ? __pfx_alloc_hugetlb_folio+0x10/0x10
[  428.955209][T17471]  ? __filemap_get_folio_mpol+0xcfe/0xff0
[  428.955229][T17471]  ? hugetlb_no_page+0x139e/0x16f0
[  428.955252][T17471]  hugetlb_no_page+0xea5/0x16f0
[  428.955280][T17471]  ? huge_pte_alloc+0x482/0x630
[  428.955302][T17471]  hugetlb_fault+0x776/0x1440
[  428.955322][T17471]  ? __pfx___css_rstat_updated+0x10/0x10
[  428.955378][T17471]  ? __pfx_hugetlb_fault+0x10/0x10
[  428.955406][T17471]  ? count_memcg_event_mm+0x21/0x260
[  428.955432][T17471]  handle_mm_fault+0x24fc/0x3750
[  428.955459][T17471]  ? handle_mm_fault+0xf1/0x3750
[  428.955478][T17471]  ? mt_find+0x186/0x630
[  428.955547][T17471]  ? __pfx_mt_find+0x10/0x10
[  428.955568][T17471]  ? __pfx_handle_mm_fault+0x10/0x10
[  428.955589][T17471]  ? rcu_is_watching+0x16/0xb0
[  428.955606][T17471]  ? __up_read+0x29c/0x930
[  428.955628][T17471]  ? __pfx___up_read+0x10/0x10
[  428.955648][T17471]  ? __get_user_pages+0x15b9/0x2750
[  428.955670][T17471]  __get_user_pages+0x1670/0x2750
[  428.955715][T17471]  populate_vma_page_range+0x2be/0x3c0
[  428.955735][T17471]  ? __pfx_populate_vma_page_range+0x10/0x10
[  428.955756][T17471]  ? down_read+0x2b9/0x320
[  428.955777][T17471]  __mm_populate+0x25f/0x390
[  428.955796][T17471]  ? __pfx___mm_populate+0x10/0x10
[  428.955822][T17471]  vm_mmap_pgoff+0x353/0x4e0
[  428.955842][T17471]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  428.955873][T17471]  ? hugetlb_file_setup+0x42c/0x630
[  428.955929][T17471]  ksys_mmap_pgoff+0x57d/0x760
[  428.955955][T17471]  do_syscall_64+0x166/0x520
[  428.955969][T17471]  ? trace_irq_disable+0x3b/0x140
[  428.955993][T17471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.956010][T17471]  ? clear_bhb_loop+0x70/0xc0
[  428.956030][T17471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.956047][T17471] RIP: 0033:0x7f229699e159
[  428.956062][T17471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.956076][T17471] RSP: 002b:00007f2297808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  428.956094][T17471] RAX: ffffffffffffffda RBX: 00007f2296c25fa0 RCX: 00007f229699e159
[  428.956106][T17471] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  428.956117][T17471] RBP: 00007f2297808090 R08: ffffffffffffffff R09: 0000000000000000
[  428.956128][T17471] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002
[  428.956138][T17471] R13: 00007f2296c26038 R14: 00007f2296c25fa0 R15: 00007fff0b5b7e08
[  428.956164][T17471]  </TASK>
[  428.983204][ T5718] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[  429.048857][    T9] usb 10-1: Invalid ep0 maxpacket: 32
[  429.142583][ T5718] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  429.155278][ T5718] usb 9-1: config 0 has no interfaces?
[  429.172608][ T5718] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  429.172629][ T5718] usb 9-1: SerialNumber: syz
[  429.188847][    T9] usb 10-1: new low-speed USB device number 15 using dummy_hcd
[  429.413537][    T9] usb 10-1: Invalid ep0 maxpacket: 32
[  429.423930][    T9] usb usb10-port1: attempt power cycle
[  429.440403][ T5718] usb 9-1: config 0 descriptor??
[  429.733982][T17485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'.
[  429.768821][    T9] usb 10-1: new low-speed USB device number 16 using dummy_hcd
[  429.789642][    T9] usb 10-1: Invalid ep0 maxpacket: 32
[  429.918549][    T9] usb 10-1: new low-speed USB device number 17 using dummy_hcd
[  429.950645][    T9] usb 10-1: Invalid ep0 maxpacket: 32
[  429.953513][    T9] usb usb10-port1: unable to enumerate USB device
[  430.097992][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  430.250418][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  430.251465][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.254716][    T9] usb 2-1: config 0 descriptor??
[  430.461082][    T9] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  430.683881][    T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  430.683902][    T9] [drm] Initialized udl on minor 1
[  430.865772][    T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  430.866067][    T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  430.913719][    T9] usb 2-1: USB disconnect, device number 5
[  430.923450][ T5718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  431.036239][ T5621] Bluetooth: hci6: unexpected event 0x03 length: 1 < 11
[  431.349379][T17529] netlink: Conntrack attr has 8 unknown bytes
[  431.349407][T17529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  431.604744][T17541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1454'.
[  431.608063][ T5621] Bluetooth: hci6: command tx timeout
[  431.779198][ T2222] usb 9-1: USB disconnect, device number 27
[  432.282848][T17585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1461'.
[  432.282879][T17585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1461'.
[  432.437736][ T2222] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  432.589115][ T2222] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  432.605878][ T2222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  432.624298][ T2222] usb 10-1: config 0 descriptor??
[  432.847961][ T2222] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  432.852767][T17605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1464'.
[  433.050650][ T2222] [drm:udl_init] *ERROR* Selecting channel failed
[  433.219807][ T2222] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1
[  433.219826][ T2222] [drm] Initialized udl on minor 1
[  433.220952][ T2222] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  433.222283][ T2222] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  433.269582][   T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  433.270160][   T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  433.270286][   T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  433.270728][ T2222] usb 10-1: USB disconnect, device number 18
[  433.608166][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  433.758354][   T10] usb 2-1: Using ep0 maxpacket: 8
[  433.782148][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  433.782184][   T10] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=14.00
[  433.783458][   T10] usb 2-1: config 9 has an invalid interface number: 36 but max is 1
[  433.783476][   T10] usb 2-1: config 9 has an invalid interface number: 71 but max is 1
[  433.783490][   T10] usb 2-1: config 9 has no interface number 0
[  433.783501][   T10] usb 2-1: config 9 has no interface number 1
[  433.783526][   T10] usb 2-1: config 9 interface 36 has no altsetting 0
[  433.783539][   T10] usb 2-1: config 9 interface 71 has no altsetting 0
[  433.842659][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.842678][   T10] usb 2-1: Product: syz
[  433.842689][   T10] usb 2-1: Manufacturer: syz
[  433.842699][   T10] usb 2-1: SerialNumber: syz
[  434.157120][ T5718] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  434.288698][ T2222] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  434.308404][ T5718] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  434.310073][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.314907][ T5718] usb 1-1: config 0 descriptor??
[  434.393059][T17672] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.442828][ T2222] usb 9-1: Using ep0 maxpacket: 16
[  434.444481][ T2222] usb 9-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  434.446277][ T2222] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  434.473442][ T2222] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  434.473484][ T2222] usb 9-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.473500][ T2222] usb 9-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  434.473541][ T2222] usb 9-1: config 7 interface 0 has no altsetting 0
[  434.473566][ T2222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.555797][ T5718] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  434.600679][T17672] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.674685][T17672] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.777412][T17672] netdevsim netdevsim9 
3
0
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  434.815192][ T5718] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1
[  434.815212][ T5718] [drm] Initialized udl on minor 1
[  434.816107][T17691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.846066][T17691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.948222][ T2222] usbhid 9-1:7.0: can't add hid device: -71
[  434.948312][ T2222] usbhid 9-1:7.0: probe with driver usbhid failed with error -71
[  434.982445][ T2222] usb 9-1: USB disconnect, device number 28
[  435.595674][T17728] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1475'.
[  436.183556][T17746] comedi comedi4: bad chanlist[0]=0x04080003 chan=3 range length=2
[  436.196478][ T6792] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  436.311498][   T10] lg-vl600 2-1:9.36: bad CDC descriptors
[  436.348967][ T6792] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  436.352571][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  436.353305][ T6792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.397085][ T6792] usb 10-1: config 0 descriptor??
[  436.414181][   T10] usb 2-1: USB disconnect, device number 6
[  436.618063][ T6792] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  436.718558][T17771] kAFS: unable to lookup cell 'syze�@�s0'
[  437.120512][T17786] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  437.384900][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1484'.
[  438.295361][T17826] autofs: Unknown parameter './file1'
[  438.324522][T17826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'.
[  438.410423][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  438.526608][ T5760] usb 9-1: new full-speed USB device number 29 using dummy_hcd
[  438.651883][T17843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1494'.
[  438.651925][T17843] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  438.711105][ T5760] usb 9-1: unable to get BOS descriptor or descriptor too short
[  438.724470][ T5760] usb 9-1: not running at top speed; connect to a high speed hub
[  438.724494][ T5760] usb 9-1: New USB device found, idVendor=0421, idProduct=0327, bcdDevice=8b.96
[  438.748250][ T5760] usb 9-1: config 7 has an invalid interface number: 62 but max is 0
[  438.748269][ T5760] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  438.748305][ T5760] usb 9-1: config 7 has no interface number 0
[  438.748327][ T5760] usb 9-1: config 7 interface 62 has no altsetting 0
[  438.777660][ T5760] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.777678][ T5760] usb 9-1: Product: syz
[  438.777688][ T5760] usb 9-1: Manufacturer: syz
[  438.777698][ T5760] usb 9-1: SerialNumber: syz
[  439.038998][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.039363][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.069349][T17830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  439.069754][T17830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  439.219578][ T5760] cdc_phonet 9-1:7.62: skipping garbage
[  439.219600][ T5760] cdc_phonet 9-1:7.62: probe with driver cdc_phonet failed with error -22
[  439.247040][ T5760] usb 9-1: USB disconnect, device number 29
[  439.564366][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  439.838784][T17885] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  439.931392][ T5718] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92
[  439.931736][ T5718] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  439.958028][ T6792] [drm:udl_init] *ERROR* Selecting channel failed
[  439.985379][ T5718] usb 1-1: USB disconnect, device number 5
[  440.041803][ T6792] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2
[  440.041825][ T6792] [drm] Initialized udl on minor 2
[  440.064121][ T6792] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  440.064416][ T6792] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  440.102741][ T6792] usb 10-1: USB disconnect, device number 19
[  440.121198][   T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  440.142220][   T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  440.170079][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  440.170122][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  440.309734][T17902] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  440.707362][ T6792] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  440.857003][ T6792] usb 10-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  440.857880][ T6792] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  440.857912][ T6792] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  440.857977][ T6792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.862767][ T6792] usb 10-1: config 0 descriptor??
[  440.887590][ T5718] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  440.938045][ T6792] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  441.087087][ T5718] usb 1-1: Using ep0 maxpacket: 32
[  441.087595][ T5718] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  441.088480][ T5718] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  441.088498][ T5718] usb 1-1: config 0 has no interface number 0
[  441.090192][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.090209][ T5718] usb 1-1: Product: syz
[  441.090219][ T5718] usb 1-1: Manufacturer: syz
[  441.090248][ T5718] usb 1-1: SerialNumber: syz
[  441.162304][ T5718] usb 1-1: config 0 descriptor??
[  441.180095][ T5718] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  441.215722][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  441.391460][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  441.419702][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  441.466118][T17973] jffs2: notice: (17973) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 4 orphan) and 8 of xref (4 dead, 0 orphan) found.
[  441.616426][   T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  441.654560][T17939] tipc: Enabling <ib:lo> not permitted
[  441.654601][T17939] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  441.777006][   T10] usb 9-1: Using ep0 maxpacket: 16
[  441.777670][   T10] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  441.778767][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.778790][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.778807][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  441.778855][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.867290][   T10] usb 9-1: config 0 descriptor??
[  442.321470][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001C/input/input35
[  442.454745][   T10] microsoft 0003:045E:07DA.001C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  442.504437][   T10] usb 9-1: USB disconnect, device number 30
[  442.568741][T18001] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  442.791206][T18005] fido_id[18005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  443.056465][ T6792] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  443.208472][ T6792] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  443.210613][ T6792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.214617][ T6792] usb 2-1: config 0 descriptor??
[  443.393698][    T9] usb 10-1: USB disconnect, device number 20
[  443.406813][   T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[  443.490278][ T6792] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  443.491276][ T6792] [drm:udl_init] *ERROR* Selecting channel failed
[  443.522138][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  443.575073][   T10] usb 9-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  443.586250][   T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  443.586288][   T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  443.586559][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.624923][ T2222] usb 1-1: USB disconnect, device number 6
[  443.673141][ T6792] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  443.673163][ T6792] [drm] Initialized udl on minor 1
[  443.675906][ T6792] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  443.676194][ T6792] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  443.678557][   T10] usb 9-1: config 0 descriptor??
[  443.734320][   T10] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  443.771622][ T2222] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  443.815049][ T6792] usb 2-1: USB disconnect, device number 7
[  443.830319][ T2222] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  443.830905][ T2222] quatech2 1-1:0.51: device disconnected
[  443.885721][ T5718] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  444.301717][T18092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  444.305360][T18092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  444.525331][T18099] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3)
[  444.598348][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1516'.
[  444.830331][T18107] netlink: 'syz.1.1517': attribute type 11 has an invalid length.
[  445.256460][ T6792] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  445.418952][ T6792] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  445.421130][ T6792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.453688][ T6792] usb 2-1: config 0 descriptor??
[  445.506613][ T2222] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[  445.551355][T18139] FAULT_INJECTION: forcing a failure.
[  445.551355][T18139] name failslab, interval 1, probability 0, space 0, times 0
[  445.551387][T18139] CPU: 0 UID: 0 PID: 18139 Comm: syz.0.1522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  445.551439][T18139] Tainted: [L]=SOFTLOCKUP
[  445.551445][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  445.551460][T18139] Call Trace:
[  445.551467][T18139]  <TASK>
[  445.551481][T18139]  dump_stack_lvl+0xe8/0x150
[  445.551512][T18139]  should_fail_ex+0x3eb/0x540
[  445.551534][T18139]  should_failslab+0xa8/0x100
[  445.551552][T18139]  ? security_file_alloc+0x34/0x310
[  445.551594][T18139]  kmem_cache_alloc_noprof+0x9c/0x600
[  445.551626][T18139]  ? rcu_is_watching+0x16/0xb0
[  445.551644][T18139]  ? security_file_alloc+0x34/0x310
[  445.551672][T18139]  security_file_alloc+0x34/0x310
[  445.551711][T18139]  init_file+0x90/0x2b0
[  445.551730][T18139]  alloc_empty_file+0x74/0x1d0
[  445.551754][T18139]  path_openat+0x9d/0x1e40
[  445.551786][T18139]  ? __lock_acquire+0x747/0x2de0
[  445.551825][T18139]  do_file_open+0x23e/0x4a0
[  445.551858][T18139]  ? __pfx_do_file_open+0x10/0x10
[  445.551902][T18139]  ? _raw_spin_unlock+0x28/0x50
[  445.551940][T18139]  ? alloc_fd+0x651/0x6c0
[  445.551973][T18139]  do_sys_openat2+0x115/0x200
[  445.551995][T18139]  ? __pfx_do_sys_openat2+0x10/0x10
[  445.552020][T18139]  ? __might_fault+0xaf/0x130
[  445.552050][T18139]  __se_sys_openat2+0x223/0x2d0
[  445.552071][T18139]  ? __pfx___se_sys_openat2+0x10/0x10
[  445.552105][T18139]  do_syscall_64+0x166/0x520
[  445.552120][T18139]  ? trace_irq_disable+0x3b/0x140
[  445.552150][T18139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.552171][T18139]  ? clear_bhb_loop+0x70/0xc0
[  445.552198][T18139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.552218][T18139] RIP: 0033:0x7f229699e159
[  445.552237][T18139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.552260][T18139] RSP: 002b:00007f2297808028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5
[  445.552278][T18139] RAX: ffffffffffffffda RBX: 00007f2296c25fa0 RCX: 00007f229699e159
[  445.552290][T18139] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  445.552301][T18139] RBP: 00007f2297808090 R08: 0000000000000000 R09: 0000000000000000
[  445.552315][T18139] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001
[  445.552325][T18139] R13: 00007f2296c26038 R14: 00007f2296c25fa0 R15: 00007fff0b5b7e08
[  445.552353][T18139]  </TASK>
[  445.681912][ T2222] usb 10-1: device descriptor read/64, error -71
[  445.875337][ T6792] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  445.875682][ T6792] [drm:udl_init] *ERROR* Selecting channel failed
[  445.943958][ T6792] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1
[  445.943982][ T6792] [drm] Initialized udl on minor 1
[  445.955398][ T2222] usb 10-1: new full-speed USB device number 22 using dummy_hcd
[  445.975269][ T6792] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  445.975531][ T6792] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  446.003606][ T6792] usb 2-1: USB disconnect, device number 8
[  446.003735][   T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  446.004027][   T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  446.004162][   T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  446.117213][ T2222] usb 10-1: device descriptor read/64, error -71
[  446.199200][T18157] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1523'.
[  446.229456][ T2222] usb usb10-port1: attempt power cycle
[  446.251898][   T10] usb 9-1: USB disconnect, device number 31
[  446.568062][ T2222] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[  446.568481][T18173] device-mapper: ioctl: name not supplied when creating device
[  446.594809][ T2222] usb 10-1: device descriptor read/8, error -71
[  446.775410][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.827356][ T2222] usb 10-1: new full-speed USB device number 24 using dummy_hcd
[  446.844131][T18180] rust_binder: 18177:18180 got transaction to invalid handle 1
[  446.844170][T18180] rust_binder: 18177:18180 transaction call to 0:0 failed ENOENT, code 0 size 32-24
[  446.864852][ T2222] usb 10-1: device descriptor read/8, error -71
[  446.893222][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893287][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893348][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893410][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893471][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893533][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893592][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893653][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893712][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893772][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893831][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893915][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.893983][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894044][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894102][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894164][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894223][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894282][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894342][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894405][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894464][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894527][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.894586][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  446.966950][ T2222] usb usb10-port1: unable to enumerate USB device
[  447.116744][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.116817][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.116873][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.116926][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.116990][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117044][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117097][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117150][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117223][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117278][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117332][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117385][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117440][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117492][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117545][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117599][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117653][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117706][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117760][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117833][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117892][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.117949][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.118048][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.118108][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312303][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312400][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312463][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312531][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312591][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312650][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312709][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312771][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312831][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.312890][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393640][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393714][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393772][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393855][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393913][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.393973][T18184] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  447.754933][ T2222] rust_binder: 18177: undelivered TRANSACTION_ERROR: 29201
[  447.836011][T18204] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  447.986056][T18209] FAULT_INJECTION: forcing a failure.
[  447.986056][T18209] name failslab, interval 1, probability 0, space 0, times 0
[  447.986084][T18209] CPU: 0 UID: 0 PID: 18209 Comm: syz.1.1534 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  447.986105][T18209] Tainted: [L]=SOFTLOCKUP
[  447.986112][T18209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  447.986122][T18209] Call Trace:
[  447.986128][T18209]  <TASK>
[  447.986135][T18209]  dump_stack_lvl+0xe8/0x150
[  447.986161][T18209]  should_fail_ex+0x3eb/0x540
[  447.986183][T18209]  should_failslab+0xa8/0x100
[  447.986201][T18209]  ? do_getname+0x2e/0x250
[  447.986219][T18209]  kmem_cache_alloc_noprof+0x9c/0x600
[  447.986241][T18209]  ? do_futex+0x3e7/0x4e0
[  447.986258][T18209]  ? do_getname+0x2e/0x250
[  447.986280][T18209]  do_getname+0x2e/0x250
[  447.986299][T18209]  ? getname_flags+0x11/0x20
[  447.986319][T18209]  do_sys_openat2+0xcc/0x200
[  447.986336][T18209]  ? __se_sys_futex+0x3a8/0x450
[  447.986354][T18209]  ? __pfx_do_sys_openat2+0x10/0x10
[  447.986376][T18209]  ? rcu_is_watching+0x16/0xb0
[  447.986395][T18209]  __x64_sys_openat+0x138/0x170
[  447.986417][T18209]  do_syscall_64+0x166/0x520
[  447.986441][T18209]  ? trace_irq_disable+0x3b/0x140
[  447.986465][T18209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.986482][T18209]  ? clear_bhb_loop+0x70/0xc0
[  447.986501][T18209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.986517][T18209] RIP: 0033:0x7f5919b9e159
[  447.986532][T18209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.986546][T18209] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  447.986563][T18209] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  447.986575][T18209] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 00000000ffffff9c
[  447.986586][T18209] RBP: 00007f5919c3503b R08: 0000000000000000 R09: 0000000000000000
[  447.986596][T18209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  447.986605][T18209] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  447.986629][T18209]  </TASK>
[  448.301552][T18209] netlink: 'syz.1.1534': attribute type 6 has an invalid length.
[  448.735301][ T2222] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[  448.783788][T18231] input: syz0 as /devices/virtual/input/input36
[  448.881197][T18238] device-mapper: ioctl: name not supplied when creating device
[  448.898573][ T2222] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  448.900464][ T2222] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.927010][ T2222] usb 10-1: config 0 descriptor??
[  449.164440][ T2222] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  449.165016][ T2222] [drm:udl_init] *ERROR* Selecting channel failed
[  449.235686][ T2222] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1
[  449.235706][ T2222] [drm] Initialized udl on minor 1
[  449.259999][ T2222] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  449.260338][ T2222] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  449.291434][   T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  449.292030][   T10] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  449.292182][   T10] udl 10-1:0.0: [drm] Cannot find any crtc or sizes
[  449.296559][ T2222] usb 10-1: USB disconnect, device number 25
[  449.487207][    T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  449.637110][    T9] usb 9-1: Using ep0 maxpacket: 8
[  449.639831][    T9] usb 9-1: unable to get BOS descriptor or descriptor too short
[  449.639866][    T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  449.640803][    T9] usb 9-1: config 4 interface 0 has no altsetting 0
[  449.674215][    T9] usb 9-1: string descriptor 0 read error: -22
[  449.674282][    T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  449.749055][    T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  449.775774][    T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  449.792880][    T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  449.792913][    T9] usb 9-1: media controller created
[  449.874772][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  451.135394][    T9] zl10353_read_register: readreg error (reg=127, ret==0)
[  451.197881][T18378] device-mapper: ioctl: name not supplied when creating device
[  451.637560][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  451.789700][   T10] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  451.791143][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.791160][   T10] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  451.791185][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.796083][   T10] usb 1-1: config 0 descriptor??
[  452.221440][   T10] usb 9-1: USB disconnect, device number 32
[  452.425370][T18472] FAULT_INJECTION: forcing a failure.
[  452.425370][T18472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  452.425397][T18472] CPU: 0 UID: 0 PID: 18472 Comm: syz.0.1548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  452.425427][T18472] Tainted: [L]=SOFTLOCKUP
[  452.425433][T18472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  452.425443][T18472] Call Trace:
[  452.425450][T18472]  <TASK>
[  452.425457][T18472]  dump_stack_lvl+0xe8/0x150
[  452.425484][T18472]  should_fail_ex+0x3eb/0x540
[  452.425506][T18472]  _copy_from_user+0x2d/0xb0
[  452.425528][T18472]  kstrtouint_from_user+0xd6/0x180
[  452.425548][T18472]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  452.425571][T18472]  ? lock_acquire+0x115/0x350
[  452.425599][T18472]  proc_fail_nth_write+0x8e/0x210
[  452.425624][T18472]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  452.425657][T18472]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  452.425681][T18472]  vfs_write+0x296/0xba0
[  452.425710][T18472]  ? __pfx_vfs_write+0x10/0x10
[  452.425734][T18472]  ? __fget_files+0x2a/0x420
[  452.425759][T18472]  ? __fget_files+0x3a2/0x420
[  452.425778][T18472]  ? __fget_files+0x2a/0x420
[  452.425805][T18472]  ksys_write+0x150/0x270
[  452.425830][T18472]  ? __pfx_ksys_write+0x10/0x10
[  452.425861][T18472]  do_syscall_64+0x166/0x520
[  452.425876][T18472]  ? trace_irq_disable+0x3b/0x140
[  452.425900][T18472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.425917][T18472]  ? clear_bhb_loop+0x70/0xc0
[  452.425937][T18472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  452.425953][T18472] RIP: 0033:0x7f229695e98e
[  452.425968][T18472] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  452.425982][T18472] RSP: 002b:00007f22977e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  452.425999][T18472] RAX: ffffffffffffffda RBX: 00007f22977e76c0 RCX: 00007f229695e98e
[  452.426011][T18472] RDX: 0000000000000001 RSI: 00007f22977e70a0 RDI: 0000000000000004
[  452.426022][T18472] RBP: 00007f22977e7090 R08: 0000000000000000 R09: 0000000000000000
[  452.426032][T18472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  452.426041][T18472] R13: 00007f2296c26128 R14: 00007f2296c26090 R15: 00007fff0b5b7e08
[  452.426066][T18472]  </TASK>
[  452.488262][ T5621] Bluetooth: hci4: command 0x0406 tx timeout
[  452.831421][ T2222] usb 1-1: USB disconnect, device number 7
[  452.934854][T18485] netlink: 'syz.8.1556': attribute type 4 has an invalid length.
[  453.085823][T18490] device-mapper: ioctl: name not supplied when creating device
[  453.399838][T18498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1558'.
[  453.400032][T18497] FAULT_INJECTION: forcing a failure.
[  453.400032][T18497] name failslab, interval 1, probability 0, space 0, times 0
[  453.400053][T18497] CPU: 0 UID: 0 PID: 18497 Comm: syz.8.1558 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  453.400075][T18497] Tainted: [L]=SOFTLOCKUP
[  453.400082][T18497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  453.400092][T18497] Call Trace:
[  453.400099][T18497]  <TASK>
[  453.400106][T18497]  dump_stack_lvl+0xe8/0x150
[  453.400133][T18497]  should_fail_ex+0x3eb/0x540
[  453.400155][T18497]  should_failslab+0xa8/0x100
[  453.400174][T18497]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  453.400200][T18497]  ? __d_alloc+0x37/0x6f0
[  453.400222][T18497]  ? __d_alloc+0x37/0x6f0
[  453.400248][T18497]  __d_alloc+0x37/0x6f0
[  453.400273][T18497]  d_alloc_pseudo+0x21/0xc0
[  453.400297][T18497]  alloc_path_pseudo+0x107/0x220
[  453.400326][T18497]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  453.400346][T18497]  ? do_raw_spin_lock+0x12b/0x2f0
[  453.400371][T18497]  alloc_file_pseudo+0xa8/0x1e0
[  453.400391][T18497]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  453.400411][T18497]  ? _raw_spin_unlock+0x28/0x50
[  453.400434][T18497]  ? alloc_fd+0x651/0x6c0
[  453.400456][T18497]  sock_alloc_file+0xb8/0x2e0
[  453.400478][T18497]  ? __sys_socket+0x12b/0x1b0
[  453.400503][T18497]  __sys_socket+0x13f/0x1b0
[  453.400529][T18497]  __x64_sys_socket+0x7a/0x90
[  453.400553][T18497]  do_syscall_64+0x166/0x520
[  453.400568][T18497]  ? trace_irq_disable+0x3b/0x140
[  453.400593][T18497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.400611][T18497]  ? clear_bhb_loop+0x70/0xc0
[  453.400631][T18497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.400647][T18497] RIP: 0033:0x7f2b3b19e159
[  453.400662][T18497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.400676][T18497] RSP: 002b:00007f2b3c013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  453.400694][T18497] RAX: ffffffffffffffda RBX: 00007f2b3b425fa0 RCX: 00007f2b3b19e159
[  453.400706][T18497] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010
[  453.400716][T18497] RBP: 00007f2b3b23503b R08: 0000000000000000 R09: 0000000000000000
[  453.400726][T18497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  453.400736][T18497] R13: 00007f2b3b426038 R14: 00007f2b3b425fa0 R15: 00007fffc4d37ab8
[  453.400760][T18497]  </TASK>
[  453.995460][T18510] openvswitch: : Dropping previously announced user features
[  454.572377][    T9] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  454.643873][T18501] ceph: No mds server is up or the cluster is laggy
[  454.683222][ T2222] libceph: mon0 (2)127.0.0.1:6789 socket error on write
[  455.178084][T18544] device-mapper: ioctl: name not supplied when creating device
[  455.296055][T18546] FAULT_INJECTION: forcing a failure.
[  455.296055][T18546] name failslab, interval 1, probability 0, space 0, times 0
[  455.296082][T18546] CPU: 0 UID: 0 PID: 18546 Comm: syz.0.1566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  455.296104][T18546] Tainted: [L]=SOFTLOCKUP
[  455.296110][T18546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.296122][T18546] Call Trace:
[  455.296129][T18546]  <TASK>
[  455.296136][T18546]  dump_stack_lvl+0xe8/0x150
[  455.296171][T18546]  should_fail_ex+0x3eb/0x540
[  455.296194][T18546]  should_failslab+0xa8/0x100
[  455.296215][T18546]  __kmalloc_cache_noprof+0x9e/0x600
[  455.296240][T18546]  ? fwnode_create_software_node+0xeb/0x1f0
[  455.296260][T18546]  ? fwnode_create_software_node+0xeb/0x1f0
[  455.296287][T18546]  fwnode_create_software_node+0xeb/0x1f0
[  455.296309][T18546]  device_create_managed_software_node+0xce/0x1f0
[  455.296333][T18546]  iommufd_test+0x38a1/0x6360
[  455.296366][T18546]  ? __lock_acquire+0x747/0x2de0
[  455.296393][T18546]  ? __pfx_iommufd_test+0x10/0x10
[  455.296427][T18546]  ? tomoyo_path_number_perm+0x219/0x5f0
[  455.296445][T18546]  ? tomoyo_path_number_perm+0x219/0x5f0
[  455.296464][T18546]  ? lock_acquire+0x115/0x350
[  455.296497][T18546]  ? __might_fault+0xaf/0x130
[  455.296535][T18546]  iommufd_fops_ioctl+0x465/0x600
[  455.296557][T18546]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  455.296597][T18546]  ? __fget_files+0x2a/0x420
[  455.296623][T18546]  ? __fget_files+0x2a/0x420
[  455.296646][T18546]  ? bpf_lsm_file_ioctl+0x9/0x20
[  455.296666][T18546]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  455.296684][T18546]  __se_sys_ioctl+0xfc/0x170
[  455.296711][T18546]  do_syscall_64+0x166/0x520
[  455.296726][T18546]  ? trace_irq_disable+0x3b/0x140
[  455.296750][T18546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.296767][T18546]  ? clear_bhb_loop+0x70/0xc0
[  455.296787][T18546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.296803][T18546] RIP: 0033:0x7f229699e159
[  455.296818][T18546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.296832][T18546] RSP: 002b:00007f2297808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  455.296850][T18546] RAX: ffffffffffffffda RBX: 00007f2296c25fa0 RCX: 00007f229699e159
[  455.296862][T18546] RDX: 0000200000000140 RSI: 0000000000003ba0 RDI: 0000000000000004
[  455.296873][T18546] RBP: 00007f2296a3503b R08: 0000000000000000 R09: 0000000000000000
[  455.296883][T18546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  455.296893][T18546] R13: 00007f2296c26038 R14: 00007f2296c25fa0 R15: 00007fff0b5b7e08
[  455.296917][T18546]  </TASK>
[  455.613690][T18546] iommufd_mock iommufd_mock0: add pasid-num-bits property failed, rc: -12
[  455.693892][T18548] FAULT_INJECTION: forcing a failure.
[  455.693892][T18548] name failslab, interval 1, probability 0, space 0, times 0
[  455.693929][T18548] CPU: 0 UID: 0 PID: 18548 Comm: syz.1.1568 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  455.693949][T18548] Tainted: [L]=SOFTLOCKUP
[  455.693955][T18548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.693984][T18548] Call Trace:
[  455.693990][T18548]  <TASK>
[  455.693998][T18548]  dump_stack_lvl+0xe8/0x150
[  455.694024][T18548]  should_fail_ex+0x3eb/0x540
[  455.694045][T18548]  should_failslab+0xa8/0x100
[  455.694064][T18548]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  455.694088][T18548]  ? __lock_acquire+0x747/0x2de0
[  455.694111][T18548]  ? __kernfs_new_node+0xa9/0x980
[  455.694135][T18548]  ? __kernfs_new_node+0xa9/0x980
[  455.694167][T18548]  kstrdup+0x42/0x100
[  455.694191][T18548]  __kernfs_new_node+0xa9/0x980
[  455.694221][T18548]  ? __pfx___kernfs_new_node+0x10/0x10
[  455.694245][T18548]  ? kernfs_root+0x1c/0x230
[  455.694272][T18548]  ? kernfs_root+0x1c/0x230
[  455.694315][T18548]  ? kernfs_root+0x1c/0x230
[  455.694336][T18548]  ? kernfs_root+0x1c/0x230
[  455.694362][T18548]  kernfs_new_node+0xea/0x140
[  455.694389][T18548]  kernfs_create_link+0xa7/0x200
[  455.694410][T18548]  sysfs_do_create_link_sd+0x83/0x110
[  455.694434][T18548]  device_create_sys_dev_entry+0x122/0x190
[  455.694455][T18548]  ? __pfx_device_create_sys_dev_entry+0x10/0x10
[  455.694473][T18548]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  455.694500][T18548]  ? device_create_file+0xf4/0x1b0
[  455.694519][T18548]  device_add+0x71e/0xb80
[  455.694539][T18548]  tty_register_device_attr+0x425/0x990
[  455.694562][T18548]  ? __pfx_tty_register_device_attr+0x10/0x10
[  455.694587][T18548]  ? tty_port_register_device+0xca/0x150
[  455.694608][T18548]  rfcomm_dev_ioctl+0x1b6c/0x21c0
[  455.694637][T18548]  ? kasan_quarantine_put+0xbb/0x1f0
[  455.694660][T18548]  ? __pfx_rfcomm_dev_ioctl+0x10/0x10
[  455.694686][T18548]  ? tomoyo_path_number_perm+0x219/0x5f0
[  455.694704][T18548]  ? tomoyo_path_number_perm+0x219/0x5f0
[  455.694726][T18548]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  455.694746][T18548]  sock_do_ioctl+0x101/0x320
[  455.694770][T18548]  ? __pfx_sock_do_ioctl+0x10/0x10
[  455.694789][T18548]  ? hook_file_ioctl+0x1f2/0x600
[  455.694817][T18548]  sock_ioctl+0x57a/0x7e0
[  455.694838][T18548]  ? __pfx_sock_ioctl+0x10/0x10
[  455.694859][T18548]  ? __fget_files+0x2a/0x420
[  455.694878][T18548]  ? __fget_files+0x3a2/0x420
[  455.694896][T18548]  ? __fget_files+0x2a/0x420
[  455.694918][T18548]  ? bpf_lsm_file_ioctl+0x9/0x20
[  455.694938][T18548]  ? __pfx_sock_ioctl+0x10/0x10
[  455.694957][T18548]  __se_sys_ioctl+0xfc/0x170
[  455.694983][T18548]  do_syscall_64+0x166/0x520
[  455.694996][T18548]  ? trace_irq_disable+0x3b/0x140
[  455.695019][T18548]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.695035][T18548]  ? clear_bhb_loop+0x70/0xc0
[  455.695055][T18548]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.695071][T18548] RIP: 0033:0x7f5919b9e159
[  455.695085][T18548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.695099][T18548] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  455.695116][T18548] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  455.695128][T18548] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004
[  455.695138][T18548] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  455.695148][T18548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  455.695157][T18548] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  455.695181][T18548]  </TASK>
[  457.401056][T18603] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.1048576.3828905459), cmd(2)
[  457.461481][T18606] device-mapper: ioctl: name not supplied when creating device
[  458.339195][T18646] FAULT_INJECTION: forcing a failure.
[  458.339195][T18646] name failslab, interval 1, probability 0, space 0, times 0
[  458.339221][T18646] CPU: 0 UID: 0 PID: 18646 Comm: syz.9.1585 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.339242][T18646] Tainted: [L]=SOFTLOCKUP
[  458.339248][T18646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.339258][T18646] Call Trace:
[  458.339264][T18646]  <TASK>
[  458.339271][T18646]  dump_stack_lvl+0xe8/0x150
[  458.339297][T18646]  should_fail_ex+0x3eb/0x540
[  458.339319][T18646]  should_failslab+0xa8/0x100
[  458.339338][T18646]  __kmalloc_noprof+0xf9/0x710
[  458.339360][T18646]  ? rcu_is_watching+0x16/0xb0
[  458.339376][T18646]  ? tomoyo_realpath_from_path+0xef/0x640
[  458.339396][T18646]  ? tomoyo_realpath_from_path+0xef/0x640
[  458.339422][T18646]  tomoyo_realpath_from_path+0xef/0x640
[  458.339449][T18646]  ? tomoyo_path_number_perm+0x219/0x5f0
[  458.339465][T18646]  tomoyo_path_number_perm+0x246/0x5f0
[  458.339483][T18646]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  458.339499][T18646]  ? __lock_acquire+0x747/0x2de0
[  458.339533][T18646]  ? hook_file_ioctl+0x1f2/0x600
[  458.339563][T18646]  ? __fget_files+0x2a/0x420
[  458.339585][T18646]  ? __fget_files+0x2a/0x420
[  458.339604][T18646]  ? __fget_files+0x3a2/0x420
[  458.339623][T18646]  ? __fget_files+0x2a/0x420
[  458.339648][T18646]  security_file_ioctl+0xc3/0x2a0
[  458.339687][T18646]  __se_sys_ioctl+0x47/0x170
[  458.339711][T18646]  do_syscall_64+0x166/0x520
[  458.339725][T18646]  ? trace_irq_disable+0x3b/0x140
[  458.339747][T18646]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.339762][T18646]  ? clear_bhb_loop+0x70/0xc0
[  458.339780][T18646]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.339794][T18646] RIP: 0033:0x7f01c819e159
[  458.339808][T18646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.339821][T18646] RSP: 002b:00007f01c63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  458.339843][T18646] RAX: ffffffffffffffda RBX: 00007f01c8425fa0 RCX: 00007f01c819e159
[  458.339855][T18646] RDX: 0000200000000000 RSI: 0000000000005423 RDI: 0000000000000003
[  458.339864][T18646] RBP: 00007f01c823503b R08: 0000000000000000 R09: 0000000000000000
[  458.339873][T18646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  458.339882][T18646] R13: 00007f01c8426038 R14: 00007f01c8425fa0 R15: 00007fffaf2ed2e8
[  458.339904][T18646]  </TASK>
[  458.339911][T18646] ERROR: Out of memory at tomoyo_realpath_from_path.
[  458.744735][T18655] FAULT_INJECTION: forcing a failure.
[  458.744735][T18655] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.744761][T18655] CPU: 0 UID: 0 PID: 18655 Comm: syz.1.1586 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  458.744787][T18655] Tainted: [L]=SOFTLOCKUP
[  458.744802][T18655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  458.744812][T18655] Call Trace:
[  458.744818][T18655]  <TASK>
[  458.744825][T18655]  dump_stack_lvl+0xe8/0x150
[  458.744850][T18655]  should_fail_ex+0x3eb/0x540
[  458.744872][T18655]  _copy_from_user+0x2d/0xb0
[  458.744894][T18655]  input_event_from_user+0xb1/0x290
[  458.744920][T18655]  ? __pfx_input_event_from_user+0x10/0x10
[  458.744952][T18655]  evdev_write+0x2c7/0x4c0
[  458.744974][T18655]  ? __lock_acquire+0x747/0x2de0
[  458.745000][T18655]  ? __pfx_evdev_write+0x10/0x10
[  458.745035][T18655]  ? bpf_lsm_file_permission+0x9/0x20
[  458.745053][T18655]  ? security_file_permission+0x75/0x260
[  458.745077][T18655]  ? rw_verify_area+0x203/0x4c0
[  458.745099][T18655]  ? __pfx_evdev_write+0x10/0x10
[  458.745119][T18655]  vfs_write+0x296/0xba0
[  458.745144][T18655]  ? __pfx_vfs_write+0x10/0x10
[  458.745165][T18655]  ? __fget_files+0x2a/0x420
[  458.745186][T18655]  ? __fget_files+0x2a/0x420
[  458.745224][T18655]  ? __fget_files+0x3a2/0x420
[  458.745243][T18655]  ? __fget_files+0x2a/0x420
[  458.745283][T18655]  ksys_write+0x150/0x270
[  458.745304][T18655]  ? __pfx_ksys_write+0x10/0x10
[  458.745331][T18655]  do_syscall_64+0x166/0x520
[  458.745346][T18655]  ? trace_irq_disable+0x3b/0x140
[  458.745366][T18655]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.745382][T18655]  ? clear_bhb_loop+0x70/0xc0
[  458.745400][T18655]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.745414][T18655] RIP: 0033:0x7f5919b9e159
[  458.745446][T18655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  458.745460][T18655] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  458.745476][T18655] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  458.745488][T18655] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000003
[  458.745498][T18655] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  458.745508][T18655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  458.745517][T18655] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  458.745541][T18655]  </TASK>
[  459.078881][T18656] device-mapper: ioctl: name not supplied when creating device
[  459.245937][T18663] Bluetooth: ISO socket layer initialized
[  459.620825][T18683] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  459.620973][T18683] qnx6: wrong signature (magic) in superblock #1.
[  459.620981][T18683] qnx6: unable to read the first superblock
[  460.389441][T18725] device-mapper: ioctl: name not supplied when creating device
[  460.419221][T18720] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1599'.
[  460.453586][T18717] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1599'.
[  460.749032][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1602'.
[  460.863991][T18740] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1603'.
[  461.645319][T18768] device-mapper: ioctl: name not supplied when creating device
[  461.721220][T18771] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl818)
[  462.186781][    T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  462.268919][ T5760] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[  462.337186][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  462.351758][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  462.351777][    T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  462.351793][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  462.355579][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.355605][    T9] usb 9-1: Product: syz
[  462.355616][    T9] usb 9-1: Manufacturer: syz
[  462.355626][    T9] usb 9-1: SerialNumber: syz
[  462.442761][ T5760] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  462.445158][    T9] hub 9-1:1.0: bad descriptor, ignoring hub
[  462.445206][    T9] hub 9-1:1.0: probe with driver hub failed with error -5
[  462.457102][ T5760] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.502473][ T5760] usb 10-1: config 0 descriptor??
[  462.529447][ T5760] gspca_main: cpia1-2.14.0 probing 0813:0001
[  462.652538][T18801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  462.670493][    T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  462.726869][ T4934] Bluetooth: hci5: command 0x0406 tx timeout
[  462.917610][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1612'.
[  462.954833][    T9] usb 9-1: USB disconnect, device number 33
[  463.297039][    T9] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[  463.449198][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  463.451398][    T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  463.451417][    T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  463.453230][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.453248][    T9] usb 9-1: Product: syz
[  463.453259][    T9] usb 9-1: Manufacturer: syz
[  463.453271][    T9] usb 9-1: SerialNumber: syz
[  463.542793][    T9] hub 9-1:1.0: bad descriptor, ignoring hub
[  463.542812][    T9] hub 9-1:1.0: probe with driver hub failed with error -5
[  463.634627][T18855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'.
[  463.735805][T18779] usblp0: removed
[  463.752572][    T9] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  463.769259][ T5760] gspca_cpia1: usb_control_msg 03, error -110
[  463.780606][ T5760] gspca_cpia1: usb_control_msg 01, error -32
[  463.782206][ T5760] gspca_cpia1: usb_control_msg 01, error -32
[  463.782512][ T5760] gspca_cpia1: usb_control_msg 01, error -32
[  463.784685][ T5760] gspca_cpia1: usb_control_msg 01, error -32
[  463.784698][ T5760] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0)
[  463.841428][    T9] usb 9-1: USB disconnect, device number 34
[  463.899149][    T9] usblp0: removed
[  463.981423][T18876] device-mapper: ioctl: name not supplied when creating device
[  464.131669][T18880] FAULT_INJECTION: forcing a failure.
[  464.131669][T18880] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.131696][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz.1.1621 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  464.131720][T18880] Tainted: [L]=SOFTLOCKUP
[  464.131727][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  464.131736][T18880] Call Trace:
[  464.131743][T18880]  <TASK>
[  464.131750][T18880]  dump_stack_lvl+0xe8/0x150
[  464.131776][T18880]  should_fail_ex+0x3eb/0x540
[  464.131798][T18880]  _copy_from_user+0x2d/0xb0
[  464.131820][T18880]  copy_strings+0x6bd/0x8b0
[  464.131857][T18880]  ? __pfx_copy_strings+0x10/0x10
[  464.131883][T18880]  ? __might_fault+0xaf/0x130
[  464.131906][T18880]  do_execveat_common+0x8b8/0xbd0
[  464.131940][T18880]  __x64_sys_execve+0x97/0xc0
[  464.131965][T18880]  do_syscall_64+0x166/0x520
[  464.131981][T18880]  ? trace_irq_disable+0x3b/0x140
[  464.132004][T18880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.132021][T18880]  ? clear_bhb_loop+0x70/0xc0
[  464.132040][T18880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.132056][T18880] RIP: 0033:0x7f5919b9e159
[  464.132071][T18880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  464.132084][T18880] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  464.132102][T18880] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  464.132114][T18880] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000100
[  464.132125][T18880] RBP: 00007f591ab11090 R08: 0000000000000000 R09: 0000000000000000
[  464.132136][T18880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  464.132145][T18880] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  464.132169][T18880]  </TASK>
[  464.776502][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  464.906917][    T9] usb 2-1: device descriptor read/64, error -71
[  465.072018][ T5760] usb 10-1: USB disconnect, device number 26
[  465.109293][T18914] device-mapper: ioctl: name not supplied when creating device
[  465.147710][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  465.276731][    T9] usb 2-1: device descriptor read/64, error -71
[  465.388328][    T9] usb usb2-port1: attempt power cycle
[  465.727436][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  465.750239][    T9] usb 2-1: device descriptor read/8, error -71
[  465.866700][ T5760] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  465.924217][T18964] device-mapper: ioctl: name not supplied when creating device
[  465.986606][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  466.005446][T18967] FAULT_INJECTION: forcing a failure.
[  466.005446][T18967] name failslab, interval 1, probability 0, space 0, times 0
[  466.005472][T18967] CPU: 0 UID: 0 PID: 18967 Comm: syz.9.1641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.005493][T18967] Tainted: [L]=SOFTLOCKUP
[  466.005500][T18967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.005509][T18967] Call Trace:
[  466.005516][T18967]  <TASK>
[  466.005523][T18967]  dump_stack_lvl+0xe8/0x150
[  466.005549][T18967]  should_fail_ex+0x3eb/0x540
[  466.005571][T18967]  should_failslab+0xa8/0x100
[  466.005589][T18967]  __kmalloc_cache_noprof+0x9e/0x600
[  466.005615][T18967]  ? allocate_file_region_entries+0x217/0x610
[  466.005636][T18967]  ? allocate_file_region_entries+0x217/0x610
[  466.005664][T18967]  allocate_file_region_entries+0x217/0x610
[  466.005695][T18967]  ? __pfx_allocate_file_region_entries+0x10/0x10
[  466.005725][T18967]  __vma_reservation_common+0x7b3/0x960
[  466.005753][T18967]  alloc_hugetlb_folio+0x2a5/0x940
[  466.005773][T18967]  ? trace_contention_end+0x3d/0x140
[  466.005792][T18967]  ? __pfx_alloc_hugetlb_folio+0x10/0x10
[  466.005809][T18967]  ? __filemap_get_folio_mpol+0xcfe/0xff0
[  466.005829][T18967]  ? hugetlb_no_page+0x139e/0x16f0
[  466.005852][T18967]  hugetlb_no_page+0xea5/0x16f0
[  466.005879][T18967]  ? huge_pte_alloc+0x482/0x630
[  466.005900][T18967]  hugetlb_fault+0x776/0x1440
[  466.005920][T18967]  ? __pfx___css_rstat_updated+0x10/0x10
[  466.005948][T18967]  ? __pfx_hugetlb_fault+0x10/0x10
[  466.005974][T18967]  ? count_memcg_event_mm+0x21/0x260
[  466.005999][T18967]  handle_mm_fault+0x24fc/0x3750
[  466.006032][T18967]  ? handle_mm_fault+0xf1/0x3750
[  466.006050][T18967]  ? mt_find+0x186/0x630
[  466.006068][T18967]  ? __pfx_mt_find+0x10/0x10
[  466.006089][T18967]  ? __pfx_handle_mm_fault+0x10/0x10
[  466.006108][T18967]  ? rcu_is_watching+0x16/0xb0
[  466.006125][T18967]  ? __up_read+0x29c/0x930
[  466.006145][T18967]  ? __pfx___up_read+0x10/0x10
[  466.006165][T18967]  ? __get_user_pages+0x15b9/0x2750
[  466.006186][T18967]  __get_user_pages+0x1670/0x2750
[  466.006227][T18967]  populate_vma_page_range+0x2be/0x3c0
[  466.006246][T18967]  ? __pfx_populate_vma_page_range+0x10/0x10
[  466.006266][T18967]  ? down_read+0x2b9/0x320
[  466.006290][T18967]  __mm_populate+0x25f/0x390
[  466.006308][T18967]  ? __pfx___mm_populate+0x10/0x10
[  466.006332][T18967]  vm_mmap_pgoff+0x353/0x4e0
[  466.006352][T18967]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  466.006376][T18967]  ? hugetlb_file_setup+0x42c/0x630
[  466.006400][T18967]  ksys_mmap_pgoff+0x57d/0x760
[  466.006423][T18967]  do_syscall_64+0x166/0x520
[  466.006437][T18967]  ? trace_irq_disable+0x3b/0x140
[  466.006460][T18967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.006476][T18967]  ? clear_bhb_loop+0x70/0xc0
[  466.006495][T18967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.006511][T18967] RIP: 0033:0x7f01c819e159
[  466.006525][T18967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.006539][T18967] RSP: 002b:00007f01c63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  466.006556][T18967] RAX: ffffffffffffffda RBX: 00007f01c8425fa0 RCX: 00007f01c819e159
[  466.006568][T18967] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000
[  466.006578][T18967] RBP: 00007f01c63f6090 R08: ffffffffffffffff R09: 0000000000000000
[  466.006589][T18967] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002
[  466.006598][T18967] R13: 00007f01c8426038 R14: 00007f01c8425fa0 R15: 00007fffaf2ed2e8
[  466.006623][T18967]  </TASK>
[  466.022404][ T5760] usb 9-1: Using ep0 maxpacket: 8
[  466.023768][ T5760] usb 9-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[  466.024080][    T9] usb 2-1: device descriptor read/8, error -71
[  466.100673][ T5760] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.100696][ T5760] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024
[  466.100714][ T5760] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  466.100732][ T5760] usb 9-1: config 0 interface 0 has no altsetting 0
[  466.100754][ T5760] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.153786][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  466.159593][    T9] usb usb2-port1: unable to enumerate USB device
[  466.222195][ T5760] usb 9-1: config 0 descriptor??
[  466.227471][T18947] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  466.626945][   T10] usb 1-1: Using ep0 maxpacket: 32
[  466.628600][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  466.628631][   T10] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40
[  466.629535][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 124, changing to 7
[  466.631486][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.631503][   T10] usb 1-1: Product: syz
[  466.631513][   T10] usb 1-1: Manufacturer: syz
[  466.631523][   T10] usb 1-1: SerialNumber: syz
[  466.718274][T18974] FAULT_INJECTION: forcing a failure.
[  466.718274][T18974] name failslab, interval 1, probability 0, space 0, times 0
[  466.718297][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.9.1642 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  466.718317][T18974] Tainted: [L]=SOFTLOCKUP
[  466.718323][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  466.718331][T18974] Call Trace:
[  466.718337][T18974]  <TASK>
[  466.718344][T18974]  dump_stack_lvl+0xe8/0x150
[  466.718371][T18974]  should_fail_ex+0x3eb/0x540
[  466.718391][T18974]  should_failslab+0xa8/0x100
[  466.718409][T18974]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  466.718431][T18974]  ? __d_lookup+0x66/0x790
[  466.718453][T18974]  ? __d_alloc+0x37/0x6f0
[  466.718471][T18974]  ? __d_alloc+0x37/0x6f0
[  466.718495][T18974]  __d_alloc+0x37/0x6f0
[  466.718518][T18974]  d_alloc+0x4b/0x190
[  466.718554][T18974]  ? lookup_one_qstr_excl+0xc4/0x360
[  466.718579][T18974]  lookup_one_qstr_excl+0xd8/0x360
[  466.718600][T18974]  ? lookup_noperm_common+0x245/0x430
[  466.718623][T18974]  start_dirop+0x5c/0x90
[  466.718643][T18974]  simple_start_creating+0xcc/0x110
[  466.718666][T18974]  ? __pfx_simple_start_creating+0x10/0x10
[  466.718689][T18974]  ? do_raw_spin_unlock+0xf5/0x200
[  466.718709][T18974]  ? mntput+0x65/0xc0
[  466.718728][T18974]  debugfs_start_creating+0xca/0x1b0
[  466.718853][T18974]  __debugfs_create_file+0x6f/0x400
[  466.718880][T18974]  debugfs_create_file_full+0x3f/0x60
[  466.718905][T18974]  ref_tracker_dir_debugfs+0x197/0x360
[  466.718926][T18974]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  466.718965][T18974]  ? __kvmalloc_node_noprof+0x340/0x820
[  466.719000][T18974]  ? __raw_spin_lock_init+0x45/0x100
[  466.719021][T18974]  alloc_netdev_mqs+0x275/0x12a0
[  466.719089][T18974]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  466.719141][T18974]  ip6_tnl_locate+0x686/0x840
[  466.719169][T18974]  ? __pfx_ip6_tnl_locate+0x10/0x10
[  466.719190][T18974]  ? __might_fault+0xaf/0x130
[  466.719209][T18974]  ? ip6_tnl_siocdevprivate+0x601/0xad0
[  466.719233][T18974]  ip6_tnl_siocdevprivate+0x631/0xad0
[  466.719257][T18974]  ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10
[  466.719293][T18974]  ? __pfx___mutex_lock+0x10/0x10
[  466.719308][T18974]  ? full_name_hash+0x92/0xe0
[  466.719332][T18974]  dev_ifsioc+0xb56/0x1360
[  466.719368][T18974]  dev_ioctl+0x84c/0x1150
[  466.719386][T18974]  sock_ioctl+0x753/0x7e0
[  466.719408][T18974]  ? __pfx_sock_ioctl+0x10/0x10
[  466.719430][T18974]  ? __fget_files+0x3a2/0x420
[  466.719449][T18974]  ? __fget_files+0x2a/0x420
[  466.719471][T18974]  ? bpf_lsm_file_ioctl+0x9/0x20
[  466.719491][T18974]  ? __pfx_sock_ioctl+0x10/0x10
[  466.719511][T18974]  __se_sys_ioctl+0xfc/0x170
[  466.719537][T18974]  do_syscall_64+0x166/0x520
[  466.719551][T18974]  ? trace_irq_disable+0x3b/0x140
[  466.719574][T18974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.719590][T18974]  ? clear_bhb_loop+0x70/0xc0
[  466.719609][T18974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.719625][T18974] RIP: 0033:0x7f01c819e159
[  466.719639][T18974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  466.719653][T18974] RSP: 002b:00007f01c63f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  466.719669][T18974] RAX: ffffffffffffffda RBX: 00007f01c8425fa0 RCX: 00007f01c819e159
[  466.719681][T18974] RDX: 0000200000000180 RSI: 00000000000089f1 RDI: 0000000000000003
[  466.719691][T18974] RBP: 00007f01c63f6090 R08: 0000000000000000 R09: 0000000000000000
[  466.719701][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.719711][T18974] R13: 00007f01c8426038 R14: 00007f01c8425fa0 R15: 00007fffaf2ed2e8
[  466.719746][T18974]  </TASK>
[  467.151623][T18947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.152000][T18947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.184070][ T5760] input: HID 1b96:000a as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:1B96:000A.001D/input/input37
[  467.198226][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1636'.
[  467.198243][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1636'.
[  467.278604][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  467.284031][   T10] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  467.408574][ T5760] ntrig 0003:1B96:000A.001D: input,hidraw0: USB HID v0.00 Joystick [HID 1b96:000a] on usb-dummy_hcd.8-1/input0
[  467.429653][ T5760] ntrig 0003:1B96:000A.001D: Firmware version: 0.10.28.39.1 (eb00 e98c)
[  467.541678][   T10] usb 1-1: USB disconnect, device number 8
[  467.665299][ T5760] usb 9-1: USB disconnect, device number 35
[  467.735410][T19018] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1644'.
[  467.782452][T18996] fido_id[18996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory
[  467.811868][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  468.115107][T19047] FAULT_INJECTION: forcing a failure.
[  468.115107][T19047] name failslab, interval 1, probability 0, space 0, times 0
[  468.115134][T19047] CPU: 0 UID: 0 PID: 19047 Comm: syz.1.1648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.115166][T19047] Tainted: [L]=SOFTLOCKUP
[  468.115172][T19047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  468.115182][T19047] Call Trace:
[  468.115187][T19047]  <TASK>
[  468.115194][T19047]  dump_stack_lvl+0xe8/0x150
[  468.115219][T19047]  should_fail_ex+0x3eb/0x540
[  468.115239][T19047]  should_failslab+0xa8/0x100
[  468.115258][T19047]  __kmalloc_cache_noprof+0x9e/0x600
[  468.115280][T19047]  ? __kmalloc_cache_noprof+0x148/0x600
[  468.115300][T19047]  ? sctp_add_bind_addr+0x8c/0x370
[  468.115318][T19047]  ? sctp_add_bind_addr+0x8c/0x370
[  468.115341][T19047]  sctp_add_bind_addr+0x8c/0x370
[  468.115362][T19047]  sctp_copy_local_addr_list+0x31a/0x4e0
[  468.115383][T19047]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  468.115403][T19047]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  468.115423][T19047]  ? sctp_v6_is_any+0x64/0x80
[  468.115444][T19047]  ? sctp_copy_one_addr+0x93/0x360
[  468.115465][T19047]  sctp_bind_addr_copy+0xb3/0x3c0
[  468.115484][T19047]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  468.115503][T19047]  sctp_connect_new_asoc+0x2ff/0x6b0
[  468.115528][T19047]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  468.115555][T19047]  ? __local_bh_enable_ip+0xd6/0x140
[  468.115571][T19047]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  468.115590][T19047]  ? security_sctp_bind_connect+0x7e/0x2c0
[  468.115615][T19047]  sctp_sendmsg+0x159b/0x2d00
[  468.115644][T19047]  ? kstrtouint+0x6e/0xe0
[  468.115659][T19047]  ? __pfx_sctp_sendmsg+0x10/0x10
[  468.115680][T19047]  ? lock_acquire+0x115/0x350
[  468.115701][T19047]  ? get_pid_task+0x20/0x1f0
[  468.115733][T19047]  ? aa_sock_msg_perm+0xf5/0x210
[  468.115749][T19047]  ? sock_rps_record_flow+0x19/0x350
[  468.115772][T19047]  ? inet_sendmsg+0x298/0x320
[  468.115792][T19047]  ? __pfx_inet_sendmsg+0x10/0x10
[  468.115811][T19047]  sock_sendmsg_nosec+0x10e/0x180
[  468.115833][T19047]  __sys_sendto+0x408/0x5a0
[  468.115847][T19047]  ? ksys_write+0x1e6/0x270
[  468.115870][T19047]  ? __pfx___sys_sendto+0x10/0x10
[  468.115883][T19047]  ? __mutex_unlock_slowpath+0x731/0x900
[  468.115923][T19047]  ? __pfx_ksys_write+0x10/0x10
[  468.115947][T19047]  __x64_sys_sendto+0xde/0x100
[  468.115964][T19047]  do_syscall_64+0x166/0x520
[  468.115978][T19047]  ? trace_irq_disable+0x3b/0x140
[  468.116000][T19047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.116015][T19047]  ? clear_bhb_loop+0x70/0xc0
[  468.116033][T19047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.116051][T19047] RIP: 0033:0x7f5919b9e159
[  468.116065][T19047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.116077][T19047] RSP: 002b:00007f591ab11028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  468.116094][T19047] RAX: ffffffffffffffda RBX: 00007f5919e25fa0 RCX: 00007f5919b9e159
[  468.116105][T19047] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  468.116115][T19047] RBP: 00007f591ab11090 R08: 000020000005ffe4 R09: 000000000000001c
[  468.116125][T19047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  468.116134][T19047] R13: 00007f5919e26038 R14: 00007f5919e25fa0 R15: 00007ffdd0b1d608
[  468.116156][T19047]  </TASK>
[  468.247778][   T10] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[  468.482312][   T10] usb 10-1: device descriptor read/64, error -71
[  468.691339][T19053] device-mapper: ioctl: name not supplied when creating device
[  468.716998][   T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[  468.805026][T19062] jffs2: notice: (19062) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 4 orphan) and 8 of xref (4 dead, 0 orphan) found.
[  468.834558][T19062] FAULT_INJECTION: forcing a failure.
[  468.834558][T19062] name failslab, interval 1, probability 0, space 0, times 0
[  468.834584][T19062] CPU: 0 UID: 0 PID: 19062 Comm: syz.0.1652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.834605][T19062] Tainted: [L]=SOFTLOCKUP
[  468.834611][T19062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  468.834621][T19062] Call Trace:
[  468.834627][T19062]  <TASK>
[  468.834634][T19062]  dump_stack_lvl+0xe8/0x150
[  468.834660][T19062]  should_fail_ex+0x3eb/0x540
[  468.834681][T19062]  should_failslab+0xa8/0x100
[  468.834701][T19062]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  468.834727][T19062]  ? ima_collect_measurement+0x5b8/0xa00
[  468.834841][T19062]  ? ima_collect_measurement+0x5b8/0xa00
[  468.834866][T19062]  ? ima_collect_measurement+0x5b8/0xa00
[  468.834891][T19062]  krealloc_node_align_noprof+0x19a/0x390
[  468.834920][T19062]  ima_collect_measurement+0x5b8/0xa00
[  468.834950][T19062]  ? __pfx_ima_collect_measurement+0x10/0x10
[  468.834972][T19062]  ? rcu_is_watching+0x16/0xb0
[  468.834996][T19062]  ? __pfx___up_read+0x10/0x10
[  468.835033][T19062]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  468.835075][T19062]  process_measurement+0x1272/0x1c10
[  468.835108][T19062]  ? __pfx_process_measurement+0x10/0x10
[  468.835133][T19062]  ? tomoyo_check_open_permission+0x38e/0x470
[  468.835168][T19062]  ? apparmor_file_open+0x523/0x6c0
[  468.835221][T19062]  ima_file_check+0xdc/0x130
[  468.835241][T19062]  ? file_ra_state_init+0x3d/0xc0
[  468.835261][T19062]  ? __pfx_ima_file_check+0x10/0x10
[  468.835289][T19062]  security_file_post_open+0xb3/0x260
[  468.835306][T19062]  path_openat+0x151a/0x1e40
[  468.835347][T19062]  do_file_open+0x23e/0x4a0
[  468.835374][T19062]  ? __pfx_do_file_open+0x10/0x10
[  468.835412][T19062]  ? _raw_spin_unlock+0x28/0x50
[  468.835434][T19062]  ? alloc_fd+0x651/0x6c0
[  468.835461][T19062]  do_sys_openat2+0x115/0x200
[  468.835482][T19062]  ? __pfx_do_sys_openat2+0x10/0x10
[  468.835504][T19062]  ? rcu_is_watching+0x16/0xb0
[  468.835522][T19062]  __x64_sys_openat+0x138/0x170
[  468.835544][T19062]  do_syscall_64+0x166/0x520
[  468.835559][T19062]  ? trace_irq_disable+0x3b/0x140
[  468.835582][T19062]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.835599][T19062]  ? clear_bhb_loop+0x70/0xc0
[  468.835619][T19062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.835634][T19062] RIP: 0033:0x7f229699e159
[  468.835650][T19062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.835664][T19062] RSP: 002b:00007f2297808028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  468.835681][T19062] RAX: ffffffffffffffda RBX: 00007f2296c25fa0 RCX: 00007f229699e159
[  468.835693][T19062] RDX: 0000000000000042 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  468.835704][T19062] RBP: 00007f2297808090 R08: 0000000000000000 R09: 0000000000000000
[  468.835715][T19062] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000002
[  468.835725][T19062] R13: 00007f2296c26038 R14: 00007f2296c25fa0 R15: 00007fff0b5b7e08
[  468.835749][T19062]  </TASK>
[  468.837116][   T31] audit: type=1800 audit(1700006439.050:13): pid=19062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1652" name="fillfile" dev="jffs2" ino=2 res=0 errno=0
[  468.863673][   T10] usb 10-1: device descriptor read/64, error -71
[  468.945427][ T5760] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  468.970143][   T10] usb usb10-port1: attempt power cycle
[  469.229264][ T5760] usb 9-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice= 1.00
[  469.232467][ T5760] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.232486][ T5760] usb 9-1: Product: syz
[  469.232496][ T5760] usb 9-1: Manufacturer: syz
[  469.232507][ T5760] usb 9-1: SerialNumber: syz
[  469.282262][ T5760] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  469.282383][ T5760] gspca_m5602: Forcing a MT9M111 sensor
[  469.316909][   T10] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[  469.337955][   T10] usb 10-1: device descriptor read/8, error -71
[  469.542661][T19073] netlink: 'syz.0.1654': attribute type 3 has an invalid length.
[  469.542677][T19073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1654'.
[  469.576716][   T10] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[  469.600856][   T10] usb 10-1: device descriptor read/8, error -71
[  469.708192][   T10] usb usb10-port1: unable to enumerate USB device
[  469.981472][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1657'.
[  469.981490][T19089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1657'.
[  469.981504][T19089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1657'.
[  470.016741][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  470.170829][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  470.173171][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  470.173193][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  470.173219][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.226781][   T10] usb 2-1: config 0 descriptor??
[  470.524718][T19107] device-mapper: ioctl: name not supplied when creating device
[  470.722364][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  470.722449][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  470.747028][   T10] usb 2-1: USB disconnect, device number 13
[  471.019879][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  471.093077][T19131] syzkaller1: entered promiscuous mode
[  471.093095][T19131] syzkaller1: entered allmulticast mode
[  471.095324][T19131] netlink: 'syz.9.1663': attribute type 5 has an invalid length.
[  471.200402][    T9] usb 1-1: Using ep0 maxpacket: 32
[  471.205211][    T9] usb 1-1: New USB device found, idVendor=0c52, idProduct=2871, bcdDevice=98.1e
[  471.206173][    T9] usb 1-1: config 127 has an invalid interface number: 36 but max is 0
[  471.206192][    T9] usb 1-1: config 127 has no interface number 0
[  471.248714][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.248734][    T9] usb 1-1: Product: syz
[  471.248745][    T9] usb 1-1: Manufacturer: syz
[  471.248755][    T9] usb 1-1: SerialNumber: syz
[  471.353431][T19139] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  471.720819][    T9] ftdi_sio 1-1:127.36: FTDI USB Serial Device converter detected
[  471.723773][    T9] ftdi_sio ttyUSB0: unknown device type: 0x981e
[  471.724880][ T5760] gspca_m5602: Could not initialize controls
[  471.777675][ T5760] ALi m5602 9-1:1.0: probe with driver ALi m5602 failed with error -34
[  471.802134][ T5760] usb 9-1: USB disconnect, device number 36
[  471.807229][ T6792] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[  471.864108][T19159] syzkaller1: entered promiscuous mode
[  471.864126][T19159] syzkaller1: entered allmulticast mode
[  471.933643][T19175] device-mapper: ioctl: name not supplied when creating device
[  471.952548][ T6792] usb 10-1: device descriptor read/64, error -71
[  471.974122][    T9] usb 1-1: USB disconnect, device number 9
[  471.975449][    T9] ftdi_sio 1-1:127.36: device disconnected
[  472.186484][ T6792] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  472.318728][ T6792] usb 10-1: device descriptor read/64, error -71
[  472.435548][ T6792] usb usb10-port1: attempt power cycle
[  472.436642][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  472.596985][    T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  472.597818][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.597851][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.604746][    T9] usb 2-1: config 0 descriptor??
[  472.653658][    T9] pwc: Askey VC010 type 2 USB webcam detected.
[  472.788789][ T6792] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  472.807934][ T6792] usb 10-1: device descriptor read/8, error -71
[  473.046916][ T6792] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[  473.069382][    T9] pwc: recv_control_msg error -32 req 02 val 2b00
[  473.070363][ T6792] usb 10-1: device descriptor read/8, error -71
[  473.177956][ T6792] usb usb10-port1: unable to enumerate USB device
[  473.324641][    T9] pwc: recv_control_msg error -32 req 02 val 2c00
[  473.334709][    T9] pwc: recv_control_msg error -32 req 04 val 1300
[  473.363755][    T9] pwc: recv_control_msg error -32 req 02 val 2000
[  473.373830][    T9] pwc: recv_control_msg error -32 req 02 val 2100
[  473.374698][    T9] pwc: recv_control_msg error -32 req 04 val 1500
[  473.375360][    T9] pwc: recv_control_msg error -32 req 02 val 2500
[  473.376174][    T9] pwc: recv_control_msg error -32 req 02 val 2400
[  473.408574][    T9] pwc: recv_control_msg error -32 req 02 val 2600
[  473.409815][    T9] pwc: recv_control_msg error -32 req 02 val 2900
[  473.410316][    T9] pwc: recv_control_msg error -32 req 02 val 2800
[  473.414532][    T9] pwc: recv_control_msg error -32 req 04 val 1100
[  473.415721][    T9] pwc: recv_control_msg error -32 req 04 val 1200
[  473.462439][    T9] pwc: Registered as video103.
[  473.501529][    T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input38
[  473.950151][T19233] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  473.952129][T19233] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  473.996235][T19233] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  474.004939][T19233] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  474.025015][T19233] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  474.025103][T19233] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  474.045238][T19233] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  474.045312][T19233] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  474.063302][T19233] Bluetooth: hci6: Opcode 0x0406 failed: -4
[  474.239400][T19275] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  474.239431][T19275] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  474.239453][T19275] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  475.238489][ T6792] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[  475.244708][ T5760] usb 2-1: USB disconnect, device number 14
[  475.286597][T18732] Bluetooth: hci3: command 0x0406 tx timeout
[  475.389076][ T6792] usb 10-1: Using ep0 maxpacket: 32
[  475.391382][ T6792] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  475.395120][ T6792] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  475.395141][ T6792] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  475.395159][ T6792] usb 10-1: config 0 interface 0 has no altsetting 0
[  475.417604][ T6792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.417621][ T6792] usb 10-1: Product: syz
[  475.417631][ T6792] usb 10-1: Manufacturer: syz
[  475.417641][ T6792] usb 10-1: SerialNumber: syz
[  475.477040][ T6792] usb 10-1: config 0 descriptor??
[  475.562290][T19325] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  475.881427][ T6792] gs_usb 10-1:0.0: Configuring for 1 interfaces
[  475.896422][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  476.014249][T18732] Bluetooth: hci4: command 0x0406 tx timeout
[  476.027303][    T9] usb 1-1: device descriptor read/64, error -71
[  476.086561][ T5619] Bluetooth: hci6: command 0x0405 tx timeout
[  476.086608][ T5619] Bluetooth: hci5: command 0x0406 tx timeout
[  476.267391][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  476.397708][    T9] usb 1-1: device descriptor read/64, error -71
[  476.506907][    T9] usb usb1-port1: attempt power cycle
[  476.691658][T19297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.692051][T19297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.848113][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  476.869623][    T9] usb 1-1: device descriptor read/8, error -71
[  477.108670][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  477.129396][    T9] usb 1-1: device descriptor read/8, error -71
[  477.225201][ T5279] gs_usb 10-1:0.0 can0: bit-timing not yet defined
[  477.243927][    T9] usb usb1-port1: unable to enumerate USB device
[  477.366666][T19336] Bluetooth: hci3: command 0x0406 tx timeout
[  477.645017][T19385] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1706'.
[  477.662465][T19385] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1706'.
[  477.751291][T19390] device-mapper: ioctl: populate_table: no targets specified
[  478.029336][ T6792] usb 10-1: USB disconnect, device number 35
[  478.086601][T19336] Bluetooth: hci4: command 0x0406 tx timeout
[  478.166787][T19336] Bluetooth: hci5: command 0x0406 tx timeout
[  478.166817][T19336] Bluetooth: hci6: command 0x0405 tx timeout
[  478.844097][T19435] sctp: [Deprecated]: syz.0.1712 (pid 19435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  478.844097][T19435] Use struct sctp_sack_info instead
[  479.069120][T19445] netlink: 'syz.1.1715': attribute type 4 has an invalid length.
[  479.232190][T19455] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  479.232791][T19453] device-mapper: ioctl: populate_table: no targets specified
[  479.439361][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.439388][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.439638][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.439665][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.442103][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.442125][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.442357][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.442377][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.442601][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.442620][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.444885][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.444908][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.445316][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1720'.
[  479.445338][T19464] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.816530][ T2222] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[  479.969418][ T2222] usb 10-1: unable to get BOS descriptor or descriptor too short
[  479.969523][ T2222] usb 10-1: New USB device found, idVendor=19d2, idProduct=1063, bcdDevice=71.b7
[  479.970488][ T2222] usb 10-1: config 3 has an invalid interface number: 140 but max is 0
[  479.970553][ T2222] usb 10-1: config 3 has no interface number 0
[  479.970628][ T2222] usb 10-1: config 3 interface 140 has no altsetting 0
[  479.972597][ T2222] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.972619][ T2222] usb 10-1: Product: syz
[  479.972629][ T2222] usb 10-1: Manufacturer: ㅅ낍䄍⚀퓎䄯ò杸䀙缒鯭禘廟䓼駶݂袲偓럸ﵞ떬࿭蔜줿셬仉혊ᎌ䭕ꞣﴭ㳃掷ﻗ煦ϩ䍚釰㣅쭎ㅕ
[  479.972645][ T2222] usb 10-1: SerialNumber: syz
[  480.208033][ T2222] option 10-1:3.140: GSM modem (1-port) converter detected
[  480.240792][ T2222] usb 10-1: USB disconnect, device number 36
[  480.242133][ T2222] option 10-1:3.140: device disconnected
[  480.246811][T18732] Bluetooth: hci6: command 0x0405 tx timeout
[  480.603375][T19512] netlink: 'syz.8.1732': attribute type 6 has an invalid length.
[  480.603394][T19512] netlink: 'syz.8.1732': attribute type 6 has an invalid length.
[  480.604629][T18732] Bluetooth: hci4: Malformed Event: 0x02
[  481.094396][ T2222] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  481.217014][ T2222] usb 1-1: device descriptor read/64, error -71
[  481.284603][T19535] device-mapper: ioctl: populate_table: no targets specified
[  481.457509][ T2222] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  481.586475][ T2222] usb 1-1: device descriptor read/64, error -71
[  481.697010][ T2222] usb usb1-port1: attempt power cycle
[  482.036750][ T2222] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  482.057142][ T2222] usb 1-1: device descriptor read/8, error -71
[  482.083220][T19557] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  482.296410][ T2222] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  482.318451][ T2222] usb 1-1: device descriptor read/8, error -71
[  482.395291][T19580] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1747'.
[  482.426598][ T2222] usb usb1-port1: unable to enumerate USB device
[  482.587562][ T5760] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  482.738146][ T5760] usb 2-1: unable to get BOS descriptor or descriptor too short
[  482.738559][ T5760] usb 2-1: not running at top speed; connect to a high speed hub
[  482.738580][ T5760] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  482.739381][ T5760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.739397][ T5760] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  482.741995][ T5760] usb 2-1: string descriptor 0 read error: -22
[  482.742072][ T5760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.844146][ T5760] usb 2-1: 0:1 : does not exist
[  483.331966][T19604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1752'.
[  483.415667][ T5760] usb 2-1: USB disconnect, device number 15
[  483.628512][T19625] jffs2: notice: (19625) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 4 orphan) and 8 of xref (4 dead, 0 orphan) found.
[  483.843371][T19639] device-mapper: ioctl: populate_table: no targets specified
[  483.877232][    T9] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[  484.027587][    T9] usb 10-1: Using ep0 maxpacket: 16
[  484.036991][    T9] usb 10-1: unable to get BOS descriptor or descriptor too short
[  484.037026][    T9] usb 10-1: New USB device found, idVendor=046d, idProduct=c343, bcdDevice= 0.40
[  484.038709][    T9] usb 10-1: config 1 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  484.038733][    T9] usb 10-1: config 1 interface 0 has no altsetting 0
[  484.041794][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.041812][    T9] usb 10-1: Product: syz
[  484.041823][    T9] usb 10-1: Manufacturer: syz
[  484.041834][    T9] usb 10-1: SerialNumber: syz
[  484.540354][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.540761][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.589146][    T9] usbhid 10-1:1.0: can't add hid device: -71
[  484.589245][    T9] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[  484.612975][    T9] usb 10-1: USB disconnect, device number 37
[  484.969284][   T32] INFO: task syz.4.977:13057 blocked for more than 143 seconds.
[  484.969306][   T32]       Tainted: G             L      syzkaller #0
[  484.969314][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  484.969321][   T32] task:syz.4.977       state:D stack:28544 pid:13057 tgid:13056 ppid:7121   task_flags:0x400140 flags:0x00080002
[  484.969369][   T32] Call Trace:
[  484.969375][   T32]  <TASK>
[  484.969385][   T32]  __schedule+0x17dd/0x5940
[  484.969431][   T32]  ? __pfx___schedule+0x10/0x10
[  484.969459][   T32]  ? schedule+0x90/0x2b0
[  484.969482][   T32]  schedule+0x164/0x2b0
[  484.969505][   T32]  schedule_preempt_disabled+0x13/0x30
[  484.969527][   T32]  __mutex_lock+0x7c4/0x15a0
[  484.969545][   T32]  ? __mutex_lock+0x5cd/0x15a0
[  484.969562][   T32]  ? write_ports+0xb5/0xd10
[  484.969683][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  484.969711][   T32]  write_ports+0xb5/0xd10
[  484.969732][   T32]  ? __pfx_write_ports+0x10/0x10
[  484.969761][   T32]  ? __might_fault+0xaf/0x130
[  484.969796][   T32]  ? _copy_from_user+0x94/0xb0
[  484.969820][   T32]  ? simple_transaction_get+0x12d/0x160
[  484.969843][   T32]  nfsctl_transaction_write+0x10f/0x160
[  484.969864][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  484.969902][   T32]  vfs_write+0x296/0xba0
[  484.969927][   T32]  ? __pfx_vfs_write+0x10/0x10
[  484.969948][   T32]  ? __fget_files+0x2a/0x420
[  484.969969][   T32]  ? __fget_files+0x3a2/0x420
[  484.969986][   T32]  ? __fget_files+0x2a/0x420
[  484.970009][   T32]  ksys_write+0x150/0x270
[  484.970047][   T32]  ? __pfx_ksys_write+0x10/0x10
[  484.970075][   T32]  do_syscall_64+0x166/0x520
[  484.970089][   T32]  ? trace_irq_disable+0x3b/0x140
[  484.970119][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.970136][   T32]  ? clear_bhb_loop+0x70/0xc0
[  484.970154][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.970170][   T32] RIP: 0033:0x7fa211d9e159
[  484.970183][   T32] RSP: 002b:00007fa212c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  484.970198][   T32] RAX: ffffffffffffffda RBX: 00007fa212025fa0 RCX: 00007fa211d9e159
[  484.970210][   T32] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000003
[  484.970220][   T32] RBP: 00007fa211e3503b R08: 0000000000000000 R09: 0000000000000000
[  484.970229][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.970238][   T32] R13: 00007fa212026038 R14: 00007fa212025fa0 R15: 00007ffc2a579b78
[  484.970261][   T32]  </TASK>
[  484.970267][   T32] INFO: task syz.4.977:13058 blocked for more than 143 seconds.
[  484.970280][   T32]       Tainted: G             L      syzkaller #0
[  484.970288][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  484.970295][   T32] task:syz.4.977       state:D stack:28008 pid:13058 tgid:13056 ppid:7121   task_flags:0x400140 flags:0x00080002
[  484.970338][   T32] Call Trace:
[  484.970343][   T32]  <TASK>
[  484.970352][   T32]  __schedule+0x17dd/0x5940
[  484.970383][   T32]  ? kernel_text_address+0xa5/0xe0
[  484.970410][   T32]  ? unwind_get_return_address+0x4d/0x90
[  484.970430][   T32]  ? __pfx___schedule+0x10/0x10
[  484.970457][   T32]  ? schedule+0x90/0x2b0
[  484.970480][   T32]  schedule+0x164/0x2b0
[  484.970502][   T32]  schedule_preempt_disabled+0x13/0x30
[  484.970523][   T32]  __mutex_lock+0x7c4/0x15a0
[  484.970540][   T32]  ? __mutex_lock+0x5cd/0x15a0
[  484.970557][   T32]  ? nfsd_nrthreads+0x4c/0xd0
[  484.970573][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  484.970595][   T32]  ? net_generic+0x1e/0x240
[  484.970610][   T32]  ? net_generic+0x1e/0x240
[  484.970627][   T32]  nfsd_nrthreads+0x4c/0xd0
[  484.970642][   T32]  write_threads+0x216/0x610
[  484.970663][   T32]  ? __pfx_write_threads+0x10/0x10
[  484.970693][   T32]  ? _copy_from_user+0x94/0xb0
[  484.970713][   T32]  ? simple_transaction_get+0x12d/0x160
[  484.970734][   T32]  nfsctl_transaction_write+0x10f/0x160
[  484.974292][   T32]  ? __pfx_nfsctl_transaction_write+0x10/0x10
[  484.974321][   T32]  vfs_write+0x296/0xba0
[  484.974350][   T32]  ? __pfx_vfs_write+0x10/0x10
[  484.974374][   T32]  ? __fget_files+0x2a/0x420
[  484.974398][   T32]  ? __fget_files+0x3a2/0x420
[  484.974417][   T32]  ? __fget_files+0x2a/0x420
[  484.974443][   T32]  ksys_write+0x150/0x270
[  484.974468][   T32]  ? __pfx_ksys_write+0x10/0x10
[  484.974498][   T32]  do_syscall_64+0x166/0x520
[  484.974513][   T32]  ? trace_irq_disable+0x3b/0x140
[  484.974536][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.974553][   T32]  ? clear_bhb_loop+0x70/0xc0
[  484.974573][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  484.974589][   T32] RIP: 0033:0x7fa211d9e159
[  484.974603][   T32] RSP: 002b:00007fa212c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  484.974620][   T32] RAX: ffffffffffffffda RBX: 00007fa212026090 RCX: 00007fa211d9e159
[  484.974632][   T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  484.974642][   T32] RBP: 00007fa211e3503b R08: 0000000000000000 R09: 0000000000000000
[  484.974651][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.974661][   T32] R13: 00007fa212026128 R14: 00007fa212026090 R15: 00007ffc2a579b78
[  484.974685][   T32]  </TASK>
[  484.974717][   T32] 
[  484.974717][   T32] Showing all locks held in the system:
[  484.974725][   T32] locks held by kworker/0:0/9: 3, on CPU#0:
[  484.974736][   T32]  #0: ffff88813ff42140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.974779][   T32]  #1: ffffc900000e7c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.974818][   T32]  #2: ffff8880293671d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120
[  484.974916][   T32] locks held by khungtaskd/32: 1, last CPU#0:
[  484.974928][   T32]  #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  484.974978][   T32] locks held by kworker/u8:6/150: 4, last CPU#0:
[  484.974990][   T32]  #0: ffff888031fad940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975029][   T32]  #1: ffffc90002e7fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975070][   T32]  #2: ffff88803499e1c8 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xd4/0xfc0
[  484.975153][   T32]  #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x41f/0xfc0
[  484.975213][   T32] locks held by kworker/u9:1/4934: 2, on CPU#0:
[  484.975224][   T32]  #0: ffff888026ad2140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975274][   T32]  #1: ffffc9000fcb7c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975312][   T32] locks held by getty/5373: 2, on CPU#1:
[  484.975322][   T32]  #0: ffff888035a7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  484.975365][   T32]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  484.975405][   T32] locks held by kworker/u9:3/5621: 2, on CPU#0:
[  484.975415][   T32]  #0: ffff888026ad2140 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975461][   T32]  #1: ffffc90003e9fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  484.975503][   T32] locks held by syz.7.921/12682: 3, on CPU#0:
[  484.975513][   T32]  #0: ffff8880348d49b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  484.975549][   T32]  #1: ffff88807f25e460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  484.975599][   T32]  #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  484.975639][   T32] locks held by syz.4.977/13057: 3, on CPU#0:
[  484.975649][   T32]  #0: ffff8880341900f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  484.975703][   T32]  #1: ffff88806128e460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  484.975745][   T32]  #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10
[  484.975782][   T32] locks held by syz.4.977/13058: 3, on CPU#0:
[  484.975792][   T32]  #0: ffff8880348d0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  484.975831][   T32]  #1: ffff88806128e460 (sb_writers
[  485.266874][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  485.510375][   T32] #25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  485.510418][   T32]  #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nrthreads+0x4c/0xd0
[  485.510459][   T32] locks held by syz-executor/13221: 4, last CPU#0:
[  485.510471][   T32]  #0: ffffffff8f0367f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x470
[  485.510510][   T32]  #1: ffff888078dab6b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  485.510552][   T32]  #2: ffff88802f524378 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  485.510596][   T32]  #3: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  485.510637][   T32] locks held by syz.5.1180/15173: 2, on CPU#0:
[  485.510648][   T32]  #0: ffffffff904dbbe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  485.510693][   T32]  #1: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  485.510735][   T32] locks held by syz.9.1756/19628: 2, last CPU#0:
[  485.510746][   T32]  #0: ffff88805052dcf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[  485.510785][   T32]  #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  485.510824][   T32] locks held by syz.1.1765/19677: 5, last CPU#0:
[  485.510835][   T32]  #0: ffff88803293a630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  485.510876][   T32]  #1: ffff8880296b2460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  485.510920][   T32]  #2: ffff88802ecf9ba0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: proc_pid_attr_write+0x543/0x630
[  485.510964][   T32]  #3: ffffffff8f090420 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_node_track_caller_noprof+0xb9/0x720
[  485.511008][   T32]  #4: ffffffff8f0a6760 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: fs_reclaim_acquire+0x7c/0x100
[  485.511059][   T32] locks held by syz.1.1765/19683: 1, on CPU#0:
[  485.511071][   T32]  #0: ffff88802ecf9ba0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590
[  485.555399][   T32] 
[  485.555410][   T32] =============================================
[  485.555410][   T32] 
[  485.555418][   T32] NMI backtrace for cpu 0
[  485.555432][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  485.555454][   T32] Tainted: [L]=SOFTLOCKUP
[  485.555461][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  485.555471][   T32] Call Trace:
[  485.555479][   T32]  <TASK>
[  485.555487][   T32]  dump_stack_lvl+0xe8/0x150
[  485.555513][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  485.555536][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  485.555561][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  485.555585][   T32]  sys_info+0x135/0x170
[  485.555659][   T32]  watchdog+0x1058/0x10d0
[  485.555689][   T32]  ? watchdog+0x209/0x10d0
[  485.555716][   T32]  kthread+0x38b/0x480
[  485.555747][   T32]  ? __pfx_watchdog+0x10/0x10
[  485.555769][   T32]  ? __pfx_kthread+0x10/0x10
[  485.555792][   T32]  ret_from_fork+0x514/0xb70
[  485.555826][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  485.555849][   T32]  ? __switch_to+0xc89/0x1420
[  485.555874][   T32]  ? __pfx_kthread+0x10/0x10
[  485.555898][   T32]  ret_from_fork_asm+0x1a/0x30
[  485.555931][   T32]  </TASK>
[  485.555947][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  486.167748][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  486.178422][   T32] Tainted: [L]=SOFTLOCKUP
[  486.182742][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  486.192792][   T32] Call Trace:
[  486.196084][   T32]  <TASK>
[  486.199014][   T32]  vpanic+0x56d/0xa70
[  486.203019][   T32]  ? __pfx_vpanic+0x10/0x10
[  486.207550][   T32]  ? console_srcu_read_unlock+0x3a/0x60
[  486.213134][   T32]  panic+0xc5/0xd0
[  486.216867][   T32]  ? __pfx_panic+0x10/0x10
[  486.221290][   T32]  ? nmi_cpu_backtrace+0x2b0/0x2d0
[  486.226408][   T32]  ? nmi_trigger_cpumask_backtrace+0x24d/0x390
[  486.232571][   T32]  watchdog+0x10cc/0x10d0
[  486.236914][   T32]  ? watchdog+0x209/0x10d0
[  486.241344][   T32]  kthread+0x38b/0x480
[  486.245441][   T32]  ? __pfx_watchdog+0x10/0x10
[  486.250127][   T32]  ? __pfx_kthread+0x10/0x10
[  486.254734][   T32]  ret_from_fork+0x514/0xb70
[  486.259353][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  486.264483][   T32]  ? __switch_to+0xc89/0x1420
[  486.269163][   T32]  ? __pfx_kthread+0x10/0x10
[  486.273754][   T32]  ret_from_fork_asm+0x1a/0x30
[  486.278540][   T32]  </TASK>
[  486.281648][   T32] Kernel Offset: disabled
[  486.286003][   T32] Rebooting in 86400 seconds..