last executing test programs:

6m18.263900411s ago: executing program 1 (id=304):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[<r4=>0x0], &(0x7f0000000300), 0x0, 0x1, 0x0, 0x0, r3})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f00000003c0)={0x9, r4, r3})

6m18.222230331s ago: executing program 1 (id=306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x2, 0x0, [{0x40000001, 0x10, 0x2, 0x5f, 0x8, 0x9, 0x6}, {0x6, 0xffdffff9, 0xe, 0x7, 0xe16, 0x2, 0x8}]})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000380)={0x4, @pix={0xe7, 0x9, 0x37303250, 0x5, 0x101, 0x9c9, 0x8, 0x8, 0x1, 0x7, 0x1, 0x2}})
socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000"], 0xb8}}, 0x20004000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
r9 = open(&(0x7f0000000440)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(r9, &(0x7f0000001300)='./file1/file0/../file0\x00', 0x88)

6m15.328916755s ago: executing program 1 (id=323):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000204c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

6m15.185226273s ago: executing program 1 (id=324):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x64}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48c1}, 0x0)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x5c, 0x453, 0x200, 0x70bd25, 0x25dfdbfe, "ab2668b09da9d9c44e34d39d45713b3221e43ac1741fe75cb183667405a1cd334fc953527e038b20eeaac1f7e02a6f559774315dd140fab5fa762af636adf1a4a9dfae472f6b82d6093f09", ["", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x49}, 0x40)

6m14.940016572s ago: executing program 1 (id=327):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000280)='./file1\x00')

6m14.648800289s ago: executing program 1 (id=328):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000084000000007200000000000020200000"], 0x38}, 0x41)

5m59.336036735s ago: executing program 32 (id=328):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000084000084000000007200000000000020200000"], 0x38}, 0x41)

40.863994573s ago: executing program 4 (id=2642):
mkdir(&(0x7f00000001c0)='./file1\x00', 0xb)
mkdir(&(0x7f0000000000)='./bus\x00', 0xdd)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x28, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x4040004)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r4 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000140)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80, 0x69)
lsetxattr$security_evm(&(0x7f0000000180)='./file2\x00', &(0x7f0000000200), &(0x7f0000000240)=@ng={0x4, 0x4, "186c7c9533e051da63a2aee573be"}, 0x10, 0x2)
mkdirat(r4, &(0x7f0000000340)='./file0\x00', 0xf3)
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)

40.703882575s ago: executing program 4 (id=2646):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
connect$llc(0xffffffffffffffff, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @broadcast}, 0x10)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x2800, @bt={0xb44, 0x870, 0x1, 0x0, 0x80000000d59f80, 0x19f2, 0x43, 0x19f3, 0x3, 0xb, 0x2800, 0x2, 0x2, 0xba2, 0xc, 0x30, {0x8, 0x5}, 0x5, 0x9}})

40.587645085s ago: executing program 4 (id=2648):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x34)
chdir(&(0x7f0000000040)='./file0\x00')
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x200}, 0x0)
accept4(r0, 0x0, 0x0, 0x800)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x185)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newsa={0x13c, 0x10, 0x413, 0x3, 0x25dfdbfb, {{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'aegis128l\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x4000)
lseek(r1, 0xfffffffffffffc01, 0x0)

40.399821522s ago: executing program 4 (id=2651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000001010000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)

36.55851043s ago: executing program 4 (id=2673):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x200, 0x8001000, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
r2 = landlock_create_ruleset(&(0x7f00000003c0)={0x1008, 0x2, 0x1}, 0x18, 0x2)
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40e0, 0x0)
dup3(r2, r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000040000000007cc"], 0x18}], 0x1}, 0x0)
chdir(&(0x7f0000000140)='./file1\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x220800, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x1000000000000, 0x2, 0x0, &(0x7f0000ffa000/0x4000)=nil)
r5 = open(&(0x7f0000000440)='.\x00', 0x0, 0x12d)
syz_clone(0x8000000, &(0x7f0000000080)="582a7492c8fa2465faafc329b0e025adf39d8b6eb444f3259b7f366a7cd045e38a92ebfe266cc8d94c755cf45a1c4120496a28734617195769e6c874b9935ae3f0a6a6b15e7e594d42d2366adde933219bdb1d5679b4247047f38be2fe1f8698cb0a872391c950f08f4217", 0x6b, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000280)="c3485dd4d2f1ead46eabcec42b5a126f0a2cdb7b0c9d04f43507b631fc87fa65c1ef4bffc1ff8cdcfa2090e6bf26ee711810f678a314e6e335edb0c3f21882a7803ebda963ce1c2fa7a40b7be7052831457e82274731329cb75be653e955ebeeabde99bc0fa5ce3b9d9b25b0d029360cf98d6868fe95fc890ffe0bcc5d6ff92a5073ddbf7e4dc42e0c")
ioctl$DVB_DEMUX_DMX_REQBUFS(r5, 0xc0086f3c, &(0x7f0000000200)={0x9, 0x5})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r5, 0x40049366, &(0x7f0000000000)=0x1)

36.01623714s ago: executing program 4 (id=2676):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

20.562316438s ago: executing program 33 (id=2676):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

4.986346043s ago: executing program 3 (id=2792):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
move_mount(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f0000000240)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1d, 0x1, 0x0, 0x2, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002cc0)="099ccccf84f531d9ec214606c11430c1", 0x10)
sendmmsg$alg(r5, &(0x7f0000000b40), 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000000000003, &(0x7f0000000080)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e27, 0xfffff6a6, @local, 0xa098}, {0xa, 0x4e21, 0x4, @mcast1, 0x109}, r7, 0x8005}}, 0x48)
r8 = socket$kcm(0x21, 0x2, 0x2)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
flock(r9, 0x5)
r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
flock(r10, 0x1)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
read$FUSE(r11, &(0x7f0000000a00)={0x2020}, 0x2020)
sendmsg$inet(r8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast1, @rand_addr=0x64010100}}}], 0x20}, 0x20014804)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f00000000c0)={0x2, 'batadv_slave_1\x00', {0x5}, 0xb})
r13 = syz_usb_connect(0x5, 0x7f8, &(0x7f0000000940)={{0x12, 0x1, 0x201, 0xea, 0x48, 0x84, 0x40, 0x66b, 0x2202, 0xa717, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e6, 0x1, 0x81, 0x1, 0x50, 0xd3, "", [{{0x9, 0x4, 0x66, 0x16, 0x10, 0x9, 0xf1, 0xcd, 0x1, [@generic={0xcf, 0x4, "f774d599d781ab5ff5b4f3d9e9f5eec07afbd5fb05e305dac351aa0937fc6c9f2ea0612c3159dd1483687c43c9e0b63521f84042861fa7bbee932f9e11d341af350cdd1e6a2f525300d5779117f5dbb0912708869a68fe1c555344dc5fcdcb8ecc04c771ede108a23489316a64b87b92ca8f5f6026491aa62ac2c0afd87bb5efdd235ddac38585aaf6bd97cc1b0d1c4419d099b5630af3fa26dafbf153002d180caca5fba67846707160cd5cfc66dc381ca129e12857b678848fc8bbfd72931fc41646f5d057666525da96ce02"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "c20950"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x9, 0x8, 0x9}, [@acm={0x4, 0x24, 0x2, 0x1}, @dmm={0x7, 0x24, 0x14, 0x5, 0x7}, @obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5}]}], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x4, 0x1, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x6f}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0xf9, 0xe, 0x5, [@generic={0x2c, 0xe, "13d86bc9d03feafa086cc77ec4ff5473f22f15e6c164325464e07455e5a97f45be3b1e5cbee4bdf2a7f1"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x6, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd5}, @generic={0x12, 0x22, "fe0def7669230980bb1cf6d87789b648"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x5, 0xf8, 0x85, [@generic={0x9a, 0xc, "44464e1d21e6b4b357eb3aacd8972955c81398b067c13eb8a647a5dcc592192471cea831810c3d4c153671b35c9638bebea580a5e2559ee3e1622f3fca7c6eb0dbf35e923ff1f02f9b695245b659d38739aeb6d5cd7e5e2096ec0d34e2307b4a1b9135c6828be4fdfc88cff59a7746e3830fdd4eceab033ba412a4c3ea642ef4d51f616ec3d5e89ad0a8a9550b1bcb778500c23e037ad350"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x42bc}, @generic={0xf4, 0x20, "6c509cb33eafaa7edda6b0f23ea526300e32e8afc4121a745a90d2a08617ce22c0085d1fc573fe0a2b3c8a85333901c118b301a6d54f945ea4267106c05ded3ed9266ea6d4996a437b13e8ac3ff85b3f9bbee3f016cce6184e74493d7991d5db2ec1eeb954e7b780ca89e4903b9a62c827189d4f94557ddfb3944ea0c49caddc859c4db774566758070b7b2ea7df4e84bc2dee949d0be5fdd63a31ae0d23505518792545a58df8ce87ffa77b1747b064c2629bbe446d04cd1b10eb88e6b1d414028492f4f7bf16968b33ddd1852013224a49f31ec5a11dd386b9bf59f5e0c22f063bd8e567afb829b5289d6b2d28bb2dda04"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x1, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x36, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x6}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x9, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x8}, @generic={0x7f, 0x21, "9ff54ca9b365c6fd4b14cd8faacfe1df1cf1cab929d644936691841702b7508f0585500c1a2355a87c71912c475353787471614cf123d3b96f9e2909bf4342b753c6d035179754dd5656dbc38c447b17f7402748c124c1aaa652e3da0e04f9b3031250066e0943087d14e350e62f4a50b5055561af086117d2e6e8eeb1"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x9}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x3, 0x1, 0x7f, [@generic={0x88, 0xa, "82b80939cfaff5a48eec6bc529363c426341130bc1ca948e2412ee8698eb4da5dc8ad0616b5b8c43482c5429121dd6964dd72c51f68827d10e9407cce5db451b7db8e64d75c15d2f42e93ba1816633bfec7932346358da8f8e423e41d6c23e861225ce25fb7dcc06efd16dc45938d25ea0251792798e09096d85d22ceff74c2110d1d67a45f4"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x8, 0xa, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x5, 0x8, 0x10, 0xd, 0x7, 0x9, [@generic={0x54, 0x24, "a7e9691a34b45901357f93d8cea1d876976b4245a1d8e872e3ffeb5f08f61a5c0908f47d306fd358d6152c2afb905fab8f51f23ed37d57cbe25cbb5e89f4e21e375faece44150830575ff8703d45439e3515"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x7a, 0x3}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x9, 0x4, 0x5, [@generic={0xcc, 0x24, "c7db6d36059d9f0fa37a9827be6c6605c83db62df6519a56c871c50150d11f42f73d3b5469610aa01ec06a89786fcce443f6d57597d3c559c1b2e7c3f3dfaaaa5b423fd8ba16790c83a50b1bf526ee0e3eaa8f3b832f23042d00d91658f2f25b759ea455ba05c5b8b5330d853974cfd3f0a89174b95815ec978e0f661305e883230d9beb04028dd58ac3771f2d675c13858502e111a9568a7abb2875eb289d7839619a676a0ded42f1f7a67d0ee766842fbd79fbfcb01f49b413a6fd676cf9555487991fc6f63d8f830c"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0x7, 0x7, 0x5, [@generic={0x5e, 0x24, "86ad79343f5707df6ea52d8982f8d18dbbeffcf2430938be2d36dfdd88440f0e141ada660dec2b1c8142c767339ec88c86ae5758b3aaa5c8878e62ad279a109e1a2a62eff6d9441568a65fea32712d5472555d4a1100c1aebbc30d95"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x10, 0xff, 0x0, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2f, 0x100}]}}, {{0x9, 0x5, 0x2, 0xe, 0x3ff, 0x8, 0x56, 0xf0, [@generic={0xcc, 0x24, "32ee63f81c07dafe0d22f3ba936cebccd5ab94efaa68bf2f1bcaf005499d27f89d4118d9ca68c0a7a439d8866c2fac1ef33d575dc82ca03b5e0a52aea747a83ccf3aa259064f4a6c820370ce50bcda7536a40a13bbde4ffe68c1b21055163c371253241d4b31c6055c6962c4e0fc7deb1733d7d8e70b549db788f5ddf8cd121e2a37c65951b1468fdb5d784153ed6ffb94ab63e99f39001724bebee956ac164532584d53361e0db9d87ec10eab2e12cd343aa7b7c2d0b26a4b7fc7affbd67561d01e2219faf42202f56a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0xff, 0x2, 0x80, [@generic={0xe3, 0x31, "c1ea095e36f6c594a518da37b9aca97329f6521896e532b28fcfc002ec823b4f4a9db827d8c7eff8838f82db4ccf7f047adb3bbf9ad82d8bcdcb06cff2931e28ea70bc6f7f36deee46a9864b81dcf6aa684768297ffb406502d5c5745f9cea399fe24c498ac08a7f08e57d0021ee9a70ed1b340c770d1133d6978788a84ee49a499b931d575e5ffd303c0a5efb05bcaa196a8d882079370b56f94cd3337d401e1c52b1e53f8d91094d6e4902a5cad6e64088509b60dce24338d552f59ec6dff12554477328ba440a38d65ac08876decdda5abbe8fe0f767b5732d20e2a5c237086"}]}}]}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x201, 0x9, 0x1, 0x9b, 0x10, 0x9}, 0x3f, &(0x7f0000001180)={0x5, 0xf, 0x3f, 0x5, [@ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x98, 0xf, 0x7, [0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3, 0x5, 0x2, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x81, 0x0, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x88, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9c, 0x1, 0xf8, 0x3ff, 0x6}]}, 0x4, [{0x3c, &(0x7f00000011c0)=@string={0x3c, 0x3, "fd8c50df175362a54b1de59364573f2be1abf987624ab5031604797964be59804967a1391ea085f4cae40d3293d00a631332df27b006f76f419a"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x1409}}, {0xcd, &(0x7f0000001240)=@string={0xcd, 0x3, "909f657a771fda8b4688a0c89aa632307f6e8fcbe71f146cd588eb284335bab73158b68db7985ed050eb29fbd28ea6653d26378cdcfe85af1d5728bfe3ace23381aa980b33de291e33cde75ef4f4ae6e0e322731a8f2bbe0b0dbcd0320fd9eae90207bdd7770e720b2b6bbeb6ad67e6631ecbc993b2f0a39418141316e7a3b904da8043449fc1824b51e0c558a1e190e0525061393534182584afce56a9a0c55707a20ef6f604df4f933a2c6ad65af28b5976cc2d51a21077f42e691b21c482fd5ab9765b4c45f3aa07fcc"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x3d}}]})
syz_usb_control_io$uac1(r13, &(0x7f00000015c0)={0x14, &(0x7f0000001400)={0x40, 0x3, 0x95, {0x95, 0x4, "96d0c31d57b186710034245c300d347196520d0715b90d7eb35b2d46168c934ca306d12b409deff2c635693b61b8a72b27a664820bd27b84251d346fbd0d745bdffd422f337c0c1478bacf955a91f21ab94ffa9f7629c0797367835afc63fe6ff7a2601a8c4ac43f450eb3bc5113c1c81fc267776d65b433a82d030013bb7aef94b91149e5596de8b9efc545070e1a1b87dcd6"}}, &(0x7f00000014c0)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "a2e852594ecc2a48670b42ec1e37cec73784295531bbff968d0562ef39831b1080dfbe0ebc236f2db2e47a45ac1bebf759c06dcfec86b4ccb91f09d32c3a5fe238a55e72d5bc430c637ffed1fd836704b2cea549e02052a57e061167009c0abb40e48fdf531a2c1776a9e93fa9c0a301c05376260b87d766047f90e223f91b9b01cb5fd637cf63f75ce79f27797f1a58792ed652c304e388588f95a929cceecf0919980f877e9d3b907ee59063b6cc03e76fd33885c186edc09d57c2799a1d4533193fc3"}}}, &(0x7f00000018c0)={0x44, &(0x7f0000001600)={0x20, 0x10, 0xe9, "7a5ef29c9721c5b392d9b09a350e54dfaa892adb2c9f0750bf8b021d9f9534a138f8eb1f272750777fe2547ea0119f416f7c7cdd65de6b07b0d7a86eebb6891bd9742e58d37b48a090ca2698006b4f72d08f5c335ad93363756456e3e7f22a43a710660177031f087fe79b434bc97c18d59ee540d4a76683750b74aaaba190cff43f9aa2dff5848ea5b06d4c3913b4adb702ee46f84407c38b5b9c8519aa10e147f72232959c8462728e54d9b615147be043e686587cd09aa7453d47d321d1336e8d34f159d6e33942785244c1aef00310938a17223e84082406a5890bd63fd00f066ba3eed08f4602"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001780)={0x20, 0x81, 0x1, "ae"}, &(0x7f00000017c0)={0x20, 0x82, 0x1, 'y'}, &(0x7f0000001800)={0x20, 0x83, 0x3, "94af35"}, &(0x7f0000001840)={0x20, 0x84, 0x3, "18c027"}, &(0x7f0000001880)={0x20, 0x85, 0x3, "747f30"}})
recvmsg(r5, 0x0, 0x40010162)

2.100821512s ago: executing program 2 (id=2801):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.766573526s ago: executing program 0 (id=2802):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900041844000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x35}, 0x60044084)

1.766037288s ago: executing program 3 (id=2803):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r2, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x4, 0x5, 0x800})

1.512233353s ago: executing program 2 (id=2804):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
gettid()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

1.468841336s ago: executing program 3 (id=2805):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x54000, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000000"], 0x30}], 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semctl$GETZCNT(r4, 0x6, 0xf, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x3}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000200)={0x10003, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r7 = dup(r6)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}], 0x1, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0x0, 0x9, 0xc, 0x0, 0x8, 0x1, 0x86, 0x2, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3b, '\x00', 0x8, 0x7ffffffffffffffe})
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
kexec_load(0x0, 0x10, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x3e0000000000}], 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'bond0\x00'})
r10 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x4)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r10, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r11)

1.353427802s ago: executing program 2 (id=2806):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x2, 0x2})
sendto$inet6(r0, &(0x7f00000004c0)="99", 0x1, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000280)=0x8)

1.229218612s ago: executing program 2 (id=2807):
socket(0x8000000010, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
socket$unix(0x1, 0x5, 0x0)
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = epoll_create1(0x80000)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c932, 0x7000000, 0x1, 0x3}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000058650a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c8011}, 0x0)

1.198677989s ago: executing program 2 (id=2808):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r3, 0x101, 0x0, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3}}}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}]]}, 0x30}}, 0x20004800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000180)={&(0x7f0000000240)={0x5c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xfffffffffffffff9, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x10001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1def}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x401}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000041}, 0x84)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x242080, 0x0)
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r1, 0x2000000})
ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0xb, 0xffffffffffffffff, 0x0, r1})

1.163636584s ago: executing program 0 (id=2809):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x6, 0x0, [{0xfabdd74a96db8d6c, 0xffffffff, 0x1, 0xffffff89, 0x800, 0x6, 0x48d4}, {0x0, 0x4, 0x0, 0x8, 0xb, 0x7, 0x5}, {0x8000000e, 0x1ff, 0x1, 0x403ff, 0x7ffffdff, 0x8005, 0xffef}, {0x80000019, 0x2, 0x0, 0x7, 0x0, 0x2, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x4, 0x7ff, 0x5e36}, {0xb, 0xd, 0x1, 0x3, 0x3, 0x2, 0x3}]})

967.918077ms ago: executing program 2 (id=2810):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef", 0xa6, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b414330e5cff90a", 0xee, 0x5, 0xffffffff}, {&(0x7f0000000200), 0x0, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {0x0, 0x0, 0x5, 0x6}], 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f", 0x6}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0xe4ffffffffffffff)

845.252557ms ago: executing program 5 (id=2734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d9f0c2f0081e949b93897bc3b88a8000000007d01ff02000000000000000000000000000112"], 0xfdef)

807.203743ms ago: executing program 0 (id=2811):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x5e25, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES16=r0, @ANYRESHEX, @ANYBLOB="d123fff9fffffffffff352", @ANYRES8=r0, @ANYRESHEX=r0], 0x7c}}, 0x40)

728.030825ms ago: executing program 0 (id=2812):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d80762ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, r2, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0xb, 0x4, 0x5, 0x800})

695.765446ms ago: executing program 0 (id=2813):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
gettid()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

640.985275ms ago: executing program 0 (id=2814):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000200004025059d774000010203010902640002010000000904010001020d00000524060001"], 0x0)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000009c0)=0x2f, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
ppoll(&(0x7f0000000000)=[{r0, 0xc008}, {r1, 0x100}, {0xffffffffffffffff, 0xc014}, {r2, 0x81}], 0x4, &(0x7f0000000300), &(0x7f0000000340)={[0x50e9]}, 0x8)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000020711e0f204000010203010902240001010b000309e3cc0a0103016af109210100fe01227d0f0905810300022402025c7834760c2689f7c03b19c3a47e3990a32d014d8249dfa12ef3e6e64c242918e5138035a28621ce5fb1735a0b6f7b87f0113665cb17c5fa8018d7e74e6e73427b66dde63a2651ec04c12345bdc24126dd6819"], &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x1, 0x62, 0x10, 0x8, 0xe0}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xd5, &(0x7f0000000100)=@string={0xd5, 0x3, "6eb5324cc47571363f9b0bed67d289f68e1b60aa9db01926c655722bb640fe29f5081faccc56e8b597b10ae6fbbe54dfe0b6fe799b2b4ccf5d44a2d38b169c17f55a8c453fbd98a4cff0ae0ca206eb6203ecec1741dc5f78ecafdec3e2e2399b4c2e1a7c0b7874d4ee190a0fe4f5ee42ce3b92dd861bd9914bdae0742ecc515d2a503adef6dc6172b9d7c0ca24a353d227972656b1e3f916c9cb2ab4d0fe04955da0dc1aad0e928623034d009f4aeb4dc27906f1529199affead0cf18d4becaddd1967ffa3f90fe14856f9ff42f91105834f2e"}}]})

408.05279ms ago: executing program 3 (id=2815):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x1000000000000000}, 0x0)

258.682851ms ago: executing program 3 (id=2816):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000600)={0x81, 0x1f, 0x18})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000000000000000000000000600020000100000", @ANYRES32=r0], 0x64}, 0x1, 0x620b}, 0x0)

117.4548ms ago: executing program 3 (id=2817):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000240)=0x5, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000030c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x5, @local, 0x9}, 0x1c, &(0x7f0000000340)=[{&(0x7f00000001c0)="b5f8146f98a5", 0x6}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000002900000004"], 0x118}}], 0x1, 0x40)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1)
write$cgroup_int(r2, &(0x7f0000000140)=0xfe5f, 0x12)
write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x7f, 0x8, {0xffffffffffffffff}, {<r3=>0xffffffffffffffff}, 0xfffffffffffffff1, 0xb})
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xf)
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000502, r3, &(0x7f0000000080))

0s ago: executing program 5 (id=2818):
ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x20, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r3=>0x0})
sendmmsg$sock(r1, &(0x7f0000002b80)=[{{&(0x7f0000000b40)=@ll={0x11, 0x7, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x80, 0x0}}], 0x1, 0x200088d0)
ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000a40)=[{0x25, '\x00', @buffer={"6aa7731b8a9459b19af76075f484d2f24e5631e384a523f8c03d0fb880e70389", 0x20}, 0x4}, {0x1c, '\x00', @buffer={"005c5ee2e9c549edf9040a1acd19f72336a9dcfe038d87cf1b00", 0x20}, 0x9}, {0x1d, '\x00', @st={0x4, [{0x0, @svalue=0xc}, {}, {0x1, @svalue=0x9}, {0x2, @svalue=0x4}]}, 0x1}]})

kernel console output (not intermixed with test programs):

:00007f8b72a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  433.348597][T17382] RAX: ffffffffffffffda RBX: 00007f8b74a35fa0 RCX: 00007f8b747bce59
[  433.348604][T17382] RDX: 00002000000008c0 RSI: 00000000401c5820 RDI: 0000000000000003
[  433.348610][T17382] RBP: 00007f8b72a16090 R08: 0000000000000000 R09: 0000000000000000
[  433.348617][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  433.348623][T17382] R13: 00007f8b74a36038 R14: 00007f8b74a35fa0 R15: 00007ffe017aa9e8
[  433.348637][T17382]  </TASK>
[  434.038679][T17415] proc: Unknown parameter 'norecovery'
[  434.055945][T17415] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2330'.
[  434.299515][T17422] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2332'.
[  434.333799][T17422] netlink: 'syz.0.2332': attribute type 23 has an invalid length.
[  434.499578][T17431] FAULT_INJECTION: forcing a failure.
[  434.499578][T17431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.499612][T17431] CPU: 0 UID: 0 PID: 17431 Comm: syz.0.2336 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  434.499637][T17431] Tainted: [L]=SOFTLOCKUP
[  434.499643][T17431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  434.499653][T17431] Call Trace:
[  434.499661][T17431]  <TASK>
[  434.499668][T17431]  dump_stack_lvl+0xe8/0x150
[  434.499693][T17431]  should_fail_ex+0x46b/0x600
[  434.499742][T17431]  _copy_from_user+0x2d/0xb0
[  434.499766][T17431]  msr_io+0xab/0x8b0
[  434.499789][T17431]  ? kvm_arch_vcpu_ioctl+0x12eb/0x2ff0
[  434.499810][T17431]  ? __pfx_do_get_msr+0x10/0x10
[  434.499829][T17431]  ? kvm_arch_vcpu_ioctl+0x12eb/0x2ff0
[  434.499856][T17431]  ? __pfx_msr_io+0x10/0x10
[  434.499878][T17431]  ? __srcu_check_read_flavor+0x10b/0x250
[  434.499903][T17431]  kvm_arch_vcpu_ioctl+0x1328/0x2ff0
[  434.499926][T17431]  ? kvm_arch_vcpu_ioctl+0x12eb/0x2ff0
[  434.499946][T17431]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  434.499968][T17431]  ? unwind_next_frame+0xa6/0x2550
[  434.499992][T17431]  ? is_bpf_text_address+0x26/0x2b0
[  434.500022][T17431]  ? is_bpf_text_address+0x26/0x2b0
[  434.500045][T17431]  ? is_bpf_text_address+0x292/0x2b0
[  434.500064][T17431]  ? is_bpf_text_address+0x26/0x2b0
[  434.500087][T17431]  ? kernel_text_address+0xa5/0xe0
[  434.500109][T17431]  ? __kernel_text_address+0xd/0x30
[  434.500128][T17431]  ? unwind_get_return_address+0x4d/0x90
[  434.500151][T17431]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  434.500169][T17431]  ? arch_stack_walk+0xfb/0x150
[  434.500203][T17431]  ? stack_trace_save+0xa9/0x100
[  434.500220][T17431]  ? __pfx_stack_trace_save+0x10/0x10
[  434.500235][T17431]  ? kasan_save_free_info+0x46/0x50
[  434.500262][T17431]  ? stack_depot_save_flags+0x33/0x810
[  434.500290][T17431]  ? kasan_save_track+0x4f/0x80
[  434.500305][T17431]  ? kasan_save_track+0x3e/0x80
[  434.500320][T17431]  ? kasan_save_free_info+0x46/0x50
[  434.500341][T17431]  ? __kasan_slab_free+0x5c/0x80
[  434.500357][T17431]  ? kfree+0x1c5/0x6c0
[  434.500373][T17431]  ? tomoyo_path_number_perm+0x501/0x630
[  434.500395][T17431]  ? security_file_ioctl+0xc3/0x2a0
[  434.500415][T17431]  ? __se_sys_ioctl+0x47/0x170
[  434.500435][T17431]  ? do_syscall_64+0x15f/0x560
[  434.500457][T17431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.500494][T17431]  ? __lock_acquire+0x6b5/0x2d10
[  434.500552][T17431]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  434.500576][T17431]  ? lockdep_hardirqs_on+0x7a/0x110
[  434.500598][T17431]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  434.500620][T17431]  ? _mutex_lock_killable+0x152/0x1d0
[  434.500639][T17431]  ? kvm_vcpu_ioctl+0x283/0xfe0
[  434.500666][T17431]  kvm_vcpu_ioctl+0x7e7/0xfe0
[  434.500696][T17431]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  434.500739][T17431]  ? __fget_files+0x2a/0x420
[  434.500761][T17431]  ? __fget_files+0x2a/0x420
[  434.500777][T17431]  ? __fget_files+0x3a6/0x420
[  434.500793][T17431]  ? __fget_files+0x2a/0x420
[  434.500814][T17431]  ? bpf_lsm_file_ioctl+0x9/0x20
[  434.500836][T17431]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  434.500870][T17431]  __se_sys_ioctl+0xff/0x170
[  434.500891][T17431]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.500910][T17431]  do_syscall_64+0x15f/0x560
[  434.500932][T17431]  ? trace_irq_disable+0x3b/0x140
[  434.500952][T17431]  ? clear_bhb_loop+0x40/0x90
[  434.500974][T17431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.500992][T17431] RIP: 0033:0x7f82f3a9ce59
[  434.501010][T17431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.501024][T17431] RSP: 002b:00007f82f1cee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  434.501044][T17431] RAX: ffffffffffffffda RBX: 00007f82f3d15fa0 RCX: 00007f82f3a9ce59
[  434.501058][T17431] RDX: 0000200000000080 RSI: 00000000c008ae88 RDI: 0000000000000005
[  434.501070][T17431] RBP: 00007f82f1cee090 R08: 0000000000000000 R09: 0000000000000000
[  434.501082][T17431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  434.501093][T17431] R13: 00007f82f3d16038 R14: 00007f82f3d15fa0 R15: 00007ffd0f8305a8
[  434.501123][T17431]  </TASK>
[  434.701979][T17435] fuse: Bad value for 'fd'
[  435.077108][T17457] netlink: 'syz.2.2344': attribute type 27 has an invalid length.
[  435.077282][T17457] C: entered promiscuous mode
[  435.077303][T17457] C: entered allmulticast mode
[  435.092200][T17457] tunl0: entered promiscuous mode
[  435.092223][T17457] tunl0: entered allmulticast mode
[  435.101442][T17457] gre0: entered promiscuous mode
[  435.101464][T17457] gre0: entered allmulticast mode
[  435.128585][T17457] gretap0: entered promiscuous mode
[  435.128611][T17457] gretap0: entered allmulticast mode
[  435.136190][T17457] erspan0: entered promiscuous mode
[  435.136211][T17457] erspan0: entered allmulticast mode
[  435.141946][T17457] ip_vti0: entered promiscuous mode
[  435.141967][T17457] ip_vti0: entered allmulticast mode
[  435.161468][T17457] ip6_vti0: entered promiscuous mode
[  435.161489][T17457] ip6_vti0: entered allmulticast mode
[  435.167713][T17457] sit0: entered promiscuous mode
[  435.167732][T17457] sit0: entered allmulticast mode
[  435.188744][T17457] ip6tnl0: entered promiscuous mode
[  435.188758][T17457] ip6tnl0: entered allmulticast mode
[  435.190358][T17457] ip6gre0: entered promiscuous mode
[  435.190370][T17457] ip6gre0: entered allmulticast mode
[  435.191987][T17457] syz_tun: entered promiscuous mode
[  435.192007][T17457] syz_tun: entered allmulticast mode
[  435.207724][T17457] ip6gretap0: entered promiscuous mode
[  435.207745][T17457] ip6gretap0: entered allmulticast mode
[  435.214529][T17457] bridge0: entered promiscuous mode
[  435.214817][T17457] bridge0: entered allmulticast mode
[  435.217326][T17457] vcan0: entered promiscuous mode
[  435.217344][T17457] vcan0: entered allmulticast mode
[  435.219300][T17457] .`: entered promiscuous mode
[  435.219316][T17457] bond_slave_0: entered promiscuous mode
[  435.219450][T17457] bond_slave_1: entered promiscuous mode
[  435.219590][T17457] .`: entered allmulticast mode
[  435.219602][T17457] bond_slave_0: entered allmulticast mode
[  435.219620][T17457] bond_slave_1: entered allmulticast mode
[  435.221526][T17457] 8021q: adding VLAN 0 to HW filter on device .`
[  435.233386][T17457] team0: entered promiscuous mode
[  435.233401][T17457] team_slave_0: entered promiscuous mode
[  435.233586][T17457] team_slave_1: entered promiscuous mode
[  435.233769][T17457] team0: entered allmulticast mode
[  435.233780][T17457] team_slave_0: entered allmulticast mode
[  435.233799][T17457] team_slave_1: entered allmulticast mode
[  435.235766][T17457] 8021q: adding VLAN 0 to HW filter on device team0
[  435.237054][T17457] nlmon0: entered promiscuous mode
[  435.237073][T17457] nlmon0: entered allmulticast mode
[  435.241148][T17457] batadv0: entered promiscuous mode
[  435.241167][T17457] batadv0: entered allmulticast mode
[  435.250994][T17457] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.252023][T17457] vxcan0: entered promiscuous mode
[  435.252042][T17457] vxcan0: entered allmulticast mode
[  435.256069][T17457] vxcan1: entered promiscuous mode
[  435.256087][T17457] vxcan1: entered allmulticast mode
[  435.257908][T17457] veth0: entered promiscuous mode
[  435.257927][T17457] veth0: entered allmulticast mode
[  435.261849][T17457] veth1: entered promiscuous mode
[  435.261875][T17457] veth1: entered allmulticast mode
[  435.296247][T17457] wg0: entered promiscuous mode
[  435.296271][T17457] wg0: entered allmulticast mode
[  435.400243][T17457] wg1: entered promiscuous mode
[  435.400267][T17457] wg1: entered allmulticast mode
[  435.401633][ T5805] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  435.488086][T17457] wg2: entered promiscuous mode
[  435.488107][T17457] wg2: entered allmulticast mode
[  435.491561][T17457] veth0_to_bridge: entered promiscuous mode
[  435.491579][T17457] veth0_to_bridge: entered allmulticast mode
[  435.516532][T17457] veth1_to_bridge: entered promiscuous mode
[  435.516554][T17457] veth1_to_bridge: entered allmulticast mode
[  435.527903][T17457] veth0_to_bond: entered promiscuous mode
[  435.527924][T17457] veth0_to_bond: entered allmulticast mode
[  435.535160][T17457] veth1_to_bond: entered promiscuous mode
[  435.535179][T17457] veth1_to_bond: entered allmulticast mode
[  435.538677][T17457] veth0_to_team: entered promiscuous mode
[  435.538694][T17457] veth0_to_team: entered allmulticast mode
[  435.542174][T17457] veth1_to_team: entered promiscuous mode
[  435.542189][T17457] veth1_to_team: entered allmulticast mode
[  435.548807][T17457] veth0_to_batadv: entered promiscuous mode
[  435.548828][T17457] veth0_to_batadv: entered allmulticast mode
[  435.551404][T17457] batadv_slave_0: entered promiscuous mode
[  435.551423][T17457] batadv_slave_0: entered allmulticast mode
[  435.554700][T17457] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.555253][T17457] veth1_to_batadv: entered promiscuous mode
[  435.555271][T17457] veth1_to_batadv: entered allmulticast mode
[  435.558806][T17457] batadv_slave_1: entered promiscuous mode
[  435.558825][T17457] batadv_slave_1: entered allmulticast mode
[  435.561229][T17457] batman_adv: batadv0: Interface activated: batadv_slave_1
[  435.561758][T17457] xfrm0: entered promiscuous mode
[  435.561776][T17457] xfrm0: entered allmulticast mode
[  435.562678][ T5805] usb 5-1: Using ep0 maxpacket: 32
[  435.571978][T17457] veth0_to_hsr: entered promiscuous mode
[  435.571998][T17457] veth0_to_hsr: entered allmulticast mode
[  435.575160][ T5805] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  435.575181][ T5805] usb 5-1: config 0 has no interface number 0
[  435.575223][ T5805] usb 5-1: config 0 interface 184 has no altsetting 0
[  435.579382][ T5805] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  435.579406][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  435.579423][ T5805] usb 5-1: Product: syz
[  435.579436][ T5805] usb 5-1: Manufacturer: syz
[  435.579449][ T5805] usb 5-1: SerialNumber: syz
[  435.589125][T17457] hsr_slave_0: entered allmulticast mode
[  435.596107][T17457] veth1_to_hsr: entered promiscuous mode
[  435.596127][T17457] veth1_to_hsr: entered allmulticast mode
[  435.613189][T17457] hsr_slave_1: entered allmulticast mode
[  435.618785][T17457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  435.618805][T17457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  435.618894][T17457] hsr0: entered promiscuous mode
[  435.618913][T17457] hsr0: entered allmulticast mode
[  435.621448][ T5805] usb 5-1: config 0 descriptor??
[  435.639711][T17457] veth1_virt_wifi: entered promiscuous mode
[  435.639731][T17457] veth1_virt_wifi: entered allmulticast mode
[  435.644964][T17457] veth0_virt_wifi: entered promiscuous mode
[  435.644987][T17457] veth0_virt_wifi: entered allmulticast mode
[  435.649170][T17457] virt_wifi0: entered promiscuous mode
[  435.649190][T17457] virt_wifi0: entered allmulticast mode
[  435.655795][T17457] veth1_vlan: left promiscuous mode
[  435.655816][T17457] veth1_vlan: entered promiscuous mode
[  435.656614][T17457] veth1_vlan: entered allmulticast mode
[  435.661169][T17457] veth0_vlan: left promiscuous mode
[  435.661193][T17457] veth0_vlan: entered promiscuous mode
[  435.661768][T17457] veth0_vlan: entered allmulticast mode
[  435.684609][T17457] vlan0: entered promiscuous mode
[  435.684980][T17457] vlan0: entered allmulticast mode
[  435.690949][T17457] vlan1: entered promiscuous mode
[  435.691255][T17457] vlan1: entered allmulticast mode
[  435.696792][T17457] macvlan0: entered promiscuous mode
[  435.697103][T17457] macvlan0: entered allmulticast mode
[  435.705886][T17457] macvlan1: entered promiscuous mode
[  435.706180][T17457] macvlan1: entered allmulticast mode
[  435.709962][T17457] ipvlan0: entered promiscuous mode
[  435.709985][T17457] ipvlan0: entered allmulticast mode
[  435.718052][T17457] ipvlan1: entered promiscuous mode
[  435.718076][T17457] ipvlan1: entered allmulticast mode
[  435.722254][T17457] veth1_macvtap: left promiscuous mode
[  435.722275][T17457] veth1_macvtap: entered promiscuous mode
[  435.722290][T17457] veth1_macvtap: entered allmulticast mode
[  435.727532][T17457] veth0_macvtap: left promiscuous mode
[  435.727555][T17457] veth0_macvtap: entered promiscuous mode
[  435.727651][T17457] veth0_macvtap: entered allmulticast mode
[  435.732363][T17457] macvtap0: entered promiscuous mode
[  435.733209][T17457] macvtap0: entered allmulticast mode
[  435.742337][T17457] macsec0: entered promiscuous mode
[  435.743380][T17457] macsec0: entered allmulticast mode
[  435.774818][T17457] geneve0: entered promiscuous mode
[  435.774841][T17457] geneve0: entered allmulticast mode
[  435.794330][T17457] geneve1: entered promiscuous mode
[  435.794349][T17457] geneve1: entered allmulticast mode
[  435.851539][T17457] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  435.851572][T17457] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  435.867518][T17457] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  435.878746][T17457] netdevsim netdevsim2 netdevsim1: entered promiscuous mode
[  435.878827][T17457] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  435.886856][T17457] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  435.893685][ T5617] Bluetooth: hci4: command 0x1003 tx timeout
[  435.915601][   T60] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  436.014794][T17457] netdevsim netdevsim2 netdevsim2: entered promiscuous mode
[  436.014879][T17457] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  436.051053][T17457] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  436.121497][T17457] netdevsim netdevsim2 netdevsim3: entered promiscuous mode
[  436.121520][T17457] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  436.123006][T17457] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  436.211125][T17457] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  436.211157][T17457] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  436.244395][T17457] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  436.244429][T17457] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  436.245182][T17460] netlink: 'syz.4.2345': attribute type 3 has an invalid length.
[  436.269247][T17457] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  436.269304][T17457] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  436.270021][T17457] syztnl0: entered promiscuous mode
[  436.270038][T17457] syztnl0: entered allmulticast mode
[  436.317355][T17470] fuse: Bad value for 'fd'
[  436.364209][  T157] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.364429][  T157] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.382502][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.389829][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.475763][   T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.510348][ T5805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  436.510374][ T5805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  436.510392][ T5805] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  436.510678][ T5805] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  436.602085][ T5805] usb 5-1: USB disconnect, device number 60
[  436.647428][   T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.647813][   T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.648007][   T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.834657][    T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  436.982825][    T9] usb 1-1: Using ep0 maxpacket: 16
[  436.985440][    T9] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  436.985464][    T9] usb 1-1: config 1 has no interface number 0
[  436.985503][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  436.985526][    T9] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  436.985548][    T9] usb 1-1: config 1 interface 105 has no altsetting 0
[  436.995257][    T9] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  436.995282][    T9] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  436.995301][    T9] usb 1-1: Product: syz
[  436.995315][    T9] usb 1-1: Manufacturer: syz
[  436.995327][    T9] usb 1-1: SerialNumber: syz
[  437.002500][T17472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.003120][T17472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.406810][T17472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.406949][T17472] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  437.612142][    T9] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  437.612417][    T9] aqc111 1-1:1.105: probe with driver aqc111 failed with error -71
[  437.622421][    T9] usb 1-1: USB disconnect, device number 96
[  437.922794][ T5805] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  438.074434][ T5805] usb 3-1: Using ep0 maxpacket: 32
[  438.083805][ T5805] usb 3-1: unable to get BOS descriptor or descriptor too short
[  438.086006][ T5805] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[  438.086029][ T5805] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  438.086047][ T5805] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[  438.086067][ T5805] usb 3-1: config 128 has no interface number 0
[  438.086107][ T5805] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  438.086130][ T5805] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  438.086150][ T5805] usb 3-1: config 128 interface 127 has no altsetting 0
[  438.093343][ T5805] usb 3-1: language id specifier not provided by device, defaulting to English
[  438.095898][ T5805] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  438.095922][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.095940][ T5805] usb 3-1: Product: syz
[  438.095952][ T5805] usb 3-1: Manufacturer: syz
[  438.095965][ T5805] usb 3-1: SerialNumber: syz
[  438.378814][ T5805] usb 3-1: USB disconnect, device number 89
[  438.400430][T12376] udevd[12376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.595747][T17562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2360'.
[  439.122856][ T5805] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  439.276154][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  439.276186][ T5805] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 76
[  439.281225][ T5805] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  439.281252][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.281271][ T5805] usb 3-1: Product: syz
[  439.281283][ T5805] usb 3-1: Manufacturer: syz
[  439.281296][ T5805] usb 3-1: SerialNumber: syz
[  439.295008][ T5805] usb 3-1: config 0 descriptor??
[  439.297822][T17576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  439.297991][T17576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  439.833230][   T38] audit: type=1326 audit(1779537403.599:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17575 comm="syz.2.2364" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b747bce59 code=0x0
[  439.919622][T17589] fuse: Bad value for 'group_id'
[  439.919669][T17589] fuse: Bad value for 'group_id'
[  439.989414][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  440.009433][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  440.210649][ T5805] dm9601 3-1:0.0: probe with driver dm9601 failed with error -71
[  440.234138][ T5805] usb 3-1: USB disconnect, device number 90
[  440.360877][T17617] netlink: 'syz.0.2368': attribute type 21 has an invalid length.
[  440.361531][T17615] netlink: 'syz.0.2368': attribute type 21 has an invalid length.
[  440.367404][ T4339] Bluetooth: Error in BCSP hdr checksum
[  440.602720][ T5805] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  440.620310][ T4339] Bluetooth: Error in BCSP hdr checksum
[  440.755223][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.755248][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.755269][ T5805] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  440.755281][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.759768][ T5805] usb 3-1: config 0 descriptor??
[  440.873095][   T67] Bluetooth: Error in BCSP hdr checksum
[  441.133230][  T157] Bluetooth: Error in BCSP hdr checksum
[  441.169206][ T5805] hid (null): global environment stack underflow
[  441.169288][ T5805] hid (null): global environment stack underflow
[  441.169295][ T5805] hid (null): unknown global tag 0xd
[  441.174018][ T5805] hid_parser_main: 270 callbacks suppressed
[  441.174053][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.174081][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176447][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176475][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176500][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176524][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176550][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176574][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176597][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.176620][ T5805] asus 0003:0B05:1ABE.0023: unknown main item tag 0x0
[  441.183110][ T5805] asus 0003:0B05:1ABE.0023: global environment stack underflow
[  441.183128][ T5805] asus 0003:0B05:1ABE.0023: item 0 2 1 11 parsing failed
[  441.183796][ T5805] asus 0003:0B05:1ABE.0023: Asus hid parse failed: -22
[  441.183890][ T5805] asus 0003:0B05:1ABE.0023: probe with driver asus failed with error -22
[  441.394767][ T5723] usb 3-1: USB disconnect, device number 91
[  441.497855][T17658] fuse: Bad value for 'group_id'
[  441.497874][T17658] fuse: Bad value for 'group_id'
[  441.981596][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'.
[  442.170874][T17670] binder: 17669:17670 ioctl c0306201 200000000080 returned -14
[  442.176469][T17670] binder: 17669:17670 ioctl c0306201 2000000003c0 returned -14
[  442.236672][T17674] tmpfs: Bad value for 'mpol'
[  442.373227][ T5617] Bluetooth: hci4: command 0x1003 tx timeout
[  442.373491][   T60] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  442.513012][  T822] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  442.685188][  T822] usb 3-1: config index 0 descriptor too short (expected 14135, got 18)
[  442.685215][  T822] usb 3-1: config 55 has too many interfaces: 55, using maximum allowed: 32
[  442.685232][  T822] usb 3-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config
[  442.685242][  T822] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 55
[  442.685269][  T822] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  442.685281][  T822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.873090][ T5723] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  442.911221][  T822] usb 3-1: string descriptor 0 read error: -71
[  442.928453][  T822] usb 3-1: USB disconnect, device number 92
[  442.933730][ T5701] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  443.034550][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.034582][ T5723] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.034602][ T5723] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  443.034628][ T5723] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  443.034640][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.039142][ T5723] usb 5-1: config 0 descriptor??
[  443.086071][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.086100][ T5701] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.086135][ T5701] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  443.086155][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.097703][ T5701] usb 1-1: config 0 descriptor??
[  443.504605][ T5723] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  443.549347][ T5701] hid (null): global environment stack underflow
[  443.549470][ T5701] hid (null): global environment stack underflow
[  443.549482][ T5701] hid (null): unknown global tag 0xd
[  443.583426][ T5701] asus 0003:0B05:1ABE.0025: global environment stack underflow
[  443.583446][ T5701] asus 0003:0B05:1ABE.0025: item 0 2 1 11 parsing failed
[  443.584031][ T5701] asus 0003:0B05:1ABE.0025: Asus hid parse failed: -22
[  443.584090][ T5701] asus 0003:0B05:1ABE.0025: probe with driver asus failed with error -22
[  443.751505][  T822] usb 1-1: USB disconnect, device number 97
[  444.657321][T17776] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2395'.
[  444.673382][ T5723] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  444.812809][ T5723] usb 4-1: device descriptor read/64, error -71
[  445.054819][ T5723] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  445.192723][ T5723] usb 4-1: device descriptor read/64, error -71
[  445.314335][ T5723] usb usb4-port1: attempt power cycle
[  445.662899][ T5723] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  445.685043][ T5723] usb 4-1: device descriptor read/8, error -71
[  445.924914][ T5723] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  445.944944][ T5723] usb 4-1: device descriptor read/8, error -71
[  446.007087][ T5810] usb 5-1: reset high-speed USB device number 61 using dummy_hcd
[  446.064208][ T5723] usb usb4-port1: unable to enumerate USB device
[  446.206530][ T5810] usb 5-1: device firmware changed
[  446.256270][   T32] usb 5-1: USB disconnect, device number 61
[  446.452723][   T32] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  446.605601][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  446.605632][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  446.605667][   T32] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  446.605688][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.617951][   T32] usb 5-1: config 0 descriptor??
[  447.069615][   T32] hid (null): global environment stack underflow
[  447.069736][   T32] hid (null): global environment stack underflow
[  447.069749][   T32] hid (null): unknown global tag 0xd
[  447.085528][   T32] hid_parser_main: 550 callbacks suppressed
[  447.085549][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085578][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085619][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085644][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085669][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085693][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085716][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085738][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085762][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.085784][   T32] asus 0003:0B05:1ABE.0026: unknown main item tag 0x0
[  447.090339][   T32] asus 0003:0B05:1ABE.0026: global environment stack underflow
[  447.090355][   T32] asus 0003:0B05:1ABE.0026: item 0 2 1 11 parsing failed
[  447.091017][   T32] asus 0003:0B05:1ABE.0026: Asus hid parse failed: -22
[  447.091112][   T32] asus 0003:0B05:1ABE.0026: probe with driver asus failed with error -22
[  447.272089][    T9] usb 5-1: USB disconnect, device number 62
[  447.710341][T17876] FAULT_INJECTION: forcing a failure.
[  447.710341][T17876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.710374][T17876] CPU: 0 UID: 0 PID: 17876 Comm: syz.2.2414 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  447.710397][T17876] Tainted: [L]=SOFTLOCKUP
[  447.710402][T17876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  447.710411][T17876] Call Trace:
[  447.710417][T17876]  <TASK>
[  447.710424][T17876]  dump_stack_lvl+0xe8/0x150
[  447.710447][T17876]  should_fail_ex+0x46b/0x600
[  447.710473][T17876]  _copy_from_user+0x2d/0xb0
[  447.710491][T17876]  video_usercopy+0x36f/0x1450
[  447.710514][T17876]  ? __pfx___video_do_ioctl+0x10/0x10
[  447.710532][T17876]  ? __pfx_video_usercopy+0x10/0x10
[  447.710555][T17876]  ? __fget_files+0x2a/0x420
[  447.710574][T17876]  ? __fget_files+0x2a/0x420
[  447.710587][T17876]  ? __fget_files+0x3a6/0x420
[  447.710601][T17876]  v4l2_ioctl+0x190/0x1e0
[  447.710617][T17876]  ? __pfx_v4l2_ioctl+0x10/0x10
[  447.710631][T17876]  __se_sys_ioctl+0xff/0x170
[  447.710647][T17876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.710661][T17876]  do_syscall_64+0x15f/0x560
[  447.710678][T17876]  ? trace_irq_disable+0x3b/0x140
[  447.710693][T17876]  ? clear_bhb_loop+0x40/0x90
[  447.710709][T17876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.710722][T17876] RIP: 0033:0x7f8b747bce59
[  447.710745][T17876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.710757][T17876] RSP: 002b:00007f8b72a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  447.710772][T17876] RAX: ffffffffffffffda RBX: 00007f8b74a35fa0 RCX: 00007f8b747bce59
[  447.710783][T17876] RDX: 00002000000000c0 RSI: 00000000c0d05604 RDI: 0000000000000003
[  447.710792][T17876] RBP: 00007f8b72a16090 R08: 0000000000000000 R09: 0000000000000000
[  447.710801][T17876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.710809][T17876] R13: 00007f8b74a36038 R14: 00007f8b74a35fa0 R15: 00007ffe017aa9e8
[  447.710832][T17876]  </TASK>
[  448.139392][T17893] fuse: Bad value for 'fd'
[  448.850254][T17887] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  448.852164][T17887] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  448.926637][T17887] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  448.926733][T17887] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  449.009197][T17887] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  449.009287][T17887] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  449.090480][T17887] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  449.313890][T17908] FAULT_INJECTION: forcing a failure.
[  449.313890][T17908] name failslab, interval 1, probability 0, space 0, times 0
[  449.313927][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.4.2421 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  449.313953][T17908] Tainted: [L]=SOFTLOCKUP
[  449.313959][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  449.313970][T17908] Call Trace:
[  449.313977][T17908]  <TASK>
[  449.313986][T17908]  dump_stack_lvl+0xe8/0x150
[  449.314012][T17908]  should_fail_ex+0x46b/0x600
[  449.314041][T17908]  should_failslab+0xa8/0x100
[  449.314064][T17908]  __kmalloc_noprof+0xdf/0x7b0
[  449.314083][T17908]  ? kfree+0x4d/0x6c0
[  449.314099][T17908]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  449.314124][T17908]  tomoyo_realpath_from_path+0xe3/0x5d0
[  449.314146][T17908]  ? tomoyo_domain+0xd7/0x130
[  449.314170][T17908]  ? tomoyo_path_number_perm+0x219/0x630
[  449.314195][T17908]  tomoyo_path_number_perm+0x246/0x630
[  449.314221][T17908]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  449.314244][T17908]  ? __lock_acquire+0x6b5/0x2d10
[  449.314268][T17908]  ? do_raw_spin_lock+0x12b/0x2f0
[  449.314327][T17908]  ? __fget_files+0x2a/0x420
[  449.314348][T17908]  ? __fget_files+0x2a/0x420
[  449.314364][T17908]  ? __fget_files+0x3a6/0x420
[  449.314380][T17908]  ? __fget_files+0x2a/0x420
[  449.314401][T17908]  security_file_ioctl+0xc3/0x2a0
[  449.314427][T17908]  __se_sys_ioctl+0x47/0x170
[  449.314448][T17908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.314468][T17908]  do_syscall_64+0x15f/0x560
[  449.314490][T17908]  ? trace_irq_disable+0x3b/0x140
[  449.314510][T17908]  ? clear_bhb_loop+0x40/0x90
[  449.314532][T17908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  449.314550][T17908] RIP: 0033:0x7fb3f0b8ce59
[  449.314567][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.314582][T17908] RSP: 002b:00007fb3eedde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  449.314602][T17908] RAX: ffffffffffffffda RBX: 00007fb3f0e05fa0 RCX: 00007fb3f0b8ce59
[  449.314618][T17908] RDX: 0000200000000080 RSI: 000000004020ae76 RDI: 0000000000000004
[  449.314631][T17908] RBP: 00007fb3eedde090 R08: 0000000000000000 R09: 0000000000000000
[  449.314642][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  449.314654][T17908] R13: 00007fb3f0e06038 R14: 00007fb3f0e05fa0 R15: 00007fff4cdfa428
[  449.314684][T17908]  </TASK>
[  449.314703][T17908] ERROR: Out of memory at tomoyo_realpath_from_path.
[  449.532790][    T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  449.682786][    T9] usb 3-1: Using ep0 maxpacket: 8
[  449.685805][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  449.694323][T17925] loop8: detected capacity change from 0 to 8
[  449.708437][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  449.708464][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.708483][    T9] usb 3-1: Product: syz
[  449.708496][    T9] usb 3-1: Manufacturer: syz
[  449.708509][    T9] usb 3-1: SerialNumber: syz
[  449.749592][    T9] usb 3-1: config 0 descriptor??
[  449.752213][T17925] Dev loop8: unable to read RDB block 8
[  449.752252][T17925]  loop8: unable to read partition table
[  449.752449][T17925] loop8: partition table beyond EOD, truncated
[  449.752478][T17925] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[  449.786134][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  450.202745][  T822] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  450.217985][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  450.332744][  T822] usb 5-1: device descriptor read/64, error -71
[  450.576128][  T822] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  450.702735][  T822] usb 5-1: device descriptor read/64, error -71
[  450.814598][  T822] usb usb5-port1: attempt power cycle
[  450.933330][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[  451.015809][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  451.182789][  T822] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  451.203875][  T822] usb 5-1: device descriptor read/8, error -71
[  451.442763][  T822] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  451.463468][  T822] usb 5-1: device descriptor read/8, error -71
[  451.482739][ T7275] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  451.573152][  T822] usb usb5-port1: unable to enumerate USB device
[  451.665162][ T7275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.665208][ T7275] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  451.665231][ T7275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.677572][ T7275] usb 4-1: config 0 descriptor??
[  451.908685][ T7275] usbhid 4-1:0.0: can't add hid device: -71
[  451.908796][ T7275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  451.922339][ T7275] usb 4-1: USB disconnect, device number 110
[  452.292712][   T60] Bluetooth: hci3: command 0x0406 tx timeout
[  452.352801][  T822] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  452.482729][  T822] usb 4-1: device descriptor read/64, error -71
[  452.722753][  T822] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  452.853473][  T822] usb 4-1: device descriptor read/64, error -71
[  452.963318][  T822] usb usb4-port1: attempt power cycle
[  452.977105][    T9] gspca_zc3xx: reg_w_i err -71
[  453.004540][    T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  453.012708][   T60] Bluetooth: hci2: command 0x0406 tx timeout
[  453.029514][    T9] usb 3-1: USB disconnect, device number 93
[  453.093629][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  453.312762][  T822] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  453.339467][  T822] usb 4-1: device descriptor read/8, error -71
[  453.403720][T18037] gfs2: gfs2 mount does not exist
[  453.570212][T18044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2445'.
[  453.570244][T18044] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2445'.
[  453.576055][  T822] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  453.594456][  T822] usb 4-1: device descriptor read/8, error -71
[  453.703599][  T822] usb usb4-port1: unable to enumerate USB device
[  454.658286][T18080] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future
[  454.872788][ T5701] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[  454.902956][   T32] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  454.921675][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'.
[  454.973053][ T7275] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  455.026323][ T5701] usb 1-1: unable to get BOS descriptor or descriptor too short
[  455.031399][ T5701] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40
[  455.031426][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.031443][ T5701] usb 1-1: Product: syz
[  455.031456][ T5701] usb 1-1: Manufacturer: syz
[  455.031469][ T5701] usb 1-1: SerialNumber: syz
[  455.074379][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.074410][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.074446][   T32] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  455.074468][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.132151][ T7275] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.132190][ T7275] usb 5-1: config 0 interface 0 has no altsetting 0
[  455.138356][   T32] usb 3-1: config 0 descriptor??
[  455.150031][ T7275] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  455.150058][ T7275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.150077][ T7275] usb 5-1: Product: syz
[  455.150090][ T7275] usb 5-1: Manufacturer: syz
[  455.150103][ T7275] usb 5-1: SerialNumber: syz
[  455.173402][ T7275] usb 5-1: config 0 descriptor??
[  455.176088][   T60] Bluetooth: hci0: command 0x0c1a tx timeout
[  455.229246][ T7275] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  455.337121][ T7275] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  455.354969][ T7275] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  455.355019][ T7275] usb 5-1: media controller created
[  455.474046][ T5701] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  455.474097][ T5701] usb 1-1: MIDIStreaming interface descriptor not found
[  455.482300][ T7275] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  455.579198][ T5701] usb 1-1: USB disconnect, device number 98
[  455.636766][   T32] usbhid 3-1:0.0: can't add hid device: -71
[  455.636836][   T32] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  455.658502][   T32] usb 3-1: USB disconnect, device number 94
[  455.762760][ T7275] DVB: Unable to find symbol tda10046_attach()
[  455.762775][ T7275] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  455.762789][ T7275] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  455.780192][ T6678] udevd[6678]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  456.521167][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  456.578036][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  456.593309][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  456.594659][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  456.610492][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  457.733976][ T7275] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  457.749533][ T7275] usb 5-1: USB disconnect, device number 67
[  458.200556][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.014951][   T60] Bluetooth: hci4: command tx timeout
[  459.029385][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  459.601319][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  460.316193][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  461.092779][   T60] Bluetooth: hci4: command tx timeout
[  461.123857][T18367] FAULT_INJECTION: forcing a failure.
[  461.123857][T18367] name failslab, interval 1, probability 0, space 0, times 0
[  461.123890][T18367] CPU: 0 UID: 0 PID: 18367 Comm: syz.4.2492 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  461.123914][T18367] Tainted: [L]=SOFTLOCKUP
[  461.123921][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  461.123931][T18367] Call Trace:
[  461.123938][T18367]  <TASK>
[  461.123947][T18367]  dump_stack_lvl+0xe8/0x150
[  461.123969][T18367]  should_fail_ex+0x46b/0x600
[  461.123995][T18367]  should_failslab+0xa8/0x100
[  461.124014][T18367]  kmem_cache_alloc_noprof+0x87/0x680
[  461.124031][T18367]  ? do_getname_kernel+0x54/0x230
[  461.124058][T18367]  do_getname_kernel+0x54/0x230
[  461.124079][T18367]  ? kern_path+0x1b/0x150
[  461.124169][T18367]  kern_path+0x25/0x150
[  461.124192][T18367]  lookup_bdev+0xc8/0x290
[  461.124215][T18367]  ? __pfx_lookup_bdev+0x10/0x10
[  461.124233][T18367]  ? rcu_is_watching+0x15/0xb0
[  461.124251][T18367]  ? kfree+0x4d/0x6c0
[  461.124270][T18367]  get_tree_bdev_flags+0xbb/0x4f0
[  461.124289][T18367]  ? __pfx_ext4_fill_super+0x10/0x10
[  461.124307][T18367]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  461.124334][T18367]  vfs_get_tree+0x92/0x2a0
[  461.124355][T18367]  do_new_mount+0x341/0xd30
[  461.124376][T18367]  ? apparmor_capable+0x126/0x170
[  461.124400][T18367]  ? __pfx_do_new_mount+0x10/0x10
[  461.124424][T18367]  ? ns_capable+0x89/0xe0
[  461.124449][T18367]  ? user_path_at+0xd4/0x160
[  461.124470][T18367]  ? user_path_at+0xd4/0x160
[  461.124489][T18367]  __se_sys_mount+0x31d/0x420
[  461.124512][T18367]  ? __pfx___se_sys_mount+0x10/0x10
[  461.124533][T18367]  ? __x64_sys_mount+0x20/0xc0
[  461.124549][T18367]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.124568][T18367]  do_syscall_64+0x15f/0x560
[  461.124591][T18367]  ? trace_irq_disable+0x3b/0x140
[  461.124612][T18367]  ? clear_bhb_loop+0x40/0x90
[  461.124633][T18367]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.124651][T18367] RIP: 0033:0x7fb3f0b8ce59
[  461.124669][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.124684][T18367] RSP: 002b:00007fb3eedde028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  461.124704][T18367] RAX: ffffffffffffffda RBX: 00007fb3f0e05fa0 RCX: 00007fb3f0b8ce59
[  461.124718][T18367] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000100
[  461.124731][T18367] RBP: 00007fb3eedde090 R08: 0000000000000000 R09: 0000000000000000
[  461.124742][T18367] R10: 0000000001000005 R11: 0000000000000246 R12: 0000000000000002
[  461.124754][T18367] R13: 00007fb3f0e06038 R14: 00007fb3f0e05fa0 R15: 00007fff4cdfa428
[  461.124782][T18367]  </TASK>
[  461.124792][T18367] /dev/loop4: Can't lookup blockdev
[  461.476524][T18376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2495'.
[  461.713280][T18158] bridge0: port 1(bridge_slave_0) entered blocking state
[  461.713664][T18158] bridge0: port 1(bridge_slave_0) entered disabled state
[  461.713895][T18158] bridge_slave_0: entered allmulticast mode
[  461.716522][T18158] bridge_slave_0: entered promiscuous mode
[  461.783272][T18158] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.783466][T18158] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.783626][T18158] bridge_slave_1: entered allmulticast mode
[  461.785690][T18158] bridge_slave_1: entered promiscuous mode
[  461.948488][T18158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.979531][T18158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.673444][ T1003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  462.743730][T18446] EXT4-fs (loop3): unable to read superblock
[  462.763872][ T1003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  462.806234][ T1003] bond0 (unregistering): Released all slaves
[  463.029136][T18465] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2502'.
[  463.172720][   T60] Bluetooth: hci4: command tx timeout
[  463.347511][T18474] fuse: Bad value for 'group_id'
[  463.347529][T18474] fuse: Bad value for 'group_id'
[  463.448228][ T1003] tipc: Disabling bearer <eth:macvtap0>
[  463.528660][ T1003] tipc: Left network mode
[  463.543051][T18158] team0: Port device team_slave_0 added
[  463.588349][T18158] team0: Port device team_slave_1 added
[  463.686300][T18158] batman_adv: batadv0: Adding interface: batadv_slave_0
[  463.686317][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.686342][T18158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  463.689372][T18158] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.689384][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.689404][T18158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.733135][ T5701] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  463.915378][ T5701] usb 5-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  463.915431][ T5701] usb 5-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  463.917428][ T5701] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  463.917454][ T5701] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  463.917472][ T5701] usb 5-1: Manufacturer: syz
[  463.917485][ T5701] usb 5-1: SerialNumber: syz
[  464.123222][T18158] hsr_slave_0: entered promiscuous mode
[  464.131176][T18158] hsr_slave_1: entered promiscuous mode
[  464.187664][T18158] debugfs: 'hsr0' already exists in 'hsr'
[  464.187693][T18158] Cannot create hsr debugfs directory
[  464.303300][ T5701] usbhid 5-1:36.0: couldn't find an input interrupt endpoint
[  464.374247][ T5701] usb 5-1: USB disconnect, device number 68
[  464.566220][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5
[  464.722830][ T7275] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  464.890215][ T7275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  464.890344][ T7275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  464.890382][ T7275] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  464.890403][ T7275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.939525][ T7275] usb 4-1: config 0 descriptor??
[  465.252747][   T60] Bluetooth: hci4: command tx timeout
[  465.365856][ T7275] usbhid 4-1:0.0: can't add hid device: -71
[  465.365963][ T7275] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  465.399294][ T7275] usb 4-1: USB disconnect, device number 115
[  465.559575][T18649] MTD: Couldn't look up 'mountinfo': -2
[  465.609969][T18653] fuse: Bad value for 'group_id'
[  465.609982][T18653] fuse: Bad value for 'group_id'
[  465.756021][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6
[  466.264777][T18681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2513'.
[  467.128042][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7
[  467.735260][   T37] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  467.932838][ T7275] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  467.951377][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.951420][   T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.951457][   T37] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  467.951477][   T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.999221][   T37] usb 5-1: config 0 descriptor??
[  468.065196][ T7275] usb 4-1: device descriptor read/64, error -71
[  468.303017][ T7275] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  468.431007][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  468.431035][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.433771][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  468.434145][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  468.434513][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  468.434666][   T37] usbhid 5-1:0.0: can't add hid device: -32
[  468.434769][   T37] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  468.443787][ T7275] usb 4-1: device descriptor read/64, error -71
[  468.465609][   T37] usb 5-1: USB disconnect, device number 69
[  468.480439][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  468.480465][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  468.559522][ T7275] usb usb4-port1: attempt power cycle
[  468.913593][ T7275] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  468.959355][ T7275] usb 4-1: device descriptor read/8, error -71
[  469.194991][ T7275] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  469.213253][ T7275] usb 4-1: device descriptor read/8, error -71
[  469.324148][ T7275] usb usb4-port1: unable to enumerate USB device
[  470.023149][ T1003] team0 (unregistering): Port device team_slave_1 removed
[  470.066292][ T1003] team0 (unregistering): Port device team_slave_0 removed
[  470.072736][ T7275] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  470.243123][ T7275] usb 5-1: Using ep0 maxpacket: 16
[  470.247786][ T7275] usb 5-1: unable to get BOS descriptor or descriptor too short
[  470.250673][ T7275] usb 5-1: config 2 has an invalid interface number: 144 but max is 0
[  470.250696][ T7275] usb 5-1: config 2 has no interface number 0
[  470.250725][ T7275] usb 5-1: config 2 interface 144 has no altsetting 0
[  470.275675][ T7275] usb 5-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=68.3a
[  470.275704][ T7275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.275723][ T7275] usb 5-1: Product: syz
[  470.275737][ T7275] usb 5-1: Manufacturer: syz
[  470.275750][ T7275] usb 5-1: SerialNumber: syz
[  470.408479][T18798] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2529'.
[  470.408495][T18798] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  470.550126][ T7275] gspca_main: vc032x-2.14.0 probing 046d:0897
[  470.550841][ T7275] gspca_vc032x: reg_r err -71
[  470.550856][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550866][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550875][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550883][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550892][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550901][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550910][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550918][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550927][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550936][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550945][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550952][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550962][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550970][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550978][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550987][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.550996][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.551005][ T7275] gspca_vc032x: I2c Bus Busy Wait 00
[  470.551015][ T7275] gspca_vc032x: Unknown sensor...
[  470.551077][ T7275] vc032x 5-1:2.144: probe with driver vc032x failed with error -22
[  470.680499][ T7275] usb 5-1: USB disconnect, device number 70
[  471.253771][    T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  471.476960][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.476987][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.477008][    T9] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  471.477021][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.483461][    T9] usb 3-1: config 0 descriptor??
[  471.912123][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  471.912527][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  471.913460][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[  471.913614][    T9] usbhid 3-1:0.0: can't add hid device: -32
[  471.913722][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[  471.921836][    T9] usb 3-1: USB disconnect, device number 95
[  472.576541][T18898] netlink: 'syz.4.2539': attribute type 4 has an invalid length.
[  472.576566][T18898] netlink: 'syz.4.2539': attribute type 4 has an invalid length.
[  472.576578][T18898] netlink: 'syz.4.2539': attribute type 5 has an invalid length.
[  472.603147][T18901] fuse: Unknown parameter 'group_id00000000000000000000'
[  472.788811][T18907] FAULT_INJECTION: forcing a failure.
[  472.788811][T18907] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  472.788852][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.3.2544 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  472.788901][T18907] Tainted: [L]=SOFTLOCKUP
[  472.788908][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  472.788920][T18907] Call Trace:
[  472.788929][T18907]  <TASK>
[  472.788938][T18907]  dump_stack_lvl+0xe8/0x150
[  472.788966][T18907]  should_fail_ex+0x46b/0x600
[  472.788996][T18907]  prepare_alloc_pages+0x22a/0x6b0
[  472.789027][T18907]  __alloc_frozen_pages_noprof+0x12f/0x380
[  472.789053][T18907]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  472.789078][T18907]  ? __pfx_policy_nodemask+0x10/0x10
[  472.789099][T18907]  ? do_raw_spin_lock+0x12b/0x2f0
[  472.789128][T18907]  alloc_pages_mpol+0xd1/0x380
[  472.789160][T18907]  alloc_pages_noprof+0xd2/0x2f0
[  472.789185][T18907]  pte_alloc_one+0x22/0x380
[  472.789211][T18907]  __pte_alloc+0x25/0x1a0
[  472.789237][T18907]  do_pte_missing+0x1c13/0x2940
[  472.789267][T18907]  ? __pmd_alloc+0x41b/0x5e0
[  472.789290][T18907]  handle_mm_fault+0xdc2/0x14d0
[  472.789313][T18907]  ? handle_mm_fault+0xed/0x14d0
[  472.789337][T18907]  ? __pfx_handle_mm_fault+0x10/0x10
[  472.789371][T18907]  ? __lock_acquire+0x6b5/0x2d10
[  472.789395][T18907]  ? lock_mm_and_find_vma+0xa7/0x340
[  472.789419][T18907]  do_user_addr_fault+0x75b/0x1340
[  472.789452][T18907]  exc_page_fault+0x6a/0xc0
[  472.789477][T18907]  asm_exc_page_fault+0x26/0x30
[  472.789492][T18907] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  472.789508][T18907] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  472.789520][T18907] RSP: 0018:ffffc900056d7b98 EFLAGS: 00050202
[  472.789533][T18907] RAX: 00007ffffffff001 RBX: 000000000000000c RCX: 000000000000000c
[  472.789542][T18907] RDX: 0000000000000001 RSI: 0000200000000800 RDI: ffffc900056d7c20
[  472.789552][T18907] RBP: ffffc900056d7df0 R08: ffffc900056d7c2b R09: 1ffff92000adaf85
[  472.789561][T18907] R10: dffffc0000000000 R11: fffff52000adaf86 R12: dffffc0000000000
[  472.789571][T18907] R13: 1ffff92000adaf80 R14: ffffc900056d7c20 R15: 0000200000000800
[  472.789593][T18907]  _copy_from_user+0x7a/0xb0
[  472.789608][T18907]  do_ip_vs_set_ctl+0x353/0xb00
[  472.789629][T18907]  ? __pfx_do_ip_vs_set_ctl+0x10/0x10
[  472.789660][T18907]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  472.789679][T18907]  ? rt_mutex_slowunlock+0x1cb/0x300
[  472.789693][T18907]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  472.789717][T18907]  nf_setsockopt+0x26f/0x290
[  472.789735][T18907]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  472.789754][T18907]  do_sock_setsockopt+0x17c/0x1b0
[  472.789775][T18907]  __x64_sys_setsockopt+0x143/0x1b0
[  472.789794][T18907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.789809][T18907]  do_syscall_64+0x15f/0x560
[  472.789825][T18907]  ? trace_irq_disable+0x3b/0x140
[  472.789841][T18907]  ? clear_bhb_loop+0x40/0x90
[  472.789857][T18907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.789871][T18907] RIP: 0033:0x7ff4eecbce59
[  472.789884][T18907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.789896][T18907] RSP: 002b:00007ff4ecf0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  472.789910][T18907] RAX: ffffffffffffffda RBX: 00007ff4eef35fa0 RCX: 00007ff4eecbce59
[  472.789920][T18907] RDX: 000000000000048a RSI: 0000000000000000 RDI: 0000000000000003
[  472.789928][T18907] RBP: 00007ff4ecf0e090 R08: 000000000000000c R09: 0000000000000000
[  472.789936][T18907] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000001
[  472.789944][T18907] R13: 00007ff4eef36038 R14: 00007ff4eef35fa0 R15: 00007fffaf2d8048
[  472.789967][T18907]  </TASK>
[  473.391845][T18929] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.748459][T18946] fuse: Unknown parameter 'group_id00000000000000000000'
[  473.860697][T18158] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  473.872326][T18929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.938668][T18158] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  473.944888][T18158] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  474.088035][T18158] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  474.089711][T18158] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  474.130248][T18158] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  474.133383][    T9] usb 4-1: new low-speed USB device number 120 using dummy_hcd
[  474.135911][T18158] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  474.191563][T18158] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  474.287342][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  474.289946][    T9] usb 4-1: config index 0 descriptor too short (expected 57090, got 36)
[  474.289969][    T9] usb 4-1: config 5 has too many interfaces: 48, using maximum allowed: 32
[  474.289988][    T9] usb 4-1: config 5 has an invalid descriptor of length 141, skipping remainder of the config
[  474.290005][    T9] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 48
[  474.305006][    T9] usb 4-1: string descriptor 0 read error: -22
[  474.305146][    T9] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4
[  474.305167][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.434128][  T822] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  474.535206][ T5701] usb 4-1: USB disconnect, device number 120
[  474.599248][T18158] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.611765][  T822] usb 5-1: Using ep0 maxpacket: 8
[  474.623756][  T822] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13
[  474.643486][  T822] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  474.643511][  T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.643522][  T822] usb 5-1: Product: syz
[  474.643529][  T822] usb 5-1: Manufacturer: syz
[  474.643536][  T822] usb 5-1: SerialNumber: syz
[  474.707173][  T822] usb 5-1: config 0 descriptor??
[  474.738297][  T822] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  474.851766][T18158] 8021q: adding VLAN 0 to HW filter on device team0
[  474.873896][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.874031][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.952248][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.952475][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  477.133705][T18158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  477.336492][T19066] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  477.436882][T18158] veth0_vlan: entered promiscuous mode
[  477.501962][T18158] veth1_vlan: entered promiscuous mode
[  477.563521][T18158] veth0_macvtap: entered promiscuous mode
[  477.576327][T18158] veth1_macvtap: entered promiscuous mode
[  477.615235][T18158] batman_adv: batadv0: Interface activated: batadv_slave_0
[  477.673681][T18158] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.768362][T19076] ieee802154 phy0 wpan0: encryption failed: -22
[  477.776233][ T1436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.791830][ T1436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.796470][ T1436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.798387][ T1436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.995587][  T822] gspca_zc3xx: reg_w_i err -71
[  478.022788][  T822] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  478.042061][  T822] usb 5-1: USB disconnect, device number 71
[  478.192729][   T37] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  478.356142][   T37] usb 4-1: device descriptor read/64, error -71
[  478.650921][   T37] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  478.862793][   T37] usb 4-1: device descriptor read/64, error -71
[  478.906917][ T2356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.916752][ T2356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.963074][   T37] usb usb4-port1: attempt power cycle
[  479.016042][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  479.016060][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  479.177059][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2570'.
[  479.302959][   T37] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  479.323532][   T37] usb 4-1: device descriptor read/8, error -71
[  479.537410][T19118] evm: overlay not supported
[  479.573435][   T37] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  479.594371][   T37] usb 4-1: device descriptor read/8, error -71
[  479.703213][   T37] usb usb4-port1: unable to enumerate USB device
[  479.772982][   T32] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  479.889250][ T5617] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  479.932837][   T32] usb 5-1: Using ep0 maxpacket: 16
[  479.934858][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.934885][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.934907][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  479.934944][   T32] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  479.934965][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.939874][   T32] usb 5-1: config 0 descriptor??
[  479.940149][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  479.993577][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  479.994626][ T5617] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  479.995305][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  480.061641][   T32] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[  480.061661][   T32] usbhid 5-1:0.0: can't add hid device: -22
[  480.061755][   T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  480.184709][   T32] usb 5-1: USB disconnect, device number 72
[  480.682781][ T5810] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  480.833030][ T5810] usb 1-1: Using ep0 maxpacket: 8
[  480.835812][ T5810] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  480.838068][ T5810] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  480.838094][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.838112][ T5810] usb 1-1: Product: syz
[  480.838124][ T5810] usb 1-1: Manufacturer: syz
[  480.838137][ T5810] usb 1-1: SerialNumber: syz
[  480.907872][ T5810] usb 1-1: config 0 descriptor??
[  480.930196][ T5810] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  480.996810][T19176] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.063194][T19169] netlink: 758 bytes leftover after parsing attributes in process `syz.3.2579'.
[  481.370708][T19199] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.842784][ T5805] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  481.993031][ T5805] usb 5-1: Using ep0 maxpacket: 32
[  482.001617][ T5805] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  482.001644][ T5805] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  482.001662][ T5805] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  482.001682][ T5805] usb 5-1: config 1 has no interface number 0
[  482.001724][ T5805] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  482.001747][ T5805] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  482.001842][ T5805] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  482.001862][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.051400][ T5805] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  482.053372][   T60] Bluetooth: hci3: command tx timeout
[  482.341274][ T5805] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  483.078105][   T32] usb 5-1: USB disconnect, device number 73
[  483.107952][   T32] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  483.304153][T19126] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.304533][T19126] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.305116][T19126] bridge_slave_0: entered allmulticast mode
[  483.308337][T19126] bridge_slave_0: entered promiscuous mode
[  483.344378][T19126] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.344731][T19126] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.344988][T19126] bridge_slave_1: entered allmulticast mode
[  483.348118][T19126] bridge_slave_1: entered promiscuous mode
[  483.565635][T19126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.577946][T19126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.833876][T19126] team0: Port device team_slave_0 added
[  483.883452][T19386] /dev/nullb0: Can't open blockdev
[  483.908875][T19126] team0: Port device team_slave_1 added
[  484.000794][T19126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  484.000810][T19126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.000835][T19126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  484.042664][ T5701] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  484.063333][T19126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  484.063347][T19126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  484.063371][T19126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  484.139427][   T60] Bluetooth: hci3: command tx timeout
[  484.180549][ T5810] gspca_zc3xx: reg_w_i err -71
[  484.202804][ T5810] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  484.207320][ T5810] usb 1-1: USB disconnect, device number 99
[  484.238652][ T5701] usb 5-1: unable to get BOS descriptor or descriptor too short
[  484.241551][ T5701] usb 5-1: config 114 has an invalid interface number: 69 but max is 0
[  484.241574][ T5701] usb 5-1: config 114 has no interface number 0
[  484.241617][ T5701] usb 5-1: config 114 interface 69 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  484.241639][ T5701] usb 5-1: config 114 interface 69 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  484.241663][ T5701] usb 5-1: config 114 interface 69 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 1023
[  484.241685][ T5701] usb 5-1: config 114 interface 69 has no altsetting 0
[  484.302748][   T32] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  484.316646][ T5701] usb 5-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice=a5.d8
[  484.316662][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.316673][ T5701] usb 5-1: Product: �
[  484.316680][ T5701] usb 5-1: Manufacturer: ь
[  484.316687][ T5701] usb 5-1: SerialNumber: ����ߋ�齱夊�ᖪ퓓䒷൹ಔ쪶�蓅ꈵ뭒稱沉⪊ᬞ�磺諯�䞸泗☛䧻뼾諊
[  484.374320][T19372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  484.374424][T19372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  484.418090][T19126] hsr_slave_0: entered promiscuous mode
[  484.419660][T19126] hsr_slave_1: entered promiscuous mode
[  484.421036][T19126] debugfs: 'hsr0' already exists in 'hsr'
[  484.421059][T19126] Cannot create hsr debugfs directory
[  484.477517][   T32] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  484.477544][   T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[  484.486269][   T32] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  484.486296][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.486314][   T32] usb 4-1: Product: syz
[  484.486327][   T32] usb 4-1: Manufacturer: syz
[  484.486340][   T32] usb 4-1: SerialNumber: syz
[  484.499320][   T32] usb 4-1: config 0 descriptor??
[  484.534623][   T32] gspca_main: sunplus-2.14.0 probing 055f:c630
[  484.600582][ T5701] usb 5-1: USB disconnect, device number 74
[  484.982462][T19525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2594'.
[  485.276528][T19126] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.333314][ T5810] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[  485.482764][ T5810] usb 1-1: device descriptor read/64, error -71
[  485.749304][ T5810] usb 1-1: new full-speed USB device number 101 using dummy_hcd
[  485.847447][T19126] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  485.873344][ T5810] usb 1-1: device descriptor read/64, error -71
[  485.983075][ T5810] usb usb1-port1: attempt power cycle
[  486.216342][   T60] Bluetooth: hci3: command tx timeout
[  486.238799][T19126] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.289095][   T32] usb 4-1: USB disconnect, device number 125
[  486.340448][ T5810] usb 1-1: new full-speed USB device number 102 using dummy_hcd
[  486.369820][ T5810] usb 1-1: device descriptor read/8, error -71
[  486.613378][ T5810] usb 1-1: new full-speed USB device number 103 using dummy_hcd
[  486.639941][ T5810] usb 1-1: device descriptor read/8, error -71
[  486.691687][T19126] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  486.744566][ T5810] usb usb1-port1: unable to enumerate USB device
[  486.777101][T19583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2602'.
[  486.833649][T19583] bridge0: port 3(erspan0) entered blocking state
[  486.835238][T19583] bridge0: port 3(erspan0) entered disabled state
[  486.835668][T19583] erspan0: entered allmulticast mode
[  486.839495][T19583] erspan0: entered promiscuous mode
[  486.840022][T19583] bridge0: port 3(erspan0) entered blocking state
[  486.840102][T19583] bridge0: port 3(erspan0) entered forwarding state
[  487.831369][T19126] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  487.860680][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  487.861523][T19126] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  487.899954][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  487.902991][T19126] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  488.021204][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  488.030434][T19126] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  488.143244][T19612] /dev/sg0: Can't lookup blockdev
[  488.149056][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  488.300940][   T60] Bluetooth: hci3: command tx timeout
[  488.533571][T19126] 8021q: adding VLAN 0 to HW filter on device bond0
[  488.557996][T19126] 8021q: adding VLAN 0 to HW filter on device team0
[  488.580141][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[  488.580275][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  488.626830][  T157] bridge0: port 2(bridge_slave_1) entered blocking state
[  488.626929][  T157] bridge0: port 2(bridge_slave_1) entered forwarding state
[  488.948568][   T60] Bluetooth: hci2: unexpected event for opcode 0x080e
[  489.139018][T19648] FAULT_INJECTION: forcing a failure.
[  489.139018][T19648] name failslab, interval 1, probability 0, space 0, times 0
[  489.139053][T19648] CPU: 1 UID: 0 PID: 19648 Comm: syz.4.2610 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  489.139078][T19648] Tainted: [L]=SOFTLOCKUP
[  489.139085][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  489.139096][T19648] Call Trace:
[  489.139104][T19648]  <TASK>
[  489.139113][T19648]  dump_stack_lvl+0xe8/0x150
[  489.139141][T19648]  should_fail_ex+0x46b/0x600
[  489.139171][T19648]  should_failslab+0xa8/0x100
[  489.139195][T19648]  __kmalloc_noprof+0xdf/0x7b0
[  489.139214][T19648]  ? tomoyo_encode+0x28b/0x550
[  489.139239][T19648]  tomoyo_encode+0x28b/0x550
[  489.139264][T19648]  tomoyo_realpath_from_path+0x58d/0x5d0
[  489.139294][T19648]  ? tomoyo_path_number_perm+0x219/0x630
[  489.139320][T19648]  tomoyo_path_number_perm+0x246/0x630
[  489.139347][T19648]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  489.139372][T19648]  ? __lock_acquire+0x6b5/0x2d10
[  489.139431][T19648]  ? __pfx_current_check_access_path+0x10/0x10
[  489.139462][T19648]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  489.139493][T19648]  tomoyo_path_mknod+0x14a/0x1a0
[  489.139516][T19648]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  489.139547][T19648]  security_path_mknod+0x176/0x370
[  489.139569][T19648]  may_o_create+0x2d/0x370
[  489.139591][T19648]  ? mode_strip_sgid+0x6a/0x1b0
[  489.139615][T19648]  path_openat+0x1068/0x3960
[  489.139670][T19648]  ? __pfx_path_openat+0x10/0x10
[  489.139708][T19648]  ? do_raw_spin_lock+0x12b/0x2f0
[  489.139736][T19648]  do_file_open+0x406/0x4a0
[  489.139755][T19648]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  489.139783][T19648]  ? __pfx_do_file_open+0x10/0x10
[  489.139801][T19648]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  489.139843][T19648]  ? alloc_fd+0x679/0x6f0
[  489.139897][T19648]  do_sys_openat2+0x115/0x200
[  489.139922][T19648]  ? __pfx_do_sys_openat2+0x10/0x10
[  489.139949][T19648]  ? ksys_write+0x248/0x270
[  489.139972][T19648]  ? __pfx_ksys_write+0x10/0x10
[  489.139994][T19648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.140014][T19648]  __x64_sys_open+0x11e/0x150
[  489.140036][T19648]  do_syscall_64+0x15f/0x560
[  489.140060][T19648]  ? trace_irq_disable+0x3b/0x140
[  489.140080][T19648]  ? clear_bhb_loop+0x40/0x90
[  489.140103][T19648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.140121][T19648] RIP: 0033:0x7fb3f0b8ce59
[  489.140139][T19648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  489.140155][T19648] RSP: 002b:00007fb3eedde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  489.140175][T19648] RAX: ffffffffffffffda RBX: 00007fb3f0e05fa0 RCX: 00007fb3f0b8ce59
[  489.140188][T19648] RDX: 0000000000000000 RSI: 0000000000101040 RDI: 0000200000000040
[  489.140200][T19648] RBP: 00007fb3eedde090 R08: 0000000000000000 R09: 0000000000000000
[  489.140212][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  489.140223][T19648] R13: 00007fb3f0e06038 R14: 00007fb3f0e05fa0 R15: 00007fff4cdfa428
[  489.140254][T19648]  </TASK>
[  489.140378][T19648] ERROR: Out of memory at tomoyo_realpath_from_path.
[  489.212722][ T5701] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  489.362727][ T5701] usb 4-1: Using ep0 maxpacket: 16
[  489.364903][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  489.364925][ T5701] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  489.396171][ T5701] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  489.396195][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.396214][ T5701] usb 4-1: Product: syz
[  489.396227][ T5701] usb 4-1: Manufacturer: syz
[  489.396240][ T5701] usb 4-1: SerialNumber: syz
[  489.436215][ T5701] usb 4-1: 0:2 : does not exist
[  489.679585][T19636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.680103][T19636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  489.761850][T19639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  489.764940][T19639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.205870][T19126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.604881][T19126] veth0_vlan: entered promiscuous mode
[  490.650171][T19126] veth1_vlan: entered promiscuous mode
[  490.799142][T19126] veth0_macvtap: entered promiscuous mode
[  490.824536][T19126] veth1_macvtap: entered promiscuous mode
[  490.895399][T19126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  490.949141][T19126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.011394][ T2393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.041149][ T2393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.044735][ T2393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.044776][ T2393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.755735][T19628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  491.942766][ T5701] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  492.577073][ T5701] usb 4-1: USB disconnect, device number 126
[  492.841445][T12376] udevd[12376]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.872324][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2612'.
[  492.959315][T19681] input: syz1 as /devices/virtual/input/input29
[  493.044838][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.044858][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.208290][T19717] fuse: Unknown parameter 'group_i00000000000000000000'
[  493.248760][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  493.248778][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  493.326509][T19722] ieee802154 phy0 wpan0: encryption failed: -22
[  493.348547][ T5805] IPVS: starting estimator thread 0...
[  493.370205][T19726] overlayfs: failed to resolve './file0': -2
[  493.410065][T19732] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2618'.
[  493.410085][T19732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2618'.
[  493.442810][T19725] IPVS: using max 12 ests per chain, 28800 per kthread
[  493.623033][ T5805] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[  493.682689][ T5701] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  493.732766][ T5766] usb 5-1: new low-speed USB device number 75 using dummy_hcd
[  493.762921][ T5805] usb 1-1: device descriptor read/64, error -71
[  493.847132][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  493.847165][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  493.847202][ T5701] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  493.847224][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.882700][ T5766] usb 5-1: Invalid ep0 maxpacket: 32
[  493.899320][ T5701] usb 3-1: config 0 descriptor??
[  494.013071][ T5805] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  494.030527][ T5766] usb 5-1: new low-speed USB device number 76 using dummy_hcd
[  494.142739][ T5805] usb 1-1: device descriptor read/64, error -71
[  494.173072][ T5766] usb 5-1: Invalid ep0 maxpacket: 32
[  494.179835][ T5766] usb usb5-port1: attempt power cycle
[  494.254704][ T5805] usb usb1-port1: attempt power cycle
[  494.394830][T19755] /dev/sg0: Can't lookup blockdev
[  494.521164][ T5701] usbhid 3-1:0.0: can't add hid device: -71
[  494.521273][ T5701] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  494.541690][ T5701] usb 3-1: USB disconnect, device number 96
[  494.573018][ T5766] usb 5-1: new low-speed USB device number 77 using dummy_hcd
[  494.594557][ T5766] usb 5-1: Invalid ep0 maxpacket: 32
[  494.605858][ T5805] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  494.633861][ T5805] usb 1-1: device descriptor read/8, error -71
[  494.722782][ T5766] usb 5-1: new low-speed USB device number 78 using dummy_hcd
[  494.743495][ T5766] usb 5-1: Invalid ep0 maxpacket: 32
[  494.744075][ T5766] usb usb5-port1: unable to enumerate USB device
[  494.877347][ T5805] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  494.893167][ T5805] usb 1-1: device descriptor read/8, error -71
[  495.003575][ T5805] usb usb1-port1: unable to enumerate USB device
[  495.280388][T19771] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2623'.
[  495.642294][T19783] fuse: Unknown parameter 'group_i00000000000000000000'
[  495.880860][   T60] Bluetooth: hci2: unexpected event for opcode 0x007f
[  496.185534][T19799] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2628'.
[  496.185592][T19799] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.2628'.
[  496.237215][T19802] sg_write: data in/out 1007616/136 bytes for SCSI command 0x0-- guessing data in;
[  496.237215][T19802]    program syz.2.2628 not setting count and/or reply_len properly
[  496.282879][ T7275] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  496.472847][ T7275] usb 4-1: Using ep0 maxpacket: 8
[  496.475933][ T7275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  496.478042][ T7275] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  496.478065][ T7275] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  496.478076][ T7275] usb 4-1: Product: syz
[  496.478083][ T7275] usb 4-1: Manufacturer: syz
[  496.478091][ T7275] usb 4-1: SerialNumber: syz
[  496.630814][T19823] fuse: Unknown parameter 'group_i00000000000000000000'
[  496.686023][ T7275] usb 4-1: Invalid connection information received from device
[  496.703530][T19826] /dev/nullb0: Can't open blockdev
[  496.728143][   T60] Bluetooth: hci0: unexpected event for opcode 0x0c7d
[  496.907350][ T5805] usb 4-1: USB disconnect, device number 127
[  497.190530][   T60] Bluetooth: hci0: unexpected event for opcode 0x203c
[  497.551259][T19870] overlayfs: failed to resolve './file0': -2
[  497.572079][T19872] fuse: Unknown parameter 'group_id00000000000000000000'
[  497.962157][T19894] No buffer was provided with the request
[  498.671173][T19908] fuse: Unknown parameter 'group_id00000000000000000000'
[  499.239168][T19921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'.
[  500.223421][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  500.285221][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  500.310893][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  500.311934][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  500.338647][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  501.415990][ T1334] ieee802154 phy0 wpan0: encryption failed: -22
[  501.416073][ T1334] ieee802154 phy1 wpan1: encryption failed: -22
[  502.152317][T19952] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.154469][T19952] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.154713][T19952] bridge_slave_0: entered allmulticast mode
[  502.166727][T19952] bridge_slave_0: entered promiscuous mode
[  502.176889][T19952] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.177228][T19952] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.177590][T19952] bridge_slave_1: entered allmulticast mode
[  502.187526][T19952] bridge_slave_1: entered promiscuous mode
[  502.439479][T19952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.465525][   T60] Bluetooth: hci1: command tx timeout
[  502.476766][T19952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  502.626833][T19952] team0: Port device team_slave_0 added
[  502.635362][T19952] team0: Port device team_slave_1 added
[  502.765867][T19952] batman_adv: batadv0: Adding interface: batadv_slave_0
[  502.765884][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  502.765908][T19952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.038889][   T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.115172][T19952] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.115187][T19952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.115209][T19952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.230391][T19952] hsr_slave_0: entered promiscuous mode
[  503.247072][T19952] hsr_slave_1: entered promiscuous mode
[  503.248433][T19952] debugfs: 'hsr0' already exists in 'hsr'
[  503.248452][T19952] Cannot create hsr debugfs directory
[  503.337808][   T37] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  503.398906][T20218] netlink: 'syz.0.2680': attribute type 10 has an invalid length.
[  503.495189][   T37] usb 3-1: Using ep0 maxpacket: 8
[  503.498159][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  503.498188][   T37] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  503.498268][   T37] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00
[  503.498289][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  503.549373][   T37] usb 3-1: config 0 descriptor??
[  503.594851][   T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.700286][T20218] 8021q: adding VLAN 0 to HW filter on device team0
[  503.718194][T20218] bond0: (slave team0): Enslaving as an active interface with an up link
[  503.785461][   T37] usbhid 3-1:0.0: can't add hid device: -71
[  503.785538][   T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  503.817182][   T37] usb 3-1: USB disconnect, device number 97
[  504.161467][   T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.211141][T20254] block nbd0: shutting down sockets
[  504.532716][   T60] Bluetooth: hci1: command tx timeout
[  504.729719][   T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.896289][T20293] syzkaller1: entered promiscuous mode
[  504.896313][T20293] syzkaller1: entered allmulticast mode
[  504.954734][T20298] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  505.549900][T20324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2688'.
[  506.329439][T20348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2691'.
[  506.612959][   T60] Bluetooth: hci1: command tx timeout
[  506.723257][   T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.783965][   T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.807246][   T75] bond0 (unregistering): Released all slaves
[  506.875855][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5
[  506.957157][T20346] can0: slcan on ttynull.
[  507.543804][T20345] can0 (unregistered): slcan off ttynull.
[  507.625117][ T7276] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  507.775603][ T7276] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  507.775630][ T7276] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  507.778591][ T7276] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  507.778617][ T7276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.778634][ T7276] usb 1-1: Product: syz
[  507.778648][ T7276] usb 1-1: Manufacturer: syz
[  507.778661][ T7276] usb 1-1: SerialNumber: syz
[  508.095033][ T7276] usb 1-1: 0:1 : does not exist
[  508.095131][ T7276] usb 1-1: unit 6 not found!
[  508.445525][ T7276] usb 1-1: USB disconnect, device number 108
[  508.527498][T12376] udevd[12376]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  508.692754][   T60] Bluetooth: hci1: command tx timeout
[  508.968805][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'.
[  509.255275][ T7276] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  509.422706][ T7276] usb 1-1: Using ep0 maxpacket: 8
[  509.462730][ T7276] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  509.462759][ T7276] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.462778][ T7276] usb 1-1: Product: syz
[  509.462792][ T7276] usb 1-1: Manufacturer: syz
[  509.462805][ T7276] usb 1-1: SerialNumber: syz
[  509.479672][ T7276] usb 1-1: config 0 descriptor??
[  509.707877][ T7276] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  510.186595][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  510.187208][ T7276] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  510.221663][ T7276] usb 1-1: USB disconnect, device number 109
[  510.462802][   T75] hsr_slave_0: left promiscuous mode
[  510.502723][   T75] hsr_slave_1: left promiscuous mode
[  510.503428][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  510.503445][   T75] batman_adv: batadv0: Removing interface: batadv_slave_0
[  510.544102][   T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  510.544119][   T75] batman_adv: batadv0: Removing interface: batadv_slave_1
[  510.624319][   T75] veth1_macvtap: left promiscuous mode
[  510.624378][   T75] veth0_macvtap: left promiscuous mode
[  510.624534][   T75] veth1_vlan: left promiscuous mode
[  510.624640][   T75] veth0_vlan: left promiscuous mode
[  511.453666][   T75] team0 (unregistering): Port device team_slave_1 removed
[  511.493447][   T75] team0 (unregistering): Port device team_slave_0 removed
[  512.051341][T19952] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  512.151368][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  512.159859][T19952] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  512.242384][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  512.262311][T19952] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  512.311951][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  512.320790][T19952] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  512.364389][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2709'.
[  512.410441][T19952] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  512.784613][T19952] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.854405][T20527] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  512.865420][T20527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'.
[  512.935460][T19952] 8021q: adding VLAN 0 to HW filter on device team0
[  512.957880][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.958079][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.033244][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.033390][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.217799][   T75] IPVS: stop unused estimator thread 0...
[  514.199904][T19952] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.279672][T19952] veth0_vlan: entered promiscuous mode
[  514.308183][T19952] veth1_vlan: entered promiscuous mode
[  514.427030][T19952] veth0_macvtap: entered promiscuous mode
[  514.451469][T19952] veth1_macvtap: entered promiscuous mode
[  514.504913][T19952] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.530177][T19952] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.561212][ T1003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.561385][ T1003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.561421][ T1003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.561453][ T1003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.249878][   T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.249898][   T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.466946][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.466968][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.504256][T20585] syzkaller1: entered promiscuous mode
[  515.504278][T20585] syzkaller1: entered allmulticast mode
[  515.687520][T20592] fuse: Unknown parameter 'group_id00000000000000000000'
[  517.660347][T20639] Set syz1 is full, maxelem 6117 reached
[  518.134933][T20774] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  518.357635][T20790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  518.428893][T20790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  518.440605][T20790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  518.456163][T20790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  518.462783][T20790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  518.611227][T20806] FAULT_INJECTION: forcing a failure.
[  518.611227][T20806] name failslab, interval 1, probability 0, space 0, times 0
[  518.611260][T20806] CPU: 0 UID: 0 PID: 20806 Comm: syz.0.2740 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  518.611285][T20806] Tainted: [L]=SOFTLOCKUP
[  518.611291][T20806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  518.611302][T20806] Call Trace:
[  518.611310][T20806]  <TASK>
[  518.611318][T20806]  dump_stack_lvl+0xe8/0x150
[  518.611343][T20806]  should_fail_ex+0x46b/0x600
[  518.611371][T20806]  should_failslab+0xa8/0x100
[  518.611391][T20806]  __kmalloc_noprof+0xdf/0x7b0
[  518.611410][T20806]  ? tomoyo_encode+0x28b/0x550
[  518.611431][T20806]  tomoyo_encode+0x28b/0x550
[  518.611454][T20806]  tomoyo_realpath_from_path+0x58d/0x5d0
[  518.611481][T20806]  ? tomoyo_path_number_perm+0x219/0x630
[  518.611504][T20806]  tomoyo_path_number_perm+0x246/0x630
[  518.611529][T20806]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  518.611553][T20806]  ? __lock_acquire+0x6b5/0x2d10
[  518.611576][T20806]  ? do_raw_spin_lock+0x12b/0x2f0
[  518.611630][T20806]  ? __fget_files+0x2a/0x420
[  518.611651][T20806]  ? __fget_files+0x2a/0x420
[  518.611668][T20806]  ? __fget_files+0x3a6/0x420
[  518.611684][T20806]  ? __fget_files+0x2a/0x420
[  518.611703][T20806]  security_file_ioctl+0xc3/0x2a0
[  518.611727][T20806]  __se_sys_ioctl+0x47/0x170
[  518.611748][T20806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.611768][T20806]  do_syscall_64+0x15f/0x560
[  518.611790][T20806]  ? trace_irq_disable+0x3b/0x140
[  518.611808][T20806]  ? clear_bhb_loop+0x40/0x90
[  518.611830][T20806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  518.611847][T20806] RIP: 0033:0x7fdd71cace59
[  518.611864][T20806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  518.611880][T20806] RSP: 002b:00007fdd6ff06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  518.611897][T20806] RAX: ffffffffffffffda RBX: 00007fdd71f25fa0 RCX: 00007fdd71cace59
[  518.611910][T20806] RDX: 0000200000000600 RSI: 0000000000003ba0 RDI: 0000000000000003
[  518.611922][T20806] RBP: 00007fdd6ff06090 R08: 0000000000000000 R09: 0000000000000000
[  518.611933][T20806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  518.611944][T20806] R13: 00007fdd71f26038 R14: 00007fdd71f25fa0 R15: 00007ffeec4ced68
[  518.611970][T20806]  </TASK>
[  518.612045][T20806] ERROR: Out of memory at tomoyo_realpath_from_path.
[  519.013160][ T5805] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  519.211063][ T5805] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping
[  519.211088][ T5805] usb 4-1: config 1 has an invalid descriptor of length 153, skipping remainder of the config
[  519.211107][ T5805] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  519.245252][ T5805] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  519.245280][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.245298][ T5805] usb 4-1: Product: syz
[  519.245312][ T5805] usb 4-1: Manufacturer: syz
[  519.245325][ T5805] usb 4-1: SerialNumber: syz
[  519.258783][ T5805] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  519.258805][ T5805] usb 4-1: no configuration chosen from 1 choice
[  519.739498][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'.
[  519.739529][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2746'.
[  519.888600][T20859] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261
[  519.937730][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.166255][   T37] usb 1-1: new full-speed USB device number 110 using dummy_hcd
[  520.405208][   T37] usb 1-1: unable to read config index 0 descriptor/start: -61
[  520.405245][   T37] usb 1-1: can't read configurations, error -61
[  520.464396][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.542752][T20790] Bluetooth: hci2: command tx timeout
[  520.542765][   T37] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[  520.718316][   T37] usb 1-1: unable to read config index 0 descriptor/start: -61
[  520.718352][   T37] usb 1-1: can't read configurations, error -61
[  520.718920][   T37] usb usb1-port1: attempt power cycle
[  520.750335][T20944] netlink: 'syz.2.2751': attribute type 10 has an invalid length.
[  520.924745][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.054762][T20788] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.055117][T20788] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.055388][T20788] bridge_slave_0: entered allmulticast mode
[  521.059143][T20788] bridge_slave_0: entered promiscuous mode
[  521.087444][   T37] usb 1-1: new full-speed USB device number 112 using dummy_hcd
[  521.090453][T20788] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.090840][T20788] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.091072][T20788] bridge_slave_1: entered allmulticast mode
[  521.110076][   T37] usb 1-1: unable to read config index 0 descriptor/start: -61
[  521.110109][   T37] usb 1-1: can't read configurations, error -61
[  521.139585][T20788] bridge_slave_1: entered promiscuous mode
[  521.264656][   T37] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[  521.295373][   T37] usb 1-1: unable to read config index 0 descriptor/start: -61
[  521.295410][   T37] usb 1-1: can't read configurations, error -61
[  521.295719][   T37] usb usb1-port1: unable to enumerate USB device
[  521.354754][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.398687][  T822] usb 4-1: USB disconnect, device number 2
[  521.439804][T20788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.471536][T20788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  521.608043][T21017] overlayfs: failed to resolve './file1': -2
[  521.680635][T20788] team0: Port device team_slave_0 added
[  521.706706][T20788] team0: Port device team_slave_1 added
[  521.784365][T20788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.784376][T20788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.784389][T20788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.787578][T20788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.787586][T20788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.787601][T20788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.069461][T20788] hsr_slave_0: entered promiscuous mode
[  522.072172][T20788] hsr_slave_1: entered promiscuous mode
[  522.074672][T20788] debugfs: 'hsr0' already exists in 'hsr'
[  522.074696][T20788] Cannot create hsr debugfs directory
[  522.083038][ T5810] usb 3-1: new full-speed USB device number 98 using dummy_hcd
[  522.247446][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0
[  522.247484][ T5810] usb 3-1: New USB device found, idVendor=054c, idProduct=1000, bcdDevice= 0.00
[  522.247504][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.262103][ T5810] usb 3-1: config 0 descriptor??
[  522.612762][T20790] Bluetooth: hci2: command tx timeout
[  522.689874][ T5810] hid_parser_main: 270 callbacks suppressed
[  522.689898][ T5810] sony 0003:054C:1000.0027: unknown main item tag 0x2
[  522.689927][ T5810] sony 0003:054C:1000.0027: unknown main item tag 0x6
[  522.690001][ T5810] sony 0003:054C:1000.0027: ignoring exceeding usage max
[  522.732080][ T5810] sony 0003:054C:1000.0027: hidraw0: USB HID v0.81 Device [HID 054c:1000] on usb-dummy_hcd.2-1/input0
[  522.732112][ T5810] sony 0003:054C:1000.0027: failed to claim input
[  522.951307][T21110] syzkaller1: entered promiscuous mode
[  522.951332][T21110] syzkaller1: entered allmulticast mode
[  523.063143][   T13] erspan0: left allmulticast mode
[  523.063175][   T13] erspan0: left promiscuous mode
[  523.063462][   T13] bridge0: port 3(erspan0) entered disabled state
[  523.223618][   T13] bridge_slave_1: left allmulticast mode
[  523.223641][   T13] bridge_slave_1: left promiscuous mode
[  523.223824][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  523.302783][ T5810] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  523.363615][   T13] bridge_slave_0: left allmulticast mode
[  523.363638][   T13] bridge_slave_0: left promiscuous mode
[  523.363840][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  523.462683][ T5810] usb 1-1: Using ep0 maxpacket: 32
[  523.469650][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85
[  523.469688][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 240, setting to 64
[  523.471750][ T5810] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  523.471774][ T5810] usb 1-1: New USB device strings: Mfr=170, Product=2, SerialNumber=3
[  523.471793][ T5810] usb 1-1: Product: syz
[  523.471806][ T5810] usb 1-1: Manufacturer: syz
[  523.471813][ T5810] usb 1-1: SerialNumber: syz
[  523.538183][ T5810] usb 1-1: config 0 descriptor??
[  523.564327][ T5810] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  523.761447][ T5810] usb 1-1: USB disconnect, device number 114
[  523.770089][ T2393] usb 1-1: Failed to submit usb control message: -71
[  523.770121][ T2393] usb 1-1: unable to send the bmi data to the device: -71
[  523.770138][ T2393] usb 1-1: unable to get target info from device
[  523.770167][ T2393] usb 1-1: could not get target info (-71)
[  523.770194][ T2393] usb 1-1: could not probe fw (-71)
[  524.453435][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.533418][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.574654][   T13] bond0 (unregistering): Released all slaves
[  524.692864][T20790] Bluetooth: hci2: command tx timeout
[  524.731684][ T5805] usb 3-1: USB disconnect, device number 98
[  524.980697][T21212] 
: renamed from bond_slave_0 (while UP)
[  525.212580][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.232573][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.242595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.252618][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.262587][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.272570][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.312605][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.332591][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.342584][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  525.352582][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  526.773138][T20790] Bluetooth: hci2: command tx timeout
[  527.732520][T21271] FAULT_INJECTION: forcing a failure.
[  527.732520][T21271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  527.732654][T21271] CPU: 0 UID: 0 PID: 21271 Comm: syz.0.2768 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  527.732681][T21271] Tainted: [L]=SOFTLOCKUP
[  527.732687][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  527.732697][T21271] Call Trace:
[  527.732704][T21271]  <TASK>
[  527.732712][T21271]  dump_stack_lvl+0xe8/0x150
[  527.732737][T21271]  should_fail_ex+0x46b/0x600
[  527.732766][T21271]  _copy_from_user+0x2d/0xb0
[  527.732786][T21271]  do_sys_poll+0x2a0/0xf50
[  527.732820][T21271]  ? __lock_acquire+0x6b5/0x2d10
[  527.732840][T21271]  ? __pfx_do_sys_poll+0x10/0x10
[  527.732868][T21271]  ? aa_file_perm+0x192/0x15f0
[  527.732968][T21271]  ? set_user_sigmask+0xcd/0x1c0
[  527.732993][T21271]  ? __pfx_set_user_sigmask+0x10/0x10
[  527.733015][T21271]  ? rt_mutex_slowunlock+0x1cb/0x300
[  527.733033][T21271]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  527.733057][T21271]  __se_sys_ppoll+0x209/0x2b0
[  527.733080][T21271]  ? fput+0xa0/0xd0
[  527.733106][T21271]  ? __pfx___se_sys_ppoll+0x10/0x10
[  527.733127][T21271]  ? __pfx_ksys_write+0x10/0x10
[  527.733151][T21271]  ? __secure_computing+0xe1/0x2a0
[  527.733171][T21271]  ? __x64_sys_ppoll+0x20/0xc0
[  527.733193][T21271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.733212][T21271]  do_syscall_64+0x15f/0x560
[  527.733243][T21271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.733262][T21271]  ? clear_bhb_loop+0x40/0x90
[  527.733284][T21271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.733301][T21271] RIP: 0033:0x7fdd71cace59
[  527.733318][T21271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  527.733334][T21271] RSP: 002b:00007fdd6ff06028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  527.733353][T21271] RAX: ffffffffffffffda RBX: 00007fdd71f25fa0 RCX: 00007fdd71cace59
[  527.733366][T21271] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  527.733379][T21271] RBP: 00007fdd6ff06090 R08: 0000000000000000 R09: 0000000000000000
[  527.733391][T21271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  527.733402][T21271] R13: 00007fdd71f26038 R14: 00007fdd71f25fa0 R15: 00007ffeec4ced68
[  527.733429][T21271]  </TASK>
[  528.412721][   T13] hsr_slave_0: left promiscuous mode
[  528.453706][   T13] hsr_slave_1: left promiscuous mode
[  528.457747][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  528.457773][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  528.501518][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  528.501537][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  528.658739][ T5805] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0
[  528.688268][   T13] veth1_macvtap: left promiscuous mode
[  528.688380][   T13] veth0_macvtap: left promiscuous mode
[  528.688619][   T13] veth1_vlan: left promiscuous mode
[  528.688840][   T13] veth0_vlan: left promiscuous mode
[  528.749705][ T5805] hid-generic 0000:0000:0000.0028: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  530.263492][   T13] team0 (unregistering): Port device team_slave_1 removed
[  530.324544][   T13] team0 (unregistering): Port device team_slave_0 removed
[  530.564417][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5
[  530.819025][T21331] syzkaller1: entered promiscuous mode
[  530.819050][T21331] syzkaller1: entered allmulticast mode
[  531.018450][T20788] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  531.113976][T20788] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  531.303364][T21362] FAULT_INJECTION: forcing a failure.
[  531.303364][T21362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.303400][T21362] CPU: 0 UID: 0 PID: 21362 Comm: syz.3.2784 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  531.303425][T21362] Tainted: [L]=SOFTLOCKUP
[  531.303431][T21362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.303442][T21362] Call Trace:
[  531.303449][T21362]  <TASK>
[  531.303458][T21362]  dump_stack_lvl+0xe8/0x150
[  531.303488][T21362]  should_fail_ex+0x46b/0x600
[  531.303517][T21362]  _copy_from_user+0x2d/0xb0
[  531.303537][T21362]  ___sys_recvmsg+0x175/0x590
[  531.303560][T21362]  ? get_pid_task+0x20/0x1f0
[  531.303577][T21362]  ? get_pid_task+0x20/0x1f0
[  531.303599][T21362]  ? __pfx____sys_recvmsg+0x10/0x10
[  531.303628][T21362]  ? __fget_files+0x2a/0x420
[  531.303660][T21362]  ? __fget_files+0x3a6/0x420
[  531.303686][T21362]  __x64_sys_recvmsg+0x1c0/0x2a0
[  531.303713][T21362]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  531.303745][T21362]  ? __pfx_ksys_write+0x10/0x10
[  531.303773][T21362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.303792][T21362]  do_syscall_64+0x15f/0x560
[  531.303814][T21362]  ? trace_irq_disable+0x3b/0x140
[  531.303833][T21362]  ? clear_bhb_loop+0x40/0x90
[  531.303854][T21362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.303872][T21362] RIP: 0033:0x7f45840cce59
[  531.303889][T21362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.303904][T21362] RSP: 002b:00007f4582326028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  531.303924][T21362] RAX: ffffffffffffffda RBX: 00007f4584345fa0 RCX: 00007f45840cce59
[  531.303938][T21362] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  531.303949][T21362] RBP: 00007f4582326090 R08: 0000000000000000 R09: 0000000000000000
[  531.303961][T21362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.303971][T21362] R13: 00007f4584346038 R14: 00007f4584345fa0 R15: 00007fff86c6a508
[  531.304000][T21362]  </TASK>
[  531.583126][T20788] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  531.611115][T21371] FAULT_INJECTION: forcing a failure.
[  531.611115][T21371] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  531.611150][T21371] CPU: 1 UID: 0 PID: 21371 Comm: syz.0.2786 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  531.611178][T21371] Tainted: [L]=SOFTLOCKUP
[  531.611185][T21371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  531.611196][T21371] Call Trace:
[  531.611204][T21371]  <TASK>
[  531.611212][T21371]  dump_stack_lvl+0xe8/0x150
[  531.611238][T21371]  should_fail_ex+0x46b/0x600
[  531.611267][T21371]  _copy_from_user+0x2d/0xb0
[  531.611287][T21371]  ___sys_recvmsg+0x175/0x590
[  531.611311][T21371]  ? get_pid_task+0x20/0x1f0
[  531.611329][T21371]  ? get_pid_task+0x20/0x1f0
[  531.611351][T21371]  ? __pfx____sys_recvmsg+0x10/0x10
[  531.611380][T21371]  ? __fget_files+0x2a/0x420
[  531.611413][T21371]  ? __fget_files+0x3a6/0x420
[  531.611440][T21371]  __x64_sys_recvmsg+0x1c0/0x2a0
[  531.611467][T21371]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  531.611500][T21371]  ? __pfx_ksys_write+0x10/0x10
[  531.611533][T21371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.611553][T21371]  do_syscall_64+0x15f/0x560
[  531.611575][T21371]  ? trace_irq_disable+0x3b/0x140
[  531.611596][T21371]  ? clear_bhb_loop+0x40/0x90
[  531.611618][T21371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  531.611635][T21371] RIP: 0033:0x7fdd71cace59
[  531.611652][T21371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  531.611668][T21371] RSP: 002b:00007fdd6ff06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  531.611689][T21371] RAX: ffffffffffffffda RBX: 00007fdd71f25fa0 RCX: 00007fdd71cace59
[  531.611702][T21371] RDX: 0000000000000102 RSI: 00002000000008c0 RDI: 0000000000000004
[  531.611714][T21371] RBP: 00007fdd6ff06090 R08: 0000000000000000 R09: 0000000000000000
[  531.611727][T21371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  531.611738][T21371] R13: 00007fdd71f26038 R14: 00007fdd71f25fa0 R15: 00007ffeec4ced68
[  531.611767][T21371]  </TASK>
[  531.792304][T20788] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  531.828307][T20788] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  531.878004][T20788] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  531.879433][T20788] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  531.994981][T20788] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  532.137347][ T5805] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  532.322808][ T5805] usb 1-1: Using ep0 maxpacket: 32
[  532.326182][ T5805] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  532.326204][ T5805] usb 1-1: config 0 has no interface number 0
[  532.326240][ T5805] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  532.326264][ T5805] usb 1-1: config 0 interface 85 has no altsetting 0
[  532.328366][ T5805] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  532.328391][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.328412][ T5805] usb 1-1: Product: syz
[  532.328426][ T5805] usb 1-1: Manufacturer: syz
[  532.328439][ T5805] usb 1-1: SerialNumber: syz
[  532.333564][T20788] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.350860][ T5805] usb 1-1: config 0 descriptor??
[  532.480466][T20788] 8021q: adding VLAN 0 to HW filter on device team0
[  532.548519][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.548653][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.660802][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.661101][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.136550][ T5805] appletouch 1-1:0.85: Geyser mode initialized.
[  533.139853][ T5805] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input30
[  533.149376][    C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  533.225721][T21404] netlink: 758 bytes leftover after parsing attributes in process `syz.3.2790'.
[  533.225756][T21404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2790'.
[  533.362811][ T5805] usb 1-1: USB disconnect, device number 115
[  533.362900][    C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  533.498694][ T5805] appletouch 1-1:0.85: input: appletouch disconnected
[  533.503491][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6
[  534.273079][   T32] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  534.375768][T20788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.423058][   T32] usb 1-1: Using ep0 maxpacket: 32
[  534.426145][   T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[  534.428453][   T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  534.456823][   T32] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  534.456849][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.456867][   T32] usb 1-1: Product: syz
[  534.456880][   T32] usb 1-1: Manufacturer: syz
[  534.456893][   T32] usb 1-1: SerialNumber: syz
[  534.710875][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7
[  534.766599][   T32] usb 1-1: disable ehci-hcd to run US-144
[  534.778106][   T32] usb 1-1: USB disconnect, device number 116
[  534.924958][ T5805] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  535.061406][T20788] veth0_vlan: entered promiscuous mode
[  535.076407][T20788] veth1_vlan: entered promiscuous mode
[  535.084625][ T5805] usb 3-1: Using ep0 maxpacket: 8
[  535.087096][ T5805] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 237, changing to 7
[  535.114400][ T5805] usb 3-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40
[  535.114428][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.114447][ T5805] usb 3-1: Product: syz
[  535.114460][ T5805] usb 3-1: Manufacturer: syz
[  535.114473][ T5805] usb 3-1: SerialNumber: syz
[  535.190833][ T5805] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  535.328013][T20788] veth0_macvtap: entered promiscuous mode
[  535.448760][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.449744][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.584509][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.585035][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.612436][T20788] veth1_macvtap: entered promiscuous mode
[  535.636462][ T5805] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  535.636868][ T5805] usb 3-1: 0:3 : does not exist
[  535.666595][ T5276] 8021q: adding VLAN 0 to HW filter on device eth8
[  535.730357][T20788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.776839][T20788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.802009][ T4339] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.802052][ T4339] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.802084][ T4339] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.802116][ T4339] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.845106][ T5805] usb 3-1: USB disconnect, device number 99
[  535.969687][T12376] udevd[12376]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  536.764149][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.764169][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.768329][T21561] fuse: Unknown parameter '0x0000000000000003'
[  536.979206][T21570] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2802'.
[  536.994550][T21570] .`: renamed from bond0 (while UP)
[  537.228857][T19670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  537.228877][T19670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  537.310277][T21574] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967282 (34359738256 ns) > initial count (3584 ns). Using initial count to start timer.
[  537.636840][T21605] fuse: Unknown parameter '0x0000000000000003'
[  537.872496][T21616] syzkaller1: entered promiscuous mode
[  537.877582][T21616] syzkaller1: entered allmulticast mode
[  537.983311][T21394] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  538.140321][T21394] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  538.140347][T21394] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  538.140366][T21394] usb 1-1: config 1 has no interface number 0
[  538.140413][T21394] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  538.142811][T21394] usb 1-1: New USB device found, idVendor=0525, idProduct=779d, bcdDevice= 0.40
[  538.142835][T21394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.142854][T21394] usb 1-1: Product: syz
[  538.142867][T21394] usb 1-1: Manufacturer: syz
[  538.142878][T21394] usb 1-1: SerialNumber: syz
[  538.178969][T21394] cdc_ncm 1-1:1.1: NCM or ECM functional descriptors missing
[  538.179012][T21394] cdc_ncm 1-1:1.1: bind() failure
[  538.210634][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2816'.
[  538.330421][T21637] 
[  538.330432][T21637] ======================================================
[  538.330440][T21637] WARNING: possible circular locking dependency detected
[  538.330457][T21637] syzkaller #0 Tainted: G             L     
[  538.330468][T21637] ------------------------------------------------------
[  538.330475][T21637] syz.3.2817/21637 is trying to acquire lock:
[  538.330485][T21637] ffffffff8e94e518 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0
[  538.330526][T21637] 
[  538.330526][T21637] but task is already holding lock:
[  538.330533][T21637] ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0
[  538.330578][T21637] 
[  538.330578][T21637] which lock already depends on the new lock.
[  538.330578][T21637] 
[  538.330584][T21637] 
[  538.330584][T21637] the existing dependency chain (in reverse order) is:
[  538.330592][T21637] 
[  538.330592][T21637] -> #7 (system_transition_mutex){+.+.}-{4:4}:
[  538.330615][T21637]        mutex_lock_nested+0x5a/0x1d0
[  538.330633][T21637]        pm_test_store+0x95/0x480
[  538.330651][T21637]        kernfs_fop_write_iter+0x3b0/0x540
[  538.330673][T21637]        iter_file_splice_write+0x9a6/0x10f0
[  538.330688][T21637]        direct_splice_actor+0x104/0x160
[  538.330704][T21637]        splice_direct_to_actor+0x545/0xc80
[  538.330719][T21637]        do_splice_direct+0x19b/0x2a0
[  538.330735][T21637]        do_sendfile+0x547/0x7e0
[  538.330757][T21637]        __se_sys_sendfile64+0xdf/0x1a0
[  538.330777][T21637]        do_syscall_64+0x15f/0x560
[  538.330798][T21637]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.330815][T21637] 
[  538.330815][T21637] -> #6 (&of->mutex){+.+.}-{4:4}:
[  538.330839][T21637]        mutex_lock_nested+0x5a/0x1d0
[  538.330854][T21637]        kernfs_fop_write_iter+0x1df/0x540
[  538.330875][T21637]        lo_rw_aio+0xc80/0xf00
[  538.330895][T21637]        loop_process_work+0x637/0x11b0
[  538.330913][T21637]        process_one_work+0x98b/0x1630
[  538.330934][T21637]        worker_thread+0xb49/0x1140
[  538.330956][T21637]        kthread+0x388/0x470
[  538.330972][T21637]        ret_from_fork+0x514/0xb70
[  538.330990][T21637]        ret_from_fork_asm+0x1a/0x30
[  538.331012][T21637] 
[  538.331012][T21637] -> #5 ((work_completion)(&worker->work)){+.+.}-{0:0}:
[  538.331036][T21637]        process_one_work+0x8d7/0x1630
[  538.331057][T21637]        worker_thread+0xb49/0x1140
[  538.331079][T21637]        kthread+0x388/0x470
[  538.331095][T21637]        ret_from_fork+0x514/0xb70
[  538.331112][T21637]        ret_from_fork_asm+0x1a/0x30
[  538.331130][T21637] 
[  538.331130][T21637] -> #4 ((wq_completion)loop8){+.+.}-{0:0}:
[  538.331152][T21637]        touch_wq_lockdep_map+0xcb/0x180
[  538.331168][T21637]        __flush_workqueue+0x14b/0x14f0
[  538.331183][T21637]        drain_workqueue+0xd3/0x390
[  538.331197][T21637]        lo_release+0x287/0x8f0
[  538.331215][T21637]        bdev_release+0x541/0x660
[  538.331236][T21637]        blkdev_release+0x15/0x20
[  538.331258][T21637]        __fput+0x461/0xa70
[  538.331270][T21637]        task_work_run+0x1d9/0x270
[  538.331288][T21637]        exit_to_user_mode_loop+0xf3/0x4d0
[  538.331305][T21637]        do_syscall_64+0x33e/0x560
[  538.331326][T21637]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.331344][T21637] 
[  538.331344][T21637] -> #3 (&disk->open_mutex){+.+.}-{4:4}:
[  538.331366][T21637]        mutex_lock_nested+0x5a/0x1d0
[  538.331381][T21637]        __del_gendisk+0x127/0x980
[  538.331405][T21637]        md_kobj_release+0xbf/0xf0
[  538.331423][T21637]        kobject_put+0x228/0x560
[  538.331438][T21637]        process_one_work+0x98b/0x1630
[  538.331458][T21637]        worker_thread+0xb49/0x1140
[  538.331480][T21637]        kthread+0x388/0x470
[  538.331496][T21637]        ret_from_fork+0x514/0xb70
[  538.331514][T21637]        ret_from_fork_asm+0x1a/0x30
[  538.331533][T21637] 
[  538.331533][T21637] -> #2 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}:
[  538.331559][T21637]        process_one_work+0x8d7/0x1630
[  538.331580][T21637]        worker_thread+0xb49/0x1140
[  538.331602][T21637]        kthread+0x388/0x470
[  538.331618][T21637]        ret_from_fork+0x514/0xb70
[  538.331636][T21637]        ret_from_fork_asm+0x1a/0x30
[  538.331656][T21637] 
[  538.331656][T21637] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}:
[  538.331679][T21637]        touch_wq_lockdep_map+0xcb/0x180
[  538.331694][T21637]        __flush_workqueue+0x14b/0x14f0
[  538.331732][T21637]        md_alloc+0x32/0xf30
[  538.331752][T21637]        md_alloc_and_put+0x1a/0x1f0
[  538.331766][T21637]        blk_request_module+0x27d/0x2a0
[  538.331783][T21637]        blkdev_get_no_open+0x3f/0xe0
[  538.331803][T21637]        blkdev_open+0x1f5/0x620
[  538.331825][T21637]        do_dentry_open+0x83d/0x13e0
[  538.331847][T21637]        vfs_open+0x3b/0x350
[  538.331867][T21637]        path_openat+0x2eea/0x3960
[  538.331884][T21637]        do_file_open+0x23e/0x4a0
[  538.331900][T21637]        do_sys_openat2+0x115/0x200
[  538.331915][T21637]        __x64_sys_openat+0x138/0x170
[  538.331930][T21637]        do_syscall_64+0x15f/0x560
[  538.331950][T21637]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.331968][T21637] 
[  538.331968][T21637] -> #0 (major_names_lock){+.+.}-{4:4}:
[  538.331992][T21637]        __lock_acquire+0x15a5/0x2d10
[  538.332010][T21637]        lock_acquire+0x106/0x350
[  538.332027][T21637]        mutex_lock_nested+0x5a/0x1d0
[  538.332043][T21637]        blk_request_module+0x35/0x2a0
[  538.332058][T21637]        blkdev_get_no_open+0x3f/0xe0
[  538.332078][T21637]        bdev_file_open_by_dev+0xa0/0x240
[  538.332097][T21637]        swsusp_check+0x56/0x490
[  538.332113][T21637]        software_resume+0x51/0x4c0
[  538.332135][T21637]        resume_store+0x333/0x4f0
[  538.332148][T21637]        kernfs_fop_write_iter+0x3b0/0x540
[  538.332168][T21637]        vfs_write+0x629/0xba0
[  538.332184][T21637]        ksys_write+0x156/0x270
[  538.332200][T21637]        do_syscall_64+0x15f/0x560
[  538.332219][T21637]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.332235][T21637] 
[  538.332235][T21637] other info that might help us debug this:
[  538.332235][T21637] 
[  538.332241][T21637] Chain exists of:
[  538.332241][T21637]   major_names_lock --> &of->mutex --> system_transition_mutex
[  538.332241][T21637] 
[  538.332270][T21637]  Possible unsafe locking scenario:
[  538.332270][T21637] 
[  538.332276][T21637]        CPU0                    CPU1
[  538.332282][T21637]        ----                    ----
[  538.332288][T21637]   lock(system_transition_mutex);
[  538.332300][T21637]                                lock(&of->mutex);
[  538.332313][T21637]                                lock(system_transition_mutex);
[  538.332326][T21637]   lock(major_names_lock);
[  538.332338][T21637] 
[  538.332338][T21637]  *** DEADLOCK ***
[  538.332338][T21637] 
[  538.332344][T21637] 5 locks held by syz.3.2817/21637:
[  538.332355][T21637]  #0: ffff88803d045528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320
[  538.332405][T21637]  #1: ffff8880367ac480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0
[  538.332452][T21637]  #2: ffff88805e389c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540
[  538.332498][T21637]  #3: ffff88801e298698 (kn->active#79){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540
[  538.332545][T21637]  #4: ffffffff8e0756d8 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x4c0
[  538.332590][T21637] 
[  538.332590][T21637] stack backtrace:
[  538.332604][T21637] CPU: 1 UID: 0 PID: 21637 Comm: syz.3.2817 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  538.332630][T21637] Tainted: [L]=SOFTLOCKUP
[  538.332637][T21637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  538.332649][T21637] Call Trace:
[  538.332656][T21637]  <TASK>
[  538.332664][T21637]  dump_stack_lvl+0xe8/0x150
[  538.332685][T21637]  print_circular_bug+0x2e1/0x300
[  538.332710][T21637]  check_noncircular+0x12e/0x150
[  538.332736][T21637]  __lock_acquire+0x15a5/0x2d10
[  538.332758][T21637]  ? __lock_acquire+0x6b5/0x2d10
[  538.332783][T21637]  ? blk_request_module+0x35/0x2a0
[  538.332800][T21637]  lock_acquire+0x106/0x350
[  538.332819][T21637]  ? blk_request_module+0x35/0x2a0
[  538.332838][T21637]  ? blk_request_module+0x35/0x2a0
[  538.332857][T21637]  ? blk_request_module+0x35/0x2a0
[  538.332873][T21637]  mutex_lock_nested+0x5a/0x1d0
[  538.332891][T21637]  ? blk_request_module+0x35/0x2a0
[  538.332909][T21637]  blk_request_module+0x35/0x2a0
[  538.332928][T21637]  blkdev_get_no_open+0x3f/0xe0
[  538.332951][T21637]  bdev_file_open_by_dev+0xa0/0x240
[  538.332975][T21637]  swsusp_check+0x56/0x490
[  538.332996][T21637]  software_resume+0x51/0x4c0
[  538.333021][T21637]  resume_store+0x333/0x4f0
[  538.333037][T21637]  ? sysfs_file_kobj+0x1a/0x230
[  538.333060][T21637]  ? __pfx_resume_store+0x10/0x10
[  538.333078][T21637]  ? sysfs_file_kobj+0x1a/0x230
[  538.333102][T21637]  ? sysfs_file_kobj+0x1e4/0x230
[  538.333127][T21637]  ? sysfs_kf_write+0x166/0x260
[  538.333144][T21637]  ? __pfx_sysfs_kf_write+0x10/0x10
[  538.333159][T21637]  kernfs_fop_write_iter+0x3b0/0x540
[  538.333184][T21637]  vfs_write+0x629/0xba0
[  538.333206][T21637]  ? __pfx_vfs_write+0x10/0x10
[  538.333227][T21637]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  538.333251][T21637]  ? lockdep_hardirqs_on+0x7a/0x110
[  538.333273][T21637]  ? mutex_lock_nested+0x152/0x1d0
[  538.333289][T21637]  ? fdget_pos+0x252/0x320
[  538.333308][T21637]  ksys_write+0x156/0x270
[  538.333327][T21637]  ? __pfx_ksys_write+0x10/0x10
[  538.333348][T21637]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.333366][T21637]  do_syscall_64+0x15f/0x560
[  538.333387][T21637]  ? trace_irq_disable+0x3b/0x140
[  538.333415][T21637]  ? clear_bhb_loop+0x40/0x90
[  538.333435][T21637]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.333453][T21637] RIP: 0033:0x7f45840cce59
[  538.333469][T21637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.333485][T21637] RSP: 002b:00007f4582326028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  538.333504][T21637] RAX: ffffffffffffffda RBX: 00007f4584345fa0 RCX: 00007f45840cce59
[  538.333518][T21637] RDX: 0000000000000012 RSI: 0000200000000140 RDI: 0000000000000005
[  538.333530][T21637] RBP: 00007f4584162d6f R08: 0000000000000000 R09: 0000000000000000
[  538.333542][T21637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  538.333554][T21637] R13: 00007f4584346038 R14: 00007f4584345fa0 R15: 00007fff86c6a508
[  538.333573][T21637]  </TASK>
[  538.385448][T21637] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  538.385476][T21637] PM: Image not found (code -6)
[  538.446493][T21612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.446775][T21612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.451970][T21394] usb 1-1: USB disconnect, device number 117