last executing test programs:

18.279801173s ago: executing program 1 (id=198):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0)
preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 17)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000080))

18.103624516s ago: executing program 1 (id=200):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x1ff)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x76, 0x160341)
ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, 0x0)

18.009126113s ago: executing program 1 (id=201):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffff"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

17.899507111s ago: executing program 1 (id=202):
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x10, 0x803, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x60}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket(0x1, 0x2, 0x0)
openat$kvm(0x0, &(0x7f00000002c0), 0x8041, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f0000000500)={0x0, 0xffffffff, 0x9000000, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x200, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x105c87, 0x800, 0x0, 0x8003aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x32c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x80, 0x0, 0x261}}], 0x1, 0x0, 0x0)

17.866231123s ago: executing program 1 (id=203):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0)
rmdir(&(0x7f0000000500)='./dev/sda1\x00')
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6, 0x7ff, 0x100, 0x6, 0x180107})
mount$cgroup(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{}, {@subsystem='pids'}]})
readlink(&(0x7f0000000400)='./sys/kernel/mm/lru_gen/enabled/file0\x00', &(0x7f0000000440)=""/130, 0x82)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000680), 0x4)
setxattr$trusted_overlay_redirect(&(0x7f00000002c0)='./sys/kernel/mm/lru_gen/enabled/file0\x00', &(0x7f0000000300), &(0x7f0000000340)='./sys/kernel/mm/lru_gen/enabled\x00', 0x20, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000700)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000740)=0x2, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000780)=0x437b, 0x4)
connect$inet(r1, &(0x7f00000007c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000800)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1)
sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="e4", 0x1}], 0x1}, 0x0)
sendto$inet(r1, &(0x7f0000000900)="be", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000940), 0x4)
sendto$inet(r1, &(0x7f0000000980)='<', 0x381, 0x805, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r2}}, './dev/sda1\x00'})
write$binfmt_format(r2, &(0x7f0000000240)='0\x00', 0x2)

17.730948248s ago: executing program 1 (id=204):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x103880)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000300)={0x0, 0x722}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000300)={0x0, 0x722})
close(0x3) (async)
close(0x3)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

11.027674115s ago: executing program 3 (id=251):
openat$autofs(0xffffffffffffff9c, 0x0, 0xa843, 0x0)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0)={0x0, 0xea60}, 0x10)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
landlock_restrict_self(0xffffffffffffffff, 0xc)

10.840184299s ago: executing program 3 (id=252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="900000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c00028005000100000000000800074000000004080003400065c53c"], 0x90}, 0x1, 0xbb1414ac}, 0x0) (async)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = semget(0x3, 0x4, 0x69c) (async)
r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff}) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r4, 0x89fc, &(0x7f0000000600)={'bond0\x00', @random="00009e0c1100"})
semop(r2, &(0x7f0000000640)=[{0x3, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) (async)
semop(r2, &(0x7f0000000680)=[{0x2, 0x7f, 0x1800}, {0x1, 0xbbdb, 0x1000}, {0x1, 0x5}], 0x3) (async)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000006c0)=[0x6, 0x7fff]) (async)
syz_usb_connect(0x3, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff00070581020002000705"], 0x0)
pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x84800)
write$P9_RLERRORu(r6, &(0x7f0000000400)=ANY=[@ANYRES64=r3], 0x12) (async)
write$9p(r6, &(0x7f00000007c0)="28c370d4a8c704cbabca62ec7b33fcf290a41ae8418ac6cf814b3e2ca37a739eb031cabeff13a12d281cd56e1a98e6f4d5307503427a58f5775024cd8b7995c09f51d77ce07ae8ea2c8e1b59801726e6157ee888165dd06c6266dcc41deba9f993885ba5bc91", 0x66)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) (async)
r7 = socket$netlink(0x10, 0x3, 0x1)
sendmmsg(r7, &(0x7f00000001c0), 0x40000000000009f, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async)
r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r9, &(0x7f0000000180)={0x27, 0x0, 0x1, 0x5, 0x0, 0x5, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60)
sendto(r9, 0x0, 0x0, 0x0, &(0x7f0000000280)=@ax25={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./proc\x00', 0x1df)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

7.59114293s ago: executing program 3 (id=261):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f00000003c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
syz_usb_connect$uac1(0x5, 0xce, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1053, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0x7, 0x90, 0x89, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x35}, [@feature_unit={0xb, 0x24, 0x6, 0x3, 0x4, 0x2, [0xa, 0x3], 0x80}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x7, "eefeaca3db"}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x6, "e9"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x0, "d7"}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x0, "a3a4fb66df"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x0, 0x6, 0x8, 0x9}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x2, 0x2, 0x2, "", "d446f7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x2, 0x4, 0x0, "7ef2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x9, 0x3, {0x7, 0x25, 0x1, 0xc, 0x2, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x20, 0x5, 0x2, 0x3, 0x6}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9, 0x7, 0x2, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xe, 0xb8, 0x98, {0x7, 0x25, 0x1, 0xc, 0xc, 0x8}}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x0, 0x5, 0x5, 0x8, 0x7}, 0x140, &(0x7f00000008c0)={0x5, 0xf, 0x140, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x3, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x62, "20dbe5c43c25694c91169c13cd3d6fe2"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x8, 0x0, 0x6, 0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b8f19897efe62150695f6f5138965dc3"}, @generic={0xea, 0x10, 0x1, "adcad9914a2c481883c0272fb88075f2d79c76e823507acc4c34b4a85ec342f2e24fd6cb9bbf91bacc083a02504f50533d491a1a0cf9f08727ac40f6e9c3c40f969b146c259e3e5dadecf07f0159b524986f2506fe69d93dcd1a6621b0f935e45b3cbe0704434a8cc22deae49b0920bee0cc9c1e5af8e9e51d5da587aea4f7bf0fe989791ec249a03bf52d17a8f16a19f499b8067f767aeb7d1dd5eccff1a4ebb5c0b837c61db4873844ecd70583b15abfa0ba11336fb7f1f38c66b20760a3b35417815850f280d217d644c840c87e7d87653fd9e170b9a45842b88a0dde7d9ec65a1c40ac8944"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "0f71b7cf65e759fce22e55b776aa17f4"}]}, 0x7, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x430}}, {0x4f, &(0x7f0000000a40)=@string={0x4f, 0x3, "5620933f35dc9f6f3a8e933383d6514294ab42ad12a9ca3123f99f24c1c4c6fb9a9738c1d8635d2732dd58957a67709a2ddd6fa5ce467ea17e3a99217b336203ef5be008496b9678a1a236a9d9"}}, {0x6, &(0x7f0000000ac0)=@string={0x6, 0x3, "4a58d11d"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x1004}}, {0x4d, &(0x7f0000000bc0)=@string={0x4d, 0x3, "54004586f4ba239b8731fe536e1e6b1f2fe3a0db4867b35f61739533354596d7556c9caaed2aa04fe7d189c4730fc02b4b72291fc3a7cf7428be20102dfe43a32edd322d2dcedfa10a5db5"}}]})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000200)={0x1, 0x8, 0xa4b0, 0x3ff, 0x100000000, 0x7, 0xffffffffffffc474, 0x8, 0x7, 0xc3f, 0xfffffffb, 0x1})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000700)=0x2)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000740)=0x1ff)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0003020000000203a08fd47610c0fbd76455393779852dee03d73220182a09516b2ae2c94b58fd6f9e942bd1ca653b397bf65655d3f78073819280ecc60b45f041d04707603d96d3483274fd6798464c61d99f4775c03bdd294c67bbbbdd5e5d77064403c682688abca362c1c779a92b9268457e926d9f120778253f21ee2eafa9d8807cf3c4b055ac8d36d54250e978840f315cc6ec9879b3189371c438b3403323ce51cad942a1c3b376f630a68d04578733720878f58136d9"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000d80)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0))
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
syz_open_dev$dri(&(0x7f0000000d00), 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000dc0)='mounts\x00')
read$FUSE(r5, &(0x7f0000000e00)={0x2020}, 0xfffffe70)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002e40), 0x41, 0x0)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000002e80)={0xb, 0x83, 0xfff9, 0x9dff, 0x18, "880000fdef00"})
write$binfmt_aout(r6, &(0x7f0000002ec0)=ANY=[], 0xff30)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000002f00)={0x0, 0x40, 0x5, 0x7, 0x16, "b0bf2ebb48c849ac4000"})
r7 = syz_open_pts(r6, 0x0)
dup3(r7, r6, 0x0)

5.41987932s ago: executing program 2 (id=267):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000003200000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f20302031203120726f756e642d726f62696e2030203120")

5.365870329s ago: executing program 2 (id=268):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000180)={0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xd}})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2a8}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x64, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TCSBRK(r6, 0x5409, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780))
socket$inet6_udp(0xa, 0x2, 0x0)

4.55585434s ago: executing program 3 (id=269):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1141099, 0x0)
chroot(&(0x7f00000000c0)='./file0/../file0\x00')
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

4.381262109s ago: executing program 3 (id=270):
mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x4}, 0x10)
write(r3, &(0x7f0000000200)="240000001a007f0214f9f42700090408ff000000000000010002000008000f54fea7cd9a", 0x24)
r4 = signalfd(r2, &(0x7f0000000180)={[0x6]}, 0x8)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000240)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000300)='I', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r5, 0x1)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8)
syz_usb_disconnect(r1)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
exit(0x2)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})
r8 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder_logs/stats\x00', 0x0, 0x0)
read(r8, &(0x7f0000000a40)=""/4096, 0x1000)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r9, 0xffffffffffffffff, 0x0)
bind$l2tp6(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x1, 0x4})

3.202595465s ago: executing program 0 (id=271):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862f01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x1, 0x0, {0x0, 0x1}, {0x3a, 0x2}, @const={0x0, {0x10, 0xfffd, 0x4000}}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) (fail_nth: 40)

3.092142694s ago: executing program 0 (id=272):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x72cb, 0xffffffff}, 0xc)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x4})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0xffffffffffffff47})
dup3(r2, r1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000400)=[@acquire]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000500)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x3e}, @ptr={0x70742a85, 0x20000000, 0x0, 0x60, 0x1, 0x26}, @raw_ptr={0x70742a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}, 0x1040}]})

2.973957498s ago: executing program 2 (id=273):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="f78d9ca38fff48f3be52163448412ba8", 0xc508d153}, {&(0x7f0000000500)="ebe3a0e9796cfd1647e299f4e376fdba128a80b372219d205e81f4a7fe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587304800"/77, 0x27}, {&(0x7f0000000a80)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000b80)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c40)="909dc1c3675eb8723b6ee9e156b29fc6a367df20c38952998c96773f6855d456eaade580f190ccd14cc073811ee5463236d9c025e46bbe64fa"}, {&(0x7f0000000c80)="8b46d247c33cdfb412caf14bf7fa8ab46a4fb7d3106ac7e5"}, {&(0x7f0000000cc0)="a64d68f1f40aa88bcb1baf793401dcb6a92c7366dba6ad65fd1ae778afcc295091b6d37f0f20a7f95fa21f8191741067fd072ea8086e664f63ddaf4e85d26fcdc40779368a181fc5362fb32ffc8eaee8407e5be330b4b8c09ab60395c8344f94524047f1af26861b5c8aea"}, {&(0x7f0000000d40)="a834a2f966bb056d7c4fafe3d3816be86d5269bdafbb5f155b19ae7adde6d4b0bdbb27ea979f787ed07e99bd281117d34c20d9b40cb3ef2a37952e415e6c40f41550f6af6c8688ffc551cc3dce5556e48d26117989403064ebaa7060dd754152a04e0fcb75c7a05ddd31bc61c3fcde9ef36e1ded6c97da21549ae3f86f2fb66ff05ff0ec4d50d60d66dc31979dba"}, {&(0x7f0000000e00)="6d7bbc790240b441bba9be"}, {&(0x7f0000000e40)="3da6a84ccd3c8245db15e800bbe07f2f491b92f6a8f1132a6ef8842605"}], 0x0, &(0x7f0000000e80)=[@iv={0x0, 0x117, 0x2, 0x0, "8582c4726ce8aabc28b2027b2273132788a86ed96469477554a99366ca592173dc4d85e73eb2dc8dac1de57fc69aa554a6ea86af73faeb957c912c3c34da91eb02b469ef54c7efcc2794d2c07dcd1714c3d02fe7d71c9721693e5642aa365c35b019b79447fd816ad19a7be917efb1e551e9d4d3a869b8b6d0ab1dbb56fe5638da7cc93a0748a30c3dcc7b01a1def00fe3027ede27d6462a2e4ef2c057690ab8c33451572c6fca02755c1519ede75f"}], 0x0, 0x841}], 0x4924924924925b0, 0x40800)
recvmsg(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001000)=""/60, 0xffffffda}, {&(0x7f00000020c0)=""/4085, 0x1000}, {&(0x7f0000000000)=""/221, 0xec}, {&(0x7f0000000180)=""/36, 0x24}], 0x4, 0x0, 0x0, 0x4000}, 0x20)

2.808119142s ago: executing program 0 (id=274):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x81}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x30000}, 0x0)

2.774297855s ago: executing program 2 (id=275):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000100)=[{&(0x7f0000000140)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000500feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

2.653454205s ago: executing program 0 (id=276):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in6=@loopback, 0x0, 0xfffc, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb475, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
mkdirat(0xffffffffffffff9c, &(0x7f0000002f00)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000002f80)='./nfsd\x00', &(0x7f0000002fc0)='nfsd\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000003000)='./nfsd/versions\x00', 0xc01, 0x10)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0xffffffff, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=[r3, r4, r3, 0xffffffffffffffff], 0x10}, @fda={0x66646185, 0x4}, @fd={0x66642a85, 0x0, r4, 0x0, 0x1}}, &(0x7f00000005c0)={0x0, 0x28, 0x48}}, 0x1000}]})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x1b}}], 0x30, 0x40}, 0x0)
write(r2, 0x0, 0x0)

2.630847467s ago: executing program 32 (id=204):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x103880)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0xffbffffa, 0x3, 0x0, 'queue0\x00', 0xe})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000300)={0x0, 0x722}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000300)={0x0, 0x722})
close(0x3) (async)
close(0x3)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x400)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) (async)
write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.588612335s ago: executing program 2 (id=278):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x181)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1141099, 0x0)
chroot(&(0x7f00000000c0)='./file0/../file0\x00')
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00')

2.375269532s ago: executing program 2 (id=279):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x8417f, 0x0)

2.348046842s ago: executing program 0 (id=280):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000086a82, 0x0)
r1 = dup(r0)
mount(0x0, &(0x7f0000002b00)='./file3\x00', &(0x7f0000002b40)='pvfs2\x00', 0x0, &(0x7f0000002b80)='acl')
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='O', 0x1}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private1, 0xfffffff8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='Q', 0x1}], 0x1}}], 0x45e, 0x4040044)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
shutdown(r1, 0x1)
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f00000009c0)=""/8192, 0x2000, 0x800, 0x0, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000029c0)=0x10, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000002ac0)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000002bc0)=0x10, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002c00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002c40)={'netdevsim0\x00', <r4=>0x0})
bind$xdp(r2, &(0x7f0000002c80)={0x2c, 0x2, r4, 0x0, 0x0}, 0x10)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002cc0), 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000002d00)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff}, 0x3a, [0xfffffffd, 0xf, 0xf, 0x8, 0x80, 0x4, 0x3, 0x8, 0x20000006, 0x1, 0x5, 0x0, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0x5, 0x107, 0x0, 0x7, 0x23c5b, 0x1, 0xf, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x2, 0x7, 0x28, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x1000, 0x15, 0x1, 0x7, 0x6, 0xdb63, 0x4000008c, 0x2000000, 0x5, 0x0, 0x4, 0xf6e, 0x800c, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x3, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0xffffffff, 0xffff, 0x5, 0x2f, 0x0, 0x312, 0x0, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x9, 0x1000005, 0x9, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0xc23, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x100, 0x3, 0x9, 0x1, 0x5, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x82, 0x408, 0xb, 0x5, 0xfffffffe, 0x6, 0x2, 0x9, 0x5, 0x8002, 0x4, 0x5, 0xb, 0x2, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x4003, 0x303c, 0x3e7, 0xb, 0x8, 0xffffffff, 0x2, 0x3, 0xf36, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x9, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0xa, 0x3, 0x5, 0x4, 0x3c484551], [0x6, 0xbb33, 0x7, 0x0, 0x5, 0x937, 0x5, 0x2, 0xfefffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x2, 0xe6d4, 0x0, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x57, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff8, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x405, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0xfffffff9, 0x4, 0x5, 0x3, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r5 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000003180), &(0x7f0000003200)=0x80)
ppoll(&(0x7f0000003240)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @multicast1}}, [0x0, 0x2, 0x100000001, 0xfffffffffffffff7, 0x3, 0x5, 0x1080, 0x6, 0x107ff, 0x8, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3, 0x1000]}, &(0x7f0000000580)=0x100)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, &(0x7f0000000780)={0x0, 0x0, @pic={0x4, 0x0, 0x81, 0x40, 0x90, 0x64, 0x3, 0x3, 0x0, 0x2, 0xd, 0xa, 0x4, 0x1, 0x5, 0xfa}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x3554000)
mlock(&(0x7f0000921000/0x1000)=nil, 0x1000)
read$FUSE(r1, 0x0, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000002a00)={0x18, 0x0, 0x0, {0x3}}, 0x18)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r1, 0x3b65, 0xa)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.227524732s ago: executing program 4 (id=277):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./pipe\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r1, 0x180000000)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00')
r2 = geteuid()
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0xc, {"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", 0x1000}}, 0xfffffffffffffcf7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x85, 0x0, &(0x7f0000001b40))
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x9a)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480))
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000300)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, r2, &(0x7f0000000340)={0x6, 0x3ff, 0x8000, 0x7, 0x2, 0x8000000000000001, 0x80000001, 0x3, 0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x13e1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000a40)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x802, 0xf6, 0x3f1, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0x8], 0x60000, 0x3c0390})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.507298372s ago: executing program 4 (id=277):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./pipe\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r1, 0x180000000)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00')
r2 = geteuid()
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06c288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629340d7cee458e4cb5e930ed615806c43a006e39336d07c2b80c1c10e002706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec694b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc00000000dba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000400", 0x1000}}, 0xfffffffffffffcf7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x85, 0x0, &(0x7f0000001b40))
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x9a)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480))
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000300)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, r2, &(0x7f0000000340)={0x6, 0x3ff, 0x8000, 0x7, 0x2, 0x8000000000000001, 0x80000001, 0x3, 0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x13e1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000a40)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x802, 0xf6, 0x3f1, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0x8], 0x60000, 0x3c0390})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.194048839s ago: executing program 0 (id=281):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGNAME(r2, 0x80404806, &(0x7f0000000140))
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000540)={0x19, 0x1, {0x2, @usage, <r3=>0x0, 0x4e9, 0x6, 0x2, 0x100000000, 0x10000, 0x402, @struct={0x2, 0x5}, 0xfffffeff, 0x84, [0xffff, 0x836, 0x5, 0x7, 0x4, 0x6]}, {0x2, @struct={0x881e, 0x10}, 0x0, 0x9, 0xe4000000, 0x6dab, 0x1, 0x1, 0x1, @usage=0x7, 0x8, 0x20f, [0xa3, 0xfffffffffffffffa, 0x7, 0x4, 0x9e, 0x7ff]}, {0x2, @struct={0x0, 0x8}, 0x0, 0xa7, 0xfffffffffffffffb, 0x100000000, 0xfffffffffffffffc, 0x2, 0xa, @usage=0xffffffff, 0x401, 0x667, [0x2c55, 0x2, 0x8, 0xffffffffffffc9ef, 0xd33f, 0xacbd]}, {0x9, 0x64e, 0x8660}})
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000940)={{r0}, {@val={r3}, @max}})
mmap$dsp(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3, 0x12, r0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x21003, 0x1, 0x7f}, 0x0, 0x1, 0x0, 0x0)

1.193577457s ago: executing program 3 (id=282):
setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x6, 0x9}]}, 0xc, 0x2)
r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x10b241)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0)
read(r1, &(0x7f0000000140), 0x1000)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000880)={0x2, 0x0, [{0x400000f3, 0x0, 0x400000000001}, {0x2b6, 0x0, 0x4}]})
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES8=r0], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x80)
mknodat$md(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x6180, 0x0)
r8 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000400)='./md0\x00', 0x2, 0x0)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x278}], 0x1}, 0x0)
openat$md_node(0xffffffffffffff9c, &(0x7f00000007c0)='./md1\x00', 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r7, 0x40480923, &(0x7f0000000440)={0x0, 0x5a, 0x0, 0x0, 0x1, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x10000})
ioctl$ADD_NEW_DISK(r8, 0x40140921, &(0x7f00000004c0)={0x0, {0x1, 0x0}, 0x0, 0x6})
ioctl$ADD_NEW_DISK(r8, 0x40140921, &(0x7f0000000500)={0x1, {0x1, 0x1}, 0x1, 0x6})
ioctl$RUN_ARRAY(r8, 0x400c0930, &(0x7f0000000540))
pwrite64(r8, &(0x7f0000000580)="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0x20, 0x1000)
pread64(r8, &(0x7f00000005c0)=""/512, 0x200, 0x10000)
ioctl$STOP_ARRAY(r8, 0x932, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x200, 0x4)
setsockopt(r4, 0x11b, 0x9, 0x0, 0x4)
ioctl$MEMGETREGIONCOUNT(r0, 0x80044d07, 0x0)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04080400c90080c8"], 0x7)

766.432434ms ago: executing program 4 (id=277):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./pipe\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r1, 0x180000000)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00')
r2 = geteuid()
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0xc, {"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", 0x1000}}, 0xfffffffffffffcf7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x85, 0x0, &(0x7f0000001b40))
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x9a)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480))
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000300)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, r2, &(0x7f0000000340)={0x6, 0x3ff, 0x8000, 0x7, 0x2, 0x8000000000000001, 0x80000001, 0x3, 0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x13e1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000a40)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x802, 0xf6, 0x3f1, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0x8], 0x60000, 0x3c0390})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 4 (id=277):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./pipe\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./pipe\x00', &(0x7f00000001c0)='rpc_pipefs\x00', 0x0, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x1, 0x4)
mmap$xdp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x300000b, 0x11, r1, 0x180000000)
mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f00000002c0)='vers=4.0,sec=krb5p,addr=127.0.0.1\x00')
r2 = geteuid()
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0xc, {"a2e3ad214fc752f91b25060987f70e06d038e7ff7fc6e5539b325d078b089b3b08386e090890e0878f0e1ac6e7049b334d959b429a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31303b305d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06c288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c0428918246d9e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1ccab2689bee59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae23034202210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ecdf5e08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629340d7cee458e4cb5e930ed615806c43a006e39336d07c2b80c1c10e002706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec694b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc00000000dba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000400", 0x1000}}, 0xfffffffffffffcf7)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x85, 0x0, &(0x7f0000001b40))
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x9a)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r4, 0x4b4b, &(0x7f0000000480))
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000300)=@md={'/dev/md', @named={'_syz', 0x0, '0'}}, r2, &(0x7f0000000340)={0x6, 0x3ff, 0x8000, 0x7, 0x2, 0x8000000000000001, 0x80000001, 0x3, 0x8})
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='cmdline\x00')
read$FUSE(r7, &(0x7f0000001b80)={0x2020}, 0x13e1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000a40)={[0x5e0, 0x7, 0x0, 0x17c, 0x3, 0x802, 0xf6, 0x3f1, 0x3, 0x2, 0x8, 0x2000009, 0x8, 0x9, 0x80000000000, 0x8], 0x60000, 0x3c0390})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

ctive
[   76.703265][ T5637] infiniband rxe0: added rxe_eth0
[   76.722337][ T5637] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   76.722373][ T5637] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   76.722407][ T5637] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   76.761268][ T5637] RDS/IB: rxe0: added
[   76.761642][ T5637] smc: adding ib device rxe0 with port count 1
[   76.761726][ T5637] smc:    ib device rxe0 port 1 has no pnetid
[   76.782354][  T194] rxe_eth0 speed is unknown, defaulting to 1000
[   76.783929][ T5642] rxe_eth0 speed is unknown, defaulting to 1000
[   76.799729][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   77.100657][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   77.350410][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.350534][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.350956][ T5635] bridge_slave_0: entered allmulticast mode
[   77.365960][ T5635] bridge_slave_0: entered promiscuous mode
[   77.417168][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.417227][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.417444][ T5635] bridge_slave_1: entered allmulticast mode
[   77.418400][ T5635] bridge_slave_1: entered promiscuous mode
[   77.437904][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   77.538457][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.564006][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.564125][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.564289][ T5636] bridge_slave_0: entered allmulticast mode
[   77.566282][ T5636] bridge_slave_0: entered promiscuous mode
[   77.600689][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.612486][ T5639] Bluetooth: hci1: command tx timeout
[   77.629797][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.630877][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.631355][ T5636] bridge_slave_1: entered allmulticast mode
[   77.637547][ T5636] bridge_slave_1: entered promiscuous mode
[   77.664423][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.664549][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.664641][ T5634] bridge_slave_0: entered allmulticast mode
[   77.665540][ T5634] bridge_slave_0: entered promiscuous mode
[   77.692983][ T5639] Bluetooth: hci0: command tx timeout
[   77.693092][ T5639] Bluetooth: hci3: command tx timeout
[   77.693168][ T5639] Bluetooth: hci2: command tx timeout
[   77.718635][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.718740][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.718858][ T5634] bridge_slave_1: entered allmulticast mode
[   77.720623][ T5634] bridge_slave_1: entered promiscuous mode
[   77.739558][ T5635] team0: Port device team_slave_0 added
[   77.752533][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.753487][ T5637] rxe_eth0 speed is unknown, defaulting to 1000
[   77.780512][ T5635] team0: Port device team_slave_1 added
[   77.802235][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   77.869663][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.872289][ T5636] team0: Port device team_slave_0 added
[   77.873373][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.873385][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.873407][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.879036][ T5636] team0: Port device team_slave_1 added
[   77.894147][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.894160][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   77.894183][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.955340][ T5635] hsr_slave_0: entered promiscuous mode
[   77.957888][ T5635] hsr_slave_1: entered promiscuous mode
[   77.969757][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.061164][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.061180][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.061204][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.088584][ T5634] team0: Port device team_slave_0 added
[   78.113918][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.113932][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.113954][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.131972][ T5634] team0: Port device team_slave_1 added
[   78.200933][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.200948][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.200969][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.265447][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.265463][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.265483][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.345366][ T5636] hsr_slave_0: entered promiscuous mode
[   78.345973][ T5636] hsr_slave_1: entered promiscuous mode
[   78.346430][ T5636] debugfs: 'hsr0' already exists in 'hsr'
[   78.346455][ T5636] Cannot create hsr debugfs directory
[   78.423897][ T5634] hsr_slave_0: entered promiscuous mode
[   78.424528][ T5634] hsr_slave_1: entered promiscuous mode
[   78.424943][ T5634] debugfs: 'hsr0' already exists in 'hsr'
[   78.424957][ T5634] Cannot create hsr debugfs directory
[   78.738535][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.744884][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   78.745826][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.752274][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   78.786047][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.789081][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   78.789832][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.816338][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   78.898311][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.898404][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.898512][ T5637] bridge_slave_0: entered allmulticast mode
[   78.899930][ T5637] bridge_slave_0: entered promiscuous mode
[   78.918507][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.918703][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.919130][ T5637] bridge_slave_1: entered allmulticast mode
[   78.920737][ T5637] bridge_slave_1: entered promiscuous mode
[   78.971947][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.993598][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.013480][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   79.016340][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.040659][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   79.046231][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.048770][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   79.057525][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.071754][ T5637] team0: Port device team_slave_0 added
[   79.088430][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   79.090913][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.093574][ T5637] team0: Port device team_slave_1 added
[   79.120612][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.120628][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.120650][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.173394][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.173406][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.173420][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.204745][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.272670][ T5635] 8021q: adding VLAN 0 to HW filter on device team0
[   79.274765][ T5634] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   79.278156][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.306833][ T5637] hsr_slave_0: entered promiscuous mode
[   79.307913][ T5637] hsr_slave_1: entered promiscuous mode
[   79.308670][ T5637] debugfs: 'hsr0' already exists in 'hsr'
[   79.308684][ T5637] Cannot create hsr debugfs directory
[   79.336973][ T5634] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   79.340178][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.359166][ T5634] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   79.364024][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.364897][ T5634] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   79.373563][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.392404][  T211] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.392509][  T211] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.440431][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.440497][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.630437][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.692109][ T4957] Bluetooth: hci1: command tx timeout
[   79.718430][ T5636] 8021q: adding VLAN 0 to HW filter on device team0
[   79.741349][ T5637] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.756686][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.766552][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.766655][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.783292][ T4957] Bluetooth: hci2: command tx timeout
[   79.783327][ T4957] Bluetooth: hci3: command tx timeout
[   79.783347][ T4957] Bluetooth: hci0: command tx timeout
[   79.800814][ T5637] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.814112][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.823055][ T5637] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.836454][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.837529][  T285] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.837587][  T285] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.849100][ T5637] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.861189][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.905738][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.984825][ T5634] 8021q: adding VLAN 0 to HW filter on device team0
[   80.019907][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.020026][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.064264][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.064355][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.224452][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.259698][ T5637] 8021q: adding VLAN 0 to HW filter on device team0
[   80.280153][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.280282][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.310881][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.311008][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.375167][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.513881][ T5635] veth0_vlan: entered promiscuous mode
[   80.550368][ T5635] veth1_vlan: entered promiscuous mode
[   80.636704][ T5635] veth0_macvtap: entered promiscuous mode
[   80.656692][ T5635] veth1_macvtap: entered promiscuous mode
[   80.705893][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.729469][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.855085][  T211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.858126][  T285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.858449][  T285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.858725][  T285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.979316][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.979342][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.041946][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.041967][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.190346][ T5635] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   81.217940][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.291157][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.387744][ T5636] veth0_vlan: entered promiscuous mode
[   81.407091][ T5792] FAULT_INJECTION: forcing a failure.
[   81.407091][ T5792] name fail_futex, interval 1, probability 0, space 0, times 1
[   81.407137][ T5792] CPU: 0 UID: 0 PID: 5792 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) 
[   81.407157][ T5792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   81.407177][ T5792] Call Trace:
[   81.407185][ T5792]  <TASK>
[   81.407193][ T5792]  dump_stack_lvl+0xe8/0x150
[   81.407229][ T5792]  should_fail_ex+0x3eb/0x540
[   81.407261][ T5792]  get_futex_key+0x1ab/0x1410
[   81.407286][ T5792]  ? fput_close_sync+0x11f/0x240
[   81.407306][ T5792]  ? __se_sys_close+0xa2/0x160
[   81.407341][ T5792]  ? do_raw_spin_lock+0x12b/0x2f0
[   81.407371][ T5792]  ? __pfx_get_futex_key+0x10/0x10
[   81.407404][ T5792]  futex_wake+0x119/0x5f0
[   81.407430][ T5792]  ? __pfx_futex_wake+0x10/0x10
[   81.407451][ T5792]  ? lockdep_hardirqs_on+0x7b/0x110
[   81.407490][ T5792]  do_futex+0x458/0x4e0
[   81.407521][ T5792]  ? __pfx_do_futex+0x10/0x10
[   81.407556][ T5792]  __se_sys_futex+0x3a8/0x450
[   81.407583][ T5792]  ? fput_close_sync+0x11f/0x240
[   81.407603][ T5792]  ? __pfx___se_sys_futex+0x10/0x10
[   81.407631][ T5792]  ? do_raw_spin_unlock+0xf5/0x200
[   81.407661][ T5792]  ? __x64_sys_futex+0x21/0xf0
[   81.407688][ T5792]  do_syscall_64+0x166/0x520
[   81.407712][ T5792]  ? trace_irq_disable+0x3b/0x140
[   81.407735][ T5792]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.407758][ T5792]  ? clear_bhb_loop+0x70/0xc0
[   81.407784][ T5792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.407802][ T5792] RIP: 0033:0x7f4c58b9fb19
[   81.407827][ T5792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   81.407842][ T5792] RSP: 002b:00007f4c599db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   81.407868][ T5792] RAX: ffffffffffffffda RBX: 00007f4c58e25fa8 RCX: 00007f4c58b9fb19
[   81.407882][ T5792] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4c58e25fac
[   81.407894][ T5792] RBP: 00007f4c58e25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[   81.407907][ T5792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   81.407918][ T5792] R13: 00007f4c58e26038 R14: 00007ffc299378d0 R15: 00007ffc299379b8
[   81.407946][ T5792]  </TASK>
[   81.439237][ T5636] veth1_vlan: entered promiscuous mode
[   81.483318][ T5634] veth0_vlan: entered promiscuous mode
[   81.521160][ T5634] veth1_vlan: entered promiscuous mode
[   81.659770][ T5636] veth0_macvtap: entered promiscuous mode
[   81.686625][ T5636] veth1_macvtap: entered promiscuous mode
[   81.700384][ T5634] veth0_macvtap: entered promiscuous mode
[   81.726595][ T5634] veth1_macvtap: entered promiscuous mode
[   81.772146][ T5639] Bluetooth: hci1: command tx timeout
[   81.780500][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.832893][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.850531][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.852243][ T5639] Bluetooth: hci0: command tx timeout
[   81.852274][ T5639] Bluetooth: hci3: command tx timeout
[   81.852294][ T5639] Bluetooth: hci2: command tx timeout
[   81.909475][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.922796][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.014418][  T285] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015010][  T285] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015203][  T285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015329][  T285] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015573][  T285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.015735][  T285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.152583][  T285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.209264][ T5803] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   82.211358][  T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.211375][  T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.262885][  T211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.282415][  T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.282435][  T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.361300][ T5637] veth0_vlan: entered promiscuous mode
[   82.390314][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.390333][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.391260][  T285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.391275][  T285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.408212][ T5637] veth1_vlan: entered promiscuous mode
[   82.505107][ T5637] veth0_macvtap: entered promiscuous mode
[   82.530260][ T5637] veth1_macvtap: entered promiscuous mode
[   82.608390][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.623253][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.722223][   T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.722267][   T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.722298][   T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.722329][   T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.793945][  T211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.793966][  T211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.822217][ T5801] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   82.824914][   T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.824930][   T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.911991][  T194] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   82.973515][ T5801] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[   82.983388][ T5801] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   82.983414][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   82.983430][ T5801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   82.983473][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.988288][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   82.988311][ T5801] usb 1-1: Product: syz
[   82.988323][ T5801] usb 1-1: Manufacturer: syz
[   83.025810][ T5791] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.036317][ T5801] cdc_wdm 1-1:1.0: skipping garbage
[   83.036337][ T5801] cdc_wdm 1-1:1.0: skipping garbage
[   83.057474][ T5801] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   83.057529][ T5801] cdc_wdm 1-1:1.0: Unknown control protocol
[   83.115469][  T194] usb 3-1: unable to get BOS descriptor or descriptor too short
[   83.116127][  T194] usb 3-1: not running at top speed; connect to a high speed hub
[   83.116158][  T194] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[   83.118567][  T194] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[   83.118582][  T194] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[   83.118592][  T194] usb 3-1: config 14 has no interface number 0
[   83.118600][  T194] usb 3-1: config 14 has no interface number 1
[   83.118633][  T194] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[   83.118644][  T194] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[   83.118656][  T194] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[   83.118668][  T194] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[   83.118680][  T194] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10
[   83.118693][  T194] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[   83.118703][  T194] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   83.118716][  T194] usb 3-1: config 14 interface 57 has no altsetting 0
[   83.118724][  T194] usb 3-1: config 14 interface 228 has no altsetting 0
[   83.120653][  T194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.120675][  T194] usb 3-1: Product: syz
[   83.120688][  T194] usb 3-1: Manufacturer: syz
[   83.120701][  T194] usb 3-1: SerialNumber: syz
[   83.194766][ T5791] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40
[   83.195902][ T5791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.195943][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.334217][ T5642] usb 1-1: USB disconnect, device number 2
[   83.340944][ T5791] usb 2-1: config 0 descriptor??
[   83.555688][ T5791] usbhid 2-1:0.0: can't add hid device: -71
[   83.555801][ T5791] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   83.564473][ T5791] usb 2-1: USB disconnect, device number 2
[   83.792525][  T194] legousbtower 3-1:14.57: interrupt endpoints not found
[   83.852121][ T4957] Bluetooth: hci1: command tx timeout
[   83.872073][ T5642] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   83.932372][ T4957] Bluetooth: hci2: command tx timeout
[   83.932407][ T4957] Bluetooth: hci3: command tx timeout
[   83.932426][ T4957] Bluetooth: hci0: command tx timeout
[   84.001885][ T5791] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   84.022276][ T5642] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40
[   84.023217][ T5642] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   84.023240][ T5642] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   84.023256][ T5642] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[   84.024059][ T5642] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.026434][ T5642] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   84.026447][ T5642] usb 1-1: Product: syz
[   84.026454][ T5642] usb 1-1: Manufacturer: syz
[   84.035067][ T5642] cdc_wdm 1-1:1.0: skipping garbage
[   84.035084][ T5642] cdc_wdm 1-1:1.0: skipping garbage
[   84.042613][ T5642] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[   84.042632][ T5642] cdc_wdm 1-1:1.0: Unknown control protocol
[   84.164427][ T5791] usb 2-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00
[   84.165364][ T5791] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[   84.165414][ T5791] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[   84.165436][ T5791] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.167354][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.167368][ T5791] usb 2-1: Product: syz
[   84.167380][ T5791] usb 2-1: Manufacturer: syz
[   84.167393][ T5791] usb 2-1: SerialNumber: syz
[   84.193842][  T194] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[   84.227909][  T194] legousbtower 3-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1
[   85.447403][ T5848] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22'.
[   85.786073][ T5791] usb 3-1: USB disconnect, device number 2
[   85.812234][ T5791] legousbtower 3-1:14.228: LEGO USB Tower #-159 now disconnected
[   85.847977][ T5372] usb 2-1: USB disconnect, device number 3
[   85.965932][ T5642] usb 1-1: USB disconnect, device number 3
[   86.119535][ T5865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   86.249497][ T5871] md: personality for level  is not loaded!
[   86.593690][   T53] IPVS: starting estimator thread 0...
[   86.683192][ T5885] IPVS: using max 34 ests per chain, 81600 per kthread
[   86.832602][   T27] cfg80211: failed to load regulatory.db
[   87.613225][ T5755] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   87.761664][ T5755] usb 1-1: Using ep0 maxpacket: 8
[   87.762383][ T5755] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   87.763774][ T5755] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   87.763825][ T5755] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   87.763845][ T5755] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   87.763866][ T5755] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   87.763888][ T5755] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   87.763923][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.987390][ T5755] usb 1-1: usb_control_msg returned -32
[   87.987440][ T5755] usbtmc 1-1:16.0: can't read capabilities
[   88.090700][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'.
[   88.213004][ T5372] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   88.370154][ T5947] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[   88.370154][ T5947] The task syz.2.63 (5947) triggered the difference, watch for misbehavior.
[   88.373004][ T5372] usb 4-1: Using ep0 maxpacket: 16
[   88.397389][ T5372] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[   88.407563][ T5372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.407581][ T5372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.407592][ T5372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   88.407615][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.455968][ T5372] usb 4-1: config 0 descriptor??
[   88.543973][   T27] usb 1-1: USB disconnect, device number 4
[   88.552553][  T194] rxe_eth0 speed is unknown, defaulting to 1000
[   89.003598][ T5937] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   89.004891][ T5937] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   89.013599][ T5937] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   89.038389][ T5937] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   89.040725][ T5937] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   89.044414][ T5937] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   89.058987][ T5937] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   89.059089][ T5937] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   89.085547][ T5937] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   89.099434][ T5937] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   89.099505][ T5937] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   89.124871][ T5937] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   89.591427][ T5981] netlink: 'syz.1.70': attribute type 10 has an invalid length.
[   89.591450][ T5981] netlink: 55 bytes leftover after parsing attributes in process `syz.1.70'.
[   89.751688][ T5642] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   89.757388][ T5985] loop5: detected capacity change from 0 to 7
[   89.765633][ T5985] Dev loop5: unable to read RDB block 7
[   89.765677][ T5985]  loop5: unable to read partition table
[   89.765886][ T5985] loop5: partition table beyond EOD, truncated
[   89.766551][ T5985] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[   89.902353][ T5642] usb 1-1: Using ep0 maxpacket: 8
[   89.903790][ T5642] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   89.907430][ T5642] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[   89.907454][ T5642] usb 1-1: config 16 has an invalid interface number: 48 but max is 0
[   89.907473][ T5642] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config
[   89.907491][ T5642] usb 1-1: config 16 has no interface number 0
[   89.907518][ T5642] usb 1-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30
[   89.907549][ T5642] usb 1-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102
[   89.907590][ T5642] usb 1-1: config 16 interface 48 has no altsetting 0
[   89.907626][ T5642] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.249426][ T6004] x_tables: duplicate underflow at hook 2
[   90.258301][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[   90.443341][ T6012] netlink: 'syz.2.85': attribute type 1 has an invalid length.
[   90.443364][ T6012] netlink: 'syz.2.85': attribute type 2 has an invalid length.
[   90.625564][ T5642] usb 1-1: string descriptor 0 read error: -71
[   90.650088][ T5642] usb 1-1: USB disconnect, device number 5
[   91.020565][ T5372] usbhid 4-1:0.0: can't add hid device: -71
[   91.020664][ T5372] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   91.035278][ T5372] usb 4-1: USB disconnect, device number 2
[   91.051749][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[   91.131672][ T4957] Bluetooth: hci1: command 0x0c1a tx timeout
[   91.131774][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[   91.140661][   T14] IPVS: starting estimator thread 0...
[   91.163101][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'.
[   91.241753][ T6026] IPVS: using max 30 ests per chain, 72000 per kthread
[   91.428950][ T6036] program syz.0.95 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.512570][ T5372] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   91.569353][ T6040] syzkaller0: entered promiscuous mode
[   91.569378][ T6040] syzkaller0: entered allmulticast mode
[   91.669635][ T5372] usb 4-1: Using ep0 maxpacket: 16
[   91.671711][ T5372] usb 4-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[   91.697575][ T5372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.697609][ T5372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.697630][ T5372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   91.697668][ T5372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.704455][ T5372] usb 4-1: config 0 descriptor??
[   92.021709][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   92.178030][ T5372] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max
[   92.191305][ T5372] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0
[   92.193763][   T10] usb 3-1: Using ep0 maxpacket: 32
[   92.207971][   T10] usb 3-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[   92.224262][   T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[   92.224288][   T10] usb 3-1: config 0 has no interface number 0
[   92.224327][   T10] usb 3-1: config 0 interface 12 has no altsetting 0
[   92.260884][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.260910][   T10] usb 3-1: Product: syz
[   92.260922][   T10] usb 3-1: Manufacturer: syz
[   92.260942][   T10] usb 3-1: SerialNumber: syz
[   92.292226][   T10] usb 3-1: config 0 descriptor??
[   92.335637][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[   92.366727][ T5372] microsoft 0003:045E:07DA.0001: unsupported Resolution Multiplier 0
[   92.390414][ T5372] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   92.577493][  T194] usb 4-1: USB disconnect, device number 3
[   92.608582][ T6045] fido_id[6045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[   93.133210][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout
[   93.222764][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[   93.222801][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[   93.879876][   T53] IPVS: starting estimator thread 0...
[   93.880167][ T6059] IPVS: sh: FWM 3 0x00000003 - no destination available
[   93.961659][ T6060] IPVS: using max 30 ests per chain, 72000 per kthread
[   94.185401][ T6070] netlink: 44 bytes leftover after parsing attributes in process `syz.3.110'.
[   94.411863][ T4957] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.501643][ T5642] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   94.662589][ T5642] usb 1-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[   94.663818][ T5642] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.663862][ T5642] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[   94.663918][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[   94.663942][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[   94.663967][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[   94.663990][ T5642] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   94.664009][ T5642] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.668546][ T5642] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.668569][ T5642] usb 1-1: Product: syz
[   94.668582][ T5642] usb 1-1: Manufacturer: syz
[   94.668595][ T5642] usb 1-1: SerialNumber: syz
[   94.704190][ T6084] pim6reg: entered allmulticast mode
[   94.711704][ T6084] pim6reg: left allmulticast mode
[   94.717976][ T5642] usb 1-1: config 0 descriptor??
[   94.742832][ T6072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   94.747154][ T5642] ati_remote 1-1:0.0: Initializing ati_remote hardware failed.
[   94.747826][ T5642] ati_remote 1-1:0.0: probe with driver ati_remote failed with error -5
[   94.812428][ T6088] process 'syz.1.119' launched './file1' with NULL argv: empty string added
[   94.955610][ T5642] usb 1-1: USB disconnect, device number 6
[   95.211761][ T4957] Bluetooth: hci2: command 0x0c1a tx timeout
[   95.291724][ T4957] Bluetooth: hci1: command 0x0c1a tx timeout
[   95.291761][ T4957] Bluetooth: hci3: command 0x0c1a tx timeout
[   95.395952][   T10] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 78 failed: -71
[   95.396008][   T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[   95.396021][   T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[   95.396078][   T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[   95.405529][   T10] usb 3-1: USB disconnect, device number 3
[   95.727124][ T6112] nvme_fabrics: missing parameter 'nqn=%s'
[   96.012178][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   96.163104][ T5791] usb 2-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   96.163147][ T5791] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   96.164250][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.164296][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.164320][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.165259][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.165306][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.165331][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.166283][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.166326][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.166350][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.167271][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.167317][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.167339][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.168245][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.168281][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.168300][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.169341][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.169385][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.169407][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.170319][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.170360][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.170382][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.171394][ T5791] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   96.171437][ T5791] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   96.171460][ T5791] usb 2-1: config 0 interface 0 has no altsetting 0
[   96.392581][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.411451][ T5791] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   96.411478][ T5791] usb 2-1: Product: syz
[   96.411491][ T5791] usb 2-1: Manufacturer: syz
[   96.411504][ T5791] usb 2-1: SerialNumber: syz
[   96.449229][ T5791] usb 2-1: config 0 descriptor??
[   96.462202][ T5791] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   96.544465][   T10] usb 3-1: New USB device found: idVendor=056a, idProduct=0063, bcdDevice=0.00
[   96.545030][   T10] usb 3-1: config 0 has no interfaces?
[   96.545061][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.550982][   T10] usb 3-1: config 0 descriptor??
[   96.662640][   T10] usb 2-1: USB disconnect, device number 4
[   96.665842][   T10] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   96.842969][  T194] usb 3-1: USB disconnect, device number 4
[   99.179042][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'.
[   99.430791][ T6200] syz.0.167 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=2, oom_score_adj=1000
[   99.430835][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.0.167 Not tainted syzkaller #0 PREEMPT(full) 
[   99.430857][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[   99.430868][ T6200] Call Trace:
[   99.430876][ T6200]  <TASK>
[   99.430884][ T6200]  dump_stack_lvl+0xe8/0x150
[   99.430923][ T6200]  dump_header+0xd3/0x4b0
[   99.430954][ T6200]  oom_kill_process+0x3ab/0x9e0
[   99.430982][ T6200]  out_of_memory+0xfb1/0x13b0
[   99.431002][ T6200]  ? try_charge_memcg+0xc0d/0x15e0
[   99.431044][ T6200]  ? __pfx_out_of_memory+0x10/0x10
[   99.431065][ T6200]  ? do_raw_spin_unlock+0xf5/0x200
[   99.431114][ T6200]  try_charge_memcg+0xcc3/0x15e0
[   99.431165][ T6200]  ? __pfx_try_charge_memcg+0x10/0x10
[   99.431203][ T6200]  ? percpu_ref_tryget+0x15/0x180
[   99.431235][ T6200]  ? __obj_cgroup_charge+0x36/0x2d0
[   99.431266][ T6200]  __obj_cgroup_charge+0x20a/0x2d0
[   99.431292][ T6200]  ? __obj_cgroup_charge+0x36/0x2d0
[   99.431321][ T6200]  __memcg_slab_post_alloc_hook+0x772/0xdb0
[   99.431366][ T6200]  ? copy_net_ns+0x1de/0x770
[   99.431387][ T6200]  kmem_cache_alloc_noprof+0x362/0x600
[   99.431406][ T6200]  ? __kmalloc_noprof+0x387/0x710
[   99.431426][ T6200]  ? copy_net_ns+0x1de/0x770
[   99.431442][ T6200]  ? kmem_cache_alloc_noprof+0x151/0x600
[   99.431462][ T6200]  ? copy_net_ns+0x1de/0x770
[   99.431488][ T6200]  copy_net_ns+0x1de/0x770
[   99.431505][ T6200]  ? copy_cgroup_ns+0x66b/0x890
[   99.431532][ T6200]  create_new_namespaces+0x3f0/0x6b0
[   99.431558][ T6200]  ? security_capable+0x7e/0x2c0
[   99.431585][ T6200]  unshare_nsproxy_namespaces+0x144/0x190
[   99.431616][ T6200]  ksys_unshare+0x532/0x890
[   99.431647][ T6200]  ? __pfx_ksys_unshare+0x10/0x10
[   99.431676][ T6200]  ? rcu_is_watching+0x16/0xb0
[   99.431714][ T6200]  __x64_sys_unshare+0x38/0x50
[   99.431740][ T6200]  do_syscall_64+0x166/0x520
[   99.431766][ T6200]  ? trace_irq_disable+0x3b/0x140
[   99.431789][ T6200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.431808][ T6200]  ? clear_bhb_loop+0x70/0xc0
[   99.431832][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.431852][ T6200] RIP: 0033:0x7f4c58b9fb19
[   99.431871][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   99.431886][ T6200] RSP: 002b:00007f4c599db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   99.431908][ T6200] RAX: ffffffffffffffda RBX: 00007f4c58e25fa0 RCX: 00007f4c58b9fb19
[   99.431922][ T6200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040000
[   99.431934][ T6200] RBP: 00007f4c58c37b70 R08: 0000000000000000 R09: 0000000000000000
[   99.431946][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   99.431957][ T6200] R13: 00007f4c58e26038 R14: 00007f4c58e25fa0 R15: 00007ffc299379b8
[   99.431991][ T6200]  </TASK>
[   99.438833][ T6200] memory: usage 4kB, limit 8kB, failcnt 20
[   99.438852][ T6200] memory+swap: usage 4kB, limit 9007199254740988kB, failcnt 0
[   99.438865][ T6200] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0
[   99.438876][ T6200] Memory cgroup stats for /syz0/test:
[   99.439221][ T6200] cache 0
[   99.439230][ T6200] rss 0
[   99.439235][ T6200] rss_huge 0
[   99.439241][ T6200] shmem 0
[   99.439247][ T6200] mapped_file 0
[   99.439253][ T6200] dirty 0
[   99.439258][ T6200] writeback 0
[   99.439265][ T6200] workingset_refault_anon 0
[   99.439271][ T6200] workingset_refault_file 0
[   99.439278][ T6200] swap 0
[   99.439284][ T6200] swapcached 0
[   99.439290][ T6200] pgpgin 0
[   99.439296][ T6200] pgpgout 0
[   99.439301][ T6200] pgfault 0
[   99.439307][ T6200] pgmajfault 0
[   99.439313][ T6200] inactive_anon 0
[   99.439319][ T6200] active_anon 0
[   99.439326][ T6200] inactive_file 0
[   99.439332][ T6200] active_file 0
[   99.439338][ T6200] unevictable 0
[   99.439344][ T6200] hierarchical_memory_limit 8192
[   99.439351][ T6200] hierarchical_memsw_limit 9223372036854771712
[   99.439359][ T6200] total_cache 0
[   99.439365][ T6200] total_rss 0
[   99.439371][ T6200] total_rss_huge 0
[   99.439377][ T6200] total_shmem 0
[   99.439383][ T6200] total_mapped_file 0
[   99.439390][ T6200] total_dirty 0
[   99.439396][ T6200] total_writeback 0
[   99.439402][ T6200] total_workingset_refault_anon 0
[   99.439409][ T6200] total_workingset_refault_file 0
[   99.439415][ T6200] total_swap 0
[   99.439421][ T6200] total_swapcached 0
[   99.439428][ T6200] total_pgpgin 0
[   99.439434][ T6200] total_pgpgout 0
[   99.439440][ T6200] total_pgfault 0
[   99.439447][ T6200] total_pgmajfault 0
[   99.439453][ T6200] total_inactive_anon 0
[   99.439460][ T6200] total_active_anon 0
[   99.439466][ T6200] total_inactive_file 0
[   99.439472][ T6200] total_active_file 0
[   99.439479][ T6200] total_unevictable 0
[   99.439485][ T6200] anon_cost 0
[   99.439491][ T6200] file_cost 0
[   99.439497][ T6200] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.167,pid=6199,uid=0
[   99.440299][ T6200] Memory cgroup out of memory: Killed process 6199 (syz.0.167) total-vm:102284kB, anon-rss:1452kB, file-rss:22996kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  100.156724][ T6216] loop9: detected capacity change from 0 to 2640
[  100.157539][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.157581][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160693][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160725][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160767][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160814][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160853][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160882][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160896][ T6216] ldm_validate_partition_table(): Disk read failed.
[  100.160920][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160944][ T6216] Buffer I/O error on dev loop9, logical block 0, async page read
[  100.160983][ T6216] Dev loop9: unable to read RDB block 0
[  100.161154][ T6216]  loop9: unable to read partition table
[  100.163172][ T6216] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  100.520636][ T6233] =======================================================
[  100.520636][ T6233] WARNING: The mand mount option has been deprecated and
[  100.520636][ T6233]          and is ignored by this kernel. Remove the mand
[  100.520636][ T6233]          option from the mount to silence this warning.
[  100.520636][ T6233] =======================================================
[  100.555991][ T6236] jffs2: notice: (6236) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  100.595074][ T6239] FAULT_INJECTION: forcing a failure.
[  100.595074][ T6239] name failslab, interval 1, probability 0, space 0, times 1
[  100.595105][ T6239] CPU: 0 UID: 0 PID: 6239 Comm: syz.3.183 Not tainted syzkaller #0 PREEMPT(full) 
[  100.595125][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  100.595135][ T6239] Call Trace:
[  100.595142][ T6239]  <TASK>
[  100.595150][ T6239]  dump_stack_lvl+0xe8/0x150
[  100.595181][ T6239]  should_fail_ex+0x3eb/0x540
[  100.595209][ T6239]  should_failslab+0xa8/0x100
[  100.595237][ T6239]  __kmalloc_cache_noprof+0x9e/0x600
[  100.595260][ T6239]  ? io_fsetxattr_prep+0x188/0x2b0
[  100.595278][ T6239]  ? io_fsetxattr_prep+0x188/0x2b0
[  100.595296][ T6239]  ? rcu_is_watching+0x16/0xb0
[  100.595322][ T6239]  io_fsetxattr_prep+0x188/0x2b0
[  100.595344][ T6239]  io_submit_sqes+0xd6e/0x2500
[  100.595397][ T6239]  __se_sys_io_uring_enter+0x35b/0x1bb0
[  100.595429][ T6239]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  100.595447][ T6239]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  100.595465][ T6239]  ? __fget_files+0x2a/0x420
[  100.595493][ T6239]  ? fput+0xa0/0xd0
[  100.595514][ T6239]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  100.595537][ T6239]  do_syscall_64+0x166/0x520
[  100.595561][ T6239]  ? trace_irq_disable+0x3b/0x140
[  100.595581][ T6239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.595597][ T6239]  ? clear_bhb_loop+0x70/0xc0
[  100.595618][ T6239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.595635][ T6239] RIP: 0033:0x7f423ef9fb19
[  100.595652][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  100.595666][ T6239] RSP: 002b:00007f423ff41f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  100.595686][ T6239] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f423ef9fb19
[  100.595699][ T6239] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002d
[  100.595709][ T6239] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000008
[  100.595719][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001080
[  100.595730][ T6239] R13: 0000200000001088 R14: 00000000000003c9 R15: 0000000000000000
[  100.595760][ T6239]  </TASK>
[  100.776145][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  100.922172][   T10] usb 2-1: Using ep0 maxpacket: 8
[  100.924677][   T10] usb 2-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  100.934661][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.934686][   T10] usb 2-1: Product: syz
[  100.934700][   T10] usb 2-1: Manufacturer: syz
[  100.934713][   T10] usb 2-1: SerialNumber: syz
[  101.076771][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.076815][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.076831][ T6252] device-mapper: ioctl: error adding target to table
[  101.077100][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.077131][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.077145][ T6252] device-mapper: ioctl: error adding target to table
[  101.077327][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.077423][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.077437][ T6252] device-mapper: ioctl: error adding target to table
[  101.077627][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.077657][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.077670][ T6252] device-mapper: ioctl: error adding target to table
[  101.077853][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.077882][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.077895][ T6252] device-mapper: ioctl: error adding target to table
[  101.078134][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.078165][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.078178][ T6252] device-mapper: ioctl: error adding target to table
[  101.078366][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.078403][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.078416][ T6252] device-mapper: ioctl: error adding target to table
[  101.078651][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.078682][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.078695][ T6252] device-mapper: ioctl: error adding target to table
[  101.078887][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.078916][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.078929][ T6252] device-mapper: ioctl: error adding target to table
[  101.079108][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.079137][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.079210][ T6252] device-mapper: ioctl: error adding target to table
[  101.079400][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.079430][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.079443][ T6252] device-mapper: ioctl: error adding target to table
[  101.079685][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.079716][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.079729][ T6252] device-mapper: ioctl: error adding target to table
[  101.079914][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.079945][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.079958][ T6252] device-mapper: ioctl: error adding target to table
[  101.080157][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.080186][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.080199][ T6252] device-mapper: ioctl: error adding target to table
[  101.080446][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.080476][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.080489][ T6252] device-mapper: ioctl: error adding target to table
[  101.080725][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.080756][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.080769][ T6252] device-mapper: ioctl: error adding target to table
[  101.080950][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.080980][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.080993][ T6252] device-mapper: ioctl: error adding target to table
[  101.081173][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.081201][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.081214][ T6252] device-mapper: ioctl: error adding target to table
[  101.081464][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.081495][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.081508][ T6252] device-mapper: ioctl: error adding target to table
[  101.245872][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.245909][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.245959][ T6252] device-mapper: ioctl: error adding target to table
[  101.629014][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.629056][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.629073][ T6252] device-mapper: ioctl: error adding target to table
[  101.664414][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.664460][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.664475][ T6252] device-mapper: ioctl: error adding target to table
[  101.669075][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.669114][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.669130][ T6252] device-mapper: ioctl: error adding target to table
[  101.671011][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.671045][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.671059][ T6252] device-mapper: ioctl: error adding target to table
[  101.671891][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.671925][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.671939][ T6252] device-mapper: ioctl: error adding target to table
[  101.672151][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.672181][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.672206][ T6252] device-mapper: ioctl: error adding target to table
[  101.781941][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.781982][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.781998][ T6252] device-mapper: ioctl: error adding target to table
[  101.842415][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.842469][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.842485][ T6252] device-mapper: ioctl: error adding target to table
[  101.842742][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.842772][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.842786][ T6252] device-mapper: ioctl: error adding target to table
[  101.844420][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.844466][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.844480][ T6252] device-mapper: ioctl: error adding target to table
[  101.844862][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.844893][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.844907][ T6252] device-mapper: ioctl: error adding target to table
[  101.845806][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.845838][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.845852][ T6252] device-mapper: ioctl: error adding target to table
[  101.846050][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.846081][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.846094][ T6252] device-mapper: ioctl: error adding target to table
[  101.846277][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.846307][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.846320][ T6252] device-mapper: ioctl: error adding target to table
[  101.846542][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.846572][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.846585][ T6252] device-mapper: ioctl: error adding target to table
[  101.849485][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.849520][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.849535][ T6252] device-mapper: ioctl: error adding target to table
[  101.849723][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.849753][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.849766][ T6252] device-mapper: ioctl: error adding target to table
[  101.912848][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.912886][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.912901][ T6252] device-mapper: ioctl: error adding target to table
[  101.913104][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.913131][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.913143][ T6252] device-mapper: ioctl: error adding target to table
[  101.913352][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.913383][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  101.913395][ T6252] device-mapper: ioctl: error adding target to table
[  101.913595][ T6252] device-mapper: dirty region log: invalid region size 7
[  101.954552][   T10] usb 2-1: config 0 descriptor??
[  102.134064][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.134087][ T6252] device-mapper: ioctl: error adding target to table
[  102.294133][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.294171][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.294186][ T6252] device-mapper: ioctl: error adding target to table
[  102.294391][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.294421][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.294434][ T6252] device-mapper: ioctl: error adding target to table
[  102.294624][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.294654][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.294667][ T6252] device-mapper: ioctl: error adding target to table
[  102.300648][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.300686][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.300700][ T6252] device-mapper: ioctl: error adding target to table
[  102.300920][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.300950][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.300964][ T6252] device-mapper: ioctl: error adding target to table
[  102.301299][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.301330][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.301343][ T6252] device-mapper: ioctl: error adding target to table
[  102.335596][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.335638][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.335654][ T6252] device-mapper: ioctl: error adding target to table
[  102.335875][ T6252] device-mapper: dirty region log: invalid region size 7
[  102.404607][ T6252] device-mapper: table: 248:1: mirror: Error creating mirror dirty log (-EINVAL)
[  102.522743][ T6252] device-mapper: ioctl: error adding target to table
[  102.802569][ T5791] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.846409][   T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  102.931709][ T5791] usb 1-1: device descriptor read/64, error -71
[  102.931816][ T5801] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  103.101730][ T5801] usb 4-1: Using ep0 maxpacket: 16
[  103.106416][ T5801] usb 4-1: unable to get BOS descriptor or descriptor too short
[  103.106463][ T5801] usb 4-1: New USB device found: idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  103.107552][ T5801] usb 4-1: config 4 has an invalid interface number: 127 but max is 0
[  103.107573][ T5801] usb 4-1: config 4 has no interface number 0
[  103.107599][ T5801] usb 4-1: config 4 interface 127 has no altsetting 0
[  103.110757][ T5801] usb 4-1: string descriptor 0 read error: -22
[  103.110882][ T5801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.180144][ T5801] usbhid 4-1:4.127: couldn't find an input interrupt endpoint
[  103.241684][ T5791] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  103.255347][   T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  103.262226][   T10] usb 2-1: USB disconnect, device number 5
[  103.381644][ T5791] usb 1-1: device descriptor read/64, error -71
[  103.496212][ T5791] usb usb1-port1: attempt power cycle
[  103.603117][   T10] kernel read not supported for file /150/setgroups (pid: 10 comm: kworker/0:0)
[  103.694357][ T6281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  103.694622][ T6281] block device autoloading is deprecated and will be removed.
[  103.841668][ T5791] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  103.868776][ T6281] md/raid:md2: device ram4 operational as raid disk 0
[  103.882711][ T5791] usb 1-1: device descriptor read/8, error -71
[  103.910360][ T6281] md/raid:md2: raid level 5 active with 1 out of 2 devices, algorithm 2
[  103.940309][ T6281] md2: detected capacity change from 0 to 4096
[  103.997695][ T6289] md: recover of RAID array md2
[  104.096270][ T6289] md: md2: recover done.
[  104.121268][ T6291] FAULT_INJECTION: forcing a failure.
[  104.121268][ T6291] name failslab, interval 1, probability 0, space 0, times 0
[  104.121295][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT(full) 
[  104.121314][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  104.121324][ T6291] Call Trace:
[  104.121330][ T6291]  <TASK>
[  104.121338][ T6291]  dump_stack_lvl+0xe8/0x150
[  104.121370][ T6291]  should_fail_ex+0x3eb/0x540
[  104.121398][ T6291]  should_failslab+0xa8/0x100
[  104.121424][ T6291]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  104.121451][ T6291]  kmem_cache_alloc_noprof+0x9c/0x600
[  104.121471][ T6291]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  104.121496][ T6291]  ? kmem_cache_alloc_noprof+0x151/0x600
[  104.121515][ T6291]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  104.121549][ T6291]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  104.121596][ T6291]  mmu_topup_memory_caches+0x21/0x1a0
[  104.121618][ T6291]  kvm_mmu_load+0x9d/0x21e0
[  104.121639][ T6291]  ? kvm_msr_allowed+0x9a/0x490
[  104.121658][ T6291]  ? kvm_msr_allowed+0x9a/0x490
[  104.121677][ T6291]  ? kvm_msr_allowed+0x9a/0x490
[  104.121695][ T6291]  ? kvm_msr_allowed+0x3f4/0x490
[  104.121713][ T6291]  ? kvm_msr_allowed+0x9a/0x490
[  104.121731][ T6291]  ? kvm_apic_has_interrupt+0x740/0x770
[  104.121768][ T6291]  vcpu_run+0x4f5b/0x7a90
[  104.121863][ T6291]  ? __pfx_vcpu_run+0x10/0x10
[  104.121882][ T6291]  ? lock_acquire+0x115/0x350
[  104.121906][ T6291]  ? fpu_swap_kvm_fpstate+0xbe/0x510
[  104.121927][ T6291]  ? vmx_unhandleable_emulation_required+0x77/0x230
[  104.121961][ T6291]  kvm_arch_vcpu_ioctl_run+0xe83/0x18b0
[  104.121982][ T6291]  ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0
[  104.122000][ T6291]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  104.122026][ T6291]  kvm_vcpu_ioctl+0xa61/0xfd0
[  104.122052][ T6291]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.122090][ T6291]  ? __fget_files+0x2a/0x420
[  104.122115][ T6291]  ? __fget_files+0x2a/0x420
[  104.122136][ T6291]  ? __fget_files+0x2a/0x420
[  104.122161][ T6291]  ? bpf_lsm_file_ioctl+0x9/0x20
[  104.122185][ T6291]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  104.122205][ T6291]  __se_sys_ioctl+0xfc/0x170
[  104.122233][ T6291]  do_syscall_64+0x166/0x520
[  104.122257][ T6291]  ? trace_irq_disable+0x3b/0x140
[  104.122277][ T6291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.122296][ T6291]  ? clear_bhb_loop+0x70/0xc0
[  104.122317][ T6291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  104.122335][ T6291] RIP: 0033:0x7f5b2719fb19
[  104.122352][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  104.122365][ T6291] RSP: 002b:00007f5b2802c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  104.122384][ T6291] RAX: ffffffffffffffda RBX: 00007f5b27425fa0 RCX: 00007f5b2719fb19
[  104.122396][ T6291] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  104.122406][ T6291] RBP: 00007f5b2802c090 R08: 0000000000000000 R09: 0000000000000000
[  104.122416][ T6291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  104.122426][ T6291] R13: 00007f5b27426038 R14: 00007f5b27425fa0 R15: 00007fffb7e38638
[  104.122455][ T6291]  </TASK>
[  104.135294][ T5791] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  104.196634][ T5791] usb 1-1: device descriptor read/8, error -71
[  104.344623][ T5791] usb usb1-port1: unable to enumerate USB device
[  104.472973][ T6304] cgroup: subsys name conflicts with all
[  105.707636][ T5801] usb 4-1: USB disconnect, device number 4
[  106.062833][ T6326] fuse: Bad value for 'group_id'
[  106.062852][ T6326] fuse: Bad value for 'group_id'
[  106.065741][   T32] audit: type=1326 audit(1793794452.119:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.067868][   T32] audit: type=1326 audit(1793794452.119:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.067910][   T32] audit: type=1326 audit(1793794452.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.067946][   T32] audit: type=1326 audit(1793794452.119:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.068596][   T32] audit: type=1326 audit(1793794452.119:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.069659][   T32] audit: type=1326 audit(1793794452.119:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.070204][   T32] audit: type=1326 audit(1793794452.119:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.106855][   T32] audit: type=1326 audit(1793794452.119:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.106903][   T32] audit: type=1326 audit(1793794452.119:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.106941][   T32] audit: type=1326 audit(1793794452.119:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.3.212" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f423ef9fb19 code=0x7ffc0000
[  106.167841][ T6327] FAULT_INJECTION: forcing a failure.
[  106.167841][ T6327] name failslab, interval 1, probability 0, space 0, times 0
[  106.167869][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) 
[  106.167889][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  106.167900][ T6327] Call Trace:
[  106.167908][ T6327]  <TASK>
[  106.167915][ T6327]  dump_stack_lvl+0xe8/0x150
[  106.167948][ T6327]  should_fail_ex+0x3eb/0x540
[  106.167980][ T6327]  ? __alloc_skb+0x1db/0x7a0
[  106.168001][ T6327]  should_failslab+0xa8/0x100
[  106.168030][ T6327]  ? __alloc_skb+0x1db/0x7a0
[  106.168048][ T6327]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  106.168068][ T6327]  ? __alloc_skb+0x18d/0x7a0
[  106.168086][ T6327]  ? __alloc_skb+0x1db/0x7a0
[  106.168112][ T6327]  __alloc_skb+0x1db/0x7a0
[  106.168135][ T6327]  audit_log_start+0x1b3/0xa10
[  106.168169][ T6327]  ? __pfx_audit_log_start+0x10/0x10
[  106.168207][ T6327]  ? futex_wait+0x2a2/0x390
[  106.168233][ T6327]  audit_seccomp+0x63/0x190
[  106.168263][ T6327]  __seccomp_filter+0xd18/0x1e90
[  106.168298][ T6327]  ? do_futex+0x3e7/0x4e0
[  106.168324][ T6327]  ? __pfx___seccomp_filter+0x10/0x10
[  106.168353][ T6327]  ? __pfx_do_futex+0x10/0x10
[  106.168377][ T6327]  ? __fget_files+0x3a2/0x420
[  106.168399][ T6327]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  106.168433][ T6327]  ? __se_sys_futex+0x3a8/0x450
[  106.168476][ T6327]  ? __seccomp_permit_syscall+0xe7/0x2b0
[  106.168509][ T6327]  do_syscall_64+0x11f/0x520
[  106.168535][ T6327]  ? trace_irq_disable+0x3b/0x140
[  106.168557][ T6327]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.168575][ T6327]  ? clear_bhb_loop+0x70/0xc0
[  106.168597][ T6327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.168615][ T6327] RIP: 0033:0x7f423ef9fb19
[  106.168632][ T6327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.168647][ T6327] RSP: 002b:00007f423ff21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  106.168666][ T6327] RAX: ffffffffffffffda RBX: 00007f423f226090 RCX: 00007f423ef9fb19
[  106.168679][ T6327] RDX: 000000000000007a RSI: 0000000000000084 RDI: ffffffffffffffff
[  106.168691][ T6327] RBP: 00007f423f037b70 R08: 0000200000000680 R09: 0000000000000000
[  106.168703][ T6327] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000
[  106.168714][ T6327] R13: 00007f423f226128 R14: 00007f423f226090 R15: 00007ffc2b951528
[  106.168744][ T6327]  </TASK>
[  106.292649][ T5755] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  106.459264][ T5755] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  106.460492][ T5755] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.460539][ T5755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.474672][ T5755] usb 1-1: config 0 descriptor??
[  106.474926][ T5006] udevd[5006]: could not touch /run/udev/queue: No such file or directory
[  106.486627][ T5755] pwc: Askey VC010 type 2 USB webcam detected.
[  106.523075][ T5006] udevd[5006]: could not touch /run/udev/queue: No such file or directory
[  106.676131][ T6331] FAULT_INJECTION: forcing a failure.
[  106.676131][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  106.676162][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.3.216 Not tainted syzkaller #0 PREEMPT(full) 
[  106.676182][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  106.676192][ T6331] Call Trace:
[  106.676199][ T6331]  <TASK>
[  106.676207][ T6331]  dump_stack_lvl+0xe8/0x150
[  106.676238][ T6331]  should_fail_ex+0x3eb/0x540
[  106.676265][ T6331]  _copy_from_user+0x2d/0xb0
[  106.676287][ T6331]  ? __pfx_table_load+0x10/0x10
[  106.676312][ T6331]  dm_ctl_ioctl+0x3d6/0xe10
[  106.676338][ T6331]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  106.676374][ T6331]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  106.676429][ T6331]  ? __fget_files+0x2a/0x420
[  106.676454][ T6331]  ? bpf_lsm_file_ioctl+0x9/0x20
[  106.676478][ T6331]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  106.676504][ T6331]  __se_sys_ioctl+0xfc/0x170
[  106.676532][ T6331]  do_syscall_64+0x166/0x520
[  106.676555][ T6331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.676573][ T6331]  ? clear_bhb_loop+0x70/0xc0
[  106.676595][ T6331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.676613][ T6331] RIP: 0033:0x7f423ef9fb19
[  106.676630][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.676644][ T6331] RSP: 002b:00007f423ff42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.676664][ T6331] RAX: ffffffffffffffda RBX: 00007f423f225fa0 RCX: 00007f423ef9fb19
[  106.676676][ T6331] RDX: 0000200000000d00 RSI: 00000000c138fd09 RDI: 0000000000000003
[  106.676688][ T6331] RBP: 00007f423ff42090 R08: 0000000000000000 R09: 0000000000000000
[  106.676699][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.676710][ T6331] R13: 00007f423f226038 R14: 00007f423f225fa0 R15: 00007ffc2b951528
[  106.676740][ T6331]  </TASK>
[  106.749523][ T6334] FAULT_INJECTION: forcing a failure.
[  106.749523][ T6334] name failslab, interval 1, probability 0, space 0, times 0
[  106.749550][ T6334] CPU: 0 UID: 0 PID: 6334 Comm: syz.3.217 Not tainted syzkaller #0 PREEMPT(full) 
[  106.749571][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  106.749581][ T6334] Call Trace:
[  106.749588][ T6334]  <TASK>
[  106.749595][ T6334]  dump_stack_lvl+0xe8/0x150
[  106.749626][ T6334]  should_fail_ex+0x3eb/0x540
[  106.749654][ T6334]  should_failslab+0xa8/0x100
[  106.749680][ T6334]  ? mempool_init_node+0x1f4/0x510
[  106.749707][ T6334]  kmem_cache_alloc_noprof+0x9c/0x600
[  106.749728][ T6334]  ? mempool_init_noprof+0x3a/0x50
[  106.749751][ T6334]  ? mempool_init_node+0x1f4/0x510
[  106.749777][ T6334]  ? kasan_save_free_info+0x40/0x50
[  106.749798][ T6334]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  106.749824][ T6334]  mempool_init_node+0x1f4/0x510
[  106.749858][ T6334]  ? __pfx_mempool_free_slab+0x10/0x10
[  106.749883][ T6334]  ? __pfx_mempool_alloc_slab+0x10/0x10
[  106.749908][ T6334]  mempool_init_noprof+0x3a/0x50
[  106.749944][ T6334]  bioset_init+0x2ee/0x7e0
[  106.749970][ T6334]  ? __kasan_kmalloc+0x93/0xb0
[  106.749995][ T6334]  ? __pfx_bioset_init+0x10/0x10
[  106.750019][ T6334]  ? __kmalloc_cache_noprof+0x148/0x600
[  106.750038][ T6334]  ? percpu_ref_init+0xc5/0x350
[  106.750060][ T6334]  ? percpu_ref_init+0xc5/0x350
[  106.750091][ T6334]  ? percpu_ref_init+0x215/0x350
[  106.750115][ T6334]  ? __pfx_no_op+0x10/0x10
[  106.750140][ T6334]  mddev_init+0xdc/0x700
[  106.750164][ T6334]  raid_ctr+0x7ae/0x2a80
[  106.750207][ T6334]  ? __kasan_kmalloc+0x93/0xb0
[  106.750230][ T6334]  ? __pfx_raid_ctr+0x10/0x10
[  106.750259][ T6334]  ? skip_spaces+0x8a/0xa0
[  106.750283][ T6334]  ? dm_split_args+0x50b/0x5d0
[  106.750311][ T6334]  dm_table_add_target+0x58d/0xc70
[  106.750346][ T6334]  table_load+0x325/0x8a0
[  106.750381][ T6334]  ? __pfx_table_load+0x10/0x10
[  106.750414][ T6334]  ? __might_fault+0xaf/0x130
[  106.750447][ T6334]  dm_ctl_ioctl+0x9ec/0xe10
[  106.750487][ T6334]  ? __pfx_table_load+0x10/0x10
[  106.750513][ T6334]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  106.750571][ T6334]  ? __fget_files+0x2a/0x420
[  106.750598][ T6334]  ? bpf_lsm_file_ioctl+0x9/0x20
[  106.750622][ T6334]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  106.750647][ T6334]  __se_sys_ioctl+0xfc/0x170
[  106.750676][ T6334]  do_syscall_64+0x166/0x520
[  106.750699][ T6334]  ? trace_irq_disable+0x3b/0x140
[  106.750721][ T6334]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.750739][ T6334]  ? clear_bhb_loop+0x70/0xc0
[  106.750762][ T6334]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.750779][ T6334] RIP: 0033:0x7f423ef9fb19
[  106.750797][ T6334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  106.750811][ T6334] RSP: 002b:00007f423ff42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.750830][ T6334] RAX: ffffffffffffffda RBX: 00007f423f225fa0 RCX: 00007f423ef9fb19
[  106.750843][ T6334] RDX: 0000200000000980 RSI: 00000000c138fd09 RDI: 0000000000000003
[  106.750855][ T6334] RBP: 00007f423ff42090 R08: 0000000000000000 R09: 0000000000000000
[  106.750865][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  106.750876][ T6334] R13: 00007f423f226038 R14: 00007f423f225fa0 R15: 00007ffc2b951528
[  106.750906][ T6334]  </TASK>
[  106.751280][ T6334] device-mapper: table: 248:4: raid: Cannot initialize raid context (-ENOMEM)
[  106.751298][ T6334] device-mapper: ioctl: error adding target to table
[  106.889197][ T5755] pwc: recv_control_msg error -32 req 02 val 2b00
[  106.891052][ T5755] pwc: recv_control_msg error -32 req 02 val 2700
[  106.892131][ T5755] pwc: recv_control_msg error -32 req 02 val 2c00
[  106.892713][ T5755] pwc: recv_control_msg error -32 req 04 val 1000
[  106.893400][ T5755] pwc: recv_control_msg error -32 req 04 val 1300
[  106.894122][ T5755] pwc: recv_control_msg error -32 req 04 val 1400
[  106.895127][ T5755] pwc: recv_control_msg error -32 req 02 val 2000
[  106.895816][ T5755] pwc: recv_control_msg error -32 req 02 val 2100
[  106.896402][ T5755] pwc: recv_control_msg error -32 req 04 val 1500
[  106.914342][ T5755] pwc: recv_control_msg error -32 req 02 val 2500
[  107.065566][ T6340] netlink: 36 bytes leftover after parsing attributes in process `syz.0.213'.
[  107.246172][ T6345] FAULT_INJECTION: forcing a failure.
[  107.246172][ T6345] name failslab, interval 1, probability 0, space 0, times 0
[  107.246199][ T6345] CPU: 0 UID: 0 PID: 6345 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) 
[  107.246221][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  107.246232][ T6345] Call Trace:
[  107.246239][ T6345]  <TASK>
[  107.246246][ T6345]  dump_stack_lvl+0xe8/0x150
[  107.246277][ T6345]  should_fail_ex+0x3eb/0x540
[  107.246304][ T6345]  should_failslab+0xa8/0x100
[  107.246345][ T6345]  __kmalloc_noprof+0xf9/0x710
[  107.246365][ T6345]  ? __mutex_trylock_common+0x15f/0x270
[  107.246390][ T6345]  ? io_cache_alloc_new+0x40/0x100
[  107.246406][ T6345]  ? io_cache_alloc_new+0x40/0x100
[  107.246431][ T6345]  io_cache_alloc_new+0x40/0x100
[  107.246449][ T6345]  io_uring_cmd_prep+0x39a/0x600
[  107.246480][ T6345]  io_submit_sqes+0xd6e/0x2500
[  107.246531][ T6345]  __se_sys_io_uring_enter+0x35b/0x1bb0
[  107.246563][ T6345]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  107.246583][ T6345]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  107.246602][ T6345]  ? __fget_files+0x2a/0x420
[  107.246633][ T6345]  ? fput+0xa0/0xd0
[  107.246655][ T6345]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  107.246677][ T6345]  do_syscall_64+0x166/0x520
[  107.246701][ T6345]  ? trace_irq_disable+0x3b/0x140
[  107.246721][ T6345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.246740][ T6345]  ? clear_bhb_loop+0x70/0xc0
[  107.246762][ T6345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.246779][ T6345] RIP: 0033:0x7f8682d9fb19
[  107.246796][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  107.246810][ T6345] RSP: 002b:00007f8683c14f38 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  107.246827][ T6345] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8682d9fb19
[  107.246840][ T6345] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000006
[  107.246850][ T6345] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000008
[  107.246860][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000a80
[  107.246871][ T6345] R13: 0000200000000a88 R14: 00000000000003c9 R15: 0000000000000000
[  107.246899][ T6345]  </TASK>
[  107.497660][ T5755] pwc: recv_control_msg error -71 req 02 val 2900
[  107.500950][ T5755] pwc: recv_control_msg error -71 req 02 val 2800
[  107.504123][ T5755] pwc: recv_control_msg error -71 req 04 val 1100
[  107.504701][ T5755] pwc: recv_control_msg error -71 req 04 val 1200
[  107.547599][ T5755] pwc: Registered as video103.
[  107.563541][ T5755] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7
[  107.602687][ T6349] udevd[6349]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory
[  107.631765][ T5755] usb 1-1: USB disconnect, device number 11
[  107.862161][  T211] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  107.872097][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  107.872904][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  107.872936][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  107.920842][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.2.225'.
[  107.993702][ T6359] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'.
[  108.011214][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'.
[  108.156720][ T6362] FAULT_INJECTION: forcing a failure.
[  108.156720][ T6362] name failslab, interval 1, probability 0, space 0, times 0
[  108.156749][ T6362] CPU: 0 UID: 0 PID: 6362 Comm: syz.3.227 Not tainted syzkaller #0 PREEMPT(full) 
[  108.156769][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  108.156779][ T6362] Call Trace:
[  108.156786][ T6362]  <TASK>
[  108.156793][ T6362]  dump_stack_lvl+0xe8/0x150
[  108.156824][ T6362]  should_fail_ex+0x3eb/0x540
[  108.156850][ T6362]  should_failslab+0xa8/0x100
[  108.156879][ T6362]  __kmalloc_noprof+0xf9/0x710
[  108.156901][ T6362]  ? sk_prot_alloc+0xe7/0x210
[  108.156918][ T6362]  ? sk_prot_alloc+0xe7/0x210
[  108.156943][ T6362]  sk_prot_alloc+0xe7/0x210
[  108.156962][ T6362]  ? sk_alloc+0x27/0x390
[  108.156984][ T6362]  sk_alloc+0x3a/0x390
[  108.157008][ T6362]  __netlink_create+0x62/0x260
[  108.157037][ T6362]  netlink_create+0x3ca/0x590
[  108.157066][ T6362]  __sock_create+0x4b5/0xac0
[  108.157100][ T6362]  __sys_socket+0xd6/0x1b0
[  108.157130][ T6362]  __x64_sys_socket+0x7a/0x90
[  108.157158][ T6362]  do_syscall_64+0x166/0x520
[  108.157182][ T6362]  ? trace_irq_disable+0x3b/0x140
[  108.157204][ T6362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.157223][ T6362]  ? clear_bhb_loop+0x70/0xc0
[  108.157245][ T6362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.157263][ T6362] RIP: 0033:0x7f423ef9fb19
[  108.157280][ T6362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.157295][ T6362] RSP: 002b:00007f423ff21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  108.157317][ T6362] RAX: ffffffffffffffda RBX: 00007f423f226090 RCX: 00007f423ef9fb19
[  108.157330][ T6362] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010
[  108.157340][ T6362] RBP: 00007f423f037b70 R08: 0000000000000000 R09: 0000000000000000
[  108.157351][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.157361][ T6362] R13: 00007f423f226128 R14: 00007f423f226090 R15: 00007ffc2b951528
[  108.157392][ T6362]  </TASK>
[  108.396712][ T6369] FAULT_INJECTION: forcing a failure.
[  108.396712][ T6369] name failslab, interval 1, probability 0, space 0, times 0
[  108.396743][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.0.229 Not tainted syzkaller #0 PREEMPT(full) 
[  108.396764][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  108.396775][ T6369] Call Trace:
[  108.396782][ T6369]  <TASK>
[  108.396790][ T6369]  dump_stack_lvl+0xe8/0x150
[  108.396822][ T6369]  should_fail_ex+0x3eb/0x540
[  108.396851][ T6369]  should_failslab+0xa8/0x100
[  108.396881][ T6369]  __kvmalloc_node_noprof+0x171/0x820
[  108.396906][ T6369]  ? __kvmalloc_node_noprof+0x340/0x820
[  108.396929][ T6369]  ? alloc_fdtable+0x169/0x2c0
[  108.396949][ T6369]  ? alloc_fdtable+0x169/0x2c0
[  108.396976][ T6369]  alloc_fdtable+0x169/0x2c0
[  108.397001][ T6369]  dup_fd+0x9a5/0xbf0
[  108.397029][ T6369]  ? do_raw_spin_unlock+0xf5/0x200
[  108.397062][ T6369]  unshare_fd+0xa8/0x120
[  108.397086][ T6369]  ksys_unshare+0x4c8/0x890
[  108.397115][ T6369]  ? __pfx_ksys_unshare+0x10/0x10
[  108.397143][ T6369]  ? rcu_is_watching+0x16/0xb0
[  108.397180][ T6369]  __x64_sys_unshare+0x38/0x50
[  108.397205][ T6369]  do_syscall_64+0x166/0x520
[  108.397230][ T6369]  ? trace_irq_disable+0x3b/0x140
[  108.397253][ T6369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.397272][ T6369]  ? clear_bhb_loop+0x70/0xc0
[  108.397295][ T6369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.397313][ T6369] RIP: 0033:0x7f4c58b9fb19
[  108.397331][ T6369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.397351][ T6369] RSP: 002b:00007f4c599db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  108.397371][ T6369] RAX: ffffffffffffffda RBX: 00007f4c58e25fa0 RCX: 00007f4c58b9fb19
[  108.397386][ T6369] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400
[  108.397406][ T6369] RBP: 00007f4c58c37b70 R08: 0000000000000000 R09: 0000000000000000
[  108.397418][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  108.397428][ T6369] R13: 00007f4c58e26038 R14: 00007f4c58e25fa0 R15: 00007ffc299379b8
[  108.397462][ T6369]  </TASK>
[  108.738278][ T6374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.231'.
[  108.857597][ T6379] tipc: Started in network mode
[  108.857619][ T6379] tipc: Node identity _, cluster identity 4711
[  108.857681][ T6379] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  108.965134][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.234'.
[  109.016527][ T6381] warning: `syz.2.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  109.106697][ T6385] FAULT_INJECTION: forcing a failure.
[  109.106697][ T6385] name failslab, interval 1, probability 0, space 0, times 0
[  109.106727][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(full) 
[  109.106747][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  109.106757][ T6385] Call Trace:
[  109.106764][ T6385]  <TASK>
[  109.106771][ T6385]  dump_stack_lvl+0xe8/0x150
[  109.106803][ T6385]  should_fail_ex+0x3eb/0x540
[  109.106831][ T6385]  should_failslab+0xa8/0x100
[  109.106859][ T6385]  __kvmalloc_node_noprof+0x171/0x820
[  109.106881][ T6385]  ? __kmalloc_cache_noprof+0x31c/0x600
[  109.106901][ T6385]  ? __kmalloc_cache_noprof+0x148/0x600
[  109.106919][ T6385]  ? percpu_ref_init+0xc5/0x350
[  109.106945][ T6385]  ? io_alloc_cache_init+0x42/0x140
[  109.106962][ T6385]  ? io_alloc_cache_init+0x42/0x140
[  109.106986][ T6385]  io_alloc_cache_init+0x42/0x140
[  109.107007][ T6385]  io_ring_ctx_alloc+0x508/0xb80
[  109.107036][ T6385]  io_uring_create+0x50/0x980
[  109.107060][ T6385]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  109.107083][ T6385]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  109.107118][ T6385]  ? rcu_is_watching+0x16/0xb0
[  109.107160][ T6385]  do_syscall_64+0x166/0x520
[  109.107185][ T6385]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.107203][ T6385]  ? clear_bhb_loop+0x70/0xc0
[  109.107225][ T6385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.107251][ T6385] RIP: 0033:0x7f4c58b9fb19
[  109.107268][ T6385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  109.107282][ T6385] RSP: 002b:00007f4c599daee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  109.107304][ T6385] RAX: ffffffffffffffda RBX: 0000200000000b28 RCX: 00007f4c58b9fb19
[  109.107317][ T6385] RDX: 0000200000000ba8 RSI: 0000200000000b28 RDI: 00000000000003c9
[  109.107329][ T6385] RBP: 0000200000000b20 R08: 0000000000000008 R09: 0000000000000000
[  109.107340][ T6385] R10: 0000200000000bb0 R11: 0000000000000206 R12: 0000200000000ba8
[  109.107352][ T6385] R13: 0000200000000bb0 R14: 00007f4c599dafd8 R15: 0000000000000001
[  109.107381][ T6385]  </TASK>
[  109.469601][ T6392] Bluetooth: MGMT ver 1.23
[  109.581471][ T6394] Zero length message leads to an empty skb
[  109.961685][ T5801] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  110.052232][ T6409] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  110.092265][ T5801] usb 3-1: device descriptor read/64, error -71
[  110.153153][  T194] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  110.181055][ T6412] FAULT_INJECTION: forcing a failure.
[  110.181055][ T6412] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  110.181083][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) 
[  110.181103][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  110.181114][ T6412] Call Trace:
[  110.181121][ T6412]  <TASK>
[  110.181129][ T6412]  dump_stack_lvl+0xe8/0x150
[  110.181160][ T6412]  should_fail_ex+0x3eb/0x540
[  110.181187][ T6412]  _copy_to_iter+0x1e4/0x17e0
[  110.181212][ T6412]  ? do_syscall_64+0x166/0x520
[  110.181245][ T6412]  ? __pfx__copy_to_iter+0x10/0x10
[  110.181261][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.181302][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.181326][ T6412]  __skb_datagram_iter+0x419/0x980
[  110.181351][ T6412]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  110.181384][ T6412]  skb_copy_datagram_iter+0xb5/0x240
[  110.181412][ T6412]  tcp_recvmsg_locked+0xf4d/0x3870
[  110.181481][ T6412]  ? __pfx_tcp_recvmsg_locked+0x10/0x10
[  110.181518][ T6412]  ? kernel_text_address+0xa5/0xe0
[  110.181538][ T6412]  ? __kernel_text_address+0xd/0x30
[  110.181554][ T6412]  ? unwind_get_return_address+0x4d/0x90
[  110.181574][ T6412]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  110.181592][ T6412]  ? arch_stack_walk+0xfb/0x150
[  110.181613][ T6412]  ? look_up_lock_class+0x57/0x110
[  110.181639][ T6412]  ? register_lock_class+0x31/0x2e0
[  110.181657][ T6412]  ? lock_acquire+0x115/0x350
[  110.181685][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.181719][ T6412]  ? import_ubuf+0xfb/0x1d0
[  110.181743][ T6412]  tcp_zerocopy_receive+0x821/0x23f0
[  110.181786][ T6412]  ? __pfx_tcp_zerocopy_receive+0x10/0x10
[  110.181805][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.181837][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.181883][ T6412]  ? do_tcp_getsockopt+0x2238/0x2b50
[  110.181905][ T6412]  ? __local_bh_enable_ip+0xd6/0x140
[  110.181937][ T6412]  do_tcp_getsockopt+0x224b/0x2b50
[  110.181966][ T6412]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  110.181985][ T6412]  ? sock_recv_errqueue+0x5d0/0x5e0
[  110.182017][ T6412]  ? lock_acquire+0x115/0x350
[  110.182036][ T6412]  ? begin_current_label_crit_section+0x299/0x830
[  110.182062][ T6412]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  110.182092][ T6412]  ? aa_inet_opt_perm+0x94d/0xcd0
[  110.182118][ T6412]  ? __lock_acquire+0x747/0x2de0
[  110.182146][ T6412]  ? lock_acquire+0x115/0x350
[  110.182166][ T6412]  ? get_pid_task+0x20/0x1f0
[  110.182211][ T6412]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  110.182239][ T6412]  tcp_getsockopt+0x83/0x130
[  110.182258][ T6412]  ? sock_recv_errqueue+0x5d0/0x5e0
[  110.182292][ T6412]  ? sock_recv_errqueue+0x5d0/0x5e0
[  110.182316][ T6412]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  110.182343][ T6412]  do_sock_getsockopt+0x4aa/0x640
[  110.182371][ T6412]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  110.182406][ T6412]  ? __fget_files+0x3a2/0x420
[  110.182428][ T6412]  ? __fget_files+0x2a/0x420
[  110.182458][ T6412]  __x64_sys_getsockopt+0x1a4/0x240
[  110.182487][ T6412]  do_syscall_64+0x166/0x520
[  110.182510][ T6412]  ? trace_irq_disable+0x3b/0x140
[  110.182532][ T6412]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.182551][ T6412]  ? clear_bhb_loop+0x70/0xc0
[  110.182573][ T6412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.182591][ T6412] RIP: 0033:0x7f4c58b9fb19
[  110.182617][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.182631][ T6412] RSP: 002b:00007f4c599db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  110.182649][ T6412] RAX: ffffffffffffffda RBX: 00007f4c58e25fa0 RCX: 00007f4c58b9fb19
[  110.182663][ T6412] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004
[  110.182673][ T6412] RBP: 00007f4c599db090 R08: 0000200000000400 R09: 0000000000000000
[  110.182685][ T6412] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001
[  110.182697][ T6412] R13: 00007f4c58e26038 R14: 00007f4c58e25fa0 R15: 00007ffc299379b8
[  110.182727][ T6412]  </TASK>
[  110.323543][  T194] usb 4-1: New USB device found: idVendor=194f, idProduct=010c, bcdDevice=0.40
[  110.328745][  T194] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 4
[  110.328787][  T194] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023
[  110.338889][  T194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.338913][  T194] usb 4-1: Product: syz
[  110.338926][  T194] usb 4-1: Manufacturer: syz
[  110.338938][  T194] usb 4-1: SerialNumber: syz
[  110.503392][ T5801] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  110.659251][  T194] usb 4-1: BAAD HEADPHONE p_chmask mismatch
[  110.711621][ T5801] usb 3-1: device descriptor read/64, error -71
[  110.821862][ T5801] usb usb3-port1: attempt power cycle
[  110.967018][  T194] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  111.008854][  T194] usb 4-1: USB disconnect, device number 5
[  111.120672][ T5652] udevd[5652]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.162272][ T5801] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  111.183237][ T5801] usb 3-1: device descriptor read/8, error -71
[  111.422225][ T5801] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.442112][ T5801] usb 3-1: device descriptor read/8, error -71
[  111.508071][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.252'.
[  111.536519][ T6430] netlink: 44 bytes leftover after parsing attributes in process `syz.3.252'.
[  111.536535][ T6430] netlink: 43 bytes leftover after parsing attributes in process `syz.3.252'.
[  111.536543][ T6430] netlink: 'syz.3.252': attribute type 5 has an invalid length.
[  111.536549][ T6430] netlink: 43 bytes leftover after parsing attributes in process `syz.3.252'.
[  111.561872][ T5801] usb usb3-port1: unable to enumerate USB device
[  111.812933][  T194] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  111.976303][  T194] usb 4-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00
[  111.977140][  T194] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.977168][  T194] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  111.977178][  T194] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  111.977200][  T194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.200143][ T6431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'.
[  112.947054][ T6447] FAULT_INJECTION: forcing a failure.
[  112.947054][ T6447] name failslab, interval 1, probability 0, space 0, times 0
[  112.947083][ T6447] CPU: 1 UID: 0 PID: 6447 Comm: syz.2.256 Not tainted syzkaller #0 PREEMPT(full) 
[  112.947103][ T6447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  112.947114][ T6447] Call Trace:
[  112.947122][ T6447]  <TASK>
[  112.947130][ T6447]  dump_stack_lvl+0xe8/0x150
[  112.947161][ T6447]  should_fail_ex+0x3eb/0x540
[  112.947189][ T6447]  should_failslab+0xa8/0x100
[  112.947216][ T6447]  ? dst_alloc+0x105/0x170
[  112.947241][ T6447]  kmem_cache_alloc_noprof+0x9c/0x600
[  112.947261][ T6447]  ? lock_acquire+0x115/0x350
[  112.947282][ T6447]  ? dst_alloc+0x105/0x170
[  112.947310][ T6447]  ? __pfx_ip6_dst_gc+0x10/0x10
[  112.947334][ T6447]  dst_alloc+0x105/0x170
[  112.947364][ T6447]  ip6_pol_route+0xb9d/0x14d0
[  112.947390][ T6447]  ? ip6_pol_route+0x163/0x14d0
[  112.947419][ T6447]  ? __pfx_ip6_pol_route+0x10/0x10
[  112.947466][ T6447]  fib6_rule_lookup+0x21a/0x6e0
[  112.947495][ T6447]  ? __lock_acquire+0x747/0x2de0
[  112.947522][ T6447]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  112.947548][ T6447]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  112.947575][ T6447]  ? lock_acquire+0x115/0x350
[  112.947613][ T6447]  ip6_route_output_flags+0x364/0x5d0
[  112.947638][ T6447]  ? ip6_route_output_flags+0x2e/0x5d0
[  112.947667][ T6447]  ip6_dst_lookup_tail+0x1a1/0x1610
[  112.947704][ T6447]  ? get_random_u32+0x13a/0x8b0
[  112.947733][ T6447]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  112.947764][ T6447]  ? __pfx_get_random_u32+0x10/0x10
[  112.947788][ T6447]  ? lock_acquire+0x115/0x350
[  112.947810][ T6447]  ? __lock_acquire+0x747/0x2de0
[  112.947832][ T6447]  ? __fl6_update_dst+0x116/0x160
[  112.947862][ T6447]  ip6_dst_lookup_flow+0x89/0x150
[  112.947894][ T6447]  tcp_v6_connect+0x10c7/0x1e60
[  112.947933][ T6447]  ? __pfx_tcp_v6_connect+0x10/0x10
[  112.947969][ T6447]  __inet_stream_connect+0x28c/0xf50
[  112.948001][ T6447]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.948030][ T6447]  ? __pfx___inet_stream_connect+0x10/0x10
[  112.948055][ T6447]  ? inet_stream_connect+0x51/0xa0
[  112.948077][ T6447]  ? __local_bh_enable_ip+0xd6/0x140
[  112.948103][ T6447]  inet_stream_connect+0x66/0xa0
[  112.948128][ T6447]  kernel_connect+0x141/0x1c0
[  112.948155][ T6447]  ? __pfx_kernel_connect+0x10/0x10
[  112.948177][ T6447]  ? do_raw_spin_lock+0x12b/0x2f0
[  112.948217][ T6447]  ? __local_bh_enable_ip+0xd6/0x140
[  112.948243][ T6447]  smc_connect+0x78c/0xdb0
[  112.948273][ T6447]  __sys_connect+0x316/0x450
[  112.948295][ T6447]  ? __pfx___sys_connect+0x10/0x10
[  112.948328][ T6447]  ? __pfx_ksys_write+0x10/0x10
[  112.948357][ T6447]  __x64_sys_connect+0x7a/0x90
[  112.948377][ T6447]  do_syscall_64+0x166/0x520
[  112.948401][ T6447]  ? trace_irq_disable+0x3b/0x140
[  112.948423][ T6447]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.948441][ T6447]  ? clear_bhb_loop+0x70/0xc0
[  112.948465][ T6447]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.948483][ T6447] RIP: 0033:0x7f8682d9fb19
[  112.948500][ T6447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  112.948522][ T6447] RSP: 002b:00007f8683c15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  112.948542][ T6447] RAX: ffffffffffffffda RBX: 00007f8683025fa0 RCX: 00007f8682d9fb19
[  112.948555][ T6447] RDX: 000000000000001c RSI: 0000200000000100 RDI: 0000000000000003
[  112.948567][ T6447] RBP: 00007f8683c15090 R08: 0000000000000000 R09: 0000000000000000
[  112.948578][ T6447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  112.948588][ T6447] R13: 00007f8683026038 R14: 00007f8683025fa0 R15: 00007fff8441a328
[  112.948620][ T6447]  </TASK>
[  113.408517][ T5639] Bluetooth: hci3: unexpected event for opcode 0x1408
[  113.459818][ T6454] FAULT_INJECTION: forcing a failure.
[  113.459818][ T6454] name failslab, interval 1, probability 0, space 0, times 0
[  113.459848][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.0.259 Not tainted syzkaller #0 PREEMPT(full) 
[  113.459870][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  113.459882][ T6454] Call Trace:
[  113.459890][ T6454]  <TASK>
[  113.459898][ T6454]  dump_stack_lvl+0xe8/0x150
[  113.459932][ T6454]  should_fail_ex+0x3eb/0x540
[  113.459961][ T6454]  should_failslab+0xa8/0x100
[  113.459990][ T6454]  ? __kernfs_new_node+0xe6/0x980
[  113.460015][ T6454]  kmem_cache_alloc_noprof+0x9c/0x600
[  113.460039][ T6454]  ? __kernfs_new_node+0xe6/0x980
[  113.460060][ T6454]  ? kernfs_add_one+0xfc/0x510
[  113.460083][ T6454]  __kernfs_new_node+0xe6/0x980
[  113.460100][ T6454]  ? up_write+0x19d/0x4a0
[  113.460127][ T6454]  ? kernfs_activate_one+0x22d/0x340
[  113.460153][ T6454]  ? __pfx___kernfs_new_node+0x10/0x10
[  113.460174][ T6454]  ? kernfs_root+0x1c/0x230
[  113.460201][ T6454]  ? kernfs_root+0x1c/0x230
[  113.460218][ T6454]  ? kernfs_root+0x1c/0x230
[  113.460234][ T6454]  ? kernfs_root+0x1c/0x230
[  113.460256][ T6454]  kernfs_new_node+0xea/0x140
[  113.460281][ T6454]  __kernfs_create_file+0x4b/0x2e0
[  113.460309][ T6454]  sysfs_add_file_mode_ns+0x237/0x300
[  113.460344][ T6454]  sysfs_create_file_ns+0x12b/0x1b0
[  113.460372][ T6454]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  113.460401][ T6454]  ? device_create_file+0xf4/0x1b0
[  113.460425][ T6454]  device_add+0x432/0xb80
[  113.460449][ T6454]  device_create+0x269/0x300
[  113.460475][ T6454]  ? string+0x28a/0x2d0
[  113.460494][ T6454]  ? widen_string+0x3b/0x2a0
[  113.460515][ T6454]  ? string+0x28a/0x2d0
[  113.460535][ T6454]  ? __pfx_device_create+0x10/0x10
[  113.460583][ T6454]  bdi_register_va+0x9c/0x740
[  113.460611][ T6454]  super_setup_bdi_name+0xf8/0x210
[  113.460639][ T6454]  ? rcu_is_watching+0x16/0xb0
[  113.460669][ T6454]  ? __pfx_super_setup_bdi_name+0x10/0x10
[  113.460703][ T6454]  ? __init_waitqueue_head+0xa8/0x150
[  113.460734][ T6454]  fuse_fill_super_common+0x633/0x1110
[  113.460771][ T6454]  ? __pfx_fuse_fill_super_common+0x10/0x10
[  113.460799][ T6454]  ? __pfx_set_anon_super_fc+0x10/0x10
[  113.460826][ T6454]  ? __pfx_sget_fc+0x10/0x10
[  113.460859][ T6454]  fuse_fill_super+0x98/0x120
[  113.460886][ T6454]  ? __pfx_fuse_fill_super+0x10/0x10
[  113.460913][ T6454]  get_tree_nodev+0xbe/0x150
[  113.460941][ T6454]  fuse_get_tree+0x29d/0x3b0
[  113.460972][ T6454]  vfs_get_tree+0x92/0x2a0
[  113.461002][ T6454]  do_new_mount+0x325/0xb00
[  113.461030][ T6454]  ? __pfx_do_new_mount+0x10/0x10
[  113.461054][ T6454]  ? ns_capable+0x84/0xe0
[  113.461078][ T6454]  ? path_mount+0x647/0x1050
[  113.461103][ T6454]  ? user_path_at+0xd4/0x160
[  113.461130][ T6454]  __se_sys_mount+0x31d/0x420
[  113.461159][ T6454]  ? __pfx___se_sys_mount+0x10/0x10
[  113.461189][ T6454]  ? __x64_sys_mount+0x20/0xc0
[  113.461214][ T6454]  do_syscall_64+0x166/0x520
[  113.461240][ T6454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.461258][ T6454]  ? clear_bhb_loop+0x70/0xc0
[  113.461282][ T6454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.461299][ T6454] RIP: 0033:0x7f4c58b9fb19
[  113.461314][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.461329][ T6454] RSP: 002b:00007f4c599db028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  113.461351][ T6454] RAX: ffffffffffffffda RBX: 00007f4c58e25fa0 RCX: 00007f4c58b9fb19
[  113.461364][ T6454] RDX: 00002000000070c0 RSI: 0000200000007080 RDI: 0000000000000000
[  113.461375][ T6454] RBP: 00007f4c58c37b70 R08: 0000200000007100 R09: 0000000000000000
[  113.461386][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  113.461397][ T6454] R13: 00007f4c58e26038 R14: 00007f4c58e25fa0 R15: 00007ffc299379b8
[  113.461427][ T6454]  </TASK>
[  113.749293][ T5791] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  113.933135][ T5791] usb 3-1: Using ep0 maxpacket: 16
[  113.935613][ T5791] usb 3-1: New USB device found: idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  113.936604][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.936631][ T5791] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.936652][ T5791] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  113.936690][ T5791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.940106][ T5791] usb 3-1: config 0 descriptor??
[  114.374305][ T6460] 9p: Bad value for 'rfdno'
[  114.374694][ T6460] 9p: Bad value for 'rfdno'
[  114.376517][ T6460] 9p: Bad value for 'rfdno'
[  114.376868][ T6460] 9p: Bad value for 'rfdno'
[  114.380836][ T6460] 9p: Bad value for 'rfdno'
[  114.381228][ T6460] 9p: Bad value for 'rfdno'
[  114.381748][ T6460] 9p: Bad value for 'rfdno'
[  114.382231][ T6460] 9p: Bad value for 'rfdno'
[  114.389013][ T6460] 9p: Bad value for 'rfdno'
[  114.389398][ T6460] 9p: Bad value for 'rfdno'
[  114.389729][ T6460] 9p: Bad value for 'rfdno'
[  114.392408][ T6460] 9p: Bad value for 'rfdno'
[  114.393723][ T6460] 9p: Bad value for 'rfdno'
[  114.394126][ T6460] 9p: Bad value for 'rfdno'
[  114.397901][ T6460] 9p: Bad value for 'rfdno'
[  114.398285][ T6460] 9p: Bad value for 'rfdno'
[  114.406535][ T6460] 9p: Bad value for 'rfdno'
[  114.406940][ T6460] 9p: Bad value for 'rfdno'
[  114.407270][ T6460] 9p: Bad value for 'rfdno'
[  114.407627][ T6460] 9p: Bad value for 'rfdno'
[  114.425950][ T6460] 9p: Bad value for 'rfdno'
[  114.426394][ T6460] 9p: Bad value for 'rfdno'
[  114.426792][ T6460] 9p: Bad value for 'rfdno'
[  114.427185][ T6460] 9p: Bad value for 'rfdno'
[  114.434355][ T6460] 9p: Bad value for 'rfdno'
[  114.436016][ T6460] 9p: Bad value for 'rfdno'
[  114.436391][ T6460] 9p: Bad value for 'rfdno'
[  114.436794][ T6460] 9p: Bad value for 'rfdno'
[  114.439997][ T6460] 9p: Bad value for 'rfdno'
[  114.446115][ T6460] 9p: Bad value for 'rfdno'
[  114.446499][ T6460] 9p: Bad value for 'rfdno'
[  114.446825][ T6460] 9p: Bad value for 'rfdno'
[  114.455826][ T6460] 9p: Bad value for 'rfdno'
[  114.456571][ T6460] 9p: Bad value for 'rfdno'
[  114.456951][ T6460] 9p: Bad value for 'rfdno'
[  114.459224][ T6460] 9p: Bad value for 'rfdno'
[  114.461464][ T6460] 9p: Bad value for 'rfdno'
[  114.464308][ T6460] 9p: Bad value for 'rfdno'
[  114.464655][ T6460] 9p: Bad value for 'rfdno'
[  114.465054][ T6460] 9p: Bad value for 'rfdno'
[  114.473695][ T6460] 9p: Bad value for 'rfdno'
[  114.474125][ T6460] 9p: Bad value for 'rfdno'
[  114.475249][ T6460] 9p: Bad value for 'rfdno'
[  114.476360][ T6460] 9p: Bad value for 'rfdno'
[  114.481149][ T6460] 9p: Bad value for 'rfdno'
[  114.481717][ T6460] 9p: Bad value for 'rfdno'
[  114.482212][ T6460] 9p: Bad value for 'rfdno'
[  114.486701][ T6460] 9p: Bad value for 'rfdno'
[  114.487061][ T6460] 9p: Bad value for 'rfdno'
[  114.488637][ T6460] 9p: Bad value for 'rfdno'
[  114.490188][ T6460] 9p: Bad value for 'rfdno'
[  114.490548][ T6460] 9p: Bad value for 'rfdno'
[  114.498622][ T5791] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  114.498657][ T5791] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  114.498682][ T5791] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  114.498705][ T5791] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  114.498728][ T5791] shield 0003:0955:7214.0002: unknown main item tag 0x0
[  114.499163][ T6460] 9p: Bad value for 'rfdno'
[  114.499547][ T6460] 9p: Bad value for 'rfdno'
[  114.499890][ T6460] 9p: Bad value for 'rfdno'
[  114.516623][ T6460] 9p: Bad value for 'rfdno'
[  114.517043][ T6460] 9p: Bad value for 'rfdno'
[  114.517370][ T6460] 9p: Bad value for 'rfdno'
[  114.520347][ T6460] 9p: Bad value for 'rfdno'
[  114.523574][ T6460] 9p: Bad value for 'rfdno'
[  114.523996][ T6460] 9p: Bad value for 'rfdno'
[  114.544633][ T6460] 9p: Bad value for 'rfdno'
[  114.545000][ T6460] 9p: Bad value for 'rfdno'
[  114.545348][ T6460] 9p: Bad value for 'rfdno'
[  114.559197][ T6460] 9p: Bad value for 'rfdno'
[  114.598774][ T6455] netlink: 504 bytes leftover after parsing attributes in process `syz.2.258'.
[  114.681882][  T194] qmi_wwan 4-1:1.0: probe with driver qmi_wwan failed with error -22
[  114.738588][  T194] usb 4-1: USB disconnect, device number 6
[  114.799069][ T5791] input: HID 0955:7214 Haptics as /devices/virtual/input/input8
[  114.975310][ T5791] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[  114.975619][ T5791] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[  115.193527][  T194] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.342499][  T194] usb 4-1: New USB device found: idVendor=256c, idProduct=006d, bcdDevice=0.00
[  115.346233][  T194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.346253][  T194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.346274][  T194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.394022][  T194] usb 4-1: config 0 descriptor??
[  115.844498][ T6462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  115.846000][ T6462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  116.085263][  T194] usb 4-1: language id specifier not provided by device, defaulting to English
[  116.231674][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  116.339230][ T5755] usb 3-1: USB disconnect, device number 9
[  116.343371][ T5801] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  116.343439][ T5801] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  116.343501][ T5801] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  116.343554][ T5801] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  116.373036][   T10] usb 1-1: device descriptor read/64, error -71
[  116.611679][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  116.742455][   T10] usb 1-1: device descriptor read/64, error -71
[  116.852053][   T10] usb usb1-port1: attempt power cycle
[  117.147180][  T194] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71
[  117.147218][  T194] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  117.147277][  T194] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71
[  117.193061][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  117.195788][  T194] usb 4-1: USB disconnect, device number 7
[  117.226505][   T10] usb 1-1: device descriptor read/8, error -71
[  117.244260][ T5642] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  117.401790][ T5642] usb 3-1: Using ep0 maxpacket: 32
[  117.402438][ T5642] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  117.427177][ T5642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.442677][ T5642] usb 3-1: config 0 descriptor??
[  117.461641][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  117.482302][   T10] usb 1-1: device descriptor read/8, error -71
[  117.593935][   T10] usb usb1-port1: unable to enumerate USB device
[  117.671871][ T5642] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  117.704802][ T5642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  117.721085][ T5642] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  117.721133][ T5642] usb 3-1: media controller created
[  117.766984][ T5642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.292301][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  118.445780][   T10] usb 4-1: Using ep0 maxpacket: 8
[  118.446441][   T10] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.447316][   T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  118.447346][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.447356][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.447369][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.447380][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.447403][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.701973][   T10] usb 4-1: usb_control_msg returned -32
[  118.702047][   T10] usbtmc 4-1:16.0: can't read capabilities
[  118.704555][ T5642] az6027: usb out operation failed. (-71)
[  118.704566][ T5642] stb0899_attach: Driver disabled by Kconfig
[  118.704571][ T5642] az6027: no front-end attached
[  118.704571][ T5642] 
[  118.704912][ T5642] az6027: usb out operation failed. (-71)
[  118.704926][ T5642] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  118.710651][ T5642] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  118.780114][ T5642] dvb-usb: schedule remote query interval to 400 msecs.
[  118.780137][ T5642] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  118.786464][ T5642] usb 3-1: USB disconnect, device number 10
[  118.915180][   T27] usb 4-1: USB disconnect, device number 8
[  118.976536][ T5642] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  119.103850][ T6485] FAULT_INJECTION: forcing a failure.
[  119.103850][ T6485] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.103895][ T6485] CPU: 1 UID: 0 PID: 6485 Comm: syz.0.271 Not tainted syzkaller #0 PREEMPT(full) 
[  119.103916][ T6485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  119.103931][ T6485] Call Trace:
[  119.103939][ T6485]  <TASK>
[  119.103947][ T6485]  dump_stack_lvl+0xe8/0x150
[  119.103988][ T6485]  should_fail_ex+0x3eb/0x540
[  119.104015][ T6485]  _copy_from_user+0x2d/0xb0
[  119.104038][ T6485]  input_event_from_user+0xb1/0x290
[  119.104069][ T6485]  ? __pfx_input_event_from_user+0x10/0x10
[  119.104102][ T6485]  evdev_write+0x2c7/0x4c0
[  119.104124][ T6485]  ? get_pid_task+0x20/0x1f0
[  119.104146][ T6485]  ? __pfx_evdev_write+0x10/0x10
[  119.104169][ T6485]  ? bpf_lsm_file_permission+0x9/0x20
[  119.104190][ T6485]  ? security_file_permission+0x75/0x260
[  119.104212][ T6485]  ? rw_verify_area+0x203/0x4c0
[  119.104233][ T6485]  ? __pfx_evdev_write+0x10/0x10
[  119.104251][ T6485]  vfs_write+0x296/0xba0
[  119.104278][ T6485]  ? __pfx_vfs_write+0x10/0x10
[  119.104298][ T6485]  ? __fget_files+0x2a/0x420
[  119.104315][ T6485]  ? __fget_files+0x3a2/0x420
[  119.104331][ T6485]  ? __fget_files+0x2a/0x420
[  119.104351][ T6485]  ? fdget+0x1ac/0x250
[  119.104374][ T6485]  ksys_write+0x150/0x270
[  119.104396][ T6485]  ? __pfx_ksys_write+0x10/0x10
[  119.104425][ T6485]  do_syscall_64+0x166/0x520
[  119.104446][ T6485]  ? trace_irq_disable+0x3b/0x140
[  119.104463][ T6485]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.104479][ T6485]  ? clear_bhb_loop+0x70/0xc0
[  119.104497][ T6485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.104511][ T6485] RIP: 0033:0x7f4c58b9fb19
[  119.104531][ T6485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.104542][ T6485] RSP: 002b:00007f4c599db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  119.104562][ T6485] RAX: ffffffffffffffda RBX: 00007f4c58e25fa0 RCX: 00007f4c58b9fb19
[  119.104573][ T6485] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[  119.104583][ T6485] RBP: 00007f4c599db090 R08: 0000000000000000 R09: 0000000000000000
[  119.104594][ T6485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  119.104604][ T6485] R13: 00007f4c58e26038 R14: 00007f4c58e25fa0 R15: 00007ffc299379b8
[  119.104638][ T6485]  </TASK>
[  119.391829][ T6488] binder: Failure when writing BR_NOOP at beginning of buffer.
[  119.391938][ T6488] binder: Read failure Err(EFAULT) in pid:187
[  119.399198][ T6488] syz.0.272 (6488) used greatest stack depth: 12224 bytes left
[  119.605295][ T6494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.275'.
[  119.609196][ T6494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  119.864400][ T4957] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  119.868773][ T4957] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  119.870135][ T4957] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  119.883019][ T4957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  119.895263][ T4957] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  120.321786][  T194] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  120.453932][  T194] usb 3-1: device descriptor read/64, error -71
[  120.637518][ T4957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.639383][ T4957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.640159][ T4957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.670860][ T4957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.680997][ T4957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.715313][  T194] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  120.843800][  T194] usb 3-1: device descriptor read/64, error -71
[  120.885052][  T211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.952137][  T194] usb usb3-port1: attempt power cycle
[  121.072437][  T211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.252988][  T211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.291694][  T194] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  121.318503][  T194] usb 3-1: device descriptor read/8, error -71
[  121.319215][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  121.338573][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  121.341007][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  121.357736][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  121.362835][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  121.387305][ T6520] netlink: 'syz.3.282': attribute type 1 has an invalid length.
[  121.387327][ T6520] netlink: 600 bytes leftover after parsing attributes in process `syz.3.282'.
[  121.393166][ T6517] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  121.393186][ T6517] block device autoloading is deprecated and will be removed.
[  121.432957][ T6517] md: invalid raid superblock magic on ram6
[  121.432975][ T6517] md: ram6 does not have a valid v0.0 superblock, not importing!
[  121.433049][ T6517] md: md_import_device returned -22
[  121.451822][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  121.470713][  T211] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.476244][ T6517] md: invalid raid superblock magic on ram7
[  121.476259][ T6517] md: ram7 does not have a valid v0.0 superblock, not importing!
[  121.476325][ T6517] md: md_import_device returned -22
[  121.521840][ T6517] md: md3 stopped.
[  121.572833][  T194] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  121.596036][  T194] usb 3-1: device descriptor read/8, error -71
[  121.642200][   T10] usb 1-1: Using ep0 maxpacket: 32
[  121.644950][   T10] usb 1-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00
[  121.650120][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.650151][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.650171][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  121.650210][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.676500][   T10] usb 1-1: config 0 descriptor??
[  121.702144][  T194] usb usb3-port1: unable to enumerate USB device
[  122.049343][  T211] bridge_slave_1: left allmulticast mode
[  122.049413][  T211] bridge_slave_1: left promiscuous mode
[  122.050118][  T211] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.094628][ T4957] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.097673][ T4957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.119426][ T4957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.130259][ T4957] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.135266][  T211] bridge_slave_0: left allmulticast mode
[  122.135291][  T211] bridge_slave_0: left promiscuous mode
[  122.138928][  T211] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.145708][ T4957] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.229859][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input10
[  122.342487][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5011.0004/input/input11
[  122.504706][   T10] kye 0003:0458:5011.0004: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.0-1/input0
[  122.605212][ T6530] udevd[6530]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory
[  122.647444][   T10] usb 1-1: USB disconnect, device number 16
[  123.109443][  T211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.136853][  T211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.164188][  T211] bond0 (unregistering): Released all slaves
[  123.180486][ T5301] 8021q: adding VLAN 0 to HW filter on device eth1
[  123.233188][ T5301] 8021q: adding VLAN 0 to HW filter on device eth2
[  123.263403][  T131] ------------[ cut here ]------------
[  123.263417][  T131] test_bit(IO_SQ_THREAD_SHOULD_STOP, &sqd->state)
[  123.263429][  T131] WARNING: io_uring/sqpoll.c:88 at io_sq_thread_stop+0x17e/0x1a0, CPU#0: kworker/u8:5/131
[  123.285405][  T131] Modules linked in:
[  123.289308][  T131] CPU: 0 UID: 0 PID: 131 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  123.298787][  T131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  123.310032][  T131] Workqueue: iou_exit io_ring_exit_work
[  123.315645][  T131] RIP: 0010:io_sq_thread_stop+0x17e/0x1a0
[  123.321361][  T131] Code: c6 05 19 13 e2 0c 01 48 c7 c7 a0 59 ac 8c be 26 00 00 00 48 c7 c2 e0 59 ac 8c e8 7d 75 bc fc e9 4f ff ff ff e8 43 20 e1 fc 90 <0f> 0b 90 e9 e1 fe ff ff e8 35 20 e1 fc 90 0f 0b 90 e9 6e ff ff ff
[  123.341403][  T131] RSP: 0018:ffffc90002db7890 EFLAGS: 00010293
[  123.347905][  T131] RAX: ffffffff84e8226d RBX: ffff88805857e800 RCX: ffff888021329f40
[  123.356342][  T131] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  123.364604][  T131] RBP: 0000000000000000 R08: ffff88805857e91f R09: 1ffff1100b0afd23
[  123.372669][  T131] R10: dffffc0000000000 R11: ffffed100b0afd24 R12: 0000000000000001
[  123.380634][  T131] R13: 0000000000000000 R14: ffff88805857e918 R15: dffffc0000000000
[  123.388655][  T131] FS:  0000000000000000(0000) GS:ffff888123166000(0000) knlGS:0000000000000000
[  123.397653][  T131] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  123.404286][  T131] CR2: 00007f4c58df72f8 CR3: 0000000077766000 CR4: 00000000003526f0
[  123.412353][  T131] Call Trace:
[  123.415891][  T131]  <TASK>
[  123.418834][  T131]  io_put_sq_data+0x8a/0x150
[  123.423510][  T131]  io_sq_thread_finish+0x1fd/0x240
[  123.428628][  T131]  io_ring_ctx_free+0x2d/0x5f0
[  123.433489][  T131]  io_ring_exit_work+0x5b4/0x650
[  123.439141][  T131]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.444698][  T131]  ? __pfx_io_ring_exit_work+0x10/0x10
[  123.450199][  T131]  ? __pfx_io_tctx_exit_cb+0x10/0x10
[  123.455669][  T131]  ? rcu_is_watching+0x16/0xb0
[  123.460451][  T131]  ? process_scheduled_works+0x97a/0x1630
[  123.466242][  T131]  process_scheduled_works+0xc3d/0x1630
[  123.471883][  T131]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.477905][  T131]  ? assign_work+0x3cf/0x5d0
[  123.482563][  T131]  worker_thread+0xa47/0xfb0
[  123.487192][  T131]  kthread+0x38b/0x480
[  123.491250][  T131]  ? __pfx_worker_thread+0x10/0x10
[  123.496432][  T131]  ? __pfx_kthread+0x10/0x10
[  123.501031][  T131]  ret_from_fork+0x514/0xb70
[  123.505699][  T131]  ? __pfx_ret_from_fork+0x10/0x10
[  123.510815][  T131]  ? __switch_to+0xc78/0x1410
[  123.515575][  T131]  ? __pfx_kthread+0x10/0x10
[  123.520187][  T131]  ret_from_fork_asm+0x1a/0x30
[  123.525011][  T131]  </TASK>
[  123.528028][  T131] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  123.535295][  T131] CPU: 0 UID: 0 PID: 131 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) 
[  123.544665][  T131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  123.554733][  T131] Workqueue: iou_exit io_ring_exit_work
[  123.560272][  T131] Call Trace:
[  123.563556][  T131]  <TASK>
[  123.566473][  T131]  vpanic+0x26f/0x710
[  123.570466][  T131]  panic+0xc5/0xd0
[  123.574170][  T131]  ? __pfx_panic+0x10/0x10
[  123.578631][  T131]  ? ret_from_fork_asm+0x1a/0x30
[  123.583581][  T131]  __warn+0x315/0x4c0
[  123.587547][  T131]  ? io_sq_thread_stop+0x17e/0x1a0
[  123.592644][  T131]  ? io_sq_thread_stop+0x17e/0x1a0
[  123.597746][  T131]  __report_bug+0x276/0x570
[  123.602445][  T131]  ? io_sq_thread_stop+0x17e/0x1a0
[  123.607551][  T131]  ? __pfx___report_bug+0x10/0x10
[  123.612576][  T131]  ? rcu_is_watching+0x16/0xb0
[  123.617424][  T131]  ? trace_contention_end+0x3d/0x140
[  123.622718][  T131]  ? io_sq_thread_stop+0x17e/0x1a0
[  123.627817][  T131]  report_bug+0x16b/0x220
[  123.632140][  T131]  ? io_sq_thread_stop+0x17e/0x1a0
[  123.637257][  T131]  ? io_sq_thread_stop+0x180/0x1a0
[  123.642363][  T131]  handle_bug+0x9c/0x200
[  123.646615][  T131]  exc_invalid_op+0x1a/0x50
[  123.651100][  T131]  asm_exc_invalid_op+0x1a/0x20
[  123.655931][  T131] RIP: 0010:io_sq_thread_stop+0x17e/0x1a0
[  123.661632][  T131] Code: c6 05 19 13 e2 0c 01 48 c7 c7 a0 59 ac 8c be 26 00 00 00 48 c7 c2 e0 59 ac 8c e8 7d 75 bc fc e9 4f ff ff ff e8 43 20 e1 fc 90 <0f> 0b 90 e9 e1 fe ff ff e8 35 20 e1 fc 90 0f 0b 90 e9 6e ff ff ff
[  123.681220][  T131] RSP: 0018:ffffc90002db7890 EFLAGS: 00010293
[  123.687277][  T131] RAX: ffffffff84e8226d RBX: ffff88805857e800 RCX: ffff888021329f40
[  123.695241][  T131] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  123.703214][  T131] RBP: 0000000000000000 R08: ffff88805857e91f R09: 1ffff1100b0afd23
[  123.711171][  T131] R10: dffffc0000000000 R11: ffffed100b0afd24 R12: 0000000000000001
[  123.719123][  T131] R13: 0000000000000000 R14: ffff88805857e918 R15: dffffc0000000000
[  123.727083][  T131]  ? io_sq_thread_stop+0x17d/0x1a0
[  123.732190][  T131]  io_put_sq_data+0x8a/0x150
[  123.736770][  T131]  io_sq_thread_finish+0x1fd/0x240
[  123.741878][  T131]  io_ring_ctx_free+0x2d/0x5f0
[  123.746651][  T131]  io_ring_exit_work+0x5b4/0x650
[  123.751583][  T131]  ? do_raw_spin_lock+0x12b/0x2f0
[  123.756597][  T131]  ? __pfx_io_ring_exit_work+0x10/0x10
[  123.762035][  T131]  ? __pfx_io_tctx_exit_cb+0x10/0x10
[  123.767309][  T131]  ? rcu_is_watching+0x16/0xb0
[  123.772065][  T131]  ? process_scheduled_works+0x97a/0x1630
[  123.777769][  T131]  process_scheduled_works+0xc3d/0x1630
[  123.783350][  T131]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.789373][  T131]  ? assign_work+0x3cf/0x5d0
[  123.793958][  T131]  worker_thread+0xa47/0xfb0
[  123.798549][  T131]  kthread+0x38b/0x480
[  123.802602][  T131]  ? __pfx_worker_thread+0x10/0x10
[  123.807708][  T131]  ? __pfx_kthread+0x10/0x10
[  123.812306][  T131]  ret_from_fork+0x514/0xb70
[  123.816902][  T131]  ? __pfx_ret_from_fork+0x10/0x10
[  123.822004][  T131]  ? __switch_to+0xc78/0x1410
[  123.826698][  T131]  ? __pfx_kthread+0x10/0x10
[  123.831273][  T131]  ret_from_fork_asm+0x1a/0x30
[  123.836036][  T131]  </TASK>
[  123.839213][  T131] Kernel Offset: disabled
[  123.843551][  T131] Rebooting in 86400 seconds..