last executing test programs:

2m40.548714982s ago: executing program 2 (id=482):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000039ffffff000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0)

2m40.374208783s ago: executing program 2 (id=483):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000c215000008009f0005000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m40.156971547s ago: executing program 2 (id=484):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/fib_triestat\x00')
read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020)
getsockopt$bt_hci(r1, 0x84, 0x80, 0x0, &(0x7f0000000100)) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000002060300000000000000010001000408050001000700000014000780080013000000ffff0500150080000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

2m39.939235723s ago: executing program 2 (id=486):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000b00), 0x0, 0x0)
ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000b40)={0x4, &(0x7f0000000b80)=[{0x17, '\x00', @data=0xfffffffe, 0x87}, {0x44, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffff001}, {0x2, @svalue=0xffff}, {0x3, @uvalue=0x101}, {0x1, @uvalue=0x100000001}]}, 0x81}, {0x23, '\x00', @data=0x7, 0x20000a}, {0x40, '\x00', @st={0x4, [{0x1, @uvalue=0x6}, {0x1, @uvalue=0x952}, {0x3, @uvalue=0x9}, {0x0, @uvalue=0x8}]}, 0x2}]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
write(r1, &(0x7f0000000280)='- = -', 0x5)
mkdir(&(0x7f0000000000)='dir0\x00', 0x80)
mount(0x0, &(0x7f0000000040)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r2 = fsopen(&(0x7f0000000880)='configfs\x00', 0x0)
fstat(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
setuid(r3)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000940)=[{&(0x7f0000000980)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f00000006c0)={0x28, 0x1, 0x0, 0x0, 0x6, 0x4, 0xffffffffffffffff})
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000380)=<r6=>0x0)
r7 = syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x0)
ioctl$I2C_PEC(r7, 0x708, 0x10)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000800)={0x0, 0x0, 0x5, &(0x7f0000000840)={0x1b, "80958b349806fe35b6d6963792dc532dfaa3020b50fd1f7d8615512e34fced9f89"}})
statx(r1, &(0x7f00000003c0)='./proc/thread-self/fail-nth/file0\x00', 0x6000, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
mount$fuseblk(&(0x7f00000002c0), &(0x7f0000000300)='./sys\x00', &(0x7f0000000340), 0x1010040, &(0x7f0000000cc0)=ANY=[@ANYBLOB="66640924892251bf84fc", @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=r6, @ANYBLOB=',group_id=', @ANYRESDEC=r8, @ANYBLOB=',default_permissions,smackfsdef=sysfs\x00,obj_role=sysfs\x00,smackfstransmute=\'([*(&,\x00'])
r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
futimesat(r9, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', &(0x7f0000000640)={{0x77359400}, {0x0, 0x2710}})
write(r9, &(0x7f00000000c0), 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5800000000090101000000000003000000000000100004800800010000000000000000000c000280050001000000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r9, 0x0, 0x489, 0x0, 0x0)
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f0000000700)={0x2, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="48088fbc8020"], 0x10}}, 0x4010)
openat(r9, &(0x7f0000000140)='dir0/per_cpu/cpu0/trace\x00', 0x193182, 0x0)

2m39.45677212s ago: executing program 2 (id=487):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000008}, 0x20000800) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

2m39.091291539s ago: executing program 2 (id=490):
r0 = socket(0x10, 0x3, 0x0)
clock_settime(0x0, &(0x7f0000000500)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000540)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000640)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="919d", 0x2}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x802, 0x5, 0xffd}, 0x10)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0x20000001}, 0x20040080)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00255800000000120000"], 0x18}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000200)={0xc, 0x5, 0xc3, 0x398})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000780)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000007c0)={0x0, 0x0, "d607f8f9951eeecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b3ebb3327ef4f001d34c09f39c3539e4f8d3ee000206804b6b47912c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e05f37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2293f9d5c3b90400000000000000c2796827d61dcc3a633bffff250b5a293e3877adc1640edbc9e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17d809268103a2584ab40a68e597afc3612e325c1eb4a3ab2e156a97444800", "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"})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000017c0)=[@text64={0x40, &(0x7f0000001800)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001880)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000018c0)={'veth1_to_bridge\x00', &(0x7f0000001900)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x20, 0x8, [0x0, 0x6, 0x9, 0xc, 0x5, 0x0, 0x6, 0x2]}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mount(0x0, &(0x7f0000000180)='./debug/tracing/options/context-info\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000240))
getuid()
close(0xffffffffffffffff)
r8 = syz_open_dev$evdev(&(0x7f0000001940), 0x0, 0x0)
syz_usb_disconnect(r8)

2m32.105997627s ago: executing program 1 (id=524):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1e)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x4000, 0x0)
mount$bpf(0x3f00000000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x40020, &(0x7f0000000180)={[{}]})

2m31.885595992s ago: executing program 1 (id=525):
r0 = mq_open(&(0x7f0000000000)='eth0\x00', 0x42, 0x0, 0x0)
mq_notify(r0, 0x0)
ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000080)={0x1, 0x1, 0xf5, 0xde24, 0x7be4d89a, 0x9})
r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x82, 0x602)
write$hidraw(r1, 0x0, 0x100000)

2m31.872320322s ago: executing program 1 (id=527):
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
write(r0, &(0x7f0000002780)="a000000024000105010000000000000000000000020000000000ffffffffffff000000000b00010074617072696f00007000028056000c00010000000000000000000000000000000000010010000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000c80080001000000000008000200dc050000", 0xa0)

2m31.660724432s ago: executing program 1 (id=529):
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='tasks\x00', 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x2, 0xfffffff7})
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0)
r4 = eventfd2(0x1, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000100)={0x3, r4}) (async)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0)
getsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000180)={@empty, @multicast2}, &(0x7f00000001c0)=0x8) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x1, 0x4) (async)
close(r0) (async)
ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f0000000200)={0x8, 0x6})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) (async)
ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f0000000340)={0x8001, 0x30000, 0x5, 0x40, 0x100, 0x7, 0x1, 0x9, 0x4, 0x5, 0x10, 0x5, &(0x7f0000000240)=[0x1, 0xffffffff], 0x2, &(0x7f0000000280)="927b82ecedf5244f9616287e9e1a6c468a149bd50b9764f596a3bd8b8be1d88dcfbe485f38bc12d696a0eed58bbdcc14142efb393064305ac4f9919b6cb70a573df00a755242a2134e9c565654ecf8a4577eff474bf279702a6fbe2e3b9445f3e392007e03f8f30356912cc624617115190171dc25134f5cde8c880d94527f85a5f2dba3f6476bedbef5261385bbd028514945c433801c1e816cd5bfe36fb6ba21a81e185c4732830d75be8fa9ec3f3a9079fee0bf3afaed8da6", 0xba}) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) (async)
ioctl$BLKGETSIZE64(r5, 0x80081272, &(0x7f0000000400)) (async)
ioctl$VHOST_SET_VRING_CALL(r5, 0x4008af21, &(0x7f0000000440)) (async)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000480)={0x4, 0x9fe5}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000004c0)=0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000500)=0x1) (async)
ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000540)={0xc0, 0x0, 0x20000})
setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f00000005c0)=0x1, 0x4)
ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r5, 0x3ba0, &(0x7f0000000600)={0x48, 0x9, 0x0, 0x0, 0x1ac7}) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000680), r5) (async)
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f00000006c0)={[{0xffff, 0xfff5, 0x9, 0x8, 0xe, 0x80, 0x4, 0x81, 0xb1, 0x7, 0x15, 0x2, 0x9}, {0x6, 0x4, 0x4, 0x9, 0x1, 0x0, 0x1, 0x3, 0x9, 0x5, 0xe, 0x4, 0x1}, {0x2, 0x8, 0xa9, 0x5, 0x3, 0x9, 0x8, 0xe, 0x5, 0xe9, 0x81, 0x0, 0x4}], 0x200})
ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000740)={0x2, 0x6})

2m31.376186173s ago: executing program 1 (id=532):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000206050000000000000000000000000105001b000100000005000100070000000400078012000300686152683a6e65742c706f7274000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40002}, 0x8000)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x802)
pselect6(0x40, &(0x7f0000000080)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f00000000c0)={0x8, 0x7, 0x7ffffffe, 0x3, 0x3, 0xfffffffffffffffd, 0x200000000000002, 0x26}, &(0x7f0000000140), 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000206050000000000000000000000000105001b000100000005000100070000000400078012000300686152683a6e65742c706f7274000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40002}, 0x8000) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x802) (async)
pselect6(0x40, &(0x7f0000000080)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f00000000c0)={0x8, 0x7, 0x7ffffffe, 0x3, 0x3, 0xfffffffffffffffd, 0x200000000000002, 0x26}, &(0x7f0000000140), 0x0) (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) (async)

2m30.849600466s ago: executing program 1 (id=535):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000200)=0x20)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000440)=""/96)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x8000})
close(r2)
socket$kcm(0x2, 0x200000000000004, 0x106)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2400c094)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2001)
ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8572}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e0023000f0000000280000012946eb22e84c0795d06eeb584ca61380f3420258501b0a99264a9b4890246090333e4cb3b2bbf54b4190c8f2abbe3105ad47ceee6c7c69a2e2b503a3c3c726f9d282b8ebc77639662705892df1d949f51393848c3be51e15932641a4d4909205bc77e109276449264452631f1181920d611c7e899de81f20c8593508a29615bd0e141af62f1680aed70cfbcaef15ee783a15d98ba93d6c5af60d563610ab14a6320ec00f2bb00211451e80654", 0xd9}], 0x1}, 0x90)

2m23.497567039s ago: executing program 32 (id=490):
r0 = socket(0x10, 0x3, 0x0)
clock_settime(0x0, &(0x7f0000000500)={0x77359400})
clock_adjtime(0x0, &(0x7f0000000540)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8})
clock_adjtime(0x0, &(0x7f0000000640)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000480)=[{&(0x7f00000004c0)="919d", 0x2}], 0x1}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x802, 0x5, 0xffd}, 0x10)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x40, 0x20000001}, 0x20040080)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00255800000000120000"], 0x18}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff)
r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x40000)
ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000200)={0xc, 0x5, 0xc3, 0x398})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000780)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000007c0)={0x0, 0x0, "d607f8f9951eeecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b3ebb3327ef4f001d34c09f39c3539e4f8d3ee000206804b6b47912c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e05f37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2293f9d5c3b90400000000000000c2796827d61dcc3a633bffff250b5a293e3877adc1640edbc9e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17d809268103a2584ab40a68e597afc3612e325c1eb4a3ab2e156a97444800", "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"})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000017c0)=[@text64={0x40, &(0x7f0000001800)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001880)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000018c0)={'veth1_to_bridge\x00', &(0x7f0000001900)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x20, 0x8, [0x0, 0x6, 0x9, 0xc, 0x5, 0x0, 0x6, 0x2]}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
mount(0x0, &(0x7f0000000180)='./debug/tracing/options/context-info\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0)
ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000240))
getuid()
close(0xffffffffffffffff)
r8 = syz_open_dev$evdev(&(0x7f0000001940), 0x0, 0x0)
syz_usb_disconnect(r8)

2m15.823975521s ago: executing program 33 (id=535):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x82, &(0x7f0000000180)={0x2}, &(0x7f0000000200)=0x20)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r4, 0x4b4a, &(0x7f0000000440)=""/96)
ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000004c0)={r2, 0x0, 0x0, 0x8000})
close(r2)
socket$kcm(0x2, 0x200000000000004, 0x106)
sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2400c094)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r5 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2001)
ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8572}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e0023000f0000000280000012946eb22e84c0795d06eeb584ca61380f3420258501b0a99264a9b4890246090333e4cb3b2bbf54b4190c8f2abbe3105ad47ceee6c7c69a2e2b503a3c3c726f9d282b8ebc77639662705892df1d949f51393848c3be51e15932641a4d4909205bc77e109276449264452631f1181920d611c7e899de81f20c8593508a29615bd0e141af62f1680aed70cfbcaef15ee783a15d98ba93d6c5af60d563610ab14a6320ec00f2bb00211451e80654", 0xd9}], 0x1}, 0x90)

58.145851103s ago: executing program 5 (id=1049):
mkdirat(0xffffffffffffff9c, &(0x7f00000016c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001740)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r0, &(0x7f00000017c0), 0x0)

58.104399259s ago: executing program 5 (id=1050):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_ublk_setup_io_uring(0x26a5, &(0x7f0000000440)={0x0, 0xbb9b, 0x80, 0xfffffefe, 0x1e5}, 0x0, &(0x7f0000000500)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000340))
syz_io_uring_submit(0x0, r2, r3, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x0, 0x1, r0, 0x0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}})
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0)
syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000640)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r6)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
mount(0x0, 0x0, &(0x7f0000000980)='sysfs\x00', 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)

57.976110193s ago: executing program 5 (id=1051):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000040)={0x0, 0xfffffffffffffea5, &(0x7f0000000080)=[{&(0x7f0000000100)="50000000300005040000000000000000000000003c0001003800010009000100676163740000000028000280180002000000000000000000080000000ce4030001000000000000200000000000000000", 0x50}], 0x1}, 0x0)

57.832765305s ago: executing program 5 (id=1053):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000004c0)='./bus\x00')
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) (async)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='27', 0x2)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x800210d, 0x0, 0x20010, r1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x800) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff)

57.512410539s ago: executing program 5 (id=1055):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000fff400000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e6574646576738a6d3000000000000008000a400000000260000000060a010400000000000000000500000a0900010073797a30000000000900020073797a300000000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000114000000110001"], 0x104}}, 0x0)

57.144063924s ago: executing program 5 (id=1057):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x3b)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000c40)="000102030405060708090a0b0c0d0e0f", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write(r2, &(0x7f0000000c80)='\x00'/512, 0x200)
read$alg(r2, &(0x7f0000000e80)=""/512, 0x200)
r3 = gettid()
syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000040)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000080)=<r4=>0x0)
r5 = syz_open_dev$video(&(0x7f0000000180), 0xa7, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x240, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8=r6, @ANYBLOB="70fdad4b612fbb7313cfd6ce445f0ef15e92e2641d932035ad72a3d8a38fb9684ccba8cadf05cd026a62bf2702f53057a7b249718843faf46944056aa061f325b7da412c3a5660d24dfe4a94519c46d449a59c356a1d5d2c248b85f74b9e05d0c0981906a118017463fec50c716aeacd6646f650e1fcb26dc02800ef9f25012724cc1121df7ed5a36ce46d234f"], 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x0, 0x2}})
r7 = open(&(0x7f0000000300)='./bus\x00', 0x80242, 0x0)
ftruncate(r7, 0x2007ffc)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r5, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES64=r4, @ANYRES64=r4, @ANYRESOCT=r7], 0xa0}}, 0x8005)
lseek(r7, 0x8, 0x4)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40a00, 0xdd)

56.819663502s ago: executing program 34 (id=1057):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)=0x3b)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000bc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000c40)="000102030405060708090a0b0c0d0e0f", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
write(r2, &(0x7f0000000c80)='\x00'/512, 0x200)
read$alg(r2, &(0x7f0000000e80)=""/512, 0x200)
r3 = gettid()
syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x3, &(0x7f0000000040)={0x0, 0xb, 0x4, @tid=r3}, &(0x7f0000000080)=<r4=>0x0)
r5 = syz_open_dev$video(&(0x7f0000000180), 0xa7, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x240, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8=r6, @ANYBLOB="70fdad4b612fbb7313cfd6ce445f0ef15e92e2641d932035ad72a3d8a38fb9684ccba8cadf05cd026a62bf2702f53057a7b249718843faf46944056aa061f325b7da412c3a5660d24dfe4a94519c46d449a59c356a1d5d2c248b85f74b9e05d0c0981906a118017463fec50c716aeacd6646f650e1fcb26dc02800ef9f25012724cc1121df7ed5a36ce46d234f"], 0x0)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x0, 0x0, 0x3631564e, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x0, 0x2}})
r7 = open(&(0x7f0000000300)='./bus\x00', 0x80242, 0x0)
ftruncate(r7, 0x2007ffc)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r7, @ANYRESHEX=r5, @ANYRES64=r1, @ANYRESDEC=r0, @ANYRES8=0x0, @ANYRES16=r3, @ANYRES64=r4, @ANYRES64=r4, @ANYRESOCT=r7], 0xa0}}, 0x8005)
lseek(r7, 0x8, 0x4)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x9}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40a00, 0xdd)

49.51249232s ago: executing program 0 (id=1093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002e70300080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001"], 0x460}}, 0x0)

49.254053588s ago: executing program 0 (id=1094):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4920}, 0x44860) (async)
timer_create(0x0, 0x0, 0x0) (async)
io_setup(0x80000000, &(0x7f0000000740)=<r2=>0x0) (async)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x0) (async)
io_submit(r2, 0x0, &(0x7f0000000f00)) (async)
msync(&(0x7f0000003000/0x1000)=nil, 0xffffffffdfffcfff, 0x0)

49.077266211s ago: executing program 0 (id=1095):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)

48.945946238s ago: executing program 0 (id=1098):
r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000106d043ac500000000000109022d0001000070060904000504030002000921fcff400122180009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000005c0), 0xa, 0x62080)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000240)={0x1, 0x102, 0x7})

45.808082603s ago: executing program 0 (id=1125):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x2000, &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

45.601301798s ago: executing program 0 (id=1128):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f000025b000/0x1000)=nil, 0x1000, 0x9)
sync()

30.296092634s ago: executing program 35 (id=1128):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000)
madvise(&(0x7f000025b000/0x1000)=nil, 0x1000, 0x9)
sync()

25.366802197s ago: executing program 4 (id=1180):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002380)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000002580)={&(0x7f00000001c0), 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0xb8, r3, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x9, 0x1}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xdf2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf707}, @NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "d9c86a8a69b5c8aa152fb1cf66ac34eac1a8213c8ccb14f8b4df41e0500bec1ee9eb43169fef81764aa761344bbfe9562316ebd6361660a141374fc50d706812b49d600920ab1342eadb4f595b9e9cad60d1cb0a834b8c9cd5dc216a80e076f3a7ccf1e1c7e0b0dd92972cfa354af8226506bb"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10001}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x82)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r5, 0x0, <r6=>0x0})
unshare(0x22020600)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x8)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000340)={0x2020}, 0x2020)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xa, r6, 0x0, r10})

25.144358714s ago: executing program 4 (id=1182):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000380)='./security\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./security/apparmor/.load\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test\x00', 0x777)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f00000004c0)='10000', 0x5)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000540)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r3, &(0x7f00000005c0)='0', 0x1)
write(r0, &(0x7f0000000600)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c61677300070200000000020000000002000000000802000000000200000000020000003f020000000008", 0x50)

24.980644799s ago: executing program 4 (id=1183):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x670)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0700000000fff5000000020000000900010073797a300000000080000000030a01020000000000000000020000060900010073797a300000044a5e000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f1"], 0xc8}}, 0x0)

24.948187322s ago: executing program 4 (id=1184):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYRES64=r1], 0x64}}, 0x48c0)
socket$inet_tcp(0x2, 0x1, 0x0)

24.832436828s ago: executing program 4 (id=1186):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000003000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x20040014)

24.804758146s ago: executing program 4 (id=1188):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xc99, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r4=>0x0})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0xfffffffffffffffc)
sendto$packet(r3, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd48", 0x18, 0x0, &(0x7f00000002c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x1208800, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000200fffb"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)

9.493853557s ago: executing program 36 (id=1188):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000200)=0xc99, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ip6gretap0\x00', <r4=>0x0})
r5 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0xfffffffffffffffc)
sendto$packet(r3, &(0x7f0000000280)="0b031260feffffff02005400f6a13bb1000000086086dd48", 0x18, 0x0, &(0x7f00000002c0)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000001c0)='qnx4\x00', 0x1208800, 0x0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000200fffb"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)

6.721972788s ago: executing program 7 (id=1273):
r0 = syz_usb_connect(0x2, 0x30, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x46, 0x82, 0x8e, 0x8, 0x1a0a, 0x102, 0x7c26, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1e, 0x1, 0xfe, 0xa5, 0x40, 0x1, "", [{{0x9, 0x4, 0x53, 0x80, 0x1, 0xfe, 0xbe, 0x8b, 0x8, [], [{{0x9, 0x5, 0xe, 0x8, 0x400, 0xc, 0x8, 0x1, [@generic={0x3, 0x9, '['}]}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000001980)={0x14, 0x0, &(0x7f0000001880)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl(r1, 0x3b93, &(0x7f0000000040)="2000000000000000efbeadde03") (async)
syz_usb_control_io$rtl8150(r0, &(0x7f00000031c0)={0x14, 0x0, &(0x7f0000003180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, 0x0)

5.00906392s ago: executing program 7 (id=1279):
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x2, 0x2) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0x8af9, 0x80, 0x2, 0x3c2}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f00000002c0)=<r6=>0x0)
syz_io_uring_submit(r4, r5, r6, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4c001, 0x0, {0x0, 0x0, 0x5}}) (async)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000001980)={@private2, 0x800, 0x0, 0x2, 0x9, 0x0, 0x80}, 0x20) (async)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f00000019c0)=0x5, 0x4)
sendmsg$inet6(r7, &(0x7f0000001a00)={&(0x7f0000001a40)={0xa, 0x4e1b, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000000000000200000000400000089000000000000002400000000040000290000003200000000000000000000000000000002000001af1ac77d929f16ed1e3562ad0ab0f8f7a323d6515b47dad1af497c64", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}, 0x0) (async)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000380)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x3ce9, 0x80000, 0x1, 0xd1}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65c2, 0x4000, 0x2, 0x134}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x320e, 0x1000, 0x1, 0xfa}, 0xffffffffffffffff, 0x0, <r8=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f6, 0x1000, 0x0, 0x1fa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc940, 0x800, 0x3, 0x25c}}], 0x4, &(0x7f0000001740)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x19}, 0x0, 0x0, '\x00', {0x1, 0x259, 0x0, &(0x7f0000000740)=@buf_512="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"}}, &(0x7f00000017c0)) (async)
r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), 0xffffffffffffffff) (rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001b80)={0x3c, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x3c}}, 0x0)
r12 = syz_clone(0x84801000, 0x0, 0x0, &(0x7f0000001840), 0x0, 0x0)
r13 = getpid()
kcmp(r12, r13, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64)
syz_ublk_add_dev(r0, r4, r8, 0x0, &(0x7f00000018c0)={0x2e, 0x8, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001880)=@any_dev={0x3, 0xaf0, 0x0, 0x0, 0x1000, 0x40, r13, 0x0, 0x2}}}, &(0x7f0000001940)) (async, rerun: 64)
r14 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (rerun: 64)
r15 = socket$nl_generic(0x10, 0x3, 0x10)
r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001bc0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000001c00)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r15, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)={0x24, r16, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_kvm_setup_cpu$x86(r2, r14, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async)
ioctl$KVM_RUN(r14, 0xae80, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)

3.836963885s ago: executing program 7 (id=1284):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000200fffb"], 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r4)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=<r6=>0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000480)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0x8000, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x80, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x6, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x7, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x80, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000980)={0x80, 0x0, 0x1})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000a00)=0x7f, 0x4)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000a80)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
mount$fuse(0x0, 0x0, &(0x7f0000000b40), 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000400'])
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000bc0)=@target={'target ', {'PCI:', '5', ':', 'b', ':', 'd', '.', '1e'}}, 0x14)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r12 = dup(r11)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000c40)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000c80)=[@text32={0x20, &(0x7f0000000cc0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000d00)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r13, 0xae80, 0x0)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300))

3.836731995s ago: executing program 6 (id=1285):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x3c3240, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, <r2=>0x0})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000040), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000380)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0), 0x2}}], 0x40000000000003a, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0xa, r2, 0x0, r4})

3.662785595s ago: executing program 6 (id=1286):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x52a1, 0x1e}) (async)
r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x20003)
r5 = syz_usb_connect(0x0, 0x45, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r6 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x40, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0xf0e, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x80}}}, 0x0)

3.046331932s ago: executing program 3 (id=1289):
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, 0x0}, 0x670)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0700000000f4ff000000020000000900010073797a300000000080000000030a01020000000000000000020000060900010073797a300000044a5e000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f1"], 0xc8}}, 0x0)

2.810226939s ago: executing program 3 (id=1290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050826bd70001edcdf250900000008000300", @ANYRES32=r3, @ANYBLOB="0800370003"], 0x30}, 0x1, 0x0, 0x0, 0x48011}, 0x40) (async, rerun: 32)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async)
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="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"/366], 0x174}, 0x1, 0x0, 0x0, 0x4805}, 0x4000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) (async)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]})

2.161262929s ago: executing program 6 (id=1291):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a80)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r1}}]}, 0x15c}, 0x1, 0x0, 0x2100000000000000, 0x880}, 0x2014)

2.155975482s ago: executing program 6 (id=1292):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000003000100000000000000ac1e000100000000000000000000000000000000000000000a00", @ANYRESOCT], 0xb8}}, 0x20040014)

2.117413306s ago: executing program 6 (id=1293):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x34)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0xeeef0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil})
ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4000})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1a4}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r2, 0x0, 0x40, &(0x7f00000004c0)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000140)={0x58000, 0x9000, 0x1})
r3 = syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x281)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r4, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x47}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "feb6b82484f2d5f1c6b797a92642"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "83ebd0bb1670eee26ed422cb80"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040080}, 0x10)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000100)=0x1, 0x4)

738.161866ms ago: executing program 6 (id=1294):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$uac3(0x0, 0xf6, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1033, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x7f, 0x30, 0x2, {0x8, 0xb, 0x1, 0x1, 0x1, 0x22, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x15, 0x7f}, [@selector_unit={0xb, 0x24, 0xc, 0x2, 0x6, "b9bdbc7f0772"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x2, 0x3, 0x4, "3b96b5"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x3, 0x8, 0xf8, 'hkTl\bPD'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x1, 0x63, "7205", "d147"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0x8, 0x5, 0x0, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf2, 0x30, 0x3, 0x3, 0x3e}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x401, 0xb2, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0x5, 0x5, {0xa, 0x25, 0x25, 0xffff, 0x1, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2, 0xfff8, 0x1, "f9f7"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x7, 'K'}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0x0, "0f66", 'q2'}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x3, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x80, 0x6, 0x7f, {0xa, 0x25, 0x25, 0x3, 0x3, 0x1}}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x5, 0xb4, 0x81, 0x8, 0x9}, 0x18, &(0x7f0000000600)={0x5, 0xf, 0x18, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x5, 0x1, 0x2, 0x0, 0x3, [0xff0000]}, @ptm_cap={0x3}]}, 0x5, [{0xae, &(0x7f0000000640)=@string={0xae, 0x3, "22a9f700386f5e1401c5d8771aa647f0cebc02ef4e0838e8a6a4ed260e7e2b5ede7494d523fe8d82bee7c9453a731f19820878966dad615c88a46fc2c7119b1cfb2dfd39a011272350edca236ea0ac793b366ae7505a4d833971fc8992dfe8725b12f90f07a37a6d936c26777f697bcea211494ae3aea8ca7558519281992a046575515bf67205192266eba14a5243b4742e80a21c6250b9e456c79c4b9f8bb9a495326f7f4313b62dc5c6cd"}}, {0x4b, &(0x7f0000000700)=@string={0x4b, 0x3, "b2f7933fa2848bd9a7680e21c813e3c0977cdb627ba56d9d8acb145c223cb9af51b657dbba921c9a894fc6b59806678b8eb1cdbdf9e5e17f397e86f4b5f64f08e28d2d9c73cb4546ca"}}, {0xc8, &(0x7f0000000780)=@string={0xc8, 0x3, "8908e3d88ea727f9fa49f94ef5b86a8c397389e06906102c49e648aef917a6fd0ccf07e28a96c9d9b41a9c2eba09daad76e0b1fb91b5659d26203a7bb7480a8ea6c9f7ed6aab506cdfd5442c7a752df2e7c11ad9ce47a22b5abf44c165e3e4d6361691f04bb69c64548f8800c33483888d7102efbe38f7a0e54c25813202792ba8a4364f6e8a7efe7ec4f0c4f20adce8bfe8975d2beee9a9cc50bf2297d2081d24fdf2545601feb04fe88089c19330faeda02fd151c7cc7d0bb994b62d48c0f2ddd1128d42ac"}}, {0x7b, &(0x7f0000000880)=@string={0x7b, 0x3, "38b5283b874bc54f6d0fd4143af40ffa39d7d720385a5ef2601db23ec5034f60c6bea1b5fd2c7827fbc2b0b3a287a32dba1704810236c83fa86759c634bc01dec606c3b61b3159c80ba65ccd91137b1e8cc12c4f5bdd379f280446c6120d50263ab6a3e44eb94e5f699c5108843ea32e8cf1e784ff2798b9e1"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x1c0a}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000a00)={0x14, &(0x7f0000000300)={0x20, 0x7, 0x17, {0x17, 0x31, "123ea5b72d1f98bcdc0c2bd5a5f219803f54ef850b"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xfcff}}}, &(0x7f0000000f80)={0x1c, &(0x7f0000000a40)={0x40, 0x15, 0x83, "bba62193adb11ccdbc1becdb872333b28c03a6f8e3ece6d1fe3c150cf9ba1be291377f81585a68d9a5b04f82e9c0e4091ba07ca25500993fd8f5423a1077df0b3596c38f94ef1a5d71f154bc8738ba80ba4e523fedc016ab6381da2d5c5afa9b83291ad4ac89de947c8002f7a95a16fd115e2c6fa1c1aa977b05c36ad04d6afaf46d3f"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000f40)={0x21, 0x0, 0x3, "8e5642"}})
syz_usb_disconnect(r0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000280)={0x14, &(0x7f00000001c0)={0x40, 0x3, 0x4c, {0x4c, 0xf, "cc615acddfe545b868ccbc39a7027bfdd9a0a1f571befefb82e5df7611785b293ec083fa651983830fad2f2674bcd62c9427543bd2c976b899a1a49b698253e7ac090b885976a4535d6e"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="400a3b00000020fa647bbb8c6895cf854afc4239ec6aba28231c6ea91d892c1b657cb028943ecb3f9473e1f920d8fccffaa49ea60207ce"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x8}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "64989427699c9b9de2d87fb7806d35ce952e47386492c17ceab22568941ec0daa3022f8821c138ce75475b7122c1ac"}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000)
sendmsg$NFT_BATCH(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xdf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5c}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)="00000000090209000101008001120100020000004000800000000000000001ca", 0x20)
ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000080)={0x1, 0x2, 0x3cf3, 0x202000, 0x110001, 0x9})

673.743247ms ago: executing program 8 (id=1295):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/swiotlb/io_tlb_used_hiwater\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/100, 0x64)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
mmap(&(0x7f0000ff8000/0x5000)=nil, 0x5000, 0x3000003, 0x10010, r0, 0xa06dc000)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r4=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x1, {0x0, 0x1, 0x4}, 0xfe}, 0x18)
sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="2e00000010008188e6b62aa73f72cc9f0ba1f802000000005e140602000000000e00350010000000028000001294", 0x2e}], 0x1}, 0x0)

654.094315ms ago: executing program 3 (id=1296):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x112, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40800)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040010)
r3 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x4040801)
sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x1, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x80)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x52}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000094}, 0x800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x7ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x800)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_TOL(r7, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x1c, 0x18, {0x8, @bearer=@l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000841}, 0x80)
sendmsg$DEVLINK_CMD_RATE_DEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000980), r5)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, r8, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffff00, @dev={0xfe, 0x80, '\x00', 0x26}}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x44)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, r6, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4c008)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c00), 0x180, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r10=>r7, {0x6, 0x181}}, './file0\x00'})
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000000c80)={r10, 0x39f, {0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0xa, 0x1d, 0xc, "e8a7b44e19e27a03d80ec8385b6d66c092d88af83dc01696fb8a7455c6b829bdb1b2bd02f1c5b72739552d59317dcd4dc86aff91d0529fef2e9ab8f6e33209f8", "9c9d878247ba713be2b3b775abefc2bf6937db3fc99f8a084ba14fbc1ff7797b9d55caad91172cdd3b48aaba99f69af83f2cc7d00d83bc7ba40465956fa456e6", "993546e00190285c787345d276f5a5713e866425d01f0032b1009ea44b886166", [0x401, 0xfffffffffffffffd]}})
r11 = getpgid(0xffffffffffffffff)
r12 = getgid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000003140)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000003240)=0xe8)
r14 = getgid()
lstat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = getgid()
getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000003600)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in=@private}, 0x0, @in=@local}}, &(0x7f0000003700)=0xe8)
syz_fuse_handle_req(r9, &(0x7f0000000dc0)="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", 0x2000, &(0x7f0000003a00)={&(0x7f0000002dc0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x0, 0x400000, 0x8, 0x1, 0x8, 0x80000000, 0x0, 0x0, 0x100}}, &(0x7f0000002e40)={0x18, 0x0, 0x10, {0x8}}, &(0x7f0000002e80)={0x18, 0x0, 0xffff}, &(0x7f0000002ec0)={0x18, 0x0, 0x1000, {0x400}}, &(0x7f0000002f00)={0x18, 0x0, 0x2, {0x3fc11a92}}, &(0x7f0000002f40)={0x28, 0x0, 0x1, {{0x6, 0x7, 0x1, r11}}}, &(0x7f0000002f80)={0x60, 0xfffffffffffffff5, 0x5, {{0x0, 0x8, 0x2, 0x1, 0x7, 0x10000, 0x8, 0x2}}}, &(0x7f0000003000)={0x18, 0x0, 0x100000000}, &(0x7f0000003040)={0x12, 0x0, 0x10000, {'}\x00'}}, &(0x7f0000003080)={0x20, 0x0, 0x5, {0x0, 0x8}}, &(0x7f00000030c0)={0x78, 0xfffffffffffffff5, 0x4, {0xfffffffffffffffb, 0x400, 0x0, {0x0, 0x1, 0x0, 0x2, 0xfffffffffffffff7, 0x7, 0x5, 0x6, 0xc5, 0x8000, 0x4, 0xee00, r12, 0x0, 0x60aa}}}, &(0x7f0000003280)={0x90, 0xfffffffffffffff5, 0x0, {0x2, 0x2, 0xffffffff, 0x1, 0x7, 0x9, {0x2, 0x4, 0x11, 0x0, 0x7, 0x9, 0x600000, 0x0, 0x4ff, 0x8000, 0x7ff, r13, r14, 0x1, 0xfff}}}, &(0x7f0000003340)={0x108, 0xfffffffffffffff5, 0x7, [{0x0, 0x0, 0x1, 0x3, '+'}, {0x3, 0x1, 0x0, 0x1}, {0x5, 0x6, 0x4, 0x800, '&-/%'}, {0x6, 0x8000000000000001, 0x2, 0x4, '/*'}, {0x0, 0x7, 0x6, 0x3, '%#,!!^'}, {0x4, 0x7, 0x6, 0x824e, '{+*+4\\'}, {0x0, 0x200, 0x8, 0x401, 'ethtool\x00'}, {0x2, 0x4, 0x8, 0x7, 'ethtool\x00'}]}, &(0x7f0000003540)={0xb0, 0xffffffffffffffda, 0x0, [{{0x0, 0x0, 0xd, 0x8, 0x3, 0x7, {0x4, 0xfffffffffffffff8, 0x2, 0xbd4, 0x8000000000000001, 0x4, 0x10, 0x4, 0x5, 0xc000, 0x1, r15, r16, 0x59, 0xffffff00}}, {0x2, 0x8, 0x4, 0x6, 'pci\x00'}}]}, &(0x7f0000003740)={0xa0, 0xfffffffffffffffe, 0x8, {{0x1, 0x2, 0x1000, 0xfffffffffffffffb, 0x9, 0x3, {0x1, 0x1, 0x5, 0x7c71, 0x4, 0x4, 0x400, 0xd, 0x10000, 0x8000, 0x0, r17, 0xee01, 0xa4}}, {0x0, 0x2}}}, &(0x7f0000003800)={0x20, 0x0, 0x75e3d1d, {0xc, 0x4, 0x0, 0x34b}}, &(0x7f00000038c0)={0x130, 0xfffffffffffffff5, 0x6, {0x0, 0x6, 0x0, '\x00', {0x7ff, 0x2000, 0x101, 0xfffffff2, 0x0, 0xee00, 0x8000, '\x00', 0x5, 0x9e, 0x1, 0x43, {0xfffffffffffffff8, 0x7fff}, {0x100000000, 0x325d}, {0xfffffffffffffffe, 0xa}, {0xcfdd, 0x9}, 0x4, 0x3, 0x68, 0xfffffff1}}}})

622.230665ms ago: executing program 7 (id=1297):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)

525.30285ms ago: executing program 8 (id=1298):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002e00)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0x10e0}}, 0x0)

507.139376ms ago: executing program 7 (id=1299):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x0) (async)
r2 = add_key$user(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), 0xc9, 0xfffffffffffffffd) (async)
r3 = add_key$user(&(0x7f00000002c0), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f00000004c0)="6c77912a4937bbd966c21c91e62330a75d5d7d721ddef2003b714a417436c96ec0035fd27fa6dc13d40f4738f298512e57c29bafe93fe449355db87b3a6b682d039a0e6a879bf5ae72c23c8c263a1b", 0x4f, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r2, r3, r3}, 0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={'sha384\x00'}}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$key(0xf, 0x3, 0x2) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
socket$netlink(0x10, 0x3, 0x4) (async)
syz_open_dev$vcsa(&(0x7f00000000c0), 0x1, 0x48042)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000940)="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", 0x13b}, {0x0}], 0x2)
r8 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
dup(0xffffffffffffffff)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0, @ANYRESOCT=r8, @ANYRES8=r5, @ANYRES8=r6, @ANYRESHEX=r7, @ANYRESOCT=r5], 0x128}, 0x4004010)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {<r11=>0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x40, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r12=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa8}, 0x101a3)
r13 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x183c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000400)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r13, 0x40605346, &(0x7f0000000540)={0x0, 0x0, {0x1, 0x0, 0xc00000, 0x2, 0x3}, 0x10000}) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x2, 0x0, r12, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0xc, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, r11, 0x0, 0x40}}}, &(0x7f0000000300))

451.30322ms ago: executing program 3 (id=1300):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000100000000000100000054000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050000007000600727200000c00070001000000110000000800080000000000080009"], 0x68}}, 0x0)

393.257735ms ago: executing program 8 (id=1301):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000500080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="04000100040001"], 0x460}}, 0x0)

330.196461ms ago: executing program 8 (id=1302):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x20000000, 0x5, 0x4})
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendto(r2, 0x0, 0x0, 0x1, 0x0, 0x0)
getsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f00000002c0))

286.165066ms ago: executing program 3 (id=1303):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r0, @ANYBLOB="050000000000000000000600000030000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050"], 0x8c}}, 0x0)

240.954437ms ago: executing program 7 (id=1304):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
futex_waitv(&(0x7f0000000000)=[{0x0, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r1, 0x1, 0x9, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080803034000000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c00010000000000000000001400000011000100"], 0xf0}, 0x1, 0x0, 0x100000000000000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31110000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e"], 0xf0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x28, 0x401, 0x0, 0x80, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x9810)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000600)={'syzkaller1\x00', 0xc201})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000016c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)={0x54, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @broadcast, @device_a, @initial, {0x6, 0x1}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1010, 0x3, 0x1, 0x0, {0x0, 0x1ffc, 0x0, 0x5d, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x8, 0x9}}, @void}}]}, 0x54}, 0x1, 0x0, 0x0, 0xe8e61a9a935b1344}, 0x28008004)
r11 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @broadcast})
write$tun(r6, &(0x7f0000000680)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x9e, 0x0, 0x1}]})
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@expire={0x100, 0x18, 0x200, 0x70bd25, 0x25dfdbfd, {{{@in=@multicast2, @in6=@local, 0x4e20, 0x9, 0x4e22, 0x6, 0x2, 0xa0, 0x20, 0x3c, 0x0, 0xee01}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d2, 0xff}, @in=@empty, {0x5, 0x4, 0x784, 0x4, 0x4ef, 0x1, 0x3, 0x24}, {0x10001, 0x28aedb4, 0x3c, 0x2}, {0x400, 0x6b7, 0x8}, 0x70bd29, 0x3506, 0xa, 0x1, 0x7}, 0x8}, [@sa_dir={0x5, 0x21, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x8004}, 0x4000810)

155.446331ms ago: executing program 8 (id=1305):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01007cbd700100000000030012005800018044000400200001000a00000500000000fe800000000000000000000000000010f8000000200002000a00000000000005ff020000000000000000000000000001000000000d0001007564703a73"], 0x6c}, 0x1, 0x300}, 0x8000)

116.638189ms ago: executing program 3 (id=1306):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x7}, 0x1c)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0xe5d2, 0x4000, 0x3, 0x2ca}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x647e, 0x80, 0x3, 0x366}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ec4, 0x800, 0x2, 0x1d3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4d38, 0xbc1, 0x1, 0x28b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x20, 0x2, 0x3d0}, <r1=>0xffffffffffffffff}], 0x4, &(0x7f0000001900)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x2, 0x76, 0x0, &(0x7f0000000900)=@buf_1k="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"}}, &(0x7f0000001980))
r2 = syz_ublk_setup_io_uring(0x5d90, &(0x7f0000000340)={0x0, 0x40da36, 0x10, 0x2, 0x177, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0xc, 0x0, 0x7fff, 0x1, &(0x7f00000001c0), 0xfffffc01, 0x0, 0x1, {0x3}})
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x5f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000640)={0x0, 0x1}, 0x8)

0s ago: executing program 8 (id=1307):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff)
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810)

kernel console output (not intermixed with test programs):

 device
[  279.111444][ T9109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'.
[  279.111837][ T9109] FAULT_INJECTION: forcing a failure.
[  279.111837][ T9109] name failslab, interval 1, probability 0, space 0, times 0
[  279.111861][ T9109] CPU: 1 UID: 0 PID: 9109 Comm: syz.0.998 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  279.111882][ T9109] Tainted: [L]=SOFTLOCKUP
[  279.111888][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  279.111899][ T9109] Call Trace:
[  279.111905][ T9109]  <TASK>
[  279.111912][ T9109]  dump_stack_lvl+0xe8/0x150
[  279.111939][ T9109]  should_fail_ex+0x3eb/0x540
[  279.111965][ T9109]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  279.111981][ T9109]  should_failslab+0xa8/0x100
[  279.112004][ T9109]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  279.112019][ T9109]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  279.112034][ T9109]  ? start_dirop+0x7b/0x90
[  279.112051][ T9109]  ? alloc_inode+0x6a/0x1b0
[  279.112065][ T9109]  ? alloc_inode+0x6a/0x1b0
[  279.112084][ T9109]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  279.112098][ T9109]  alloc_inode+0x6a/0x1b0
[  279.112115][ T9109]  new_inode+0x1f/0x170
[  279.112135][ T9109]  __debugfs_create_file+0xb8/0x400
[  279.112163][ T9109]  debugfs_create_file_unsafe+0x3a/0x50
[  279.112190][ T9109]  nbd_start_device+0x3bd/0xb30
[  279.112214][ T9109]  ? device_create_file+0xf4/0x1b0
[  279.112235][ T9109]  nbd_genl_connect+0x167d/0x1cd0
[  279.112261][ T9109]  ? __pfx_nbd_genl_connect+0x10/0x10
[  279.112281][ T9109]  ? rcu_is_watching+0x16/0xb0
[  279.112309][ T9109]  ? __kmalloc_noprof+0x387/0x710
[  279.112333][ T9109]  ? __nla_parse+0x40/0x60
[  279.112353][ T9109]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  279.112383][ T9109]  genl_family_rcv_msg_doit+0x233/0x340
[  279.112408][ T9109]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  279.112435][ T9109]  ? __lock_acquire+0x747/0x2de0
[  279.112461][ T9109]  genl_rcv_msg+0x614/0x7a0
[  279.112485][ T9109]  ? __pfx_genl_rcv_msg+0x10/0x10
[  279.112503][ T9109]  ? __pfx_nbd_genl_connect+0x10/0x10
[  279.112532][ T9109]  netlink_rcv_skb+0x226/0x4a0
[  279.112557][ T9109]  ? __pfx_genl_rcv_msg+0x10/0x10
[  279.112595][ T9109]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  279.112649][ T9109]  ? down_read+0x2b9/0x320
[  279.112684][ T9109]  genl_rcv+0x28/0x40
[  279.112709][ T9109]  netlink_unicast+0x8ef/0xa80
[  279.112780][ T9109]  netlink_sendmsg+0x7f0/0xb20
[  279.112825][ T9109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.112859][ T9109]  ? aa_sock_msg_perm+0x144/0x210
[  279.112885][ T9109]  ? apparmor_socket_sendmsg+0x18b/0x360
[  279.112906][ T9109]  ? __pfx_netlink_sendmsg+0x10/0x10
[  279.112929][ T9109]  sock_sendmsg_nosec+0x14e/0x190
[  279.112955][ T9109]  ____sys_sendmsg+0x54e/0x850
[  279.112978][ T9109]  ? __pfx_____sys_sendmsg+0x10/0x10
[  279.113003][ T9109]  ? import_iovec+0x73/0xa0
[  279.113029][ T9109]  ___sys_sendmsg+0x2a5/0x360
[  279.113045][ T9109]  ? __lock_acquire+0x747/0x2de0
[  279.113066][ T9109]  ? __pfx____sys_sendmsg+0x10/0x10
[  279.113113][ T9109]  ? __fget_files+0x3a2/0x420
[  279.113130][ T9109]  ? __fget_files+0x2a/0x420
[  279.113154][ T9109]  __x64_sys_sendmsg+0x1b1/0x290
[  279.113175][ T9109]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  279.113211][ T9109]  do_syscall_64+0x166/0x520
[  279.113230][ T9109]  ? trace_irq_disable+0x3b/0x140
[  279.113249][ T9109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.113265][ T9109]  ? clear_bhb_loop+0x70/0xc0
[  279.113284][ T9109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.113300][ T9109] RIP: 0033:0x7f2c0f99f559
[  279.113315][ T9109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  279.113334][ T9109] RSP: 002b:00007f2c0dbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  279.113351][ T9109] RAX: ffffffffffffffda RBX: 00007f2c0fc25fa0 RCX: 00007f2c0f99f559
[  279.113362][ T9109] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  279.113373][ T9109] RBP: 00007f2c0dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  279.113383][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  279.113392][ T9109] R13: 00007f2c0fc26038 R14: 00007f2c0fc25fa0 R15: 00007ffcb9033ef8
[  279.113418][ T9109]  </TASK>
[  279.148556][ T9109] debugfs: out of free dentries, can not create file 'timeout'
[  279.148867][ T9109] nbd3: detected capacity change from 0 to 125
[  279.153808][ T5636] block nbd3: Receive control failed (result -32)
[  279.177617][ T8026] block nbd3: Dead connection, failed to find a fallback
[  279.177681][ T8026] block nbd3: shutting down sockets
[  279.177782][ T8026] blk_print_req_error: 53 callbacks suppressed
[  279.177832][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.177904][ T8026] buffer_io_error: 69 callbacks suppressed
[  279.177934][ T8026] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.178319][ T8026] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.178397][ T8026] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.178721][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.178785][ T8026] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.179088][ T8026] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.179232][ T8026] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.179610][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.179681][ T8026] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.179956][ T8026] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.180027][ T8026] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.180805][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  279.180916][ T8026] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.180960][ T8026] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.181352][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.181416][ T8026] Buffer I/O error on dev nbd3, logical block 0, async page read
[  279.182557][ T8026] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  279.182629][ T8026] Buffer I/O error on dev nbd3, logical block 1, async page read
[  279.183461][ T8026] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2
[  279.188817][ T6512] ldm_validate_partition_table(): Disk read failed.
[  279.200811][ T6512] Dev nbd3: unable to read RDB block 0
[  279.229948][ T6512]  nbd3: unable to read partition table
[  279.291681][ T6512] ldm_validate_partition_table(): Disk read failed.
[  279.299624][ T6512] Dev nbd3: unable to read RDB block 0
[  279.309323][ T6512]  nbd3: unable to read partition table
[  280.052917][    T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  280.213509][    T9] usb 1-1: New USB device found: idVendor=0bda, idProduct=4014, bcdDevice=0.40
[  280.214627][    T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  280.216801][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.216827][    T9] usb 1-1: Product: syz
[  280.216844][    T9] usb 1-1: Manufacturer: syz
[  280.216859][    T9] usb 1-1: SerialNumber: syz
[  280.233587][ T5793] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  280.403884][ T5793] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  280.405509][ T5793] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  280.405567][ T5793] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  280.405612][ T5793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.535165][    T9] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[  280.536529][ T9111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  280.540091][    T9] snd-usb-audio 1-1:1.0: Interface 0 is not authorized for usage
[  280.547948][    T9] usbtest 1-1:1.1: Interface 1 is not authorized for usage
[  280.576034][    T9] usbtest 1-1:1.2: Interface 2 is not authorized for usage
[  280.590724][    T9] usb 1-1: USB disconnect, device number 71
[  280.616507][ T5793] usb 4-1: GET_CAPABILITIES returned 0
[  280.616541][ T5793] usbtmc 4-1:16.0: can't read capabilities
[  280.677295][ T9130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1002'.
[  280.876634][ T9141] netlink: 'syz.5.1007': attribute type 11 has an invalid length.
[  280.907720][ T1657] usb 4-1: USB disconnect, device number 66
[  281.107161][ T9147] jffs2: notice: (9147) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  281.238679][ T9153] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1013'.
[  281.320972][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1015'.
[  281.458756][ T9165] FAULT_INJECTION: forcing a failure.
[  281.458756][ T9165] name failslab, interval 1, probability 0, space 0, times 0
[  281.458802][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.5.1017 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  281.458835][ T9165] Tainted: [L]=SOFTLOCKUP
[  281.458844][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  281.458858][ T9165] Call Trace:
[  281.458866][ T9165]  <TASK>
[  281.458876][ T9165]  dump_stack_lvl+0xe8/0x150
[  281.458915][ T9165]  should_fail_ex+0x3eb/0x540
[  281.458953][ T9165]  should_failslab+0xa8/0x100
[  281.458984][ T9165]  ? do_getname+0x2e/0x250
[  281.459021][ T9165]  kmem_cache_alloc_noprof+0x9c/0x600
[  281.459044][ T9165]  ? do_futex+0x3e7/0x4e0
[  281.459078][ T9165]  ? do_getname+0x2e/0x250
[  281.459120][ T9165]  do_getname+0x2e/0x250
[  281.459153][ T9165]  ? getname_flags+0x11/0x20
[  281.459190][ T9165]  do_sys_openat2+0xce/0x200
[  281.459229][ T9165]  ? __se_sys_futex+0x3a8/0x450
[  281.459263][ T9165]  ? __pfx_do_sys_openat2+0x10/0x10
[  281.459304][ T9165]  ? rcu_is_watching+0x16/0xb0
[  281.459340][ T9165]  __x64_sys_openat+0x138/0x170
[  281.459369][ T9165]  do_syscall_64+0x166/0x520
[  281.459397][ T9165]  ? trace_irq_disable+0x3b/0x140
[  281.459426][ T9165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.459450][ T9165]  ? clear_bhb_loop+0x70/0xc0
[  281.459480][ T9165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.459503][ T9165] RIP: 0033:0x7f7cd599f559
[  281.459524][ T9165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  281.459545][ T9165] RSP: 002b:00007f7cd68be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  281.459569][ T9165] RAX: ffffffffffffffda RBX: 00007f7cd5c26090 RCX: 00007f7cd599f559
[  281.459587][ T9165] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  281.459603][ T9165] RBP: 00007f7cd5a36b20 R08: 0000000000000000 R09: 0000000000000000
[  281.459617][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  281.459631][ T9165] R13: 00007f7cd5c26128 R14: 00007f7cd5c26090 R15: 00007ffeffe4bd08
[  281.459668][ T9165]  </TASK>
[  281.570000][ T9166] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1017'.
[  281.724577][ T5719] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  281.894474][ T5719] usb 1-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  281.895797][ T5719] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  281.895825][ T5719] usb 1-1: config 0 has no interface number 0
[  281.895870][ T5719] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  281.898686][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.898716][ T5719] usb 1-1: Product: syz
[  281.898734][ T5719] usb 1-1: Manufacturer: syz
[  281.898751][ T5719] usb 1-1: SerialNumber: syz
[  281.908466][ T5719] usb 1-1: config 0 descriptor??
[  281.944629][ T5719] usbtest 1-1:0.50: Interface 50 is not authorized for usage
[  281.949295][ T5719] yurex 1-1:0.50: Interface 50 is not authorized for usage
[  282.138843][ T5793] usb 1-1: USB disconnect, device number 72
[  282.513926][ T5719] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  282.683281][ T5719] usb 6-1: Using ep0 maxpacket: 32
[  282.683972][ T5719] usb 6-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  282.685070][ T5719] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.687373][ T5719] usb 6-1: config 0 descriptor??
[  282.691923][ T5719] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  282.933043][ T1657] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  283.093957][ T1657] usb 4-1: Using ep0 maxpacket: 32
[  283.095027][ T1657] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  283.096495][ T1657] usb 4-1: unable to read config index 0 descriptor/start: -61
[  283.096540][ T1657] usb 4-1: can't read configurations, error -61
[  283.232864][ T1657] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  283.382830][ T1657] usb 4-1: Using ep0 maxpacket: 32
[  283.383445][ T1657] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  283.385548][ T1657] usb 4-1: unable to read config index 0 descriptor/start: -61
[  283.385575][ T1657] usb 4-1: can't read configurations, error -61
[  283.385999][ T1657] usb usb4-port1: attempt power cycle
[  283.722823][ T1657] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  283.743792][ T1657] usb 4-1: Using ep0 maxpacket: 32
[  283.744524][ T1657] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  283.746580][ T1657] usb 4-1: unable to read config index 0 descriptor/start: -61
[  283.746618][ T1657] usb 4-1: can't read configurations, error -61
[  283.868210][ T9199] FAULT_INJECTION: forcing a failure.
[  283.868210][ T9199] name failslab, interval 1, probability 0, space 0, times 0
[  283.868261][ T9199] CPU: 0 UID: 0 PID: 9199 Comm: syz.0.1030 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  283.868291][ T9199] Tainted: [L]=SOFTLOCKUP
[  283.868300][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  283.868313][ T9199] Call Trace:
[  283.868328][ T9199]  <TASK>
[  283.868336][ T9199]  dump_stack_lvl+0xe8/0x150
[  283.868365][ T9199]  should_fail_ex+0x3eb/0x540
[  283.868415][ T9199]  should_failslab+0xa8/0x100
[  283.868448][ T9199]  __kmalloc_cache_noprof+0x9e/0x600
[  283.868474][ T9199]  ? __kmalloc_cache_noprof+0x148/0x600
[  283.868498][ T9199]  ? ip_mc_add_src+0x82e/0x1170
[  283.868528][ T9199]  ? ip_mc_add_src+0x82e/0x1170
[  283.868569][ T9199]  ip_mc_add_src+0x82e/0x1170
[  283.868617][ T9199]  ip_mc_msfilter+0x5aa/0xb00
[  283.868661][ T9199]  set_mcast_msfilter+0x270/0x370
[  283.868719][ T9199]  ip_set_mcast_msfilter+0x2f8/0x400
[  283.868755][ T9199]  do_ip_setsockopt+0x196e/0x2e30
[  283.868796][ T9199]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  283.868816][ T9199]  ? do_futex+0x3e7/0x4e0
[  283.868839][ T9199]  ? __asan_memcpy+0x40/0x70
[  283.868883][ T9199]  ? lock_acquire+0x115/0x350
[  283.868919][ T9199]  ? aa_sock_opt_perm+0xe8/0x1e0
[  283.868958][ T9199]  ip_setsockopt+0x66/0x110
[  283.868978][ T9199]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  283.869021][ T9199]  do_sock_setsockopt+0x17c/0x1b0
[  283.869061][ T9199]  __x64_sys_setsockopt+0x13d/0x1b0
[  283.869091][ T9199]  do_syscall_64+0x166/0x520
[  283.869121][ T9199]  ? trace_irq_disable+0x3b/0x140
[  283.869141][ T9199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.869158][ T9199]  ? clear_bhb_loop+0x70/0xc0
[  283.869201][ T9199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.869224][ T9199] RIP: 0033:0x7f2c0f99f559
[  283.869244][ T9199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.869268][ T9199] RSP: 002b:00007f2c0dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  283.869285][ T9199] RAX: ffffffffffffffda RBX: 00007f2c0fc25fa0 RCX: 00007f2c0f99f559
[  283.869297][ T9199] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004
[  283.869307][ T9199] RBP: 00007f2c0fa36b20 R08: 0000000000000310 R09: 0000000000000000
[  283.869332][ T9199] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  283.869348][ T9199] R13: 00007f2c0fc26038 R14: 00007f2c0fc25fa0 R15: 00007ffcb9033ef8
[  283.869385][ T9199]  </TASK>
[  283.874998][ T1657] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  283.903152][ T1657] usb 4-1: Using ep0 maxpacket: 32
[  283.909410][ T1657] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  283.913830][ T1657] usb 4-1: unable to read config index 0 descriptor/start: -61
[  283.913985][ T1657] usb 4-1: can't read configurations, error -61
[  283.915602][ T1657] usb usb4-port1: unable to enumerate USB device
[  284.036200][ T9176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.045718][ T9176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.469261][ T5719] gspca_vc032x: reg_w err -71
[  284.469278][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469286][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469293][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469300][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469307][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469313][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469320][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469327][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469333][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469340][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469346][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469353][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469360][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469366][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469373][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469379][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469386][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469392][ T5719] gspca_vc032x: I2c Bus Busy Wait 00
[  284.469399][ T5719] gspca_vc032x: Unknown sensor...
[  284.469449][ T5719] vc032x 6-1:0.0: probe with driver vc032x failed with error -22
[  284.472148][ T5719] usb 6-1: USB disconnect, device number 23
[  284.504747][ T1657] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  284.652865][ T1657] usb 1-1: device descriptor read/64, error -71
[  284.893447][ T1657] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  285.022849][ T1657] usb 1-1: device descriptor read/64, error -71
[  285.136042][ T1657] usb usb1-port1: attempt power cycle
[  285.174724][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1035'.
[  285.374720][ T1708] block nbd2: Possible stuck request ffff8880290ae000: control (read@0,4096B). Runtime 150 seconds
[  285.374793][ T8026] block nbd11: Possible stuck request ffff888029460000: control (read@0,4096B). Runtime 90 seconds
[  285.472798][ T1657] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  285.493534][ T1657] usb 1-1: device descriptor read/8, error -71
[  285.732882][ T1657] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  285.753652][ T1657] usb 1-1: device descriptor read/8, error -71
[  285.863276][ T1657] usb usb1-port1: unable to enumerate USB device
[  286.013134][ T8026] block nbd6: Possible stuck request ffff888029295080: control (read@0,2048B). Runtime 120 seconds
[  286.013170][ T8026] block nbd6: Possible stuck request ffff888029295240: control (read@2048,2048B). Runtime 120 seconds
[  286.042907][ T5793] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  286.062797][   T10] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  286.212823][ T5793] usb 6-1: Using ep0 maxpacket: 8
[  286.212970][   T10] usb 4-1: Using ep0 maxpacket: 8
[  286.213799][ T5793] usb 6-1: New USB device found: idVendor=0870, idProduct=0001, bcdDevice=57.f6
[  286.214475][   T10] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  286.215863][   T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  286.215915][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.215949][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.215976][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.216001][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.216046][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.218260][ T5793] usb 6-1: config 2 has an invalid interface number: 59 but max is 0
[  286.218278][ T5793] usb 6-1: config 2 has no interface number 0
[  286.218299][ T5793] usb 6-1: config 2 interface 59 has no altsetting 0
[  286.222036][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.222139][ T5793] usb 6-1: Product: syz
[  286.222156][ T5793] usb 6-1: Manufacturer: syz
[  286.222172][ T5793] usb 6-1: SerialNumber: syz
[  286.437348][   T10] usb 4-1: usb_control_msg returned -32
[  286.437427][   T10] usbtmc 4-1:16.0: can't read capabilities
[  286.446000][ T9218] block nbd4: Unsupported socket: should be TCP or UNIX.
[  286.504816][ T5793] usb 6-1: USB disconnect, device number 24
[  287.013403][ T1657] usb 4-1: USB disconnect, device number 71
[  287.483389][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1044'.
[  287.824744][ T5719] usb 1-1: new low-speed USB device number 77 using dummy_hcd
[  287.888313][ T9240] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1047'.
[  287.982786][ T5719] usb 1-1: Invalid ep0 maxpacket: 64
[  288.027194][ T9245] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1048'.
[  288.112945][ T5719] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  288.262782][ T5719] usb 1-1: Invalid ep0 maxpacket: 64
[  288.263226][ T5719] usb usb1-port1: attempt power cycle
[  288.290246][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1051'.
[  288.385217][ T9263] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  288.433401][ T9266] overlayfs: failed lookup in lower (newroot/104, name='file0', err=-40): overlapping layers
[  288.445324][ T9262] overlayfs: failed lookup in lower (newroot/104, name='file0', err=-40): overlapping layers
[  288.446839][ T9262] FAULT_INJECTION: forcing a failure.
[  288.446839][ T9262] name failslab, interval 1, probability 0, space 0, times 0
[  288.446875][ T9262] CPU: 1 UID: 0 PID: 9262 Comm: syz.5.1053 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  288.446905][ T9262] Tainted: [L]=SOFTLOCKUP
[  288.446914][ T9262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  288.446928][ T9262] Call Trace:
[  288.446938][ T9262]  <TASK>
[  288.446948][ T9262]  dump_stack_lvl+0xe8/0x150
[  288.446988][ T9262]  should_fail_ex+0x3eb/0x540
[  288.447025][ T9262]  should_failslab+0xa8/0x100
[  288.447055][ T9262]  ? prepare_creds+0x30/0x820
[  288.447084][ T9262]  kmem_cache_alloc_noprof+0x9c/0x600
[  288.447110][ T9262]  ? prepare_creds+0x30/0x820
[  288.447142][ T9262]  prepare_creds+0x30/0x820
[  288.447173][ T9262]  ovl_override_creator_creds+0x106/0x2e0
[  288.447211][ T9262]  ovl_create_or_link+0x127/0x240
[  288.447243][ T9262]  ovl_create_object+0x29d/0x3b0
[  288.447275][ T9262]  ? __pfx_ovl_create_object+0x10/0x10
[  288.447301][ T9262]  ? common_perm_create+0x319/0x3d0
[  288.447345][ T9262]  ovl_mkdir+0x34/0x50
[  288.447371][ T9262]  vfs_mkdir+0x40e/0x630
[  288.447411][ T9262]  filename_mkdirat+0x285/0x510
[  288.447440][ T9262]  ? __might_fault+0xaf/0x130
[  288.447479][ T9262]  ? __pfx_filename_mkdirat+0x10/0x10
[  288.447514][ T9262]  ? do_getname+0x151/0x250
[  288.447553][ T9262]  __se_sys_mkdirat+0x35/0x150
[  288.447588][ T9262]  do_syscall_64+0x166/0x520
[  288.447617][ T9262]  ? trace_irq_disable+0x3b/0x140
[  288.447644][ T9262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.447668][ T9262]  ? clear_bhb_loop+0x70/0xc0
[  288.447704][ T9262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.447727][ T9262] RIP: 0033:0x7f7cd599f559
[  288.447750][ T9262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.447770][ T9262] RSP: 002b:00007f7cd68df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  288.447795][ T9262] RAX: ffffffffffffffda RBX: 00007f7cd5c25fa0 RCX: 00007f7cd599f559
[  288.447812][ T9262] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c
[  288.447828][ T9262] RBP: 00007f7cd5a36b20 R08: 0000000000000000 R09: 0000000000000000
[  288.447843][ T9262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.447857][ T9262] R13: 00007f7cd5c26038 R14: 00007f7cd5c25fa0 R15: 00007ffeffe4bd08
[  288.447896][ T9262]  </TASK>
[  288.623661][ T5719] usb 1-1: new low-speed USB device number 79 using dummy_hcd
[  288.676274][ T5719] usb 1-1: Invalid ep0 maxpacket: 64
[  288.744317][ T9268] loop3: detected capacity change from 0 to 2640
[  288.744373][ T7711] overlayfs: failed lookup in lower (newroot/104, name='bus', err=-40): overlapping layers
[  288.744572][ T7711] overlayfs: failed lookup in lower (newroot/104, name='bus', err=-40): overlapping layers
[  288.805046][ T9268] Invalid logical block size (62561)
[  288.838658][ T5719] usb 1-1: new low-speed USB device number 80 using dummy_hcd
[  288.870745][ T5719] usb 1-1: Invalid ep0 maxpacket: 64
[  288.871484][ T5719] usb usb1-port1: unable to enumerate USB device
[  288.893730][ T6512] buffer_io_error: 64 callbacks suppressed
[  288.893753][ T6512] Buffer I/O error on dev loop3, logical block 0, async page read
[  288.894337][ T6512] Buffer I/O error on dev loop3, logical block 0, async page read
[  288.894902][ T6512] Buffer I/O error on dev loop3, logical block 0, async page read
[  288.895429][ T6512] Buffer I/O error on dev loop3, logical block 0, async page read
[  288.896042][ T6512] Buffer I/O error on dev loop3, logical block 0, async page read
[  289.110983][ T9272] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  289.240926][   T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.399649][ T9272] 
@0�: renamed from bond_slave_1 (while UP)
[  289.599919][   T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.761090][   T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.776440][ T5652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  289.789834][ T5652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  289.801389][ T5652] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  289.811605][ T5652] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  289.821186][ T5652] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  289.925883][   T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.211347][   T52] bridge_slave_1: left allmulticast mode
[  290.211397][   T52] bridge_slave_1: left promiscuous mode
[  290.213229][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.264841][   T52] bridge_slave_0: left allmulticast mode
[  290.264871][   T52] bridge_slave_0: left promiscuous mode
[  290.280937][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.431221][ T9303] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1063'.
[  290.507522][   T27] block nbd0: Possible stuck request ffff888028fe4b40: control (read@0,4096B). Runtime 30 seconds
[  290.823456][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  290.828545][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.831335][   T52] bond0 (unregistering): Released all slaves
[  290.959065][   T52] tipc: Disabling bearer <udp:s>
[  290.959971][   T52] tipc: Left network mode
[  291.271064][ T9339] openvswitch: netlink: Missing key (keys=c0, expected=100)
[  291.362993][   T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  291.461733][ T9290] rxe_eth0 speed is unknown, defaulting to 1000
[  291.523980][   T10] usb 1-1: New USB device found: idVendor=06b9, idProduct=4061, bcdDevice=1.00
[  291.525173][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.525240][   T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64
[  291.525269][   T10] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.527702][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.527728][   T10] usb 1-1: Product: syz
[  291.527744][   T10] usb 1-1: Manufacturer: syz
[  291.527761][   T10] usb 1-1: SerialNumber: syz
[  291.609172][   T10] usbtest 1-1:1.0: Interface 0 is not authorized for usage
[  291.609721][   T10] speedtch 1-1:1.0: Interface 0 is not authorized for usage
[  291.630910][   T10] usbtest 1-1:1.1: Interface 1 is not authorized for usage
[  291.643864][   T10] speedtch 1-1:1.1: Interface 1 is not authorized for usage
[  291.775864][   T27] block nbd14: Possible stuck request ffff888029527000: control (read@0,2048B). Runtime 60 seconds
[  291.775913][   T27] block nbd14: Possible stuck request ffff88802952e000: control (read@2048,2048B). Runtime 60 seconds
[  291.819046][ T8026] block nbd1: Possible stuck request ffff888029045080: control (read@0,4096B). Runtime 180 seconds
[  291.933669][ T5636] Bluetooth: hci5: command tx timeout
[  291.967433][   T52] hsr_slave_0: left promiscuous mode
[  291.968283][   T52] hsr_slave_1: left promiscuous mode
[  291.969638][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.969677][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.971040][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.971061][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.042035][   T52] veth1_macvtap: left promiscuous mode
[  292.042099][   T52] veth0_macvtap: left promiscuous mode
[  292.042312][   T52] veth1_vlan: left promiscuous mode
[  292.042414][   T52] veth0_vlan: left promiscuous mode
[  292.485967][   T52] team0 (unregistering): Port device team_slave_1 removed
[  292.507147][   T52] team0 (unregistering): Port device team_slave_0 removed
[  292.700346][ T5301] 8021q: adding VLAN 0 to HW filter on device eth1
[  292.814278][ T9370] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.181898][   T52] IPVS: stop unused estimator thread 0...
[  293.300989][ T9387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1075'.
[  293.485483][ T9398] ubi0: attaching mtd0
[  293.501289][ T9290] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.501519][ T9290] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.501686][ T9290] bridge_slave_0: entered allmulticast mode
[  293.526574][ T9290] bridge_slave_0: entered promiscuous mode
[  293.539347][ T9290] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.539582][ T9290] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.539729][ T9290] bridge_slave_1: entered allmulticast mode
[  293.541543][ T9290] bridge_slave_1: entered promiscuous mode
[  293.578943][ T9398] ubi0: scanning is finished
[  293.579108][ T9398] ubi0 error: ubi_read_volume_table: the layout volume was not found
[  293.640718][ T9290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.656651][ T9290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.706306][ T9290] team0: Port device team_slave_0 added
[  293.709429][ T9290] team0: Port device team_slave_1 added
[  293.733711][ T5743] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  293.763889][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.763906][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.763930][ T9290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  293.765837][ T9290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  293.765855][ T9290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.765883][ T9290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  293.902768][ T5743] usb 4-1: Using ep0 maxpacket: 32
[  293.903641][ T5743] usb 4-1: New USB device found: idVendor=16c0, idProduct=05df, bcdDevice=7d.bd
[  293.904787][ T5743] usb 4-1: config 3 has an invalid interface number: 160 but max is 0
[  293.904815][ T5743] usb 4-1: config 3 has no interface number 0
[  293.904857][ T5743] usb 4-1: config 3 interface 160 altsetting 3 bulk endpoint 0xF has invalid maxpacket 16
[  293.904885][ T5743] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  293.904912][ T5743] usb 4-1: config 3 interface 160 altsetting 3 endpoint 0x8F has invalid wMaxPacketSize 0
[  293.904937][ T5743] usb 4-1: config 3 interface 160 has no altsetting 0
[  293.907791][ T5743] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.907821][ T5743] usb 4-1: Product: syz
[  293.907840][ T5743] usb 4-1: Manufacturer: syz
[  293.907857][ T5743] usb 4-1: SerialNumber: syz
[  293.922519][ T9400] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  294.013637][ T5636] Bluetooth: hci5: command tx timeout
[  294.041305][ T9405] nbd: must specify an index to disconnect
[  294.088100][ T9398] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  294.123569][ T9290] hsr_slave_0: entered promiscuous mode
[  294.126624][ T9290] hsr_slave_1: entered promiscuous mode
[  294.129208][ T9290] debugfs: 'hsr0' already exists in 'hsr'
[  294.129233][ T9290] Cannot create hsr debugfs directory
[  294.133903][ T5301] 8021q: adding VLAN 0 to HW filter on device eth2
[  294.171203][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.209229][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.259676][ T5743] usb 4-1: USB disconnect, device number 72
[  294.408279][   T32] audit: type=1400 audit(2000000107.180:17): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=9407 comm="syz.4.1079"
[  294.697034][ T9290] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  294.709902][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  294.718946][ T9290] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  294.753294][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  294.754185][ T9290] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  294.787019][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  294.788071][ T5719] usb 1-1: USB disconnect, device number 81
[  294.824215][ T9290] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  294.860381][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  294.979330][ T8026] block nbd7: Possible stuck request ffff888029305080: control (read@0,2048B). Runtime 120 seconds
[  295.085098][ T9290] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.115483][ T9290] 8021q: adding VLAN 0 to HW filter on device team0
[  295.140830][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.140945][ T8342] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.150385][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'.
[  295.190622][ T8354] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.190738][ T8354] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.304562][ T9443] nbd: must specify an index to disconnect
[  295.345281][ T5301] 8021q: adding VLAN 0 to HW filter on device eth3
[  295.444688][ T9447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  295.534342][ T9451] FAULT_INJECTION: forcing a failure.
[  295.534342][ T9451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.534382][ T9451] CPU: 0 UID: 0 PID: 9451 Comm: syz.3.1088 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  295.534416][ T9451] Tainted: [L]=SOFTLOCKUP
[  295.534425][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  295.534440][ T9451] Call Trace:
[  295.534450][ T9451]  <TASK>
[  295.534459][ T9451]  dump_stack_lvl+0xe8/0x150
[  295.534500][ T9451]  should_fail_ex+0x3eb/0x540
[  295.534539][ T9451]  strncpy_from_user+0x36/0x2c0
[  295.534575][ T9451]  do_getname+0x77/0x250
[  295.534615][ T9451]  do_sys_openat2+0xce/0x200
[  295.534651][ T9451]  ? __se_sys_futex+0x3a8/0x450
[  295.534686][ T9451]  ? __pfx_do_sys_openat2+0x10/0x10
[  295.534728][ T9451]  ? rcu_is_watching+0x16/0xb0
[  295.534767][ T9451]  __x64_sys_openat+0x138/0x170
[  295.534795][ T9451]  do_syscall_64+0x166/0x520
[  295.534824][ T9451]  ? trace_irq_disable+0x3b/0x140
[  295.534852][ T9451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.534876][ T9451]  ? clear_bhb_loop+0x70/0xc0
[  295.534905][ T9451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.534928][ T9451] RIP: 0033:0x7f7cab19f559
[  295.534950][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.534971][ T9451] RSP: 002b:00007f7cabfd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  295.534996][ T9451] RAX: ffffffffffffffda RBX: 00007f7cab425fa0 RCX: 00007f7cab19f559
[  295.535014][ T9451] RDX: 0000000000040800 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  295.535032][ T9451] RBP: 00007f7cab236b20 R08: 0000000000000000 R09: 0000000000000000
[  295.535047][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  295.535061][ T9451] R13: 00007f7cab426038 R14: 00007f7cab425fa0 R15: 00007fffb4091748
[  295.535097][ T9451]  </TASK>
[  296.013488][ T5793] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  296.093367][ T5636] Bluetooth: hci5: command tx timeout
[  296.168939][ T5793] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.170244][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  296.170274][ T5793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  296.210207][ T5793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.210249][ T5793] usb 4-1: Product: syz
[  296.210266][ T5793] usb 4-1: Manufacturer: syz
[  296.210283][ T5793] usb 4-1: SerialNumber: syz
[  296.236904][ T5793] usb 4-1: config 0 descriptor??
[  296.270220][ T5793] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  296.355494][ T9481] futex_wake_op: syz.0.1092 tries to shift op by 144; fix this program
[  296.434603][ T5301] 8021q: adding VLAN 0 to HW filter on device eth4
[  296.464555][ T9477] syzkaller1: entered promiscuous mode
[  296.464582][ T9477] syzkaller1: entered allmulticast mode
[  296.553631][ T9290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  296.751248][ T5793] usb 4-1: USB disconnect, device number 73
[  296.854509][ T6510] udevd[6510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  297.136843][ T9501] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  297.185024][ T9503] nbd: must specify an index to disconnect
[  297.245646][ T9290] veth0_vlan: entered promiscuous mode
[  297.265513][ T9290] veth1_vlan: entered promiscuous mode
[  297.312420][ T9290] veth0_macvtap: entered promiscuous mode
[  297.330117][ T9290] veth1_macvtap: entered promiscuous mode
[  297.359897][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  297.396286][ T9290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  297.445765][   T52] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  297.445851][   T52] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.445886][   T52] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.445918][   T52] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.595856][ T9513] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1100'.
[  297.597541][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.597576][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.604707][    T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  297.721789][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.721815][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.776217][    T9] usb 1-1: Using ep0 maxpacket: 16
[  297.777208][    T9] usb 1-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00
[  297.778729][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  297.778774][    T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.778801][    T9] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.778826][    T9] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  297.778854][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  297.778888][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.792012][    T9] usb 1-1: config 0 descriptor??
[  297.809193][    T9] usbtest 1-1:0.0: Interface 0 is not authorized for usage
[  297.820782][    T9] usbhid 1-1:0.0: Interface 0 is not authorized for usage
[  297.956813][ T9524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'.
[  298.092566][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1106'.
[  298.093715][ T9531] nbd4: detected capacity change from 0 to 125
[  298.102246][ T5636] block nbd4: Receive control failed (result -104)
[  298.167557][ T9533] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1107'.
[  298.173458][ T5636] Bluetooth: hci5: command tx timeout
[  298.197137][   T32] audit: type=1326 audit(2000000110.970:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.4.1107" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd05079f559 code=0x0
[  298.628935][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1108'.
[  298.629578][ T9544] FAULT_INJECTION: forcing a failure.
[  298.629578][ T9544] name failslab, interval 1, probability 0, space 0, times 0
[  298.629611][ T9544] CPU: 1 UID: 0 PID: 9544 Comm: syz.6.1108 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  298.629642][ T9544] Tainted: [L]=SOFTLOCKUP
[  298.629651][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  298.629673][ T9544] Call Trace:
[  298.629683][ T9544]  <TASK>
[  298.629693][ T9544]  dump_stack_lvl+0xe8/0x150
[  298.629731][ T9544]  should_fail_ex+0x3eb/0x540
[  298.629770][ T9544]  should_failslab+0xa8/0x100
[  298.629804][ T9544]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  298.629831][ T9544]  ? __d_alloc+0x37/0x820
[  298.629861][ T9544]  ? __d_alloc+0x37/0x820
[  298.629894][ T9544]  __d_alloc+0x37/0x820
[  298.629926][ T9544]  d_alloc+0x4b/0x190
[  298.629950][ T9544]  ? lookup_one_qstr_excl+0xc4/0x360
[  298.629981][ T9544]  lookup_one_qstr_excl+0xd8/0x360
[  298.630009][ T9544]  ? lookup_noperm_common+0x245/0x430
[  298.630038][ T9544]  start_dirop+0x5c/0x90
[  298.630063][ T9544]  simple_start_creating+0xcc/0x110
[  298.630093][ T9544]  ? __pfx_simple_start_creating+0x10/0x10
[  298.630136][ T9544]  debugfs_start_creating+0xca/0x1b0
[  298.630161][ T9544]  __debugfs_create_file+0x6f/0x400
[  298.630202][ T9544]  debugfs_create_file_unsafe+0x3a/0x50
[  298.630242][ T9544]  nbd_start_device+0x3bd/0xb30
[  298.630278][ T9544]  ? device_create_file+0xf4/0x1b0
[  298.630307][ T9544]  nbd_genl_connect+0x167d/0x1cd0
[  298.630345][ T9544]  ? __pfx_nbd_genl_connect+0x10/0x10
[  298.630376][ T9544]  ? rcu_is_watching+0x16/0xb0
[  298.630416][ T9544]  ? __kmalloc_noprof+0x387/0x710
[  298.630443][ T9544]  ? __nla_parse+0x40/0x60
[  298.630471][ T9544]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  298.630509][ T9544]  genl_family_rcv_msg_doit+0x233/0x340
[  298.630545][ T9544]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  298.630585][ T9544]  ? __lock_acquire+0x747/0x2de0
[  298.630622][ T9544]  genl_rcv_msg+0x614/0x7a0
[  298.630662][ T9544]  ? __pfx_genl_rcv_msg+0x10/0x10
[  298.630689][ T9544]  ? __pfx_nbd_genl_connect+0x10/0x10
[  298.630733][ T9544]  netlink_rcv_skb+0x226/0x4a0
[  298.630768][ T9544]  ? __pfx_genl_rcv_msg+0x10/0x10
[  298.630796][ T9544]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  298.630848][ T9544]  ? down_read+0x2b9/0x320
[  298.630885][ T9544]  genl_rcv+0x28/0x40
[  298.630908][ T9544]  netlink_unicast+0x8ef/0xa80
[  298.630960][ T9544]  netlink_sendmsg+0x7f0/0xb20
[  298.631001][ T9544]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.631040][ T9544]  ? aa_sock_msg_perm+0x144/0x210
[  298.631077][ T9544]  ? apparmor_socket_sendmsg+0x18b/0x360
[  298.631107][ T9544]  ? __pfx_netlink_sendmsg+0x10/0x10
[  298.631140][ T9544]  sock_sendmsg_nosec+0x14e/0x190
[  298.631176][ T9544]  ____sys_sendmsg+0x54e/0x850
[  298.631210][ T9544]  ? __pfx_____sys_sendmsg+0x10/0x10
[  298.631248][ T9544]  ? import_iovec+0x73/0xa0
[  298.631284][ T9544]  ___sys_sendmsg+0x2a5/0x360
[  298.631308][ T9544]  ? __lock_acquire+0x747/0x2de0
[  298.631339][ T9544]  ? __pfx____sys_sendmsg+0x10/0x10
[  298.631409][ T9544]  ? __fget_files+0x3a2/0x420
[  298.631433][ T9544]  ? __fget_files+0x2a/0x420
[  298.631469][ T9544]  __x64_sys_sendmsg+0x1b1/0x290
[  298.631499][ T9544]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  298.631551][ T9544]  do_syscall_64+0x166/0x520
[  298.631578][ T9544]  ? trace_irq_disable+0x3b/0x140
[  298.631606][ T9544]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.631630][ T9544]  ? clear_bhb_loop+0x70/0xc0
[  298.631663][ T9544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  298.631686][ T9544] RIP: 0033:0x7f2a1679f559
[  298.631707][ T9544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  298.631727][ T9544] RSP: 002b:00007f2a1762c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  298.631752][ T9544] RAX: ffffffffffffffda RBX: 00007f2a16a25fa0 RCX: 00007f2a1679f559
[  298.631769][ T9544] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  298.631785][ T9544] RBP: 00007f2a1762c090 R08: 0000000000000000 R09: 0000000000000000
[  298.631800][ T9544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  298.631814][ T9544] R13: 00007f2a16a26038 R14: 00007f2a16a25fa0 R15: 00007fff535d3958
[  298.631853][ T9544]  </TASK>
[  298.644041][ T9544] nbd5: detected capacity change from 0 to 125
[  298.714179][ T5636] block nbd5: Receive control failed (result -104)
[  299.121431][ T9550] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1110'.
[  299.642770][   T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  299.779289][ T9574] IPVS: set_ctl: invalid protocol: 22 10.1.1.0:20001
[  299.780572][ T9574] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1118'.
[  299.804021][   T10] usb 7-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  299.805125][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  299.805156][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  299.805184][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  299.807127][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.807146][   T10] usb 7-1: Product: syz
[  299.807157][   T10] usb 7-1: Manufacturer: syz
[  299.807168][   T10] usb 7-1: SerialNumber: syz
[  299.809676][   T10] usb 7-1: config 0 descriptor??
[  300.116978][ T9578] 9p: Unknown Cache mode or invalid value f
[  300.349285][ T9586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'.
[  300.349312][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1124'.
[  300.357576][    T9] usb 1-1: USB disconnect, device number 82
[  300.529719][ T9592] snd_dummy snd_dummy.0: control 1:5:99:syz1:6 is already present
[  300.696983][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1129'.
[  300.697122][ T9597] netlink: 'syz.3.1129': attribute type 1 has an invalid length.
[  302.389101][   T10] adutux 7-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  302.399745][   T10] usb 7-1: USB disconnect, device number 2
[  302.460485][ T9617] FAULT_INJECTION: forcing a failure.
[  302.460485][ T9617] name failslab, interval 1, probability 0, space 0, times 0
[  302.460513][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.6.1137 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  302.460535][ T9617] Tainted: [L]=SOFTLOCKUP
[  302.460542][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  302.460552][ T9617] Call Trace:
[  302.460558][ T9617]  <TASK>
[  302.460565][ T9617]  dump_stack_lvl+0xe8/0x150
[  302.460594][ T9617]  should_fail_ex+0x3eb/0x540
[  302.460622][ T9617]  should_failslab+0xa8/0x100
[  302.460648][ T9617]  __kmalloc_cache_noprof+0x9e/0x600
[  302.460667][ T9617]  ? __kmalloc_cache_noprof+0x148/0x600
[  302.460683][ T9617]  ? ip_mc_add_src+0x82e/0x1170
[  302.460705][ T9617]  ? ip_mc_add_src+0x82e/0x1170
[  302.460733][ T9617]  ip_mc_add_src+0x82e/0x1170
[  302.460766][ T9617]  ip_mc_msfilter+0x5aa/0xb00
[  302.460798][ T9617]  set_mcast_msfilter+0x270/0x370
[  302.460825][ T9617]  ip_set_mcast_msfilter+0x2f8/0x400
[  302.460850][ T9617]  do_ip_setsockopt+0x196e/0x2e30
[  302.460876][ T9617]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  302.460895][ T9617]  ? do_futex+0x3e7/0x4e0
[  302.460918][ T9617]  ? __asan_memcpy+0x40/0x70
[  302.460940][ T9617]  ? lock_acquire+0x115/0x350
[  302.460966][ T9617]  ? aa_sock_opt_perm+0xe8/0x1e0
[  302.460993][ T9617]  ip_setsockopt+0x66/0x110
[  302.461012][ T9617]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  302.461039][ T9617]  do_sock_setsockopt+0x17c/0x1b0
[  302.461061][ T9617]  __x64_sys_setsockopt+0x13d/0x1b0
[  302.461083][ T9617]  do_syscall_64+0x166/0x520
[  302.461103][ T9617]  ? trace_irq_disable+0x3b/0x140
[  302.461123][ T9617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.461145][ T9617]  ? clear_bhb_loop+0x70/0xc0
[  302.461165][ T9617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.461181][ T9617] RIP: 0033:0x7f2a1679f559
[  302.461196][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  302.461210][ T9617] RSP: 002b:00007f2a1762c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  302.461228][ T9617] RAX: ffffffffffffffda RBX: 00007f2a16a25fa0 RCX: 00007f2a1679f559
[  302.461240][ T9617] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004
[  302.461249][ T9617] RBP: 00007f2a16836b20 R08: 0000000000000310 R09: 0000000000000000
[  302.461259][ T9617] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000
[  302.461270][ T9617] R13: 00007f2a16a26038 R14: 00007f2a16a25fa0 R15: 00007fff535d3958
[  302.461295][ T9617]  </TASK>
[  303.122773][ T5719] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  303.294491][ T5719] usb 4-1: Using ep0 maxpacket: 32
[  303.295602][ T5719] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  303.296698][ T5719] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30
[  303.296742][ T5719] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.296772][ T5719] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146
[  303.296802][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0
[  303.296838][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.299492][ T5719] usb 4-1: config 0 descriptor??
[  303.725357][ T5719] hid-multitouch 0003:1FD2:6007.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  303.975026][   T10] usb 4-1: USB disconnect, device number 74
[  304.052853][    T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  304.204702][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  304.204741][    T9] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00
[  304.205759][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  304.205821][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.254151][    T9] uvcvideo 7-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[  304.254222][    T9] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770.
[  304.467940][ T9632] __nla_validate_parse: 1 callbacks suppressed
[  304.467965][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1142'.
[  304.625717][ T5728] usb 7-1: USB disconnect, device number 3
[  304.759356][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1146'.
[  305.083413][    T9] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  305.213391][    T9] usb 4-1: device descriptor read/64, error -71
[  305.413811][ T5728] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  305.454351][    T9] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  305.573511][ T5728] usb 7-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.00
[  305.574584][ T5728] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  305.574619][ T5728] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  305.574637][ T5728] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  305.577555][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.577574][ T5728] usb 7-1: Product: syz
[  305.577585][ T5728] usb 7-1: Manufacturer: syz
[  305.577596][ T5728] usb 7-1: SerialNumber: syz
[  305.580606][ T9653] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  305.580774][ T9653] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  305.583134][    T9] usb 4-1: device descriptor read/64, error -71
[  305.693736][    T9] usb usb4-port1: attempt power cycle
[  305.786424][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  305.786898][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  305.788112][ T5793] usb 7-1: USB disconnect, device number 4
[  306.032806][    T9] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  306.053503][    T9] usb 4-1: device descriptor read/8, error -71
[  306.292849][    T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  306.314304][    T9] usb 4-1: device descriptor read/8, error -71
[  306.423185][    T9] usb usb4-port1: unable to enumerate USB device
[  310.883509][ T5005] udevd[5005]: worker [7192] /devices/virtual/block/nbd11 is taking a long time
[  310.885056][ T5005] udevd[5005]: worker [6495] /devices/virtual/block/nbd7 is taking a long time
[  310.885101][ T5005] udevd[5005]: worker [5904] /devices/virtual/block/nbd1 timeout; kill it
[  310.885191][ T5005] udevd[5005]: seq 10637 '/devices/virtual/block/nbd1' killed
[  310.885233][ T5005] udevd[5005]: worker [5638] /devices/virtual/block/nbd2 is taking a long time
[  310.885274][ T5005] udevd[5005]: worker [5650] /devices/virtual/block/nbd14 is taking a long time
[  310.885303][ T5005] udevd[5005]: worker [6781] /devices/virtual/block/nbd6 is taking a long time
[  315.453674][ T1708] block nbd11: Possible stuck request ffff888029460000: control (read@0,4096B). Runtime 120 seconds
[  315.453725][ T8026] block nbd2: Possible stuck request ffff8880290ae000: control (read@0,4096B). Runtime 180 seconds
[  315.969817][ T9717] netlink: 'syz.6.1152': attribute type 1 has an invalid length.
[  315.969860][ T9717] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1152'.
[  316.095279][ T9720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1155'.
[  316.099604][ T8026] block nbd6: Possible stuck request ffff888029295080: control (read@0,2048B). Runtime 150 seconds
[  316.099658][ T8026] block nbd6: Possible stuck request ffff888029295240: control (read@2048,2048B). Runtime 150 seconds
[  316.196909][ T5652] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  316.212847][ T5652] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  316.213982][ T5652] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  316.216433][ T5652] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  316.217331][ T5652] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  316.265734][ T5788] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  316.438447][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1159'.
[  316.453573][ T5788] usb 7-1: Using ep0 maxpacket: 8
[  316.455335][ T5788] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  316.457530][ T5788] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  316.457585][ T5788] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  316.457611][ T5788] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  316.457639][ T5788] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  316.457666][ T5788] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  316.457711][ T5788] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.590652][ T9739] loop4: detected capacity change from 0 to 2640
[  316.624906][ T9739] Invalid logical block size (62561)
[  316.625049][ T5902] Buffer I/O error on dev loop4, logical block 0, async page read
[  316.625659][ T5902] Buffer I/O error on dev loop4, logical block 0, async page read
[  316.626237][ T5902] Buffer I/O error on dev loop4, logical block 0, async page read
[  316.629498][ T5902] Buffer I/O error on dev loop4, logical block 0, async page read
[  316.630152][ T5902] Buffer I/O error on dev loop4, logical block 0, async page read
[  316.688826][ T5788] usb 7-1: usb_control_msg returned -32
[  316.688870][ T5788] usbtmc 7-1:16.0: can't read capabilities
[  316.867095][ T9721] rxe_eth0 speed is unknown, defaulting to 1000
[  317.264407][   T32] audit: type=1800 audit(2000000130.030:19): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1160" name="file1" dev="overlay" ino=1824 res=0 errno=-22
[  317.318053][    T9] usb 7-1: USB disconnect, device number 5
[  317.381137][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  317.381199][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  317.454750][ T9721] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.454950][ T9721] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.455082][ T9721] bridge_slave_0: entered allmulticast mode
[  317.457218][ T9721] bridge_slave_0: entered promiscuous mode
[  317.460332][ T9721] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.460761][ T9721] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.461125][ T9721] bridge_slave_1: entered allmulticast mode
[  317.466611][ T9721] bridge_slave_1: entered promiscuous mode
[  317.554767][ T9721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.558326][ T9721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.610454][ T9721] team0: Port device team_slave_0 added
[  317.620217][ T9721] team0: Port device team_slave_1 added
[  317.660740][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.660760][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.660789][ T9721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.708217][ T9721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.708237][ T9721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.708268][ T9721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.806056][ T9721] hsr_slave_0: entered promiscuous mode
[  317.807134][ T9721] hsr_slave_1: entered promiscuous mode
[  317.807908][ T9721] debugfs: 'hsr0' already exists in 'hsr'
[  317.807930][ T9721] Cannot create hsr debugfs directory
[  318.055671][ T9765] FAULT_INJECTION: forcing a failure.
[  318.055671][ T9765] name failslab, interval 1, probability 0, space 0, times 0
[  318.055711][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.3.1161 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  318.055770][ T9765] Tainted: [L]=SOFTLOCKUP
[  318.055786][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  318.055813][ T9765] Call Trace:
[  318.055829][ T9765]  <TASK>
[  318.055847][ T9765]  dump_stack_lvl+0xe8/0x150
[  318.055913][ T9765]  should_fail_ex+0x3eb/0x540
[  318.055953][ T9765]  should_failslab+0xa8/0x100
[  318.055986][ T9765]  ? security_file_alloc+0x34/0x310
[  318.056011][ T9765]  kmem_cache_alloc_noprof+0x9c/0x600
[  318.056034][ T9765]  ? rcu_is_watching+0x16/0xb0
[  318.056066][ T9765]  ? security_file_alloc+0x34/0x310
[  318.056098][ T9765]  security_file_alloc+0x34/0x310
[  318.056126][ T9765]  init_file+0x90/0x2b0
[  318.056164][ T9765]  alloc_empty_file+0x74/0x1d0
[  318.056200][ T9765]  path_openat+0x96/0x20f0
[  318.056251][ T9765]  do_file_open+0x23e/0x4a0
[  318.056287][ T9765]  ? __pfx_do_file_open+0x10/0x10
[  318.056341][ T9765]  ? _raw_spin_unlock+0x28/0x50
[  318.056365][ T9765]  ? alloc_fd+0x6af/0x760
[  318.056402][ T9765]  do_sys_openat2+0x115/0x200
[  318.056437][ T9765]  ? lapic_next_event+0x11/0x20
[  318.056463][ T9765]  ? __pfx_do_sys_openat2+0x10/0x10
[  318.056514][ T9765]  __x64_sys_openat+0x138/0x170
[  318.056542][ T9765]  do_syscall_64+0x166/0x520
[  318.056571][ T9765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.056595][ T9765]  ? clear_bhb_loop+0x70/0xc0
[  318.056631][ T9765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.056655][ T9765] RIP: 0033:0x7f7cab15fd8e
[  318.056677][ T9765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  318.056697][ T9765] RSP: 002b:00007f7cabfd0ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  318.056722][ T9765] RAX: ffffffffffffffda RBX: 00007f7cabfd36c0 RCX: 00007f7cab15fd8e
[  318.056740][ T9765] RDX: 0000000000000002 RSI: 00007f7cab235eb2 RDI: ffffffffffffff9c
[  318.056756][ T9765] RBP: 00007f7cab236b20 R08: 0000000000000000 R09: 0000000000000000
[  318.056771][ T9765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024
[  318.056786][ T9765] R13: 0000200000000000 R14: 0000000000000000 R15: 00007fffb4091748
[  318.056823][ T9765]  </TASK>
[  318.332930][ T5636] Bluetooth: hci6: command tx timeout
[  318.409828][ T9721] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  318.423958][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  318.424905][ T9721] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  318.428943][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  318.431340][ T9721] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  318.464678][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  318.466245][ T9721] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  318.489146][ T9721] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  318.597855][ T9721] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.624224][ T9721] 8021q: adding VLAN 0 to HW filter on device team0
[  318.631290][ T8354] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.631402][ T8354] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.671430][ T8350] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.671524][ T8350] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.938926][ T9794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'.
[  319.032299][ T9799] openvswitch: netlink: Message has 16 unknown bytes.
[  319.100876][ T7258] md_update_sb: can't update sb for read-only array md0
[  319.167219][ T9805] netlink: 'syz.6.1174': attribute type 10 has an invalid length.
[  319.167247][ T9805] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1174'.
[  319.168893][ T9805] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  319.183017][ T5728] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  319.280966][ T9721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  319.334540][ T5728] usb 4-1: Using ep0 maxpacket: 32
[  319.338645][ T5728] usb 4-1: New USB device found: idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  319.340030][ T5728] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  319.340060][ T5728] usb 4-1: config 0 has no interface number 0
[  319.340102][ T5728] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  319.340127][ T5728] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  319.340155][ T5728] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  319.340184][ T5728] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  319.342220][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.342250][ T5728] usb 4-1: Product: syz
[  319.342266][ T5728] usb 4-1: Manufacturer: syz
[  319.342283][ T5728] usb 4-1: SerialNumber: syz
[  319.351862][ T5728] usb 4-1: config 0 descriptor??
[  319.399230][ T5728] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input38
[  319.466484][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  319.594691][ T9794] FAULT_INJECTION: forcing a failure.
[  319.594691][ T9794] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.594769][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.3.1171 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  319.594799][ T9794] Tainted: [L]=SOFTLOCKUP
[  319.594808][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  319.594821][ T9794] Call Trace:
[  319.594830][ T9794]  <TASK>
[  319.594839][ T9794]  dump_stack_lvl+0xe8/0x150
[  319.594877][ T9794]  should_fail_ex+0x3eb/0x540
[  319.594912][ T9794]  strncpy_from_user+0x36/0x2c0
[  319.594947][ T9794]  do_getname+0x77/0x250
[  319.594985][ T9794]  do_sys_openat2+0xce/0x200
[  319.595020][ T9794]  ? __se_sys_futex+0x3a8/0x450
[  319.595057][ T9794]  ? __pfx_do_sys_openat2+0x10/0x10
[  319.595099][ T9794]  ? rcu_is_watching+0x16/0xb0
[  319.595148][ T9794]  __x64_sys_openat+0x138/0x170
[  319.595176][ T9794]  do_syscall_64+0x166/0x520
[  319.595206][ T9794]  ? trace_irq_disable+0x3b/0x140
[  319.595235][ T9794]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.595258][ T9794]  ? clear_bhb_loop+0x70/0xc0
[  319.595287][ T9794]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.595311][ T9794] RIP: 0033:0x7f7cab15fd8e
[  319.595334][ T9794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  319.595354][ T9794] RSP: 002b:00007f7cabfd2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  319.595379][ T9794] RAX: ffffffffffffffda RBX: 00007f7cabfd36c0 RCX: 00007f7cab15fd8e
[  319.595397][ T9794] RDX: 0000000000000002 RSI: 00007f7cabfd2c00 RDI: ffffffffffffff9c
[  319.595413][ T9794] RBP: 00007f7cabfd2c00 R08: 0000000000000000 R09: 0000000000000000
[  319.595428][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  319.595444][ T9794] R13: 00007f7cab426038 R14: 00007f7cab425fa0 R15: 00007fffb4091748
[  319.595480][ T9794]  </TASK>
[  319.598963][ T5788] usb 4-1: USB disconnect, device number 79
[  319.666187][    T9] usb 7-1: Using ep0 maxpacket: 8
[  319.680580][    T9] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  319.722674][    T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  319.722728][    T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  319.722753][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  319.722778][    T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  319.722802][    T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  319.722846][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.099118][    T9] usb 7-1: usb_control_msg returned -32
[  320.099170][    T9] usbtmc 7-1:16.0: can't read capabilities
[  320.231871][ T9721] veth0_vlan: entered promiscuous mode
[  320.243880][ T9721] veth1_vlan: entered promiscuous mode
[  320.301416][ T9721] veth0_macvtap: entered promiscuous mode
[  320.315742][ T9721] veth1_macvtap: entered promiscuous mode
[  320.348634][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.372267][ T9721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.413961][ T5636] Bluetooth: hci6: command tx timeout
[  320.428498][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'.
[  320.575744][   T27] block nbd0: Possible stuck request ffff888028fe4b40: control (read@0,4096B). Runtime 60 seconds
[  320.579080][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.579102][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.606211][ T8166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.620325][ T8350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.620592][ T8350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.620647][ T8350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.656046][   T27] blk_print_req_error: 51 callbacks suppressed
[  320.656066][   T27] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.656096][   T27] Buffer I/O error on dev nbd3, logical block 0, async page read
[  320.656281][   T27] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.656309][   T27] Buffer I/O error on dev nbd3, logical block 1, async page read
[  320.656441][   T27] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.656467][   T27] Buffer I/O error on dev nbd3, logical block 0, async page read
[  320.656593][   T27] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.656619][   T27] Buffer I/O error on dev nbd3, logical block 1, async page read
[  320.656739][   T27] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.656767][   T27] Buffer I/O error on dev nbd3, logical block 0, async page read
[  320.656880][   T27] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.657006][   T27] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.657119][   T27] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.657243][   T27] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.657357][   T27] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  320.660055][ T9826] ldm_validate_partition_table(): Disk read failed.
[  320.660814][ T9826] Dev nbd3: unable to read RDB block 0
[  320.662091][ T9826]  nbd3: unable to read partition table
[  320.844865][ T9827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1179'.
[  320.846768][ T9827] nbd15: detected capacity change from 0 to 125
[  320.850160][ T8354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  320.850180][ T8354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  320.891038][   T10] usb 7-1: USB disconnect, device number 6
[  320.893102][ T9805] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71
[  320.926993][ T5636] block nbd15: Receive control failed (result -104)
[  320.993638][ T9829] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  321.126353][   T32] audit: type=1400 audit(2000000133.900:20): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=9836 comm="syz.4.1182"
[  321.468346][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1188'.
[  321.548299][ T9851] nbd16: detected capacity change from 0 to 125
[  321.583086][ T9856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  321.602797][ T5728] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  321.753547][ T5728] usb 4-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00
[  321.754742][ T5728] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.754797][ T5728] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  321.754843][ T5728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.853893][ T8026] block nbd1: Possible stuck request ffff888029045080: control (read@0,4096B). Runtime 210 seconds
[  321.856492][   T27] block nbd14: Possible stuck request ffff888029527000: control (read@0,2048B). Runtime 90 seconds
[  321.856535][   T27] block nbd14: Possible stuck request ffff88802952e000: control (read@2048,2048B). Runtime 90 seconds
[  322.009496][ T9877] futex_wake_op: syz.6.1195 tries to shift op by 144; fix this program
[  322.076853][ T9868] syzkaller1: entered promiscuous mode
[  322.076881][ T9868] syzkaller1: entered allmulticast mode
[  322.196413][ T9883] tipc: Started in network mode
[  322.196450][ T9883] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  322.197352][ T9883] tipc: Enabled bearer <udp:s>, priority 10
[  322.255004][ T5636] block nbd16: Receive control failed (result -104)
[  322.311535][ T9886] block nbd6: NBD_DISCONNECT
[  322.311570][ T9886] block nbd6: Send disconnect failed -32
[  322.311592][ T9886] block nbd6: shutting down sockets
[  322.353577][    C0] buffer_io_error: 27 callbacks suppressed
[  322.353604][    C0] Buffer I/O error on dev nbd6, logical block 0, async page read
[  322.353672][    C0] Buffer I/O error on dev nbd6, logical block 1, async page read
[  322.353871][ T8026] Buffer I/O error on dev nbd6, logical block 0, async page read
[  322.353986][ T8026] Buffer I/O error on dev nbd6, logical block 1, async page read
[  322.354103][ T8026] Buffer I/O error on dev nbd6, logical block 0, async page read
[  322.354229][ T8026] Buffer I/O error on dev nbd6, logical block 1, async page read
[  322.354344][ T8026] Buffer I/O error on dev nbd6, logical block 0, async page read
[  322.354448][ T8026] Buffer I/O error on dev nbd6, logical block 1, async page read
[  322.354561][ T8026] Buffer I/O error on dev nbd6, logical block 0, async page read
[  322.354664][ T8026] Buffer I/O error on dev nbd6, logical block 1, async page read
[  322.356871][ T6781] ldm_validate_partition_table(): Disk read failed.
[  322.357560][ T6781] Dev nbd6: unable to read RDB block 0
[  322.358293][ T6781]  nbd6: unable to read partition table
[  322.410567][ T6781] ldm_validate_partition_table(): Disk read failed.
[  322.414776][ T6781] Dev nbd6: unable to read RDB block 0
[  322.419807][ T6781]  nbd6: unable to read partition table
[  322.496201][ T5636] Bluetooth: hci6: command tx timeout
[  322.560875][ T9891] FAULT_INJECTION: forcing a failure.
[  322.560875][ T9891] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  322.560911][ T9891] CPU: 1 UID: 0 PID: 9891 Comm: syz.7.1201 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  322.560941][ T9891] Tainted: [L]=SOFTLOCKUP
[  322.560950][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  322.560963][ T9891] Call Trace:
[  322.560973][ T9891]  <TASK>
[  322.560982][ T9891]  dump_stack_lvl+0xe8/0x150
[  322.561019][ T9891]  should_fail_ex+0x3eb/0x540
[  322.561056][ T9891]  _copy_from_user+0x2d/0xb0
[  322.561089][ T9891]  ___sys_sendmsg+0x1c6/0x360
[  322.561114][ T9891]  ? __lock_acquire+0x747/0x2de0
[  322.561144][ T9891]  ? __pfx____sys_sendmsg+0x10/0x10
[  322.561226][ T9891]  ? __fget_files+0x3a2/0x420
[  322.561251][ T9891]  ? __fget_files+0x2a/0x420
[  322.561284][ T9891]  __x64_sys_sendmsg+0x1b1/0x290
[  322.561313][ T9891]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  322.561362][ T9891]  do_syscall_64+0x166/0x520
[  322.561391][ T9891]  ? trace_irq_disable+0x3b/0x140
[  322.561418][ T9891]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.561441][ T9891]  ? clear_bhb_loop+0x70/0xc0
[  322.561468][ T9891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.561491][ T9891] RIP: 0033:0x7fbd9599f559
[  322.561512][ T9891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  322.561532][ T9891] RSP: 002b:00007fbd96874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  322.561556][ T9891] RAX: ffffffffffffffda RBX: 00007fbd95c25fa0 RCX: 00007fbd9599f559
[  322.561571][ T9891] RDX: 0000000004000810 RSI: 00002000000003c0 RDI: 0000000000000005
[  322.561586][ T9891] RBP: 00007fbd96874090 R08: 0000000000000000 R09: 0000000000000000
[  322.561600][ T9891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  322.561614][ T9891] R13: 00007fbd95c26038 R14: 00007fbd95c25fa0 R15: 00007ffd8f480bb8
[  322.561647][ T9891]  </TASK>
[  322.785017][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32
[  322.785687][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32
[  322.785735][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  322.912238][ T9900] netlink: 'syz.7.1203': attribute type 2 has an invalid length.
[  323.061568][ T8172] IPVS: starting estimator thread 0...
[  323.062117][ T9905] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1205'.
[  323.143885][ T9906] IPVS: using max 26 ests per chain, 62400 per kthread
[  323.191054][ T9908] binder: Write failure EFAULT in pid:94
[  323.249720][ T9911] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1207'.
[  323.324099][ T5793] tipc: Node number set to 4269801488
[  323.801517][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1210'.
[  323.802312][ T9917] nbd6: detected capacity change from 0 to 125
[  323.818357][ T5636] block nbd6: Receive control failed (result -32)
[  323.845067][ T8026] block nbd6: Dead connection, failed to find a fallback
[  323.845094][ T8026] block nbd6: shutting down sockets
[  323.847388][ T6781] ldm_validate_partition_table(): Disk read failed.
[  323.848184][ T6781] Dev nbd6: unable to read RDB block 0
[  323.849648][ T6781]  nbd6: unable to read partition table
[  323.889943][ T6781] ldm_validate_partition_table(): Disk read failed.
[  323.891671][ T6781] Dev nbd6: unable to read RDB block 0
[  323.897278][ T6781]  nbd6: unable to read partition table
[  323.987025][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  324.003417][ T9921] gadgetfs: bound to dummy_udc driver
[  324.025498][ T9921] FAULT_INJECTION: forcing a failure.
[  324.025498][ T9921] name failslab, interval 1, probability 0, space 0, times 0
[  324.025538][ T9921] CPU: 1 UID: 0 PID: 9921 Comm: syz.6.1212 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  324.025573][ T9921] Tainted: [L]=SOFTLOCKUP
[  324.025583][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  324.025598][ T9921] Call Trace:
[  324.025608][ T9921]  <TASK>
[  324.025627][ T9921]  dump_stack_lvl+0xe8/0x150
[  324.025667][ T9921]  should_fail_ex+0x3eb/0x540
[  324.025706][ T9921]  should_failslab+0xa8/0x100
[  324.025737][ T9921]  ? security_inode_alloc+0x39/0x310
[  324.025770][ T9921]  kmem_cache_alloc_noprof+0x9c/0x600
[  324.025793][ T9921]  ? make_kgid+0x1d1/0x6a0
[  324.025821][ T9921]  ? security_inode_alloc+0x39/0x310
[  324.025861][ T9921]  security_inode_alloc+0x39/0x310
[  324.025895][ T9921]  inode_init_always_gfp+0x97e/0xd30
[  324.025926][ T9921]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  324.025949][ T9921]  alloc_inode+0x82/0x1b0
[  324.025973][ T9921]  new_inode+0x1f/0x170
[  324.026002][ T9921]  debugfs_create_dir+0x68/0x350
[  324.026042][ T9921]  kvm_create_vm_debugfs+0x1f0/0x8f0
[  324.026067][ T9921]  ? policy_nodemask+0x31b/0x980
[  324.026106][ T9921]  ? __pfx_kvm_create_vm_debugfs+0x10/0x10
[  324.026144][ T9921]  kvm_dev_ioctl+0x1245/0x1700
[  324.026177][ T9921]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  324.026204][ T9921]  ? bpf_lsm_file_ioctl+0x9/0x20
[  324.026234][ T9921]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  324.026256][ T9921]  __se_sys_ioctl+0xfc/0x170
[  324.026290][ T9921]  do_syscall_64+0x166/0x520
[  324.026319][ T9921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.026345][ T9921]  ? clear_bhb_loop+0x70/0xc0
[  324.026374][ T9921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.026397][ T9921] RIP: 0033:0x7f2a1679f559
[  324.026419][ T9921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.026438][ T9921] RSP: 002b:00007f2a1762c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  324.026464][ T9921] RAX: ffffffffffffffda RBX: 00007f2a16a25fa0 RCX: 00007f2a1679f559
[  324.026482][ T9921] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006
[  324.026496][ T9921] RBP: 00007f2a16836b20 R08: 0000000000000000 R09: 0000000000000000
[  324.026511][ T9921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  324.026525][ T9921] R13: 00007f2a16a26038 R14: 00007f2a16a25fa0 R15: 00007fff535d3958
[  324.026564][ T9921]  </TASK>
[  324.026787][ T9921] debugfs: out of free dentries, can not create directory '9921-7'
[  324.257049][ T1657] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  324.257560][    C1] gadgetfs: connected
[  324.258236][ T1657] gadgetfs: disconnected
[  324.353301][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1213'.
[  324.354502][ T9924] FAULT_INJECTION: forcing a failure.
[  324.354502][ T9924] name failslab, interval 1, probability 0, space 0, times 0
[  324.354535][ T9924] CPU: 0 UID: 0 PID: 9924 Comm: syz.7.1213 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  324.354565][ T9924] Tainted: [L]=SOFTLOCKUP
[  324.354573][ T9924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  324.354586][ T9924] Call Trace:
[  324.354596][ T9924]  <TASK>
[  324.354618][ T9924]  dump_stack_lvl+0xe8/0x150
[  324.354657][ T9924]  should_fail_ex+0x3eb/0x540
[  324.354694][ T9924]  should_failslab+0xa8/0x100
[  324.354723][ T9924]  __kmalloc_cache_noprof+0x9e/0x600
[  324.354741][ T9924]  ? blk_alloc_queue_stats+0x4c/0x100
[  324.354789][ T9924]  ? blk_alloc_queue_stats+0x4c/0x100
[  324.354824][ T9924]  blk_alloc_queue_stats+0x4c/0x100
[  324.354859][ T9924]  blk_alloc_queue+0xcc/0x690
[  324.354885][ T9924]  __blk_mq_alloc_disk+0x194/0x390
[  324.354925][ T9924]  ? __pfx___blk_mq_alloc_disk+0x10/0x10
[  324.354982][ T9924]  ? blk_mq_alloc_tag_set+0xaf2/0xfa0
[  324.355023][ T9924]  ? idr_alloc+0x89/0xd0
[  324.355046][ T9924]  nbd_dev_add+0x494/0xb60
[  324.355082][ T9924]  ? __pfx_nbd_dev_add+0x10/0x10
[  324.355130][ T9924]  ? __pfx_nbd_genl_foreach_sock+0x10/0x10
[  324.355158][ T9924]  ? security_capable+0x7e/0x2c0
[  324.355194][ T9924]  nbd_genl_connect+0x96c/0x1cd0
[  324.355219][ T9924]  ? __pfx_nbd_genl_connect+0x10/0x10
[  324.355261][ T9924]  ? rcu_is_watching+0x16/0xb0
[  324.355291][ T9924]  ? trace_kmalloc+0x2a/0xf0
[  324.355316][ T9924]  ? __kmalloc_noprof+0x387/0x710
[  324.355343][ T9924]  ? __nla_parse+0x40/0x60
[  324.355362][ T9924]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  324.355404][ T9924]  genl_family_rcv_msg_doit+0x233/0x340
[  324.355440][ T9924]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  324.355479][ T9924]  ? __lock_acquire+0x747/0x2de0
[  324.355517][ T9924]  genl_rcv_msg+0x614/0x7a0
[  324.355553][ T9924]  ? __pfx_genl_rcv_msg+0x10/0x10
[  324.355579][ T9924]  ? __pfx_nbd_genl_connect+0x10/0x10
[  324.355626][ T9924]  netlink_rcv_skb+0x226/0x4a0
[  324.355661][ T9924]  ? __pfx_genl_rcv_msg+0x10/0x10
[  324.355680][ T9924]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  324.355743][ T9924]  ? down_read+0x2b9/0x320
[  324.355777][ T9924]  genl_rcv+0x28/0x40
[  324.355801][ T9924]  netlink_unicast+0x8ef/0xa80
[  324.355837][ T9924]  netlink_sendmsg+0x7f0/0xb20
[  324.355889][ T9924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.355926][ T9924]  ? aa_sock_msg_perm+0x144/0x210
[  324.355960][ T9924]  ? apparmor_socket_sendmsg+0x18b/0x360
[  324.355981][ T9924]  ? __pfx_netlink_sendmsg+0x10/0x10
[  324.356020][ T9924]  sock_sendmsg_nosec+0x14e/0x190
[  324.356056][ T9924]  ____sys_sendmsg+0x54e/0x850
[  324.356086][ T9924]  ? __pfx_____sys_sendmsg+0x10/0x10
[  324.356122][ T9924]  ? import_iovec+0x73/0xa0
[  324.356161][ T9924]  ___sys_sendmsg+0x2a5/0x360
[  324.356186][ T9924]  ? __lock_acquire+0x747/0x2de0
[  324.356215][ T9924]  ? __pfx____sys_sendmsg+0x10/0x10
[  324.356279][ T9924]  ? __fget_files+0x3a2/0x420
[  324.356305][ T9924]  ? __fget_files+0x2a/0x420
[  324.356340][ T9924]  __x64_sys_sendmsg+0x1b1/0x290
[  324.356372][ T9924]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  324.356420][ T9924]  do_syscall_64+0x166/0x520
[  324.356445][ T9924]  ? trace_irq_disable+0x3b/0x140
[  324.356470][ T9924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.356492][ T9924]  ? clear_bhb_loop+0x70/0xc0
[  324.356521][ T9924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.356542][ T9924] RIP: 0033:0x7fbd9599f559
[  324.356564][ T9924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  324.356587][ T9924] RSP: 002b:00007fbd96874028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  324.356618][ T9924] RAX: ffffffffffffffda RBX: 00007fbd95c25fa0 RCX: 00007fbd9599f559
[  324.356636][ T9924] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  324.356651][ T9924] RBP: 00007fbd96874090 R08: 0000000000000000 R09: 0000000000000000
[  324.356665][ T9924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  324.356690][ T9924] R13: 00007fbd95c26038 R14: 00007fbd95c25fa0 R15: 00007ffd8f480bb8
[  324.356727][ T9924]  </TASK>
[  324.357819][ T9924] nbd: failed to add new device
[  324.403635][    C1] gadgetfs: connected
[  324.404270][ T1657] usb 1-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=1.00
[  324.407253][ T1657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.474309][ T9920] gadgetfs: suspended from state 3
[  324.474515][ T9920] gadgetfs: disconnected
[  324.596446][ T1657] usb 1-1: can't set config #1, error -71
[  324.804867][ T1657] usb 1-1: USB disconnect, device number 83
[  324.860335][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  324.861702][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  324.863568][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  324.868530][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  324.889537][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  324.893666][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  324.897966][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  324.905131][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  324.908688][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  324.916738][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  324.917773][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  324.925146][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  324.928269][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  324.935552][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  324.938971][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  324.948360][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  324.951195][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  324.961204][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  324.975480][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  324.978182][ T5728] ax88179_178a 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  325.089960][ T8026] block nbd7: Possible stuck request ffff888029305080: control (read@0,2048B). Runtime 150 seconds
[  325.176335][ T9928] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1214'.
[  325.209617][ T5728] ax88179_178a 4-1:1.0 eth5: register 'ax88179_178a' at usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, 42:5c:f5:4a:e5:76
[  325.231646][ T5728] usb 4-1: USB disconnect, device number 80
[  325.248480][ T5728] ax88179_178a 4-1:1.0 eth5: unregister 'ax88179_178a' usb-dummy_hcd.3-1, ASIX AX88179 USB 3.0 Gigabit Ethernet
[  325.712955][ T1657] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  325.842770][ T1657] usb 7-1: device descriptor read/64, error -71
[  327.082819][ T1657] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  327.212759][ T1657] usb 7-1: device descriptor read/64, error -71
[  327.323679][ T1657] usb usb7-port1: attempt power cycle
[  327.705007][ T1657] usb 7-1: new full-speed USB device number 9 using dummy_hcd
[  327.726831][ T1657] usb 7-1: device descriptor read/8, error -71
[  327.890890][ T9947] fuse: Bad value for 'rootmode'
[  327.924732][ T9950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'.
[  327.963010][ T1657] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  327.984574][ T1657] usb 7-1: device descriptor read/8, error -71
[  328.103195][ T1657] usb usb7-port1: unable to enumerate USB device
[  328.122327][ T9958] fuse: Unknown parameter 'g2oup_id'
[  328.172590][ T8164] IPVS: starting estimator thread 0...
[  328.179987][ T9960] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1225'.
[  328.258590][   T27] block nbd4: Possible stuck request ffff888029170a80: control (read@0,2048B). Runtime 30 seconds
[  328.258636][   T27] block nbd4: Possible stuck request ffff888029170c40: control (read@2048,2048B). Runtime 30 seconds
[  328.284634][ T9961] IPVS: using max 28 ests per chain, 67200 per kthread
[  328.372742][   T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  328.395561][ T9974] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1230'.
[  328.523855][   T10] usb 4-1: Using ep0 maxpacket: 32
[  328.526439][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  328.526491][   T10] usb 4-1: New USB device found: idVendor=413c, idProduct=81c2, bcdDevice=c9.4b
[  328.528007][   T10] usb 4-1: config 14 has an invalid interface number: 8 but max is 1
[  328.528034][   T10] usb 4-1: config 14 has no interface number 1
[  328.528077][   T10] usb 4-1: config 14 interface 8 has no altsetting 0
[  328.528098][   T10] usb 4-1: config 14 interface 0 has no altsetting 0
[  328.532205][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.532234][   T10] usb 4-1: Product: syz
[  328.532252][   T10] usb 4-1: Manufacturer: syz
[  328.532268][   T10] usb 4-1: SerialNumber: syz
[  328.881495][ T9989] FAULT_INJECTION: forcing a failure.
[  328.881495][ T9989] name failslab, interval 1, probability 0, space 0, times 0
[  328.881538][ T9989] CPU: 0 UID: 0 PID: 9989 Comm: syz.3.1226 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  328.881571][ T9989] Tainted: [L]=SOFTLOCKUP
[  328.881580][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  328.881598][ T9989] Call Trace:
[  328.881608][ T9989]  <TASK>
[  328.881618][ T9989]  dump_stack_lvl+0xe8/0x150
[  328.881660][ T9989]  should_fail_ex+0x3eb/0x540
[  328.881700][ T9989]  should_failslab+0xa8/0x100
[  328.881735][ T9989]  __kmalloc_noprof+0xf9/0x710
[  328.881762][ T9989]  ? tomoyo_encode2+0x28b/0x540
[  328.881794][ T9989]  ? tomoyo_encode2+0x28b/0x540
[  328.881835][ T9989]  tomoyo_encode2+0x28b/0x540
[  328.881877][ T9989]  tomoyo_check_unix_address+0x39f/0x7e0
[  328.881917][ T9989]  ? tomoyo_check_unix_address+0x16d/0x7e0
[  328.881951][ T9989]  ? __pfx_tomoyo_check_unix_address+0x10/0x10
[  328.882001][ T9989]  ? lock_acquire+0x115/0x350
[  328.882037][ T9989]  tomoyo_socket_sendmsg_permission+0x1d9/0x300
[  328.882085][ T9989]  security_socket_sendmsg+0xc0/0x280
[  328.882126][ T9989]  ____sys_sendmsg+0x51d/0x850
[  328.882162][ T9989]  ? __pfx_____sys_sendmsg+0x10/0x10
[  328.882201][ T9989]  ? import_iovec+0x73/0xa0
[  328.882240][ T9989]  ___sys_sendmsg+0x2a5/0x360
[  328.882266][ T9989]  ? __lock_acquire+0x747/0x2de0
[  328.882298][ T9989]  ? __pfx____sys_sendmsg+0x10/0x10
[  328.882342][ T9989]  ? __pfx_futex_wake_mark+0x10/0x10
[  328.882401][ T9989]  ? __fget_files+0x3a2/0x420
[  328.882427][ T9989]  ? __fget_files+0x2a/0x420
[  328.882464][ T9989]  __sys_sendmmsg+0x273/0x4e0
[  328.882498][ T9989]  ? __pfx___sys_sendmmsg+0x10/0x10
[  328.882524][ T9989]  ? do_futex+0x3e7/0x4e0
[  328.882568][ T9989]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  328.882621][ T9989]  ? rcu_is_watching+0x16/0xb0
[  328.882660][ T9989]  __x64_sys_sendmmsg+0xa0/0xc0
[  328.882689][ T9989]  do_syscall_64+0x166/0x520
[  328.882716][ T9989]  ? trace_irq_disable+0x3b/0x140
[  328.882745][ T9989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.882769][ T9989]  ? clear_bhb_loop+0x70/0xc0
[  328.882798][ T9989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.882822][ T9989] RIP: 0033:0x7f7cab19f559
[  328.882844][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  328.882865][ T9989] RSP: 002b:00007f7ca93f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  328.882890][ T9989] RAX: ffffffffffffffda RBX: 00007f7cab426090 RCX: 00007f7cab19f559
[  328.882907][ T9989] RDX: 0000000000000001 RSI: 0000200000005000 RDI: 000000000000000b
[  328.882923][ T9989] RBP: 00007f7cab236b20 R08: 0000000000000000 R09: 0000000000000000
[  328.882937][ T9989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  328.882951][ T9989] R13: 00007f7cab426128 R14: 00007f7cab426090 R15: 00007fffb4091748
[  328.882989][ T9989]  </TASK>
[  328.898052][ T8026] block nbd5: Possible stuck request ffff88802921c400: control (read@0,4096B). Runtime 30 seconds
[  329.301548][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1232'.
[  329.428261][   T10] usb 4-1: selecting invalid altsetting 0
[  329.428281][   T10] usb 4-1: Could not set interface, error -22
[  329.435923][   T10] usb 4-1: USB disconnect, device number 81
[  329.615303][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1235'.
[  329.692973][ T5636] Bluetooth: hci4: command 0x0406 tx timeout
[  329.698475][T10000] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1236'.
[  330.013067][ T5728] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  330.162727][ T5728] usb 8-1: Using ep0 maxpacket: 16
[  330.163337][ T5728] usb 8-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  330.164448][ T5728] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  330.164481][ T5728] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  330.166573][ T5728] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.166599][ T5728] usb 8-1: Product: syz
[  330.166614][ T5728] usb 8-1: Manufacturer: syz
[  330.166630][ T5728] usb 8-1: SerialNumber: syz
[  330.170366][ T5728] usb 8-1: config 0 descriptor??
[  330.242333][ T5728] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  330.242360][ T5728] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class)
[  330.780384][ T5728] em28xx 8-1:0.0: unknown em28xx chip ID (0)
[  330.781593][ T5728] em28xx 8-1:0.0: Config register raw data: 0xfffffffb
[  330.996517][ T5728] em28xx 8-1:0.0: AC97 chip type couldn't be determined
[  330.996536][ T5728] em28xx 8-1:0.0: No AC97 audio processor
[  331.019264][ T5728] usb 8-1: USB disconnect, device number 2
[  331.020994][ T5728] em28xx 8-1:0.0: Disconnecting em28xx
[  331.057134][ T5728] em28xx: Freeing device
[  331.162827][   T10] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  331.233180][    T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  331.314937][   T10] usb 7-1: unable to get BOS descriptor or descriptor too short
[  331.315476][   T10] usb 7-1: not running at top speed; connect to a high speed hub
[  331.315512][   T10] usb 7-1: New USB device found: idVendor=041e, idProduct=3040, bcdDevice=0.40
[  331.316591][   T10] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  331.318265][   T10] usb 7-1: language id specifier not provided by device, defaulting to English
[  331.322349][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.322375][   T10] usb 7-1: Manufacturer: 妵銍烶ⷊ鼕↫㧸疌Ῐ֙ⳉ妮ᅜ۝憾ₒ
[  331.322394][   T10] usb 7-1: SerialNumber: syz
[  331.412747][    T9] usb 4-1: Using ep0 maxpacket: 32
[  331.413436][    T9] usb 4-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00
[  331.414376][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30
[  331.414406][    T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.414426][    T9] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146
[  331.414445][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  331.414488][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.417043][    T9] usb 4-1: config 0 descriptor??
[  331.840838][    T9] hid-multitouch 0003:1FD2:6007.0019: hiddev0,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0
[  332.099805][    T9] usb 4-1: USB disconnect, device number 82
[  332.753807][ T5036] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  332.754028][ T5036] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  332.757045][ T5036] usb 5-1: USB disconnect, device number 20
[  332.890411][T10015] fido_id[10015]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  333.828405][   T10] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  333.828890][   T10] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  333.913295][   T10] usb 7-1: USB disconnect, device number 11
[  333.936587][T10018] MTDSB: Device #1 doesn't appear to exist
[  333.936587][T10018] 
[  334.002175][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  334.156690][   T32] audit: type=1326 audit(2000000146.930:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10022 comm="syz.6.1244" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2a1679f559 code=0x0
[  334.157800][T10028] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1245'.
[  334.183087][ T5036] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  334.338388][ T5036] usb 8-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  334.342347][ T5036] usb 8-1: config 0 has an invalid interface number: 50 but max is 0
[  334.342369][ T5036] usb 8-1: config 0 has no interface number 0
[  334.342402][ T5036] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  334.386818][ T5036] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.386849][ T5036] usb 8-1: Product: syz
[  334.386865][ T5036] usb 8-1: Manufacturer: syz
[  334.386891][ T5036] usb 8-1: SerialNumber: syz
[  334.397343][ T5036] usb 8-1: config 0 descriptor??
[  334.427582][ T5036] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0
[  334.674850][    C1] usb 8-1: yurex_control_callback - control failed: -71
[  334.675391][   T10] usb 8-1: USB disconnect, device number 3
[  334.681216][   T10] yurex 8-1:0.50: USB YUREX #0 now disconnected
[  334.702718][    T9] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  334.853381][    T9] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2c2e, bcdDevice=0.40
[  334.854445][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  334.857363][    T9] usb 4-1: string descriptor 0 read error: -22
[  334.857490][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.301158][    T9] hid_parser_main: 14 callbacks suppressed
[  335.301179][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301201][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301220][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301239][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301277][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301312][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301332][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301350][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301368][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.301387][    T9] lua 0003:1E7D:2C2E.001A: unknown main item tag 0x0
[  335.428924][    T9] lua 0003:1E7D:2C2E.001A: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0
[  335.521415][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1247'.
[  335.557768][  T196] usb 4-1: USB disconnect, device number 83
[  335.577847][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.578320][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.582424][T10045] team_slave_0: entered allmulticast mode
[  335.602442][T10045] team_slave_0: entered promiscuous mode
[  335.623850][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.626471][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.631309][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.654899][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.674716][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.675208][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.736677][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.737163][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.767100][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1251'.
[  335.767131][T10047] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1251'.
[  335.792815][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  335.851747][T10050] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1252'.
[  335.943804][    T9] usb 7-1: Using ep0 maxpacket: 16
[  335.944654][    T9] usb 7-1: New USB device found: idVendor=046d, idProduct=c50c, bcdDevice=0.00
[  335.945694][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.945725][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.945767][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.948154][    T9] usb 7-1: config 0 descriptor??
[  336.155655][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  336.155775][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  336.160509][    T9] usb 7-1: USB disconnect, device number 12
[  336.184602][ T5652] Bluetooth: hci5: command 0x0406 tx timeout
[  336.944246][ T5652] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  336.950907][ T5652] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  336.964846][ T5652] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  336.981139][ T5652] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  336.981880][ T5652] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  337.042750][  T196] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  337.063545][T10066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'.
[  337.133631][ T5036] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  337.193702][  T196] usb 8-1: Using ep0 maxpacket: 8
[  337.195178][  T196] usb 8-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  337.198409][  T196] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[  337.198462][  T196] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.198487][  T196] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  337.198512][  T196] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  337.198538][  T196] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  337.198584][  T196] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.304643][ T5036] usb 7-1: Using ep0 maxpacket: 16
[  337.306280][ T5036] usb 7-1: New USB device found: idVendor=046d, idProduct=c53a, bcdDevice=0.00
[  337.308605][ T5036] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  337.308658][ T5036] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.308687][ T5036] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.308711][ T5036] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  337.308740][ T5036] usb 7-1: config 0 interface 0 has no altsetting 0
[  337.308776][ T5036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.329557][ T5036] usb 7-1: config 0 descriptor??
[  337.451250][  T196] usb 8-1: usb_control_msg returned -32
[  337.451304][  T196] usbtmc 8-1:16.0: can't read capabilities
[  337.547582][T10059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.548123][T10059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.549144][T10078] loop4: detected capacity change from 0 to 2640
[  337.551237][T10060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  337.551744][T10060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  337.603900][T10078] Invalid logical block size (62561)
[  337.622827][ T5639] buffer_io_error: 138 callbacks suppressed
[  337.622850][ T5639] Buffer I/O error on dev loop4, logical block 0, async page read
[  337.640644][ T5639] Buffer I/O error on dev loop4, logical block 0, async page read
[  337.641330][ T5639] Buffer I/O error on dev loop4, logical block 0, async page read
[  337.649930][ T5639] Buffer I/O error on dev loop4, logical block 0, async page read
[  337.650702][ T5639] Buffer I/O error on dev loop4, logical block 0, async page read
[  337.814963][ T5036] logitech-djreceiver 0003:046D:C53A.001B: hiddev1,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0
[  337.852033][T10061] rxe_eth0 speed is unknown, defaulting to 1000
[  338.035066][  T196] usb 8-1: USB disconnect, device number 4
[  338.166105][    T9] usb 7-1: USB disconnect, device number 13
[  338.440175][T10098] syzkaller1: entered promiscuous mode
[  338.440201][T10098] syzkaller1: entered allmulticast mode
[  338.456665][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.457154][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.490905][T10099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.491406][T10099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.640617][T10061] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.640814][T10061] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.641374][T10061] bridge_slave_0: entered allmulticast mode
[  338.647273][T10061] bridge_slave_0: entered promiscuous mode
[  338.658597][T10061] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.661915][T10061] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.662401][T10061] bridge_slave_1: entered allmulticast mode
[  338.678651][T10061] bridge_slave_1: entered promiscuous mode
[  338.713625][   T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  338.765494][T10061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  338.769305][T10061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  338.834747][T10061] team0: Port device team_slave_0 added
[  338.839983][T10061] team0: Port device team_slave_1 added
[  338.872717][   T10] usb 4-1: Using ep0 maxpacket: 32
[  338.873460][   T10] usb 4-1: New USB device found: idVendor=2040, idProduct=c603, bcdDevice=1.8e
[  338.876251][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  338.876293][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.913709][   T10] usb 4-1: config 0 descriptor??
[  338.921759][   T10] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[  338.941339][   T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  338.941923][   T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[  338.941975][   T10] usb 4-1: media controller created
[  338.978917][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  338.992458][T10061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.992479][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  338.992509][T10061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.049836][T10061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.049857][T10061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  339.049887][T10061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.054357][ T5636] Bluetooth: hci7: command tx timeout
[  339.124375][   T10] set interface failed
[  339.125013][   T10] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  339.125039][   T10] error writing reg: 0xff, val: 0x00
[  339.197440][   T10] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  339.220094][   T10] usb 4-1: USB disconnect, device number 84
[  339.368882][T10061] hsr_slave_0: entered promiscuous mode
[  339.371537][T10061] hsr_slave_1: entered promiscuous mode
[  339.389419][T10061] debugfs: 'hsr0' already exists in 'hsr'
[  339.389444][T10061] Cannot create hsr debugfs directory
[  339.474186][T10120] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1271'.
[  339.676042][T10124] openvswitch: netlink: Key 7 has unexpected len 0 expected 12
[  339.758785][T10061] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  339.770223][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  339.771482][T10061] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  339.796430][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  339.798931][T10061] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  339.820022][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  339.821011][T10061] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  339.839694][T10061] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  339.853043][   T10] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  339.937033][ T7258] md_update_sb: can't update sb for read-only array md0
[  339.975757][T10061] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.005623][   T10] usb 8-1: unable to get BOS descriptor or descriptor too short
[  340.006323][   T10] usb 8-1: not running at top speed; connect to a high speed hub
[  340.006354][   T10] usb 8-1: New USB device found: idVendor=1a0a, idProduct=0102, bcdDevice=7c.26
[  340.007292][   T10] usb 8-1: config 254 has an invalid interface number: 83 but max is 0
[  340.007316][   T10] usb 8-1: config 254 has no interface number 0
[  340.007355][   T10] usb 8-1: config 254 interface 83 altsetting 128 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  340.007381][   T10] usb 8-1: config 254 interface 83 has no altsetting 0
[  340.045674][   T10] usb 8-1: Dual-Role OTG device on HNP port
[  340.052173][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.052202][   T10] usb 8-1: Product: syz
[  340.052218][   T10] usb 8-1: Manufacturer: syz
[  340.052233][   T10] usb 8-1: SerialNumber: syz
[  340.077714][T10061] 8021q: adding VLAN 0 to HW filter on device team0
[  340.125185][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.125278][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.158177][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.158299][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.210548][T10138] FAULT_INJECTION: forcing a failure.
[  340.210548][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  340.210586][T10138] CPU: 0 UID: 0 PID: 10138 Comm: syz.6.1277 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  340.210620][T10138] Tainted: [L]=SOFTLOCKUP
[  340.210629][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  340.210643][T10138] Call Trace:
[  340.210653][T10138]  <TASK>
[  340.210663][T10138]  dump_stack_lvl+0xe8/0x150
[  340.210701][T10138]  should_fail_ex+0x3eb/0x540
[  340.210739][T10138]  _copy_from_iter+0x1d3/0x1680
[  340.210774][T10138]  ? kernfs_fop_write_iter+0x147/0x540
[  340.210801][T10138]  ? __pfx___mutex_lock+0x10/0x10
[  340.210831][T10138]  ? __pfx__copy_from_iter+0x10/0x10
[  340.210862][T10138]  ? lock_acquire+0x115/0x350
[  340.210908][T10138]  kernfs_fop_write_iter+0x19a/0x540
[  340.210939][T10138]  vfs_write+0x612/0xba0
[  340.210976][T10138]  ? __pfx_vfs_write+0x10/0x10
[  340.211011][T10138]  ? __fget_files+0x3a2/0x420
[  340.211036][T10138]  ? __fget_files+0x2a/0x420
[  340.211065][T10138]  ? fdget+0x1ac/0x250
[  340.211097][T10138]  ksys_write+0x150/0x270
[  340.211126][T10138]  ? __pfx_ksys_write+0x10/0x10
[  340.211166][T10138]  do_syscall_64+0x166/0x520
[  340.211194][T10138]  ? trace_irq_disable+0x3b/0x140
[  340.211221][T10138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.211244][T10138]  ? clear_bhb_loop+0x70/0xc0
[  340.211272][T10138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  340.211292][T10138] RIP: 0033:0x7f2a1679f559
[  340.211312][T10138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  340.211329][T10138] RSP: 002b:00007f2a1762c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  340.211351][T10138] RAX: ffffffffffffffda RBX: 00007f2a16a25fa0 RCX: 00007f2a1679f559
[  340.211368][T10138] RDX: 0000000000000008 RSI: 00002000000017c0 RDI: 0000000000000003
[  340.211383][T10138] RBP: 00007f2a1762c090 R08: 0000000000000000 R09: 0000000000000000
[  340.211396][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  340.211410][T10138] R13: 00007f2a16a26038 R14: 00007f2a16a25fa0 R15: 00007fff535d3958
[  340.211448][T10138]  </TASK>
[  340.447972][   T10] usb_ehset_test 8-1:254.83: probe with driver usb_ehset_test failed with error -32
[  340.625337][ T5728] usb 8-1: USB disconnect, device number 5
[  340.677559][T10145] fuse: fuse_file_passthrough_open: passthrough not enabled
[  341.133380][ T5636] Bluetooth: hci7: command tx timeout
[  341.175006][ T5728] usb 4-1: new full-speed USB device number 85 using dummy_hcd
[  341.200588][T10061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.303129][ T5728] usb 4-1: device descriptor read/64, error -71
[  341.544206][ T5728] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[  341.672824][ T5728] usb 4-1: device descriptor read/64, error -71
[  341.789144][ T5728] usb usb4-port1: attempt power cycle
[  341.800777][T10061] veth0_vlan: entered promiscuous mode
[  341.830999][T10061] veth1_vlan: entered promiscuous mode
[  341.877463][T10179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1282'.
[  341.928730][T10061] veth0_macvtap: entered promiscuous mode
[  341.949751][T10061] veth1_macvtap: entered promiscuous mode
[  341.997007][T10061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.003609][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  342.033990][T10061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.041328][T10181] netlink: 'syz.6.1283': attribute type 10 has an invalid length.
[  342.127385][ T5728] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  342.148535][ T5728] usb 4-1: device descriptor read/8, error -71
[  342.187873][ T8164] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.189017][ T8164] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.189294][ T8164] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.207186][ T8164] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.313365][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.313391][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.383192][ T5728] usb 4-1: new full-speed USB device number 88 using dummy_hcd
[  342.408198][ T8164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.408221][ T8164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.409861][ T5728] usb 4-1: device descriptor read/8, error -71
[  342.437394][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1284'.
[  342.440793][T10184] nbd17: detected capacity change from 0 to 125
[  342.514131][ T5728] usb usb4-port1: unable to enumerate USB device
[  342.694403][   T32] audit: type=1400 audit(2000000155.470:22): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=10197 comm="syz.8.1287"
[  342.862732][ T5728] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  343.015825][ T5728] usb 7-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=1.00
[  343.016923][ T5728] usb 7-1: config index 0 descriptor too short (expected 69, got 51)
[  343.016977][ T5728] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.016996][ T5728] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.019048][ T5728] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.019076][ T5728] usb 7-1: Product: syz
[  343.019092][ T5728] usb 7-1: Manufacturer: syz
[  343.019107][ T5728] usb 7-1: SerialNumber: syz
[  343.087383][ T5728] usb 7-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  343.213104][ T5652] Bluetooth: hci7: command tx timeout
[  343.253741][ T5728] usb 7-1: Error initialising Scarlett Gen 2 Mixer Driver: -90
[  343.354749][ T5728] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -90
[  343.408211][ T5639] udevd[5639]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.461088][ T5793] usb 7-1: USB disconnect, device number 14
[  343.475902][T10211] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  343.475929][T10211] overlayfs: failed to set xattr on upper
[  343.475939][T10211] overlayfs: ...falling back to redirect_dir=nofollow.
[  343.475949][T10211] overlayfs: ...falling back to index=off.
[  343.475957][T10211] overlayfs: ...falling back to uuid=null.
[  343.475965][T10211] overlayfs: ...falling back to xino=off.
[  345.293349][ T5652] Bluetooth: hci7: command tx timeout
[  345.386935][T10184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.420834][ T5636] block nbd17: Receive control failed (result -104)
[  345.539879][ T1708] block nbd2: Possible stuck request ffff8880290ae000: control (read@0,4096B). Runtime 210 seconds
[  345.539966][ T8026] block nbd11: Possible stuck request ffff888029460000: control (read@0,4096B). Runtime 150 seconds
[  345.639605][T10226] netlink: Conntrack attr has 12 unknown bytes
[  345.639641][T10226] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.742788][ T5793] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  345.903458][ T5793] usb 7-1: Using ep0 maxpacket: 8
[  345.904314][ T5793] usb 7-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  345.905891][ T5793] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  345.905944][ T5793] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  345.905970][ T5793] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  345.905995][ T5793] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  345.906020][ T5793] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  345.906065][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.079649][T10249] tipc: Started in network mode
[  346.079684][T10249] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  346.080624][T10249] tipc: Enabled bearer <udp:s>, priority 10
[  346.108751][T10250] futex_wake_op: syz.7.1304 tries to shift op by 144; fix this program
[  346.130481][T10221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.131084][ T5793] usb 7-1: usb_control_msg returned -32
[  346.131139][ T5793] usbtmc 7-1:16.0: can't read capabilities
[  346.166400][T10221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.177621][   T35] INFO: task syz.2.490:7394 blocked for more than 143 seconds.
[  346.177702][   T35]       Tainted: G             L       syzkaller #0
[  346.177741][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.177771][   T35] task:syz.2.490       state:D stack:26488 pid:7394  tgid:7392  ppid:5642   task_flags:0x400140 flags:0x00080002
[  346.177936][   T35] Call Trace:
[  346.177959][   T35]  <TASK>
[  346.177999][   T35]  __schedule+0x17dd/0x5830
[  346.178148][   T35]  ? __pfx___schedule+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  346.178240][   T35]  ? schedule+0x90/0x2b0
[  346.178313][   T35]  schedule+0x164/0x2b0
[  346.178384][   T35]  schedule_preempt_disabled+0x13/0x30
[  346.178441][   T35]  __mutex_lock+0x7c4/0x15a0
[  346.178524][   T35]  ? __mutex_lock+0x5cd/0x15a0
[  346.178607][   T35]  ? bdev_open+0xde/0xd70
[  346.178714][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  346.207023][   T35]  ? disk_block_events+0xab/0x120
[  346.207127][   T35]  ? bdev_open+0xb0/0xd70
[  346.207212][   T35]  bdev_open+0xde/0xd70
[  346.207308][   T35]  blkdev_open+0x461/0x600
[  346.207392][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  346.207473][   T35]  do_dentry_open+0x80e/0x1360
[  346.207615][   T35]  vfs_open_consume+0x4a/0x350
[  346.207699][   T35]  ? path_openat+0x16e1/0x20f0
[  346.207781][   T35]  path_openat+0x16fc/0x20f0
[  346.207903][   T35]  do_file_open+0x23e/0x4a0
[  346.207994][   T35]  ? __pfx_do_file_open+0x10/0x10
[  346.208127][   T35]  ? _raw_spin_unlock+0x28/0x50
[  346.208169][   T35]  ? alloc_fd+0x6af/0x760
[  346.208295][   T35]  do_sys_openat2+0x115/0x200
[  346.208388][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  346.208508][   T35]  ? do_user_addr_fault+0xd3f/0x1480
[  346.208605][   T35]  __x64_sys_openat+0x138/0x170
[  346.208685][   T35]  do_syscall_64+0x166/0x520
[  346.208749][   T35]  ? trace_irq_disable+0x3b/0x140
[  346.240753][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.240840][   T35]  ? clear_bhb_loop+0x70/0xc0
[  346.240922][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.240977][   T35] RIP: 0033:0x7f6fb135fd8e
[  346.241037][   T35] RSP: 002b:00007f6fb229db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  346.241098][   T35] RAX: ffffffffffffffda RBX: 00007f6fb229e6c0 RCX: 00007f6fb135fd8e
[  346.241145][   T35] RDX: 0000000000040000 RSI: 00007f6fb229dc00 RDI: ffffffffffffff9c
[  346.241186][   T35] RBP: 00007f6fb229dc00 R08: 0000000000000000 R09: 0000000000000000
[  346.241226][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  346.241266][   T35] R13: 00007f6fb1626038 R14: 00007f6fb1625fa0 R15: 00007ffd65541638
[  346.241357][   T35]  </TASK>
[  346.241388][   T35] INFO: task syz.1.535:7527 blocked for more than 143 seconds.
[  346.241440][   T35]       Tainted: G             L       syzkaller #0
[  346.241472][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.241491][   T35] task:syz.1.535       state:D stack:26984 pid:7527  tgid:7520  ppid:5644   task_flags:0x400140 flags:0x00080002
[  346.241555][   T35] Call Trace:
[  346.241563][   T35]  <TASK>
[  346.241576][   T35]  __schedule+0x17dd/0x5830
[  346.241710][   T35]  ? __pfx___schedule+0x10/0x10
[  346.241810][   T35]  ? schedule+0x90/0x2b0
[  346.241894][   T35]  schedule+0x164/0x2b0
[  346.241963][   T35]  schedule_preempt_disabled+0x13/0x30
[  346.242023][   T35]  __mutex_lock+0x7c4/0x15a0
[  346.242102][   T35]  ? __mutex_lock+0x5cd/0x15a0
[  346.242186][   T35]  ? bdev_open+0xde/0xd70
[  346.242264][   T35]  ? __pfx___mutex_lock+0x10/0x10
[  346.242364][   T35]  ? disk_block_events+0xab/0x120
[  346.242421][   T35]  ? bdev_open+0xb0/0xd70
[  346.265226][   T35]  bdev_open+0xde/0xd70
[  346.265362][   T35]  blkdev_open+0x461/0x600
[  346.265454][   T35]  ? __pfx_blkdev_open+0x10/0x10
[  346.265535][   T35]  do_dentry_open+0x80e/0x1360
[  346.265645][ 
** replaying previous printk message **
[  346.265645][   T35]  vfs_open_consume+0x4a/0x350
[  346.265721][   T35]  ? path_openat+0x16e1/0x20f0
[  346.265811][   T35]  path_openat+0x16fc/0x20f0
[  346.265934][   T35]  do_file_open+0x23e/0x4a0
[  346.266019][   T35]  ? __pfx_do_file_open+0x10/0x10
[  346.266160][   T35]  ? _raw_spin_unlock+0x28/0x50
[  346.266215][   T35]  ? alloc_fd+0x6af/0x760
[  346.266307][   T35]  do_sys_openat2+0x115/0x200
[  346.266413][   T35]  ? __pfx_do_sys_openat2+0x10/0x10
[  346.266525][   T35]  ? do_user_addr_fault+0xd3f/0x1480
[  346.266594][   T35]  __x64_sys_openat+0x138/0x170
[  346.266674][   T35]  do_syscall_64+0x166/0x520
[  346.266738][   T35]  ? trace_irq_disable+0x3b/0x140
[  346.266810][   T35]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.289273][   T35]  ? clear_bhb_loop+0x70/0xc0
[  346.289397][   T35]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.289480][   T35] RIP: 0033:0x7fb173b5fd8e
[  346.289533][   T35] RSP: 002b:00007fb1749a1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  346.289601][   T35] RAX: ffffffffffffffda RBX: 00007fb1749a26c0 RCX: 00007fb173b5fd8e
[  346.289644][   T35] RDX: 0000000000002001 RSI: 00007fb1749a1c00 RDI: ffffffffffffff9c
[  346.289693][   T35] RBP: 00007fb1749a1c00 R08: 0000000000000000 R09: 0000000000000000
[  346.289726][   T35] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  346.289766][   T35] R13: 00007fb173e26128 R14: 00007fb173e26090 R15: 00007ffd88ac6ed8
[  346.289860][   T35]  </TASK>
[  346.291909][   T35] 
[  346.291909][   T35] Showing all locks held in the system:
[  346.291958][   T35] locks held by pr/ttyS0/34: 2, last CPU#0:
[  346.291999][   T35]  #0: ffffffff90033f58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60
[  346.292169][   T35]  #1: ffffffff9c292918 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0
[  346.292323][   T35] locks held by khungtaskd/35: 1, last CPU#1:
[  346.292362][   T35]  #0: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  346.308244][   T35] locks held by klogd/4994: 1, last CPU#1:
[  346.308306][   T35]  #0: ffff8880382a7180 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130
[  346.308493][   T35] locks held by getty/5395: 2, on CPU#1:
[  346.308534][   T35]  #0: ffff88803576b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  346.308692][   T35]  #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  346.308837][   T35] locks held by syz-executor/5626: 1, last CPU#1:
[  346.308879][   T35]  #0: ffff888035748340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40
[  346.309062][   T35] locks held by udevd/5638: 1, on CPU#0:
[  346.309106][   T35]  #0: ffff888028fb6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.309255][   T35] locks held by udevd/5639: 1, last CPU#1:
[  346.309296][   T35]  #0: ffffffff902b1a70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  346.309435][   T35] locks held by udevd/5650: 1, on CPU#0:
[  346.309475][   T35]  #0: ffff88802939f350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.309670][   T35] locks held by udevd/5901: 1, on CPU#0:
[  346.309711][   T35]  #0: ffff888029192350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.320474][   T35] locks held by udevd/5902: 1, on CPU#1:
[  346.320530][   T35]  #0: ffff888028eb3350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.320694][   T35] locks held by udevd/5904: 1, on CPU#0:
[  346.320735][   T35]  #0: ffff888028fb2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.320890][   T35] locks held by udevd/6495: 1, on CPU#0:
[  346.320931][   T35]  #0: ffff8880292a2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.321086][   T35] locks held by udevd/6510: 1, on CPU#0:
[  346.321127][   T35]  #0: ffff88807f590350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.321272][   T35] locks held by udevd/6512: 1, on CPU#1:
[  346.321312][   T35]  #0: ffff888029076350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.321465][   T35] locks held by udevd/6514: 1, on CPU#1:
[  346.321505][   T35]  #0: ffff888028ef6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.321655][   T35] locks held by udevd/6781: 1, on CPU#1:
[  346.321696][   T35]  #0: ffff88807cfaa350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.433803][   T35] locks held by udevd/7192: 1, on CPU#0:
[  346.433854][   T35]  #0: ffff88802907b350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.434009][   T35] locks held by syz.2.490/7394: 1, on CPU#0:
[  346.434051][   T35]  #0: ffff888028fb6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.434206][   T35] locks held by syz.1.535/7527: 1, on CPU#0:
[  346.434240][   T35]  #0: ffff888028fb2350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.434397][   T35] locks held by kworker/u8:24/8342: 4, on CPU#1:
[  346.434438][   T35]  #0: ffff88813fe64148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  346.434618][   T35]  #1: ffffc90003517c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  346.434790][   T35]  #2: ffffffff8ffe6210 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20
[  346.434954][   T35]  #3: ffffffff9023cb80 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240
[  346.452461][   T35] locks held by syz.0.1128/9595: 1, on CPU#0:
[  346.452522][   T35]  #0: ffff88802939f350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x276/0x470
[  346.452855][   T35] locks held by syz.4.1188/9850: 2, on CPU#0:
[  346.452898][   T35]  #0: ffff88807aa0c0e8 (&type->s_umount_key#95/1){+.+.}-{4:4}, at: sget_fc+0x9cf/0x1a60
[  346.453074][   T35]  #1: ffff888029076350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  346.453229][   T35] locks held by syz-executor/10061: 4, last CPU#1:
[  346.453270][   T35]  #0: ffffffff9023a610 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10a/0x470
[  346.453415][   T35]  #1: ffff88813fe52800 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10
[  346.453578][   T35]  #2: ffff88803566ccc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10
[  346.453754][   T35]  #3: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  346.453918][   T35] locks held by syz.7.1304/10250: 3, last CPU#1:
[  346.453960][   T35]  #0: ffffffff916be6a0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70
[  346.507707][   T35]  #1: ffffffff9015a4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[  346.507805][   T35]  #2: ffff8880b833c360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[  346.511094][   T35] 
[  346.511123][   T35] =============================================
[  346.511123][   T35] 
[  346.511152][   T35] NMI backtrace for cpu 1
[  346.511195][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  346.511285][   T35] Tainted: [L]=SOFTLOCKUP
[  346.511305][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  346.511354][   T35] Call Trace:
[  346.511375][   T35]  <TASK>
[  346.511397][   T35]  dump_stack_lvl+0xe8/0x150
[  346.511483][   T35]  nmi_cpu_backtrace+0x274/0x2d0
[  346.511557][   T35]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  346.511651][   T35]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  346.511722][   T35]  sys_info+0x135/0x170
[  346.511806][   T35]  watchdog+0x1073/0x10f0
[  346.511897][   T35]  ? watchdog+0x209/0x10f0
[  346.511986][   T35]  kthread+0x38b/0x480
[  346.512040][   T35]  ? __pfx_watchdog+0x10/0x10
[  346.512102][   T35]  ? __pfx_kthread+0x10/0x10
[  346.512169][   T35]  ret_from_fork+0x514/0xb70
[  346.512233][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  346.512292][   T35]  ? __switch_to+0xc78/0x1410
[  346.512375][   T35]  ? __pfx_kthread+0x10/0x10
[  346.512439][   T35]  ret_from_fork_asm+0x1a/0x30
[  346.512578][   T35]  </TASK>
[  346.513088][   T35] Sending NMI from CPU 1 to CPUs 0:
[  346.513169][    C0] NMI backtrace for cpu 0
[  346.513185][    C0] CPU: 0 UID: 0 PID: 34 Comm: pr/ttyS0 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  346.513212][    C0] Tainted: [L]=SOFTLOCKUP
[  346.513219][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  346.513230][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  346.513255][    C0] Code: e8 6e 7c 3a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6f 4d b1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  346.513271][    C0] RSP: 0018:ffffc90000aa78b8 EFLAGS: 00000002
[  346.513288][    C0] RAX: 1ffffffff3852500 RBX: 00000000000003fd RCX: 0000000000000000
[  346.513301][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  346.513313][    C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  346.513326][    C0] R10: dffffc0000000000 R11: ffffffff858ecdb0 R12: dffffc0000000000
[  346.513341][    C0] R13: 0000000000000000 R14: ffffffff9c292940 R15: 0000000000000000
[  346.513353][    C0] FS:  0000000000000000(0000) GS:ffff88812337c000(0000) knlGS:0000000000000000
[  346.513369][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  346.513383][    C0] CR2: 00007fbd96831ff8 CR3: 0000000049ed6000 CR4: 00000000003526f0
[  346.513400][    C0] Call Trace:
[  346.513407][    C0]  <TASK>
[  346.513416][    C0]  wait_for_lsr+0x184/0x2f0
[  346.513448][    C0]  __serial8250_console_fifo_write+0xcd/0x3e0
[  346.513478][    C0]  serial8250_console_write+0xa7e/0x1200
[  346.513504][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  346.513523][    C0]  ? __schedule+0x17f3/0x5830
[  346.513553][    C0]  nbcon_emit_next_record+0xef5/0x1a90
[  346.513585][    C0]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  346.513611][    C0]  ? nbcon_context_try_acquire+0x819/0xbd0
[  346.513642][    C0]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  346.513664][    C0]  nbcon_kthread_func+0x6d9/0x8d0
[  346.513689][    C0]  ? nbcon_kthread_func+0x163/0x8d0
[  346.513709][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  346.513735][    C0]  ? __kthread_parkme+0x71/0x1f0
[  346.513763][    C0]  ? __kthread_parkme+0x199/0x1f0
[  346.513792][    C0]  kthread+0x38b/0x480
[  346.513810][    C0]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  346.513831][    C0]  ? __pfx_kthread+0x10/0x10
[  346.513850][    C0]  ret_from_fork+0x514/0xb70
[  346.513869][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  346.513887][    C0]  ? __switch_to+0xc78/0x1410
[  346.513914][    C0]  ? __pfx_kthread+0x10/0x10
[  346.513933][    C0]  ret_from_fork_asm+0x1a/0x30
[  346.513970][    C0]  </TASK>
[  346.550685][   T35] Kernel panic - not syncing: hung_task: blocked tasks
[  347.553396][   T35] CPU: 1 UID: 0 PID: 35 Comm: khungtaskd Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  347.564179][   T35] Tainted: [L]=SOFTLOCKUP
[  347.568520][   T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  347.578595][   T35] Call Trace:
[  347.581892][   T35]  <TASK>
[  347.584837][   T35]  vpanic+0x26f/0x710
[  347.588841][   T35]  panic+0xc5/0xd0
[  347.592672][   T35]  ? __pfx_panic+0x10/0x10
[  347.597108][   T35]  ? preempt_schedule_common+0x7f/0xd0
[  347.602593][   T35]  ? preempt_schedule_thunk+0x16/0x40
[  347.607994][   T35]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  347.614203][   T35]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  347.620382][   T35]  watchdog+0x10e7/0x10f0
[  347.624785][   T35]  ? watchdog+0x209/0x10f0
[  347.629233][   T35]  kthread+0x38b/0x480
[  347.633321][   T35]  ? __pfx_watchdog+0x10/0x10
[  347.638018][   T35]  ? __pfx_kthread+0x10/0x10
[  347.642635][   T35]  ret_from_fork+0x514/0xb70
[  347.647252][   T35]  ? __pfx_ret_from_fork+0x10/0x10
[  347.652376][   T35]  ? __switch_to+0xc78/0x1410
[  347.657083][   T35]  ? __pfx_kthread+0x10/0x10
[  347.661694][   T35]  ret_from_fork_asm+0x1a/0x30
[  347.666510][   T35]  </TASK>
[  347.670162][   T35] Kernel Offset: disabled
[  347.674507][   T35] Rebooting in 86400 seconds..