last executing test programs:

9m30.976538475s ago: executing program 0 (id=496):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1fffff, 0xa3ab)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/141)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/uevent_seqnum', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000007040)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6b0426ef94fc5508fcbdd38ea030ace404dc5636d83db2bc6dc08bbd39917a29dbcf50b1110543c388d935c307f827249aea7869a7d1c7fc6f8acb708b", @ANYRESOCT=r8, @ANYRES32=r6, @ANYRES32=r6, @ANYRESDEC=r7, @ANYRES8=0x0, @ANYRESOCT=r9])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0x490420, 0x4}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r11 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000680)={0x0, @default, @bpq0, 0x89, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
dup(r2)

9m30.83561802s ago: executing program 0 (id=498):
r0 = socket(0xa, 0x3, 0x3a)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x38)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x4}, 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x89f, 0x8, 0x1]}}, 0x5c)

9m30.810708568s ago: executing program 0 (id=499):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r3})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000, r4})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x2120129, r4})
r6 = socket$inet(0x2, 0x3, 0x6)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r7, &(0x7f00000001c0), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000640)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}, {{0x2, 0x1}, {0x3, 0x0, 0x0, 0x1}}], 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000440)={{0x2, 0x0, @remote}, {0x6, @random="00000000c100"}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}})
r8 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r8, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c)
bind$inet6(r8, &(0x7f0000d84000)={0xa, 0x402, 0x0, @local, 0x10}, 0x1c)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x200, 'syz1\x00', @bcast, 0xb, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast]})

9m30.679191447s ago: executing program 0 (id=501):
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000000400)="32bfa34b88635bcf87", 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x191)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000041000010000000000000000000300000a14000000180a0101000000000000000001000005140000001100010000000000000000000a00000a"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000080)="f06830", 0x3)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) (async)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0)
syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000480)={0x20, 0x7}, 0x0, 0x0}) (async)
syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000480)={0x20, 0x7}, 0x0, 0x0})
chdir(&(0x7f00000001c0)='./bus\x00') (async)
chdir(&(0x7f00000001c0)='./bus\x00')
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0xc0189436, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9, 0x3})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x3, 0x1000)
userfaultfd(0x80001) (async)
r7 = userfaultfd(0x80001)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

9m29.632450255s ago: executing program 0 (id=508):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r2=>0x0) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x2020) (async, rerun: 32)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
epoll_create1(0x80000) (async, rerun: 64)
r5 = socket(0x10, 0x3, 0x9) (async, rerun: 64)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x7fffffffffffffff)
r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r8 = fsmount(r7, 0x0, 0x0)
r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) (async)
r10 = fcntl$getown(r7, 0x9)
prlimit64(r10, 0x0, &(0x7f0000000200)={0x90, 0x492f}, &(0x7f0000000380)) (async)
write$cgroup_subtree(r9, &(0x7f0000000040)={[{0x2d, 'pids'}]}, 0x6) (async)
write$cgroup_subtree(r9, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) (async)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f00000001c0)={r6, r1, 0x2})
r11 = dup(r1)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64)
r12 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$netlink(r12, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}]}, 0x24}], 0x1}, 0x0)
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) (async)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f000df06712e9000d2f8db0049d90", 0x1e}, {&(0x7f0000000340)='$\x00', 0x2}], 0x2)

9m29.0588146s ago: executing program 0 (id=510):
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x1c, 'syz1\x00', @bcast, 0xb, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})

9m28.815569658s ago: executing program 32 (id=510):
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2507000000080001000100000008000500020000000a0004007770616e330000000c0017000201aa"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x1c, 'syz1\x00', @bcast, 0xb, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})

7m45.504171329s ago: executing program 4 (id=1050):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x3)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000580)={0x40, 0x17, 0x1, "c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)=ANY=[@ANYBLOB="407c01000000e4"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000100)={0x0, 0xb, 0xe8, {0xe8, 0x23, "339a04c1af546c250e6bc1b38ab9af901fc4a3b9d427a74f86f75b3357dd8811b9185af6bb29ab568703e1000595a74f94204ec556c55ce1ee9e2b161c3b86e68d12a073f99ad85dd6b6acd4962c368078b7142bcdffdded98bba7df89b9eed9d5759e3af1046c61d1065d1146140d113015840c203d56132c89ad2eb9d2af3301afcb5d702c49ffb0fa952286221f181086fa8390747aa59da64c38972d0cb6937ba920e8cac37cb90b483298a9ace1f662083743bd1836461980b9e7a33f838aa53d8891ffd2a59eb7cbaf80e112083e03f5532e9f5571b8253569df191ce5c40246410c4e"}}, &(0x7f0000000200)={0x0, 0x3, 0xf7, @string={0xf7, 0x3, "17a8daa6c953474c91ac8f7fcf6853a56bee0641c53949831e5f875bfbc8053feccff01276ad1a93e5191d6fc8d68a70156a954960c32201c260c1494614bef06989a2c618c23367e6dfe143051a9c18feb91db8aebe47ce023a0a22b959621b82bb4893898c40c34457201e9ee9bb4aadcab394e17e9bcc54d6bee9476cf716a1652888e12628074f74e60d40d53b2e7855b1308c09bff6cfd5ccadd3b9d95f80bf6f77d8561b3ec41f89a3572002d6f2f2a5a042f3e61c455fe17cecbbee78461fea9faa23dd2af531083a4f5d10b1ceadb2b64ea0ff8e59814aabcbf839a153a4d47b43a4409aa7cfa341d225bd37b72bbd3953"}}, &(0x7f0000000000)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0xd, "4c54c7b6"}, @global=@item_4={0x3, 0x1, 0x7, "572784b0"}, @main=@item_4={0x3, 0x0, 0xb, "7d208385"}, @local=@item_012={0x2, 0x2, 0x3, "a14b"}, @main=@item_012={0x0, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "e82a"}]}}, &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0xc3d}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000340)={0x20, 0x13, 0x36, "2391027298c4462c09aa6fd5677a43b3a62254a07c7d0d6f3fc72a6e7fee3a42fa811fc278203d9444b63c330dfd01c4ac57844d9532"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000640)={0x20, 0x1, 0xc6, "5ef8e67a0ecdd66c1f282618f90711ea453dce15a862cd02ff0ec37420c2171cfa9e6a0b56ba21f8e2bac3e764250bae97d75ed755a5685a2553077cf26f9d0bd318a3f1ccbbdfbed94ad549d923245d318d3b90f5237c23934adcb461a119d1ced9b73e96e25e71b05943e0f29348d90a6dfefd74dfcb7546fe1b3bb495af15b0edf2b2949b463e2682855e877a6308baa71b0b755d858065b25699d1c0d1aae87621b5ce5244a82f3b9b3b7240f7df5150bb578a855ff598de05f26418a0e92a9a5704ef06"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x9}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

7m43.395655261s ago: executing program 4 (id=1067):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0xc4c03d16, 0x0) (async)
close_range(r0, r0, 0x0)

7m43.389086725s ago: executing program 4 (id=1068):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m43.262787563s ago: executing program 4 (id=1070):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x8, 'syz1\x00', @null, 0xfff, 0x3, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]})
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r6, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @bcast, 0xb, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @bcast]})
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000840)=ANY=[], 0x166)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00'})

7m42.396864009s ago: executing program 4 (id=1077):
r0 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580, 0x0, 0xfffffffc}, &(0x7f0000000100), &(0x7f0000000300))
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
accept$inet6(r1, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(r2, 0x0, 0x15, 0x0, &(0x7f0000000240))
ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x2000}], 0x2, 0x0, 0x0, 0x0)

7m41.461762526s ago: executing program 4 (id=1087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_get_self_attr(0x68, 0x0, &(0x7f0000000ac0), 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x20c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x628c1e38fd9fb755}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}]}, 0x20c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
lsm_get_self_attr(0x0, &(0x7f0000000140)={0x0, 0x0, 0x3a, 0x1a, ""/26}, &(0x7f0000000180)=0x3a, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfefe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x7, 0x200})

7m26.401814131s ago: executing program 33 (id=1087):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
lsm_get_self_attr(0x68, 0x0, &(0x7f0000000ac0), 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0x20c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x628c1e38fd9fb755}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}]}, @CTA_EXPECT_MASTER={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}]}, 0x20c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
lsm_get_self_attr(0x0, &(0x7f0000000140)={0x0, 0x0, 0x3a, 0x1a, ""/26}, &(0x7f0000000180)=0x3a, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfefe}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x7, 0x200})

4m41.839117141s ago: executing program 5 (id=2160):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a320000ef000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

4m41.837651682s ago: executing program 5 (id=2161):
syz_open_dev$sndpcmc(&(0x7f00000007c0), 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x9, 0x4000)
mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x100000c, 0x12, r0, 0x83000000)

4m41.798845657s ago: executing program 5 (id=2162):
capset(0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x1, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x2, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@main=@item_012={0x2, 0x0, 0x8, "a776"}, @global=@item_4={0x3, 0x1, 0x3, "992d9b12"}]}}, 0x0}, 0x0)
write$tun(0xffffffffffffffff, &(0x7f00000022c0)=ANY=[@ANYBLOB="0a000010ffffffffffffcf3f53f449aa86dd69ee052000282900fc020000000000000000000000000001ff02000000000000000000000000000133020000000000000710000000030200020000000000000000001300000000000000040004300000"], 0x62)

4m40.171471024s ago: executing program 5 (id=2172):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0xa, 0x1ff, 0x1})
r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r2, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000640)={0xd, 0x1, 0x1, {0xa, @pix_mp={0x7, 0xd, 0x59555956, 0x4, 0x0, [{0x6, 0xff}, {0x6, 0x1ff}, {0x0, 0x4}, {0x1b72, 0xfffffff8}, {0x0, 0xfffffffe}, {0x146, 0x4}, {0xbdd}, {0x8, 0x1000}], 0x4, 0x80, 0x2, 0x0, 0x6}}, 0x4319})

4m40.094934212s ago: executing program 5 (id=2173):
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000140)=[0x1], 0x0, 0x2)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

4m37.00670822s ago: executing program 5 (id=2184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xd07b627b, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xd07b627b, 0x4)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000880)="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", 0x3ec}], 0x1)
socket(0xa, 0x5, 0x0) (async)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000080)=0x40000002, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xe2c585e5}, 0x1c)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
r8 = dup(r7)
dup3(r8, r7, 0x0) (async)
r9 = dup3(r8, r7, 0x0)
write$UHID_SET_REPORT_REPLY(r9, 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000100)={0x1b0000, 0x0, {[0x8, 0x0, 0x7, 0x2, 0x87ca, 0x5, 0x7, 0xa]}})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r6, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r6, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f00000003c0)='3', 0x1}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f00000003c0)='3', 0x1})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r6, 0x0, &(0x7f0000000280)="b9", 0x1, 0x121})
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, r6, 0x8, 0x7ffffffd}) (async)
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, r6, 0x8, 0x7ffffffd})
ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) (async)
ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000))

4m21.594263489s ago: executing program 34 (id=2184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xd07b627b, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0xd07b627b, 0x4)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) (async)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r3, &(0x7f0000000040)=[{&(0x7f0000000880)="370797894c6e186d5e7a7aa20ec4ecb86e7948f9812016e60ef4a28112706ff49c731aa3e96d92fa250cdc0a97a1adf4aa491c55dade7333967c53e8219e775ea5a8c0f4e439642132aa1858a360c2785a2c7876eb08577b04cbb53cf717539e8fdc1fdc979e5615c6f5691c85d54d68bd2ee05f6c94942072a00b1c5e628b36c32e561ad288b06ba4e66ce626170cc45337530312a9935fd2ce10bb928234890c4102555c523c9f27e9980a8e600080ba15a9508dc68220b43eb6931aae6f88145e38c1ca1912f972b0df373f1b70c2a06272265aea9a01cf22730906808ca147ccad88862e57906d47053a9d96abca8ea63e568072dfac6f65034b963c105774cd4ecae74b76dad09825ede1991c53228a7ae4e7f3d98afe4b26568a76277cefa9c2a71057e84eca82a15eb3085379baf3f63e9f851b95d48c4e6dc339121af2040c24d7aa55835830932ff67d2feeeb27a01027c057a6416ea32e6ef8e3be8309458bc52404cc8fb1dd2f4dc67f1a83a1d9b19f2633e0c8a1238db58babb3c5ba8bfa52865e747d0bb4b7e491ab06fe4bcab312c3e236ec55cac5ac6ff3f5c91d4f8ba202d68e3b40bde01a44d6a1587b3671f7425356c9d3a6ba7508873098484c70087ba3e1d020b6da1fa86b5219a5ff0e1b795aa4820d8e7a0df3e991444b29c69b06648c3d8fb1ec94ce37bed6ed530d6d361a6ac63ba03ca48c8bf3d2f3e320dec49a51fc0d2418f3f89e3571838d8c7dd74ff7a9a746b9555a8eca95f52382267b01c4d9989b634a0df9d3ef06eb030a7baa417b1a3d7002782acf618d3aa2d15637bf3d09b190f373ee1290a57229f7b5e766ce8b79a00f13e4680639fdac7b4298a65019c0bd6575906d0bf122b3e9409fa6db549e969dc60f789ca3b8bfbf93c8b4f33910182a29a54f9c334d86289e63680c1fb9a8622dae01e1dcbffd498e17ca5895cc286a542fe7da038271be4d1a2e329c09353a47bd4d8d60d3b276c3f8904ee127454a522863c8379e6137fee5bf67a56d1e974d89cbbead391f80bc847702e498c53e3b4a0464ccfc50e0e3dc6f25fbb0753fcc213ad17f80b2df3b4641545f452e9da50d46097b4371e661e54f8fb2a13ec66280b393a94458a58fd1c1a788de85d4c61d2e2c081c7d6dc07cd1e64ca2a1e3d6af409f9d8f7232620c18898155da06ad43b876a0e4bb14b002a624415448cd03ca62e0de7059756e8fb7fff4785a3a2b6607f2811de49f54cd97f1766f4a338df17f16ce99320bd18e6a297db3529ff03fca6b92e25745da289c4142a6d4523c439753a9572440f84123999f4eaf26921b9a2881ede6bea0355839fbb83b214e13b2f11f8e4795c21aaae00fcb4ffcb96240ef661272d8aaa4c132726edcd0f505ee1e5432f0e8957262ca1b5d52", 0x3ec}], 0x1)
socket(0xa, 0x5, 0x0) (async)
r4 = socket(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000080)=0x40000002, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0xe2c585e5}, 0x1c)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0)
r8 = dup(r7)
dup3(r8, r7, 0x0) (async)
r9 = dup3(r8, r7, 0x0)
write$UHID_SET_REPORT_REPLY(r9, 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r12, 0x4048ae9b, &(0x7f0000000100)={0x1b0000, 0x0, {[0x8, 0x0, 0x7, 0x2, 0x87ca, 0x5, 0x7, 0xa]}})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r6, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r6, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000580)={0x28, 0x6, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f00000003c0)='3', 0x1}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r6, 0x0, &(0x7f00000003c0)='3', 0x1})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5}) (async)
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000000100)="ee", 0x1, 0xbe5})
ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r6, 0x0, &(0x7f0000000280)="b9", 0x1, 0x121})
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, r6, 0x8, 0x7ffffffd}) (async)
ioctl$IOMMU_IOAS_UNMAP(r5, 0x3b86, &(0x7f0000000240)={0x18, r6, 0x8, 0x7ffffffd})
ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000)) (async)
ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0xc0044dff, &(0x7f0000004000))

1m59.65141844s ago: executing program 1 (id=2995):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
r1 = fcntl$dupfd(r0, 0x406, r0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x800e805)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x8905, &(0x7f0000000040))
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r4, &(0x7f0000002c80)={0x2020}, 0x2020)

1m59.638689635s ago: executing program 1 (id=2996):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000924010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1m59.584465732s ago: executing program 1 (id=2997):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ac0)={0x550, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1a}}}}, [@NL80211_ATTR_PROBE_RESP={0x52e, 0x91, "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"}]}, 0x550}}, 0xc020)
recvmsg$can_raw(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x600, 0x0)
write$FUSE_IOCTL(r2, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x8, 0x4, 0x0, 0x3}}, 0x20)

1m59.50250194s ago: executing program 1 (id=2998):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33)
write$cgroup_netprio_ifpriomap(r2, &(0x7f00000010c0)=ANY=[@ANYBLOB="00000015cb000000"], 0x8)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x6, 0x4, 0x34565348, 0x36314d59, [0x3], [0xdb83, 0x6], 0x1}})
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
syz_usb_ep_write(r4, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1")
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1})
shutdown(r0, 0x0)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200", @ANYRES16], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001600)={r5}, &(0x7f0000000180)=0x8)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000016ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r7, 0x800c5011, &(0x7f00000001c0))
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r9, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r9, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201})
ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r9, r9, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r9, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3})
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r9, 0x0, &(0x7f0000000440)="13", 0x1, 0x7a})
r10 = openat$sndseq(0xffffff9c, &(0x7f0000001640), 0x200)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000001680)={0x92b, 0x2, 0x9, 0xfffff40d, 0xc41, 0x5674})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000001700)={{r3}, "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"})

1m57.838832468s ago: executing program 1 (id=3014):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000960010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1m56.775240797s ago: executing program 1 (id=3019):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x4, 0x4, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r1 = syz_usb_connect_ath9k(0x3, 0x69, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe7, &(0x7f00000005c0)=@generic={0x2, 0x2, 0xdf, "1d3810ef", "13dea80e26e89062ad6d218a9afc11a16f8330f41a3c2198a47d8e822b4be1df035cbf8d694c1e3cbca32f950187f3c218a4ee238d0b0c08027174a751bc9b9291c7dd5aec818c33d884944f28055cc996d028c33162c911c8e4712fc3c82b5894716632042b2ab3ada9b5cc6fc456917d535e2f60e9d3b9855f3c965755f55c983eaf749d6c9d666bf7176fa8ad11a649a5e1115ef18e39601073291bc62d3041f95b4f289c5907a9ca9a3fecd785654070b8951f676815e8ea5445619d4b4e220bd74edf7bd0f37ed6c11939fd497cadce96ebbad886e29245d30e1f3b09"})
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x2)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
landlock_restrict_self(r2, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@l={0x92, 0xa, 0x50, 0x0, 0x8, 0x0, 0x9})
preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file5\x00', 0x2)
pipe2$9p(&(0x7f00000001c0), 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_DO_IT(r5, 0x127d)

1m56.55385287s ago: executing program 35 (id=3019):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10)
ioctl$RTC_PLL_SET(0xffffffffffffffff, 0x40207012, 0x0)
mremap(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffd000/0x2000)=nil)
ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0xffffffffffffffff)
preadv(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000001c0)=""/47, 0x2f}], 0x4, 0x4, 0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0xfffffffffffffeff}, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r1 = syz_usb_connect_ath9k(0x3, 0x69, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xe7, &(0x7f00000005c0)=@generic={0x2, 0x2, 0xdf, "1d3810ef", "13dea80e26e89062ad6d218a9afc11a16f8330f41a3c2198a47d8e822b4be1df035cbf8d694c1e3cbca32f950187f3c218a4ee238d0b0c08027174a751bc9b9291c7dd5aec818c33d884944f28055cc996d028c33162c911c8e4712fc3c82b5894716632042b2ab3ada9b5cc6fc456917d535e2f60e9d3b9855f3c965755f55c983eaf749d6c9d666bf7176fa8ad11a649a5e1115ef18e39601073291bc62d3041f95b4f289c5907a9ca9a3fecd785654070b8951f676815e8ea5445619d4b4e220bd74edf7bd0f37ed6c11939fd497cadce96ebbad886e29245d30e1f3b09"})
quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x100})
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x2)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
landlock_restrict_self(r2, 0x0)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000180)=@l={0x92, 0xa, 0x50, 0x0, 0x8, 0x0, 0x9})
preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000040)=""/185, 0xb9}], 0x1, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file5\x00', 0x2)
pipe2$9p(&(0x7f00000001c0), 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0)
ioctl$NBD_DO_IT(r5, 0x127d)

11.31000702s ago: executing program 6 (id=3729):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002c007000fedbdf25080001000000000008000300"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)

8.206792758s ago: executing program 6 (id=3749):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000))
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})

8.077031877s ago: executing program 6 (id=3753):
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
add_key$keyring(&(0x7f0000000000), &(0x7f00000020c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0xb, 0x2012, r4, 0x82000000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r2, 0xb2, 0xb4, "7fb6360370705ac7871975a5617fa7901547ced21ad1e0448ceb2f5f8aedacfcd343e68c8d8d8c24f4ffe96916d11e2f3ee86a3a5eb78fa9ba8428f3ae9a916a7bdeb6d80b49ab6da7051f19bcda15ceb5ecce988521487487e77048392447b194be9b455d26f429c4a7542ab7fb1e733d468372eba4c3deacca720b1733990ec16777c806be6d7f7e0018265052d0e79d6c8a42afecf3ba2a2be4f81609cf5f4880ba38ce401fb5a459f9dec335adcebfddbde1"}, 0xbc)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x2, 'vlan1\x00', {0x7}, 0xff3})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0)
connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d4})

6.12081847s ago: executing program 3 (id=3766):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002c007000fedbdf25080001000000000008000300"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)

5.030478541s ago: executing program 6 (id=3777):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x80) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xffffffff, 0x6, 0x0, 0x1, 0x200000000000, 0x2, 0x10000, 0x87a, 0x8000000000000, 0x80040000000000, 0x0, 0x9, 0x1, 0x5, 0x10000100000008ca, 0x400008005], 0x80a0000, 0x100c02}) (async)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r3 = socket$kcm(0x2, 0xa, 0x2) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x348, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x404}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9d5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0xae, 0x3, "d1793040cf04efda01fc80a400e83758ae2f2ac1bf9acdae4e4bcc9f0a025d5aaa96c6b755f14bcd373a8411d8ffdbcb3d1dc7879a0c8010fdcd9741219ba18c72a1a71277d5005303642f042b47a1b713a94526d042f4eecb76fa0512cbe360161dac047e9a1732c96617298f1979a69f2f4413c002fbf6accdd612fa6a0a5e8efc8bc7f2ef1c0ca1bd4d4d15459e17001bc682e4c9f1e466e2fb96374a9b5225e99e73699ac8c28da0"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "1b33eb75de503cf66845143c7033beb4c5649af14ffa1fd026855a9bd1949f09ab"}}, @TIPC_NLA_NODE_ID={0x5f, 0x3, "3a7e135dde90e6d80158a1f8eba58f6361144c05aebd9976ca3ab8f00fdc989e2e3ce2f8e28846d9c4b93e93c166851a4d67ca9c7e2619841b16714464c856ac10e47021334ef7f173e09064b9b50278a898aed966b12da11b83b4"}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6af}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4010}, 0xc010) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
write$tun(r0, &(0x7f0000000480)={@val, @void, @eth={@random="c98f0b33dc4c", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x2, 0x6, 0x0, @void}, "134a3185f7b1806ddfe808783210947f8bd182344a7e976d7d870d0969cd71fb"}}}}}}}, 0x52)

4.792542933s ago: executing program 6 (id=3778):
accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) (async)
r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
set_mempolicy(0x1, &(0x7f0000000e80)=0x35ba, 0x400000000007582)
syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0)

3.041771057s ago: executing program 3 (id=3789):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
setresuid(0x0, 0x0, 0xee00)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$overlay(0x200000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2.85422008s ago: executing program 3 (id=3792):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x1, 0x803}}}, 0x7)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x32600)
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @time={0x24}, {}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0x6, 0x0, 0x1, 0x81, @tick=0xffffff00, {0x8, 0x30}, {0x2}, @time=@tick=0x1}], 0x38)
write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'rlimit'}, {0x2b, 'rlimit'}, {0x2b, 'perf_event'}, {0x2b, 'memory'}, {0x2b, 'cpuset'}]}, 0x2c)

2.65558633s ago: executing program 3 (id=3794):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})

2.55535476s ago: executing program 3 (id=3795):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, 0x0, 0xc8)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x800)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0x40045612, &(0x7f0000000140)={0x8, 0x1, 0x0, "1c13ccdaf2f20d55806b26b1d750185fd75ac200", 0x2036315a})
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x19}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/92, 0x5c}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2}, 0x0)

2.514878526s ago: executing program 6 (id=3797):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000101401002c007000fedbdf25080001000000000008000300"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)

2.322931427s ago: executing program 7 (id=3799):
openat$dsp1(0xffffffffffffff9c, 0x0, 0x82, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
add_key$keyring(0x0, &(0x7f00000020c0)={'syz', 0x0}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0xb, 0x2012, r4, 0x82000000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r2, 0xb2, 0xb4, "7fb6360370705ac7871975a5617fa7901547ced21ad1e0448ceb2f5f8aedacfcd343e68c8d8d8c24f4ffe96916d11e2f3ee86a3a5eb78fa9ba8428f3ae9a916a7bdeb6d80b49ab6da7051f19bcda15ceb5ecce988521487487e77048392447b194be9b455d26f429c4a7542ab7fb1e733d468372eba4c3deacca720b1733990ec16777c806be6d7f7e0018265052d0e79d6c8a42afecf3ba2a2be4f81609cf5f4880ba38ce401fb5a459f9dec335adcebfddbde1"}, 0xbc)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000040)={0x2, 'vlan1\x00', {0x7}, 0xff3})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
syz_usb_connect(0x5, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f0130090904ab020002af27cf052406000005240008000d240f0106000000018002000d0904"], 0x0)
connect$vsock_stream(r0, &(0x7f0000000240)={0x28, 0x0, 0x2710, @host}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d4})

2.322624394s ago: executing program 3 (id=3800):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0xa6, 0xa2, 0xe1, 0x8, 0xa2c, 0x8, 0x72b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x10, 0x7, [{{0x9, 0x4, 0x62, 0x9, 0x0, 0x3, 0x47, 0xfd, 0x6d}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000d80)={{0x12, 0x1, 0x310, 0xa6, 0xa2, 0xe1, 0x8, 0xa2c, 0x8, 0x72b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x10, 0x7, [{{0x9, 0x4, 0x62, 0x9, 0x0, 0x3, 0x47, 0xfd, 0x6d}}]}}]}}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
preadv(r2, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/36, 0x24}], 0x2, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000001480)=@vmx={0x0, 0x0, 0x2080, {0x2, 0x0, {}, 0x1, 0x2}})
lgetxattr(0x0, 0x0, 0x0, 0x0) (async)
lgetxattr(0x0, 0x0, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000000)={0x2d00, 0x3}, 0x3, 0x0) (async)
landlock_create_ruleset(&(0x7f0000000000)={0x2d00, 0x3}, 0x3, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.398723446s ago: executing program 2 (id=3809):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x1})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @null, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x0, 0x0, 0x4}}, 0x18)

1.22736315s ago: executing program 2 (id=3810):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0xfffffffffffff001, 0x85d}) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) (async)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x180380)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, 0x0) (async)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, 0x1c) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x11283000)

1.157740888s ago: executing program 2 (id=3811):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x100)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300009000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

1.129759196s ago: executing program 2 (id=3812):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
setresuid(0x0, 0x0, 0xee00)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$overlay(0x3a00000000000000, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1.086513948s ago: executing program 2 (id=3813):
syz_usb_connect(0x3, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000077564b10050b3219db32010203010902620001060000000904"], 0x0) (async)
syz_usb_connect(0x3, 0x74, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000077564b10050b3219db32010203010902620001060000000904"], 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)

803.520433ms ago: executing program 7 (id=3814):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x260081, 0x0)
fcntl$getflags(r0, 0x3)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@dontfrag={{0x0, 0x29, 0x3e, 0x7eb7}}], 0x18}}], 0x1, 0x20000091)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0xf, 0x1, 0x803}}}, 0x7)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_CLEAR_DIRTY_LOG(r4, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe90, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]})
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x29})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x15)
ioctl$TIOCSSOFTCAR(r2, 0x5412, &(0x7f00000001c0)=0x13)
r6 = dup(r0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000013b80)=ANY=[@ANYBLOB="280000001b1401"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24008005}, 0x8094)
sendmsg$nl_xfrm(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@getsadinfo={0x44, 0x23, 0x300, 0x70bd25, 0x25dfdbfe, 0x0, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @address_filter={0x28, 0x1a, {@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0xa, 0x2, 0x8}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100))
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000740)=[@increfs, @clear_death], 0x0, 0x0, 0x0})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRESHEX=r2], 0x32615)
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x640002, 0x0)
ioctl$TUNSETSNDBUF(r12, 0x400454d4, &(0x7f0000000080)=0x3)

654.955284ms ago: executing program 7 (id=3815):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x7ffffffe, @bcast, @bpq0, 0x200, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})

654.731519ms ago: executing program 7 (id=3816):
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='FROZEN\x00', 0x7)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})

569.810628ms ago: executing program 7 (id=3817):
write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807", 0x11)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x40, 0x23, 0xe2, {0xe2, 0x23, "c6ba4cf0f967947d3b5254e55910c2cc4294edd5507608a91823984469609dcb039a0a478ec2fb71a172c084ab6cbc10acacc6d2f24765d49997d0f9b98b05b532978ee51de9098ed9fdf1118e46872c90ff2c6b5000688389900bb6aa94ef940c8e6afbd0568beccf3c54a34b59f25830feb05f8174f6e2e9ea4b72ed22aa323f424fcebc61d3f20bb3c4bc20fa6423904cb696d1774da6545f600cbe614fac18e8f593289d8f91bdd297d47e90ba48b28ab15a8fa7ebc4cc3a7c0b5c67f8de48627838c38c3dcc2f3844ad1ec1927a63e524c1413ae13fa26794abe638b514"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000240)={0x40, 0xa, 0xb3, "39f357e0c537d5479c32ca65b3e1b9413f420549a8569cc6b008b6ad71f1a70c12411fdff794fe9a62db5095a6f2013aed4f72fe6099ef74d6afe1c7d13fd9750887a5596af1696abaf45df7133c2365500668117a92e7edd4c23d2bbeb2c8ae4a57af80d9bcd8e8124b656e99711c2a6a0ff7af76612606e7a6ec53ceb4c902c4e6d169fbc8de78c9a19c4673b965ba6e5e8c197340335c447b8d59ae67eaa52fc6bb06fc483991b2df26b1d5d32ea549cf03"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x4}})
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x40010)

592.315µs ago: executing program 7 (id=3818):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0x0, 0x1})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @null, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x1, {0x0, 0x0, 0x4}}, 0x18)

0s ago: executing program 2 (id=3819):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x1, @bcast, @bpq0, 0x200, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xb, 0x1, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @bcast, @bcast]}) (fail_nth: 4)

kernel console output (not intermixed with test programs):

[  683.935438][    T9] usb 4-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  683.946117][    T9] usb 4-1: config 127 has no interface number 1
[  683.952836][    T9] usb 4-1: config 127 interface 171 has no altsetting 0
[  683.962369][    T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  683.971513][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.979495][    T9] usb 4-1: Product: syz
[  683.983787][    T9] usb 4-1: Manufacturer: syz
[  683.988399][    T9] usb 4-1: SerialNumber: syz
[  684.205757][    T9] xr_serial 4-1:127.171: xr_serial converter detected
[  684.214159][    T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  684.220956][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  684.237056][    T9] usb 4-1: USB disconnect, device number 85
[  684.251217][    T9] xr_serial 4-1:127.171: device disconnected
[  684.746896][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0803
[  684.756140][T17673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.771371][T17673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.030127][    T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  685.189780][    T9] usb 4-1: Using ep0 maxpacket: 32
[  685.196769][    T9] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[  685.205020][    T9] usb 4-1: config 0 has no interface number 0
[  685.211210][    T9] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  685.221435][    T9] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  685.233319][    T9] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  685.242618][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.252456][    T9] usb 4-1: Product: syz
[  685.256635][    T9] usb 4-1: Manufacturer: syz
[  685.261378][    T9] usb 4-1: SerialNumber: syz
[  685.268329][    T9] usb 4-1: config 0 descriptor??
[  685.273926][T17676] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  685.281657][T17676] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  685.293149][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  685.390902][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  685.402887][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  685.795712][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  685.950284][T17695] FAULT_INJECTION: forcing a failure.
[  685.950284][T17695] name failslab, interval 1, probability 0, space 0, times 0
[  685.965058][T17695] CPU: 1 UID: 0 PID: 17695 Comm: syz.7.3497 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  685.965085][T17695] Tainted: [L]=SOFTLOCKUP
[  685.965089][T17695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  685.965095][T17695] Call Trace:
[  685.965100][T17695]  <TASK>
[  685.965106][T17695]  dump_stack_lvl+0xe8/0x150
[  685.965125][T17695]  should_fail_ex+0x412/0x560
[  685.965141][T17695]  should_failslab+0xa8/0x100
[  685.965154][T17695]  __kmalloc_cache_noprof+0x88/0x660
[  685.965170][T17695]  ? ovl_init_fs_context+0xa0/0x530
[  685.965185][T17695]  ? __kmalloc_cache_noprof+0x15b/0x660
[  685.965201][T17695]  ovl_init_fs_context+0xa0/0x530
[  685.965214][T17695]  ? mutex_init_lockep+0xf9/0x130
[  685.965229][T17695]  alloc_fs_context+0x9d5/0xd50
[  685.965248][T17695]  do_new_mount+0x187/0xd30
[  685.965259][T17695]  ? apparmor_capable+0x137/0x1a0
[  685.965270][T17695]  ? security_capable+0x7e/0x2c0
[  685.965282][T17695]  ? __pfx_do_new_mount+0x10/0x10
[  685.965293][T17695]  ? ns_capable+0x89/0xe0
[  685.965306][T17695]  ? path_mount+0x690/0x10e0
[  685.965320][T17695]  ? user_path_at+0xd4/0x160
[  685.965343][T17695]  __se_sys_mount+0x31d/0x420
[  685.965358][T17695]  ? __pfx___se_sys_mount+0x10/0x10
[  685.965372][T17695]  ? __x64_sys_mount+0x20/0xc0
[  685.965385][T17695]  do_syscall_64+0xe2/0xf80
[  685.965398][T17695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.965407][T17695]  ? trace_irq_disable+0x37/0x100
[  685.965425][T17695]  ? clear_bhb_loop+0x40/0x90
[  685.965437][T17695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.965447][T17695] RIP: 0033:0x7fec5b39aeb9
[  685.965458][T17695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.965466][T17695] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  685.965478][T17695] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  685.965486][T17695] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  685.965492][T17695] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  685.965498][T17695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.965505][T17695] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  685.965520][T17695]  </TASK>
[  686.269083][T17697] tmpfs: Bad value for 'mpol'
[  686.381314][T17704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.396117][T17704] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.709742][    T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  686.859670][    T9] usb 8-1: Using ep0 maxpacket: 8
[  686.866989][    T9] usb 8-1: config 127 has an invalid interface number: 171 but max is 1
[  686.875759][    T9] usb 8-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  686.886516][    T9] usb 8-1: config 127 has no interface number 1
[  686.893576][    T9] usb 8-1: config 127 interface 171 has no altsetting 0
[  686.903805][    T9] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  686.913767][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.922318][    T9] usb 8-1: Product: syz
[  686.926493][    T9] usb 8-1: Manufacturer: syz
[  686.931136][    T9] usb 8-1: SerialNumber: syz
[  687.146644][    T9] xr_serial 8-1:127.171: xr_serial converter detected
[  687.163747][    T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  687.170783][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  687.187635][    T9] usb 8-1: USB disconnect, device number 24
[  687.197147][    T9] xr_serial 8-1:127.171: device disconnected
[  687.796200][ T5875] usb 4-1: USB disconnect, device number 86
[  687.949640][ T7457] usb 8-1: new full-speed USB device number 25 using dummy_hcd
[  688.034190][T17721] FAULT_INJECTION: forcing a failure.
[  688.034190][T17721] name failslab, interval 1, probability 0, space 0, times 0
[  688.047375][T17721] CPU: 0 UID: 0 PID: 17721 Comm: syz.2.3510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  688.047405][T17721] Tainted: [L]=SOFTLOCKUP
[  688.047411][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  688.047420][T17721] Call Trace:
[  688.047427][T17721]  <TASK>
[  688.047434][T17721]  dump_stack_lvl+0xe8/0x150
[  688.047460][T17721]  should_fail_ex+0x412/0x560
[  688.047477][T17721]  should_failslab+0xa8/0x100
[  688.047489][T17721]  __kmalloc_cache_noprof+0x88/0x660
[  688.047506][T17721]  ? ovl_init_fs_context+0x13c/0x530
[  688.047521][T17721]  ? __kmalloc_cache_noprof+0x15b/0x660
[  688.047536][T17721]  ovl_init_fs_context+0x13c/0x530
[  688.047550][T17721]  ? mutex_init_lockep+0xf9/0x130
[  688.047564][T17721]  alloc_fs_context+0x9d5/0xd50
[  688.047583][T17721]  do_new_mount+0x187/0xd30
[  688.047594][T17721]  ? apparmor_capable+0x137/0x1a0
[  688.047604][T17721]  ? security_capable+0x7e/0x2c0
[  688.047617][T17721]  ? __pfx_do_new_mount+0x10/0x10
[  688.047628][T17721]  ? ns_capable+0x89/0xe0
[  688.047641][T17721]  ? path_mount+0x690/0x10e0
[  688.047654][T17721]  ? user_path_at+0xd4/0x160
[  688.047669][T17721]  __se_sys_mount+0x31d/0x420
[  688.047683][T17721]  ? __pfx___se_sys_mount+0x10/0x10
[  688.047698][T17721]  ? __x64_sys_mount+0x20/0xc0
[  688.047710][T17721]  do_syscall_64+0xe2/0xf80
[  688.047722][T17721]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.047731][T17721]  ? trace_irq_disable+0x37/0x100
[  688.047744][T17721]  ? clear_bhb_loop+0x40/0x90
[  688.047755][T17721]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  688.047765][T17721] RIP: 0033:0x7fbd9f99aeb9
[  688.047776][T17721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  688.047784][T17721] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  688.047795][T17721] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  688.047802][T17721] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  688.047808][T17721] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  688.047814][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  688.047820][T17721] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  688.047834][T17721]  </TASK>
[  688.284037][ T5875] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  688.320939][ T7457] usb 8-1: not running at top speed; connect to a high speed hub
[  688.330835][ T7457] usb 8-1: config 112 has too many interfaces: 98, using maximum allowed: 32
[  688.343059][ T7457] usb 8-1: config 112 descriptor has 1 excess byte, ignoring
[  688.351190][ T7457] usb 8-1: config 112 has 0 interfaces, different from the descriptor's value: 98
[  688.363676][ T7457] usb 8-1: New USB device found, idVendor=0f63, idProduct=2031, bcdDevice=ad.3f
[  688.373670][ T7457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.382893][ T7457] usb 8-1: Product: syz
[  688.387160][ T7457] usb 8-1: Manufacturer: syz
[  688.392412][ T7457] usb 8-1: SerialNumber: syz
[  688.419666][ T5875] usb 4-1: device descriptor read/64, error -71
[  688.591354][ T5836] Bluetooth: hci3: unexpected event for opcode 0x0803
[  688.655973][T17730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3513'.
[  688.659660][ T5875] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  688.798398][ T7457] usb 8-1: USB disconnect, device number 25
[  688.799635][ T5875] usb 4-1: device descriptor read/64, error -71
[  688.930019][ T5875] usb usb4-port1: attempt power cycle
[  689.187111][T17738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.196555][T17738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  689.269686][ T5875] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  689.290548][ T5875] usb 4-1: device descriptor read/8, error -71
[  689.539607][ T5875] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  689.560013][ T5875] usb 4-1: device descriptor read/8, error -71
[  689.669779][ T5875] usb usb4-port1: unable to enumerate USB device
[  689.827950][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  689.883453][T17752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  689.892233][T17752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.029614][ T7457] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  690.179601][ T7457] usb 8-1: Using ep0 maxpacket: 32
[  690.188035][ T7457] usb 8-1: config 255 has an invalid interface number: 207 but max is 0
[  690.197433][ T7457] usb 8-1: config 255 has an invalid descriptor of length 157, skipping remainder of the config
[  690.208642][ T7457] usb 8-1: config 255 has no interface number 0
[  690.215270][ T7457] usb 8-1: config 255 interface 207 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  690.228810][ T7457] usb 8-1: config 255 interface 207 has no altsetting 0
[  690.239211][ T7457] usb 8-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34
[  690.248900][ T7457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.257627][ T7457] usb 8-1: Product: syz
[  690.262178][ T7457] usb 8-1: Manufacturer: syz
[  690.267470][ T7457] usb 8-1: SerialNumber: syz
[  690.447013][T17756] FAULT_INJECTION: forcing a failure.
[  690.447013][T17756] name failslab, interval 1, probability 0, space 0, times 0
[  690.462266][T17756] CPU: 1 UID: 0 PID: 17756 Comm: syz.2.3524 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  690.462296][T17756] Tainted: [L]=SOFTLOCKUP
[  690.462302][T17756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  690.462312][T17756] Call Trace:
[  690.462319][T17756]  <TASK>
[  690.462325][T17756]  dump_stack_lvl+0xe8/0x150
[  690.462344][T17756]  should_fail_ex+0x412/0x560
[  690.462360][T17756]  should_failslab+0xa8/0x100
[  690.462373][T17756]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  690.462398][T17756]  ? vfs_parse_monolithic_sep+0x21d/0x360
[  690.462423][T17756]  kmemdup_nul+0x36/0xf0
[  690.462443][T17756]  vfs_parse_monolithic_sep+0x21d/0x360
[  690.462465][T17756]  ? __pfx_ovl_next_opt+0x10/0x10
[  690.462485][T17756]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  690.462502][T17756]  ? alloc_fs_context+0x9e9/0xd50
[  690.462519][T17756]  do_new_mount+0x304/0xd30
[  690.462533][T17756]  ? apparmor_capable+0x137/0x1a0
[  690.462552][T17756]  ? security_capable+0x7e/0x2c0
[  690.462573][T17756]  ? __pfx_do_new_mount+0x10/0x10
[  690.462592][T17756]  ? ns_capable+0x89/0xe0
[  690.462610][T17756]  ? path_mount+0x690/0x10e0
[  690.462679][T17756]  ? user_path_at+0xd4/0x160
[  690.462792][T17756]  __se_sys_mount+0x31d/0x420
[  690.462910][T17756]  ? __pfx___se_sys_mount+0x10/0x10
[  690.462945][T17756]  ? __x64_sys_mount+0x20/0xc0
[  690.462966][T17756]  do_syscall_64+0xe2/0xf80
[  690.462985][T17756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.463000][T17756]  ? trace_irq_disable+0x37/0x100
[  690.463020][T17756]  ? clear_bhb_loop+0x40/0x90
[  690.463039][T17756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.463128][T17756] RIP: 0033:0x7fbd9f99aeb9
[  690.463147][T17756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.463161][T17756] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  690.463178][T17756] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  690.463187][T17756] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  690.463359][T17756] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  690.463373][T17756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  690.463452][T17756] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  690.463494][T17756]  </TASK>
[  690.795381][ T7457] peak_usb 8-1:255.207 can0: unable to request usb[type=0 value=1] err=-71
[  690.806539][ T7457] peak_usb 8-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71)
[  690.873452][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.884105][ T7457] peak_usb 8-1:255.207: probe with driver peak_usb failed with error -71
[  690.898846][ T7457] usb 8-1: USB disconnect, device number 26
[  690.912459][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.943682][T17764] kthread_run failed with err -4
[  690.998895][T17770] tipc: Can't bind to reserved service type 2
[  691.752552][T17791] FAULT_INJECTION: forcing a failure.
[  691.752552][T17791] name failslab, interval 1, probability 0, space 0, times 0
[  691.766333][T17791] CPU: 0 UID: 0 PID: 17791 Comm: syz.7.3537 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.766353][T17791] Tainted: [L]=SOFTLOCKUP
[  691.766357][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  691.766363][T17791] Call Trace:
[  691.766367][T17791]  <TASK>
[  691.766372][T17791]  dump_stack_lvl+0xe8/0x150
[  691.766391][T17791]  should_fail_ex+0x412/0x560
[  691.766406][T17791]  should_failslab+0xa8/0x100
[  691.766418][T17791]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  691.766436][T17791]  ? ovl_parse_param_lowerdir+0x245/0xab0
[  691.766454][T17791]  kstrdup+0x42/0x100
[  691.766466][T17791]  ovl_parse_param_lowerdir+0x245/0xab0
[  691.766485][T17791]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  691.766504][T17791]  ovl_parse_param+0x504/0xec0
[  691.766520][T17791]  ? __pfx_ovl_parse_param+0x10/0x10
[  691.766534][T17791]  ? rcu_is_watching+0x15/0xb0
[  691.766549][T17791]  ? static_key_count+0x41/0x70
[  691.766563][T17791]  vfs_parse_fs_param+0x1a9/0x420
[  691.766579][T17791]  vfs_parse_monolithic_sep+0x283/0x360
[  691.766593][T17791]  ? __pfx_ovl_next_opt+0x10/0x10
[  691.766606][T17791]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  691.766623][T17791]  ? alloc_fs_context+0x9e9/0xd50
[  691.766640][T17791]  do_new_mount+0x304/0xd30
[  691.766651][T17791]  ? apparmor_capable+0x137/0x1a0
[  691.766661][T17791]  ? security_capable+0x7e/0x2c0
[  691.766674][T17791]  ? __pfx_do_new_mount+0x10/0x10
[  691.766685][T17791]  ? ns_capable+0x89/0xe0
[  691.766698][T17791]  ? path_mount+0x690/0x10e0
[  691.766711][T17791]  ? user_path_at+0xd4/0x160
[  691.766731][T17791]  __se_sys_mount+0x31d/0x420
[  691.766747][T17791]  ? __pfx___se_sys_mount+0x10/0x10
[  691.766761][T17791]  ? __x64_sys_mount+0x20/0xc0
[  691.766774][T17791]  do_syscall_64+0xe2/0xf80
[  691.766786][T17791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.766797][T17791]  ? clear_bhb_loop+0x40/0x90
[  691.766809][T17791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.766819][T17791] RIP: 0033:0x7fec5b39aeb9
[  691.766831][T17791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  691.766839][T17791] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  691.766850][T17791] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  691.766857][T17791] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  691.766864][T17791] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  691.766869][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  691.766875][T17791] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  691.766889][T17791]  </TASK>
[  692.329552][   T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  692.460889][    T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd
[  692.499534][   T10] usb 4-1: Using ep0 maxpacket: 32
[  692.506366][   T10] usb 4-1: config 255 has an invalid interface number: 207 but max is 0
[  692.529382][   T10] usb 4-1: config 255 has an invalid descriptor of length 157, skipping remainder of the config
[  692.549392][   T10] usb 4-1: config 255 has no interface number 0
[  692.556249][   T10] usb 4-1: config 255 interface 207 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  692.570672][   T10] usb 4-1: config 255 interface 207 has no altsetting 0
[  692.581015][   T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34
[  692.590322][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.598476][   T10] usb 4-1: Product: syz
[  692.605170][   T10] usb 4-1: Manufacturer: syz
[  692.610365][   T10] usb 4-1: SerialNumber: syz
[  692.619323][    T9] usb 8-1: Using ep0 maxpacket: 8
[  692.635789][    T9] usb 8-1: config 127 has an invalid interface number: 171 but max is 1
[  692.659354][    T9] usb 8-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  692.670372][    T9] usb 8-1: config 127 has no interface number 1
[  692.672066][T17807] syz.2.3545 (17807): drop_caches: 1
[  692.676862][    T9] usb 8-1: config 127 interface 171 has no altsetting 0
[  692.692631][    T9] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  692.702449][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.710959][    T9] usb 8-1: Product: syz
[  692.715357][    T9] usb 8-1: Manufacturer: syz
[  692.720649][    T9] usb 8-1: SerialNumber: syz
[  692.864838][   T10] peak_usb 4-1:255.207 can0: unable to request usb[type=0 value=1] err=-71
[  692.874363][   T10] peak_usb 4-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71)
[  692.899145][T17807] syz.2.3545 (17807): drop_caches: 1
[  692.937577][    T9] xr_serial 8-1:127.171: xr_serial converter detected
[  692.949795][   T10] peak_usb 4-1:255.207: probe with driver peak_usb failed with error -71
[  692.969737][    T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  692.976115][T17809] netlink: 'syz.2.3546': attribute type 21 has an invalid length.
[  692.976172][T17809] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3546'.
[  692.997195][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  693.007041][   T10] usb 4-1: USB disconnect, device number 91
[  693.029558][    T9] usb 8-1: USB disconnect, device number 27
[  693.054172][    T9] xr_serial 8-1:127.171: device disconnected
[  693.056931][T17812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.084694][T17812] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.397921][T17815] FAULT_INJECTION: forcing a failure.
[  693.397921][T17815] name failslab, interval 1, probability 0, space 0, times 0
[  693.410985][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.3.3548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  693.411013][T17815] Tainted: [L]=SOFTLOCKUP
[  693.411020][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  693.411030][T17815] Call Trace:
[  693.411038][T17815]  <TASK>
[  693.411045][T17815]  dump_stack_lvl+0xe8/0x150
[  693.411073][T17815]  should_fail_ex+0x412/0x560
[  693.411099][T17815]  should_failslab+0xa8/0x100
[  693.411118][T17815]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  693.411151][T17815]  ? ovl_parse_param_lowerdir+0x271/0xab0
[  693.411179][T17815]  kstrdup+0x42/0x100
[  693.411199][T17815]  ovl_parse_param_lowerdir+0x271/0xab0
[  693.411229][T17815]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  693.411261][T17815]  ovl_parse_param+0x504/0xec0
[  693.411288][T17815]  ? __pfx_ovl_parse_param+0x10/0x10
[  693.411309][T17815]  ? rcu_is_watching+0x15/0xb0
[  693.411333][T17815]  ? static_key_count+0x41/0x70
[  693.411356][T17815]  vfs_parse_fs_param+0x1a9/0x420
[  693.411380][T17815]  vfs_parse_monolithic_sep+0x283/0x360
[  693.411402][T17815]  ? __pfx_ovl_next_opt+0x10/0x10
[  693.411424][T17815]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  693.411451][T17815]  ? alloc_fs_context+0x9e9/0xd50
[  693.411480][T17815]  do_new_mount+0x304/0xd30
[  693.411498][T17815]  ? apparmor_capable+0x137/0x1a0
[  693.411516][T17815]  ? security_capable+0x7e/0x2c0
[  693.411547][T17815]  ? __pfx_do_new_mount+0x10/0x10
[  693.411565][T17815]  ? ns_capable+0x89/0xe0
[  693.411587][T17815]  ? path_mount+0x690/0x10e0
[  693.411610][T17815]  ? user_path_at+0xd4/0x160
[  693.411633][T17815]  __se_sys_mount+0x31d/0x420
[  693.411658][T17815]  ? __pfx___se_sys_mount+0x10/0x10
[  693.411683][T17815]  ? __x64_sys_mount+0x20/0xc0
[  693.411703][T17815]  do_syscall_64+0xe2/0xf80
[  693.411721][T17815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.411738][T17815]  ? trace_irq_disable+0x37/0x100
[  693.411758][T17815]  ? clear_bhb_loop+0x40/0x90
[  693.411778][T17815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.411793][T17815] RIP: 0033:0x7f2ca399aeb9
[  693.411810][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  693.411823][T17815] RSP: 002b:00007f2ca48cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  693.411841][T17815] RAX: ffffffffffffffda RBX: 00007f2ca3c15fa0 RCX: 00007f2ca399aeb9
[  693.411853][T17815] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  693.411864][T17815] RBP: 00007f2ca48cb090 R08: 0000200000000000 R09: 0000000000000000
[  693.411875][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  693.411885][T17815] R13: 00007f2ca3c16038 R14: 00007f2ca3c15fa0 R15: 00007ffce008e638
[  693.411912][T17815]  </TASK>
[  693.977150][T17827] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  694.234767][T17835] syz.7.3558 (17835): drop_caches: 1
[  694.269246][   T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  694.377398][T17835] syz.7.3558 (17835): drop_caches: 1
[  694.440920][   T10] usb 4-1: Using ep0 maxpacket: 8
[  694.447445][   T10] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  694.457731][   T10] usb 4-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  694.470777][   T10] usb 4-1: config 127 has no interface number 1
[  694.477389][   T10] usb 4-1: config 127 interface 171 has no altsetting 0
[  694.486569][   T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  694.495705][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.504968][   T10] usb 4-1: Product: syz
[  694.509229][   T10] usb 4-1: Manufacturer: syz
[  694.513945][   T10] usb 4-1: SerialNumber: syz
[  694.737823][   T10] xr_serial 4-1:127.171: xr_serial converter detected
[  694.746352][   T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  694.756711][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  694.770287][   T10] usb 4-1: USB disconnect, device number 92
[  694.778275][   T10] xr_serial 4-1:127.171: device disconnected
[  694.829489][ T5912] usb 8-1: new low-speed USB device number 28 using dummy_hcd
[  694.980672][ T5912] usb 8-1: config index 0 descriptor too short (expected 36753, got 34)
[  694.989309][ T5912] usb 8-1: config 189 has too many interfaces: 113, using maximum allowed: 32
[  694.998185][ T5912] usb 8-1: config 189 has 1 interface, different from the descriptor's value: 113
[  695.007563][ T5912] usb 8-1: config 189 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  695.022152][ T5912] usb 8-1: config 189 interface 0 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[  695.033995][ T5912] usb 8-1: config 189 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  695.045284][ T5912] usb 8-1: config 189 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  695.055414][ T5912] usb 8-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  695.068730][ T5912] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7
[  695.077885][ T5912] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.091621][ T5912] metro_usb 8-1:189.0: Metrologic USB to Serial converter detected
[  695.104137][ T5912] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  695.292573][T17837] netlink: 712 bytes leftover after parsing attributes in process `syz.7.3559'.
[  695.303121][T15687] usb 8-1: USB disconnect, device number 28
[  695.316785][T15687] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  695.327692][T15687] metro_usb 8-1:189.0: device disconnected
[  695.509240][ T5912] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[  695.670507][ T5912] usb 4-1: not running at top speed; connect to a high speed hub
[  695.679803][ T5912] usb 4-1: config 112 has too many interfaces: 98, using maximum allowed: 32
[  695.688777][ T5912] usb 4-1: config 112 descriptor has 1 excess byte, ignoring
[  695.700038][ T5912] usb 4-1: config 112 has 0 interfaces, different from the descriptor's value: 98
[  695.712086][ T5912] usb 4-1: New USB device found, idVendor=0f63, idProduct=2031, bcdDevice=ad.3f
[  695.721388][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.729730][ T5912] usb 4-1: Product: syz
[  695.734007][ T5912] usb 4-1: Manufacturer: syz
[  695.738608][ T5912] usb 4-1: SerialNumber: syz
[  696.145067][ T5912] usb 4-1: USB disconnect, device number 93
[  696.248136][T17854] FAULT_INJECTION: forcing a failure.
[  696.248136][T17854] name failslab, interval 1, probability 0, space 0, times 0
[  696.266800][T17854] CPU: 0 UID: 0 PID: 17854 Comm: syz.2.3564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  696.266829][T17854] Tainted: [L]=SOFTLOCKUP
[  696.266835][T17854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  696.266845][T17854] Call Trace:
[  696.266852][T17854]  <TASK>
[  696.266860][T17854]  dump_stack_lvl+0xe8/0x150
[  696.266888][T17854]  should_fail_ex+0x412/0x560
[  696.266913][T17854]  should_failslab+0xa8/0x100
[  696.266933][T17854]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  696.266959][T17854]  ? ovl_parse_param_lowerdir+0x537/0xab0
[  696.266987][T17854]  kstrdup+0x42/0x100
[  696.267007][T17854]  ovl_parse_param_lowerdir+0x537/0xab0
[  696.267038][T17854]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  696.267070][T17854]  ovl_parse_param+0x504/0xec0
[  696.267097][T17854]  ? __pfx_ovl_parse_param+0x10/0x10
[  696.267119][T17854]  ? rcu_is_watching+0x15/0xb0
[  696.267144][T17854]  ? static_key_count+0x41/0x70
[  696.267167][T17854]  vfs_parse_fs_param+0x1a9/0x420
[  696.267191][T17854]  vfs_parse_monolithic_sep+0x283/0x360
[  696.267214][T17854]  ? __pfx_ovl_next_opt+0x10/0x10
[  696.267235][T17854]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  696.267263][T17854]  ? alloc_fs_context+0x9e9/0xd50
[  696.267292][T17854]  do_new_mount+0x304/0xd30
[  696.267310][T17854]  ? apparmor_capable+0x137/0x1a0
[  696.267329][T17854]  ? security_capable+0x7e/0x2c0
[  696.267349][T17854]  ? __pfx_do_new_mount+0x10/0x10
[  696.267367][T17854]  ? ns_capable+0x89/0xe0
[  696.267389][T17854]  ? path_mount+0x690/0x10e0
[  696.267413][T17854]  ? user_path_at+0xd4/0x160
[  696.267437][T17854]  __se_sys_mount+0x31d/0x420
[  696.267462][T17854]  ? __pfx___se_sys_mount+0x10/0x10
[  696.267487][T17854]  ? __x64_sys_mount+0x20/0xc0
[  696.267508][T17854]  do_syscall_64+0xe2/0xf80
[  696.267527][T17854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.267543][T17854]  ? trace_irq_disable+0x37/0x100
[  696.267563][T17854]  ? clear_bhb_loop+0x40/0x90
[  696.267589][T17854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  696.267605][T17854] RIP: 0033:0x7fbd9f99aeb9
[  696.267622][T17854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  696.267635][T17854] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  696.267653][T17854] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  696.267665][T17854] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  696.267676][T17854] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  696.267687][T17854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  696.267697][T17854] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  696.267725][T17854]  </TASK>
[  696.575444][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.584302][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.598855][T17856] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  697.039262][ T5912] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  697.078945][T17865] batadv0: entered allmulticast mode
[  697.081797][T17866] autofs4:pid:17866:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371)
[  697.210376][ T5912] usb 4-1: Using ep0 maxpacket: 8
[  697.223177][ T5912] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  697.241828][ T5912] usb 4-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  697.289002][ T5912] usb 4-1: config 127 has no interface number 1
[  697.295333][ T5912] usb 4-1: config 127 interface 171 has no altsetting 0
[  697.325512][ T5912] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  697.350066][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.358151][ T5912] usb 4-1: Product: syz
[  697.370297][ T5912] usb 4-1: Manufacturer: syz
[  697.374926][ T5912] usb 4-1: SerialNumber: syz
[  697.393835][T17878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  697.610016][ T5912] xr_serial 4-1:127.171: xr_serial converter detected
[  697.629191][ T5912] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  697.635610][ T5912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  697.660305][T15686] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  697.663508][ T5912] usb 4-1: USB disconnect, device number 94
[  697.677298][T17871] syz.2.3573 (17871): drop_caches: 1
[  697.686594][ T5912] xr_serial 4-1:127.171: device disconnected
[  697.809089][T15686] usb 8-1: device descriptor read/64, error -71
[  697.882674][T17871] syz.2.3573 (17871): drop_caches: 1
[  697.925894][T17989] FAULT_INJECTION: forcing a failure.
[  697.925894][T17989] name failslab, interval 1, probability 0, space 0, times 0
[  697.939031][T17989] CPU: 1 UID: 0 PID: 17989 Comm: syz.2.3579 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  697.939057][T17989] Tainted: [L]=SOFTLOCKUP
[  697.939063][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  697.939073][T17989] Call Trace:
[  697.939080][T17989]  <TASK>
[  697.939085][T17989]  dump_stack_lvl+0xe8/0x150
[  697.939104][T17989]  should_fail_ex+0x412/0x560
[  697.939119][T17989]  should_failslab+0xa8/0x100
[  697.939130][T17989]  ? do_getname_kernel+0x54/0x230
[  697.939142][T17989]  kmem_cache_alloc_noprof+0x87/0x650
[  697.939160][T17989]  ? rcu_is_watching+0x15/0xb0
[  697.939177][T17989]  do_getname_kernel+0x54/0x230
[  697.939187][T17989]  ? kern_path+0x1b/0x150
[  697.939200][T17989]  kern_path+0x25/0x150
[  697.939212][T17989]  ovl_parse_param_lowerdir+0x6c7/0xab0
[  697.939233][T17989]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  697.939251][T17989]  ovl_parse_param+0x504/0xec0
[  697.939268][T17989]  ? __pfx_ovl_parse_param+0x10/0x10
[  697.939281][T17989]  ? rcu_is_watching+0x15/0xb0
[  697.939295][T17989]  ? static_key_count+0x41/0x70
[  697.939309][T17989]  vfs_parse_fs_param+0x1a9/0x420
[  697.939324][T17989]  vfs_parse_monolithic_sep+0x283/0x360
[  697.939337][T17989]  ? __pfx_ovl_next_opt+0x10/0x10
[  697.939351][T17989]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  697.939367][T17989]  ? alloc_fs_context+0x9e9/0xd50
[  697.939385][T17989]  do_new_mount+0x304/0xd30
[  697.939396][T17989]  ? apparmor_capable+0x137/0x1a0
[  697.939413][T17989]  ? security_capable+0x7e/0x2c0
[  697.939425][T17989]  ? __pfx_do_new_mount+0x10/0x10
[  697.939437][T17989]  ? ns_capable+0x89/0xe0
[  697.939450][T17989]  ? path_mount+0x690/0x10e0
[  697.939463][T17989]  ? user_path_at+0xd4/0x160
[  697.939477][T17989]  __se_sys_mount+0x31d/0x420
[  697.939492][T17989]  ? __pfx___se_sys_mount+0x10/0x10
[  697.939507][T17989]  ? __x64_sys_mount+0x20/0xc0
[  697.939519][T17989]  do_syscall_64+0xe2/0xf80
[  697.939531][T17989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.939540][T17989]  ? trace_irq_disable+0x37/0x100
[  697.939553][T17989]  ? clear_bhb_loop+0x40/0x90
[  697.939565][T17989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.939574][T17989] RIP: 0033:0x7fbd9f99aeb9
[  697.939586][T17989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  697.939594][T17989] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  697.939606][T17989] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  697.939613][T17989] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  697.939619][T17989] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  697.939625][T17989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  697.939631][T17989] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  697.939645][T17989]  </TASK>
[  697.939651][T17989] overlayfs: failed to resolve './file0': -12
[  698.284068][   T30] audit: type=1326 audit(2000000033.271:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17992 comm="syz.3.3581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ca399aeb9 code=0x0
[  698.309003][T15686] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  698.374578][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  698.449383][T15686] usb 8-1: device descriptor read/64, error -71
[  698.570294][T15686] usb usb8-port1: attempt power cycle
[  698.909351][T15686] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  698.929646][T15686] usb 8-1: device descriptor read/8, error -71
[  699.137373][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  699.170496][T15686] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  699.195093][T18008] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.3587'.
[  699.202944][T18009] netlink: 'syz.3.3586': attribute type 16 has an invalid length.
[  699.213428][T18009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3586'.
[  699.219788][T15686] usb 8-1: device descriptor read/8, error -71
[  699.233813][T18009] overlayfs: failed to clone lowerpath
[  699.292791][T18011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  699.304882][T18011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.339719][T15686] usb usb8-port1: unable to enumerate USB device
[  699.649206][   T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  699.809094][   T10] usb 4-1: Using ep0 maxpacket: 16
[  699.818163][   T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  699.827825][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.836230][   T10] usb 4-1: Product: syz
[  699.840518][   T10] usb 4-1: Manufacturer: syz
[  699.845134][   T10] usb 4-1: SerialNumber: syz
[  699.854978][   T10] r8152-cfgselector 4-1: Unknown version 0x0000
[  699.861406][   T10] r8152-cfgselector 4-1: config 0 descriptor??
[  699.895773][T18021] FAULT_INJECTION: forcing a failure.
[  699.895773][T18021] name failslab, interval 1, probability 0, space 0, times 0
[  699.913185][T18021] CPU: 1 UID: 0 PID: 18021 Comm: syz.2.3594 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  699.913215][T18021] Tainted: [L]=SOFTLOCKUP
[  699.913221][T18021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  699.913231][T18021] Call Trace:
[  699.913239][T18021]  <TASK>
[  699.913247][T18021]  dump_stack_lvl+0xe8/0x150
[  699.913275][T18021]  should_fail_ex+0x412/0x560
[  699.913300][T18021]  should_failslab+0xa8/0x100
[  699.913321][T18021]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  699.913347][T18021]  ? ovl_do_parse_layer+0x39/0xbb0
[  699.913375][T18021]  kstrdup+0x42/0x100
[  699.913395][T18021]  ovl_do_parse_layer+0x39/0xbb0
[  699.913419][T18021]  ? kfree+0x1c1/0x610
[  699.913435][T18021]  ? ovl_parse_param_lowerdir+0x6e4/0xab0
[  699.913462][T18021]  ovl_parse_param_lowerdir+0x6f8/0xab0
[  699.913493][T18021]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  699.913524][T18021]  ovl_parse_param+0x504/0xec0
[  699.913543][T18021]  ? __pfx_ovl_parse_param+0x10/0x10
[  699.913557][T18021]  ? rcu_is_watching+0x15/0xb0
[  699.913572][T18021]  ? static_key_count+0x41/0x70
[  699.913589][T18021]  vfs_parse_fs_param+0x1a9/0x420
[  699.913611][T18021]  vfs_parse_monolithic_sep+0x283/0x360
[  699.913633][T18021]  ? __pfx_ovl_next_opt+0x10/0x10
[  699.913654][T18021]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  699.913681][T18021]  ? alloc_fs_context+0x9e9/0xd50
[  699.913700][T18021]  do_new_mount+0x304/0xd30
[  699.913711][T18021]  ? apparmor_capable+0x137/0x1a0
[  699.913722][T18021]  ? security_capable+0x7e/0x2c0
[  699.913734][T18021]  ? __pfx_do_new_mount+0x10/0x10
[  699.913748][T18021]  ? ns_capable+0x89/0xe0
[  699.913768][T18021]  ? path_mount+0x690/0x10e0
[  699.913792][T18021]  ? user_path_at+0xd4/0x160
[  699.913815][T18021]  __se_sys_mount+0x31d/0x420
[  699.913836][T18021]  ? __pfx___se_sys_mount+0x10/0x10
[  699.913851][T18021]  ? __x64_sys_mount+0x20/0xc0
[  699.913863][T18021]  do_syscall_64+0xe2/0xf80
[  699.913874][T18021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.913883][T18021]  ? trace_irq_disable+0x37/0x100
[  699.913900][T18021]  ? clear_bhb_loop+0x40/0x90
[  699.913920][T18021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.913937][T18021] RIP: 0033:0x7fbd9f99aeb9
[  699.913954][T18021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  699.913967][T18021] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  699.913989][T18021] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  699.913996][T18021] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  699.914002][T18021] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  699.914009][T18021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  699.914014][T18021] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  699.914029][T18021]  </TASK>
[  700.079776][   T10] r8152-cfgselector 4-1: Unknown version 0x00f0
[  700.215738][   T10] r8152-cfgselector 4-1: bad CDC descriptors
[  700.280651][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  700.356163][T18028] [syz.3.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[  700.382967][T18028] CIFS mount error: No usable UNC path provided in device string!
[  700.382967][T18028] 
[  700.393603][T18028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  700.466840][T18027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  700.475882][T18027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.061439][T18037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.070519][T18037] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.252266][T18035] syz.6.3599 (18035): drop_caches: 1
[  701.482880][T18035] syz.6.3599 (18035): drop_caches: 1
[  701.560121][T18046] FAULT_INJECTION: forcing a failure.
[  701.560121][T18046] name failslab, interval 1, probability 0, space 0, times 0
[  701.573401][T18046] CPU: 1 UID: 0 PID: 18046 Comm: syz.6.3604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  701.573420][T18046] Tainted: [L]=SOFTLOCKUP
[  701.573424][T18046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  701.573430][T18046] Call Trace:
[  701.573435][T18046]  <TASK>
[  701.573439][T18046]  dump_stack_lvl+0xe8/0x150
[  701.573458][T18046]  should_fail_ex+0x412/0x560
[  701.573473][T18046]  should_failslab+0xa8/0x100
[  701.573485][T18046]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  701.573502][T18046]  ? ovl_parse_param_lowerdir+0x537/0xab0
[  701.573521][T18046]  kstrdup+0x42/0x100
[  701.573532][T18046]  ovl_parse_param_lowerdir+0x537/0xab0
[  701.573549][T18046]  ? ovl_parse_param_lowerdir+0x6f0/0xab0
[  701.573563][T18046]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  701.573582][T18046]  ovl_parse_param+0x504/0xec0
[  701.573598][T18046]  ? __pfx_ovl_parse_param+0x10/0x10
[  701.573612][T18046]  ? rcu_is_watching+0x15/0xb0
[  701.573627][T18046]  ? static_key_count+0x41/0x70
[  701.573641][T18046]  vfs_parse_fs_param+0x1a9/0x420
[  701.573657][T18046]  vfs_parse_monolithic_sep+0x283/0x360
[  701.573670][T18046]  ? __pfx_ovl_next_opt+0x10/0x10
[  701.573683][T18046]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  701.573700][T18046]  ? alloc_fs_context+0x9e9/0xd50
[  701.573717][T18046]  do_new_mount+0x304/0xd30
[  701.573727][T18046]  ? apparmor_capable+0x137/0x1a0
[  701.573738][T18046]  ? security_capable+0x7e/0x2c0
[  701.573758][T18046]  ? __pfx_do_new_mount+0x10/0x10
[  701.573769][T18046]  ? ns_capable+0x89/0xe0
[  701.573782][T18046]  ? path_mount+0x690/0x10e0
[  701.573796][T18046]  ? user_path_at+0xd4/0x160
[  701.573811][T18046]  __se_sys_mount+0x31d/0x420
[  701.573825][T18046]  ? __pfx___se_sys_mount+0x10/0x10
[  701.573840][T18046]  ? __x64_sys_mount+0x20/0xc0
[  701.573852][T18046]  do_syscall_64+0xe2/0xf80
[  701.573864][T18046]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.573873][T18046]  ? trace_irq_disable+0x37/0x100
[  701.573887][T18046]  ? clear_bhb_loop+0x40/0x90
[  701.573899][T18046]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.573909][T18046] RIP: 0033:0x7f46b259aeb9
[  701.573920][T18046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  701.573928][T18046] RSP: 002b:00007f46b338e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  701.573939][T18046] RAX: ffffffffffffffda RBX: 00007f46b2815fa0 RCX: 00007f46b259aeb9
[  701.573946][T18046] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  701.573953][T18046] RBP: 00007f46b338e090 R08: 0000200000000000 R09: 0000000000000000
[  701.573959][T18046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  701.573964][T18046] R13: 00007f46b2816038 R14: 00007f46b2815fa0 R15: 00007fffa7226b28
[  701.573978][T18046]  </TASK>
[  701.658822][ T7457] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  701.891657][ T5836] Bluetooth: hci3: unexpected event for opcode 0x0803
[  702.031622][ T7457] usb 8-1: Using ep0 maxpacket: 8
[  702.038291][ T7457] usb 8-1: config 127 has an invalid interface number: 171 but max is 1
[  702.048525][ T7457] usb 8-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  702.059801][ T7457] usb 8-1: config 127 has no interface number 1
[  702.066439][ T7457] usb 8-1: config 127 interface 171 has no altsetting 0
[  702.076182][ T7457] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  702.085549][ T7457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.093987][ T7457] usb 8-1: Product: syz
[  702.098236][ T7457] usb 8-1: Manufacturer: syz
[  702.102897][ T7457] usb 8-1: SerialNumber: syz
[  702.318420][ T7457] xr_serial 8-1:127.171: xr_serial converter detected
[  702.328114][ T7457] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  702.334599][ T7457] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  702.350677][ T7457] usb 8-1: USB disconnect, device number 33
[  702.367809][ T7457] xr_serial 8-1:127.171: device disconnected
[  702.427687][   T10] r8152-cfgselector 4-1: USB disconnect, device number 95
[  702.798212][T18064] overlay: ./file0 is not a directory
[  702.925879][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  702.977833][T18075] FAULT_INJECTION: forcing a failure.
[  702.977833][T18075] name failslab, interval 1, probability 0, space 0, times 0
[  702.992820][T18075] CPU: 1 UID: 0 PID: 18075 Comm: syz.2.3617 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  702.992849][T18075] Tainted: [L]=SOFTLOCKUP
[  702.992856][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  702.992865][T18075] Call Trace:
[  702.992880][T18075]  <TASK>
[  702.992887][T18075]  dump_stack_lvl+0xe8/0x150
[  702.992916][T18075]  should_fail_ex+0x412/0x560
[  702.992941][T18075]  should_failslab+0xa8/0x100
[  702.992958][T18075]  ? do_getname_kernel+0x54/0x230
[  702.992978][T18075]  kmem_cache_alloc_noprof+0x87/0x650
[  702.993002][T18075]  ? rcu_is_watching+0x15/0xb0
[  702.993028][T18075]  do_getname_kernel+0x54/0x230
[  702.993045][T18075]  ? kern_path+0x1b/0x150
[  702.993066][T18075]  kern_path+0x25/0x150
[  702.993088][T18075]  ovl_parse_param_lowerdir+0x6c7/0xab0
[  702.993117][T18075]  ? ovl_parse_param_lowerdir+0x6f0/0xab0
[  702.993140][T18075]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  702.993172][T18075]  ovl_parse_param+0x504/0xec0
[  702.993200][T18075]  ? __pfx_ovl_parse_param+0x10/0x10
[  702.993222][T18075]  ? rcu_is_watching+0x15/0xb0
[  702.993245][T18075]  ? static_key_count+0x41/0x70
[  702.993269][T18075]  vfs_parse_fs_param+0x1a9/0x420
[  702.993294][T18075]  vfs_parse_monolithic_sep+0x283/0x360
[  702.993316][T18075]  ? __pfx_ovl_next_opt+0x10/0x10
[  702.993337][T18075]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  702.993365][T18075]  ? alloc_fs_context+0x9e9/0xd50
[  702.993395][T18075]  do_new_mount+0x304/0xd30
[  702.993413][T18075]  ? apparmor_capable+0x137/0x1a0
[  702.993432][T18075]  ? security_capable+0x7e/0x2c0
[  702.993452][T18075]  ? __pfx_do_new_mount+0x10/0x10
[  702.993471][T18075]  ? ns_capable+0x89/0xe0
[  702.993492][T18075]  ? path_mount+0x690/0x10e0
[  702.993514][T18075]  ? user_path_at+0xd4/0x160
[  702.993537][T18075]  __se_sys_mount+0x31d/0x420
[  702.993562][T18075]  ? __pfx___se_sys_mount+0x10/0x10
[  702.993587][T18075]  ? __x64_sys_mount+0x20/0xc0
[  702.993608][T18075]  do_syscall_64+0xe2/0xf80
[  702.993626][T18075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.993642][T18075]  ? trace_irq_disable+0x37/0x100
[  702.993663][T18075]  ? clear_bhb_loop+0x40/0x90
[  702.993683][T18075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.993700][T18075] RIP: 0033:0x7fbd9f99aeb9
[  702.993717][T18075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  702.993731][T18075] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  702.993749][T18075] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  702.993762][T18075] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  702.993773][T18075] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  702.993784][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  702.993794][T18075] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  702.993847][T18075]  </TASK>
[  702.993855][T18075] overlayfs: failed to resolve '/': -12
[  703.441335][T18084] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3621'.
[  703.582867][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  703.598890][ T7457] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  703.709032][   T10] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  703.766482][T18103] FAULT_INJECTION: forcing a failure.
[  703.766482][T18103] name failslab, interval 1, probability 0, space 0, times 0
[  703.774665][ T7457] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  703.782127][T18103] CPU: 1 UID: 0 PID: 18103 Comm: syz.2.3628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  703.782155][T18103] Tainted: [L]=SOFTLOCKUP
[  703.782160][T18103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  703.782170][T18103] Call Trace:
[  703.782177][T18103]  <TASK>
[  703.782185][T18103]  dump_stack_lvl+0xe8/0x150
[  703.782212][T18103]  should_fail_ex+0x412/0x560
[  703.782237][T18103]  should_failslab+0xa8/0x100
[  703.782256][T18103]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  703.782280][T18103]  ? ovl_do_parse_layer+0x39/0xbb0
[  703.782308][T18103]  kstrdup+0x42/0x100
[  703.782327][T18103]  ovl_do_parse_layer+0x39/0xbb0
[  703.782352][T18103]  ? kfree+0x1c1/0x610
[  703.782370][T18103]  ? ovl_parse_param_lowerdir+0x6e4/0xab0
[  703.782396][T18103]  ovl_parse_param_lowerdir+0x6f8/0xab0
[  703.782422][T18103]  ? ovl_parse_param_lowerdir+0x6f0/0xab0
[  703.782445][T18103]  ? __pfx_ovl_parse_param_lowerdir+0x10/0x10
[  703.782475][T18103]  ovl_parse_param+0x504/0xec0
[  703.782506][T18103]  ? __pfx_ovl_parse_param+0x10/0x10
[  703.782527][T18103]  ? rcu_is_watching+0x15/0xb0
[  703.782551][T18103]  ? static_key_count+0x41/0x70
[  703.782578][T18103]  vfs_parse_fs_param+0x1a9/0x420
[  703.782602][T18103]  vfs_parse_monolithic_sep+0x283/0x360
[  703.782623][T18103]  ? __pfx_ovl_next_opt+0x10/0x10
[  703.782644][T18103]  ? __pfx_vfs_parse_monolithic_sep+0x10/0x10
[  703.782671][T18103]  ? alloc_fs_context+0x9e9/0xd50
[  703.782698][T18103]  do_new_mount+0x304/0xd30
[  703.782715][T18103]  ? apparmor_capable+0x137/0x1a0
[  703.782733][T18103]  ? security_capable+0x7e/0x2c0
[  703.782752][T18103]  ? __pfx_do_new_mount+0x10/0x10
[  703.782770][T18103]  ? ns_capable+0x89/0xe0
[  703.782789][T18103]  ? path_mount+0x690/0x10e0
[  703.782811][T18103]  ? user_path_at+0xd4/0x160
[  703.782835][T18103]  __se_sys_mount+0x31d/0x420
[  703.782858][T18103]  ? __pfx___se_sys_mount+0x10/0x10
[  703.782883][T18103]  ? __x64_sys_mount+0x20/0xc0
[  703.782902][T18103]  do_syscall_64+0xe2/0xf80
[  703.782920][T18103]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.782935][T18103]  ? trace_irq_disable+0x37/0x100
[  703.782954][T18103]  ? clear_bhb_loop+0x40/0x90
[  703.782974][T18103]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.782989][T18103] RIP: 0033:0x7fbd9f99aeb9
[  703.783006][T18103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  703.783019][T18103] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  703.783036][T18103] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  703.783048][T18103] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  703.783058][T18103] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  703.783069][T18103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  703.783078][T18103] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  703.783104][T18103]  </TASK>
[  704.083924][ T7457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.092617][ T7457] usb 8-1: Product: syz
[  704.096912][ T7457] usb 8-1: Manufacturer: syz
[  704.102558][ T7457] usb 8-1: SerialNumber: syz
[  704.113715][ T7457] usb 8-1: config 0 descriptor??
[  704.129020][ T7457] gspca_main: sunplus-2.14.0 probing 055f:c230
[  704.158756][   T10] usb 4-1: Using ep0 maxpacket: 8
[  704.167021][   T10] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  704.176664][   T10] usb 4-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  704.187601][   T10] usb 4-1: config 127 has no interface number 1
[  704.195622][   T10] usb 4-1: config 127 interface 171 has no altsetting 0
[  704.206166][   T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  704.215836][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.225561][   T10] usb 4-1: Product: syz
[  704.231799][   T10] usb 4-1: Manufacturer: syz
[  704.236554][   T10] usb 4-1: SerialNumber: syz
[  704.256907][T18109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.266184][T18109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.333755][ T5912] IPVS: starting estimator thread 0...
[  704.428794][T18110] IPVS: using max 35 ests per chain, 84000 per kthread
[  704.460970][   T10] xr_serial 4-1:127.171: xr_serial converter detected
[  704.470201][   T10] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  704.476631][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  704.491487][   T10] usb 4-1: USB disconnect, device number 96
[  704.511031][   T10] xr_serial 4-1:127.171: device disconnected
[  704.542150][ T7457] gspca_sunplus: reg_r err -71
[  704.547026][ T7457] sunplus 8-1:0.0: probe with driver sunplus failed with error -71
[  704.562156][ T7457] usb 8-1: USB disconnect, device number 34
[  704.815640][T18112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  704.826410][T18112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  704.997857][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0803
[  705.265383][T18127] FAULT_INJECTION: forcing a failure.
[  705.265383][T18127] name failslab, interval 1, probability 0, space 0, times 0
[  705.279476][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.7.3637 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  705.279504][T18127] Tainted: [L]=SOFTLOCKUP
[  705.279515][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  705.279525][T18127] Call Trace:
[  705.279532][T18127]  <TASK>
[  705.279540][T18127]  dump_stack_lvl+0xe8/0x150
[  705.279567][T18127]  should_fail_ex+0x412/0x560
[  705.279593][T18127]  should_failslab+0xa8/0x100
[  705.279613][T18127]  __kmalloc_cache_noprof+0x88/0x660
[  705.279638][T18127]  ? alloc_super+0x5b/0xab0
[  705.279663][T18127]  alloc_super+0x5b/0xab0
[  705.279682][T18127]  ? do_raw_spin_unlock+0xf5/0x210
[  705.279709][T18127]  sget_fc+0x329/0xa40
[  705.279732][T18127]  ? __pfx_set_anon_super_fc+0x10/0x10
[  705.279753][T18127]  ? __pfx_ovl_fill_super+0x10/0x10
[  705.279775][T18127]  get_tree_nodev+0x2a/0x150
[  705.279799][T18127]  vfs_get_tree+0x92/0x2a0
[  705.279823][T18127]  do_new_mount+0x341/0xd30
[  705.279841][T18127]  ? apparmor_capable+0x137/0x1a0
[  705.279862][T18127]  ? __pfx_do_new_mount+0x10/0x10
[  705.279881][T18127]  ? ns_capable+0x89/0xe0
[  705.279902][T18127]  ? path_mount+0x690/0x10e0
[  705.279925][T18127]  ? user_path_at+0xd4/0x160
[  705.279948][T18127]  __se_sys_mount+0x31d/0x420
[  705.279973][T18127]  ? __pfx___se_sys_mount+0x10/0x10
[  705.279995][T18127]  ? __x64_sys_mount+0x20/0xc0
[  705.280014][T18127]  do_syscall_64+0xe2/0xf80
[  705.280033][T18127]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.280048][T18127]  ? trace_irq_disable+0x37/0x100
[  705.280068][T18127]  ? clear_bhb_loop+0x40/0x90
[  705.280088][T18127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.280102][T18127] RIP: 0033:0x7fec5b39aeb9
[  705.280118][T18127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.280132][T18127] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  705.280150][T18127] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  705.280162][T18127] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  705.280173][T18127] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  705.280184][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  705.280194][T18127] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  705.280219][T18127]  </TASK>
[  705.780097][T18143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  705.796100][T18143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  705.816734][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88805e274000 (6)(pimreg0) start
[  705.839520][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88805e274000 (6)(pimreg0) end
[  705.857931][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88805e274000 (3)(pimreg0) start
[  705.886107][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88805e274000 (3)(pimreg0) end
[  705.938627][ T5875] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  705.989646][T18153] FAULT_INJECTION: forcing a failure.
[  705.989646][T18153] name failslab, interval 1, probability 0, space 0, times 0
[  706.002409][T18153] CPU: 1 UID: 0 PID: 18153 Comm: syz.7.3647 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  706.002434][T18153] Tainted: [L]=SOFTLOCKUP
[  706.002440][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  706.002449][T18153] Call Trace:
[  706.002457][T18153]  <TASK>
[  706.002464][T18153]  dump_stack_lvl+0xe8/0x150
[  706.002491][T18153]  should_fail_ex+0x412/0x560
[  706.002517][T18153]  should_failslab+0xa8/0x100
[  706.002548][T18153]  __kmalloc_noprof+0xe8/0x760
[  706.002570][T18153]  ? down_write_nested+0x174/0x210
[  706.002593][T18153]  ? security_sb_alloc+0x48/0x310
[  706.002617][T18153]  security_sb_alloc+0x48/0x310
[  706.002639][T18153]  alloc_super+0x294/0xab0
[  706.002666][T18153]  sget_fc+0x329/0xa40
[  706.002689][T18153]  ? __pfx_set_anon_super_fc+0x10/0x10
[  706.002710][T18153]  ? __pfx_ovl_fill_super+0x10/0x10
[  706.002733][T18153]  get_tree_nodev+0x2a/0x150
[  706.002758][T18153]  vfs_get_tree+0x92/0x2a0
[  706.002781][T18153]  do_new_mount+0x341/0xd30
[  706.002800][T18153]  ? apparmor_capable+0x137/0x1a0
[  706.002821][T18153]  ? __pfx_do_new_mount+0x10/0x10
[  706.002840][T18153]  ? ns_capable+0x89/0xe0
[  706.002860][T18153]  ? path_mount+0x690/0x10e0
[  706.002885][T18153]  ? user_path_at+0xd4/0x160
[  706.002909][T18153]  __se_sys_mount+0x31d/0x420
[  706.002935][T18153]  ? __pfx___se_sys_mount+0x10/0x10
[  706.002961][T18153]  ? __x64_sys_mount+0x20/0xc0
[  706.002983][T18153]  do_syscall_64+0xe2/0xf80
[  706.003002][T18153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.003018][T18153]  ? trace_irq_disable+0x37/0x100
[  706.003039][T18153]  ? clear_bhb_loop+0x40/0x90
[  706.003058][T18153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.003075][T18153] RIP: 0033:0x7fec5b39aeb9
[  706.003091][T18153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  706.003105][T18153] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  706.003123][T18153] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  706.003136][T18153] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  706.003147][T18153] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  706.003157][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  706.003167][T18153] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  706.003196][T18153]  </TASK>
[  706.330419][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  706.337197][ T5875] usb 4-1: config 255 has an invalid interface number: 207 but max is 0
[  706.346617][ T5875] usb 4-1: config 255 has an invalid descriptor of length 157, skipping remainder of the config
[  706.362283][ T5875] usb 4-1: config 255 has no interface number 0
[  706.368759][ T5875] usb 4-1: config 255 interface 207 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  706.382498][ T5875] usb 4-1: config 255 interface 207 has no altsetting 0
[  706.396562][ T5875] usb 4-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34
[  706.405894][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.414090][ T5875] usb 4-1: Product: syz
[  706.418311][ T5875] usb 4-1: Manufacturer: syz
[  706.422999][ T5875] usb 4-1: SerialNumber: syz
[  706.618403][T18165] binder: 18164:18165 unknown command 0
[  706.627295][T18165] binder: 18164:18165 ioctl c0306201 200000000080 returned -22
[  706.637186][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.646591][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.655959][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.657904][ T5875] peak_usb 4-1:255.207 can0: unable to request usb[type=0 value=1] err=-71
[  706.665722][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.674634][ T5875] peak_usb 4-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71)
[  706.685726][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.702816][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.710701][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.719485][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.727276][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.735310][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.743115][   T10] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  706.753764][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.764302][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.769302][ T5875] peak_usb 4-1:255.207: probe with driver peak_usb failed with error -71
[  706.774351][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.793031][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.793660][ T5875] usb 4-1: USB disconnect, device number 97
[  706.801674][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.817765][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.829941][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.845145][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.856869][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.865084][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.873337][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.881201][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.889392][   T10] usb 8-1: device descriptor read/64, error -71
[  706.895939][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.903885][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf4bd0 returned -22
[  706.913017][T18165] binder: 18164:18165 ioctl 4020ae46 7fbd9dbf48d0 returned -22
[  707.074939][T18171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.083801][T18171] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.128693][   T10] usb 8-1: new high-speed USB device number 36 using dummy_hcd
[  707.236997][T18176] fuse: Bad value for 'fd'
[  707.261631][   T10] usb 8-1: device descriptor read/64, error -71
[  707.272633][T18176] overlayfs: failed to clone lowerpath
[  707.373606][   T10] usb usb8-port1: attempt power cycle
[  707.626510][T18189] FAULT_INJECTION: forcing a failure.
[  707.626510][T18189] name failslab, interval 1, probability 0, space 0, times 0
[  707.640901][T18189] CPU: 0 UID: 0 PID: 18189 Comm: syz.2.3660 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  707.640930][T18189] Tainted: [L]=SOFTLOCKUP
[  707.640936][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  707.640946][T18189] Call Trace:
[  707.640954][T18189]  <TASK>
[  707.640962][T18189]  dump_stack_lvl+0xe8/0x150
[  707.640987][T18189]  should_fail_ex+0x412/0x560
[  707.641014][T18189]  should_failslab+0xa8/0x100
[  707.641033][T18189]  __kmalloc_cache_noprof+0x88/0x660
[  707.641058][T18189]  ? shrinker_alloc+0x59/0xa80
[  707.641080][T18189]  shrinker_alloc+0x59/0xa80
[  707.641096][T18189]  ? __raw_spin_lock_init+0x45/0x100
[  707.641123][T18189]  ? __raw_spin_lock_init+0x45/0x100
[  707.641150][T18189]  alloc_super+0x789/0xab0
[  707.641178][T18189]  sget_fc+0x329/0xa40
[  707.641269][T18189]  ? __pfx_set_anon_super_fc+0x10/0x10
[  707.641295][T18189]  ? __pfx_ovl_fill_super+0x10/0x10
[  707.641318][T18189]  get_tree_nodev+0x2a/0x150
[  707.641343][T18189]  vfs_get_tree+0x92/0x2a0
[  707.641368][T18189]  do_new_mount+0x341/0xd30
[  707.641388][T18189]  ? apparmor_capable+0x137/0x1a0
[  707.641410][T18189]  ? __pfx_do_new_mount+0x10/0x10
[  707.641429][T18189]  ? ns_capable+0x89/0xe0
[  707.641449][T18189]  ? path_mount+0x690/0x10e0
[  707.641473][T18189]  ? user_path_at+0xd4/0x160
[  707.641498][T18189]  __se_sys_mount+0x31d/0x420
[  707.641523][T18189]  ? __pfx___se_sys_mount+0x10/0x10
[  707.641549][T18189]  ? __x64_sys_mount+0x20/0xc0
[  707.641568][T18189]  do_syscall_64+0xe2/0xf80
[  707.641587][T18189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.641602][T18189]  ? trace_irq_disable+0x37/0x100
[  707.641623][T18189]  ? clear_bhb_loop+0x40/0x90
[  707.641644][T18189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.641660][T18189] RIP: 0033:0x7fbd9f99aeb9
[  707.641677][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  707.641689][T18189] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  707.641707][T18189] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  707.641719][T18189] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  707.641729][T18189] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  707.641740][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  707.641750][T18189] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  707.641779][T18189]  </TASK>
[  707.968528][   T10] usb 8-1: new high-speed USB device number 37 using dummy_hcd
[  707.976369][    T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  708.009736][   T10] usb 8-1: device descriptor read/8, error -71
[  708.148593][    T9] usb 4-1: Using ep0 maxpacket: 8
[  708.155668][    T9] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[  708.164440][    T9] usb 4-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  708.175544][    T9] usb 4-1: config 127 has no interface number 1
[  708.181921][    T9] usb 4-1: config 127 interface 171 has no altsetting 0
[  708.192964][    T9] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  708.202325][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.210585][    T9] usb 4-1: Product: syz
[  708.214883][    T9] usb 4-1: Manufacturer: syz
[  708.219905][    T9] usb 4-1: SerialNumber: syz
[  708.248531][   T10] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[  708.269032][   T10] usb 8-1: device descriptor read/8, error -71
[  708.379039][   T10] usb usb8-port1: unable to enumerate USB device
[  708.431768][    T9] xr_serial 4-1:127.171: xr_serial converter detected
[  708.444044][    T9] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  708.450761][    T9] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  708.465723][    T9] usb 4-1: USB disconnect, device number 98
[  708.474266][    T9] xr_serial 4-1:127.171: device disconnected
[  708.801154][ T1157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  708.925905][T18201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.935940][T18201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.952592][T18201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.965353][T18201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.394406][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0803
[  709.456555][T18215] FAULT_INJECTION: forcing a failure.
[  709.456555][T18215] name failslab, interval 1, probability 0, space 0, times 0
[  709.478350][T18215] CPU: 0 UID: 0 PID: 18215 Comm: syz.6.3672 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  709.478378][T18215] Tainted: [L]=SOFTLOCKUP
[  709.478385][T18215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  709.478394][T18215] Call Trace:
[  709.478402][T18215]  <TASK>
[  709.478410][T18215]  dump_stack_lvl+0xe8/0x150
[  709.478437][T18215]  should_fail_ex+0x412/0x560
[  709.478464][T18215]  should_failslab+0xa8/0x100
[  709.478484][T18215]  __kmalloc_noprof+0xe8/0x760
[  709.478507][T18215]  ? shrinker_alloc+0x2af/0xa80
[  709.478525][T18215]  ? __list_lru_init+0xba/0x5d0
[  709.478538][T18215]  ? __raw_spin_lock_init+0x45/0x100
[  709.478564][T18215]  __list_lru_init+0xba/0x5d0
[  709.478579][T18215]  ? __raw_spin_lock_init+0x45/0x100
[  709.478607][T18215]  alloc_super+0x869/0xab0
[  709.478634][T18215]  sget_fc+0x329/0xa40
[  709.478658][T18215]  ? __pfx_set_anon_super_fc+0x10/0x10
[  709.478677][T18215]  ? __pfx_ovl_fill_super+0x10/0x10
[  709.478700][T18215]  get_tree_nodev+0x2a/0x150
[  709.478724][T18215]  vfs_get_tree+0x92/0x2a0
[  709.478749][T18215]  do_new_mount+0x341/0xd30
[  709.478768][T18215]  ? apparmor_capable+0x137/0x1a0
[  709.478789][T18215]  ? __pfx_do_new_mount+0x10/0x10
[  709.478829][T18215]  ? ns_capable+0x89/0xe0
[  709.478850][T18215]  ? path_mount+0x690/0x10e0
[  709.478874][T18215]  ? user_path_at+0xd4/0x160
[  709.478897][T18215]  __se_sys_mount+0x31d/0x420
[  709.478922][T18215]  ? __pfx___se_sys_mount+0x10/0x10
[  709.478948][T18215]  ? __x64_sys_mount+0x20/0xc0
[  709.478978][T18215]  do_syscall_64+0xe2/0xf80
[  709.478997][T18215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.479013][T18215]  ? trace_irq_disable+0x37/0x100
[  709.479033][T18215]  ? clear_bhb_loop+0x40/0x90
[  709.479053][T18215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.479069][T18215] RIP: 0033:0x7f46b259aeb9
[  709.479086][T18215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.479099][T18215] RSP: 002b:00007f46b338e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  709.479117][T18215] RAX: ffffffffffffffda RBX: 00007f46b2815fa0 RCX: 00007f46b259aeb9
[  709.479128][T18215] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  709.479138][T18215] RBP: 00007f46b338e090 R08: 0000200000000000 R09: 0000000000000000
[  709.479148][T18215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  709.479158][T18215] R13: 00007f46b2816038 R14: 00007f46b2815fa0 R15: 00007fffa7226b28
[  709.479183][T18215]  </TASK>
[  709.737210][T17983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  709.745267][T17983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  710.879940][T18239] FAULT_INJECTION: forcing a failure.
[  710.879940][T18239] name failslab, interval 1, probability 0, space 0, times 0
[  710.892897][T18239] CPU: 0 UID: 0 PID: 18239 Comm: syz.7.3683 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  710.892915][T18239] Tainted: [L]=SOFTLOCKUP
[  710.892919][T18239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  710.892926][T18239] Call Trace:
[  710.892930][T18239]  <TASK>
[  710.892935][T18239]  dump_stack_lvl+0xe8/0x150
[  710.892954][T18239]  should_fail_ex+0x412/0x560
[  710.892970][T18239]  should_failslab+0xa8/0x100
[  710.892983][T18239]  __kmalloc_noprof+0xe8/0x760
[  710.892998][T18239]  ? __list_lru_init+0xba/0x5d0
[  710.893012][T18239]  __list_lru_init+0xba/0x5d0
[  710.893026][T18239]  alloc_super+0x8b5/0xab0
[  710.893045][T18239]  sget_fc+0x329/0xa40
[  710.893059][T18239]  ? __pfx_set_anon_super_fc+0x10/0x10
[  710.893072][T18239]  ? __pfx_ovl_fill_super+0x10/0x10
[  710.893087][T18239]  get_tree_nodev+0x2a/0x150
[  710.893102][T18239]  vfs_get_tree+0x92/0x2a0
[  710.893118][T18239]  do_new_mount+0x341/0xd30
[  710.893129][T18239]  ? apparmor_capable+0x137/0x1a0
[  710.893141][T18239]  ? __pfx_do_new_mount+0x10/0x10
[  710.893152][T18239]  ? ns_capable+0x89/0xe0
[  710.893165][T18239]  ? path_mount+0x690/0x10e0
[  710.893186][T18239]  ? user_path_at+0xd4/0x160
[  710.893201][T18239]  __se_sys_mount+0x31d/0x420
[  710.893216][T18239]  ? __pfx___se_sys_mount+0x10/0x10
[  710.893231][T18239]  ? __x64_sys_mount+0x20/0xc0
[  710.893244][T18239]  do_syscall_64+0xe2/0xf80
[  710.893256][T18239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.893265][T18239]  ? trace_irq_disable+0x37/0x100
[  710.893278][T18239]  ? clear_bhb_loop+0x40/0x90
[  710.893290][T18239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.893300][T18239] RIP: 0033:0x7fec5b39aeb9
[  710.893310][T18239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  710.893318][T18239] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  710.893330][T18239] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  710.893336][T18239] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  710.893343][T18239] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  710.893348][T18239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  710.893354][T18239] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  710.893369][T18239]  </TASK>
[  711.268295][    T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  711.346568][T18250] netlink: 'syz.7.3688': attribute type 10 has an invalid length.
[  711.357757][T18250] team0: Device veth1_vlan failed to register rx_handler
[  711.426744][T18237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.435765][T18237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.447757][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  711.461681][    T9] usb 4-1: unable to read config index 0 descriptor/start: -71
[  711.471023][    T9] usb 4-1: can't read configurations, error -71
[  711.962182][   T30] audit: type=1326 audit(2000000046.952:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18253 comm="syz.7.3690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec5b39aeb9 code=0x0
[  712.003872][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0803
[  712.078054][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88806078c000 (16)(syzkaller1) start
[  712.096380][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88806078c000 (5)(syzkaller1) end
[  712.113769][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88806078c000 (4)(syzkaller1) start
[  712.134828][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88806078c000 (4)(syzkaller1) end
[  712.788058][T18257] overlayfs: statfs failed on './file0'
[  713.163305][T18268] FAULT_INJECTION: forcing a failure.
[  713.163305][T18268] name failslab, interval 1, probability 0, space 0, times 0
[  713.176958][T18268] CPU: 1 UID: 0 PID: 18268 Comm: syz.3.3695 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  713.176987][T18268] Tainted: [L]=SOFTLOCKUP
[  713.176994][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  713.177004][T18268] Call Trace:
[  713.177011][T18268]  <TASK>
[  713.177023][T18268]  dump_stack_lvl+0xe8/0x150
[  713.177049][T18268]  should_fail_ex+0x412/0x560
[  713.177076][T18268]  should_failslab+0xa8/0x100
[  713.177094][T18268]  ? prepare_creds+0x30/0x820
[  713.177111][T18268]  kmem_cache_alloc_noprof+0x87/0x650
[  713.177136][T18268]  ? kernel_text_address+0xa5/0xe0
[  713.177156][T18268]  prepare_creds+0x30/0x820
[  713.177171][T18268]  ? set_default_d_op+0x31/0x1b0
[  713.177196][T18268]  ovl_fill_super+0x271/0x5e60
[  713.177224][T18268]  ? stack_trace_save+0xa9/0x100
[  713.177246][T18268]  ? __pfx_stack_trace_save+0x10/0x10
[  713.177270][T18268]  ? __lock_acquire+0x6b5/0x2cf0
[  713.177305][T18268]  ? __pfx_ovl_fill_super+0x10/0x10
[  713.177333][T18268]  ? __mutex_trylock_common+0x158/0x260
[  713.177358][T18268]  ? __pfx___mutex_trylock_common+0x10/0x10
[  713.177384][T18268]  ? rcu_is_watching+0x15/0xb0
[  713.177404][T18268]  ? trace_contention_end+0x39/0x100
[  713.177434][T18268]  ? shrinker_register+0x124/0x230
[  713.177457][T18268]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  713.177481][T18268]  ? __pfx___mutex_lock+0x10/0x10
[  713.177500][T18268]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  713.177524][T18268]  ? __raw_spin_lock_init+0x45/0x100
[  713.177548][T18268]  ? __init_swait_queue_head+0xa9/0x150
[  713.177575][T18268]  ? shrinker_register+0x16b/0x230
[  713.177595][T18268]  ? sget_fc+0x962/0xa40
[  713.177619][T18268]  ? __pfx_set_anon_super_fc+0x10/0x10
[  713.177640][T18268]  ? __pfx_ovl_fill_super+0x10/0x10
[  713.177668][T18268]  get_tree_nodev+0xbb/0x150
[  713.177693][T18268]  vfs_get_tree+0x92/0x2a0
[  713.177718][T18268]  do_new_mount+0x341/0xd30
[  713.177736][T18268]  ? apparmor_capable+0x137/0x1a0
[  713.177758][T18268]  ? __pfx_do_new_mount+0x10/0x10
[  713.177778][T18268]  ? ns_capable+0x89/0xe0
[  713.177799][T18268]  ? path_mount+0x690/0x10e0
[  713.177823][T18268]  ? user_path_at+0xd4/0x160
[  713.177855][T18268]  __se_sys_mount+0x31d/0x420
[  713.177880][T18268]  ? __pfx___se_sys_mount+0x10/0x10
[  713.177906][T18268]  ? __x64_sys_mount+0x20/0xc0
[  713.177928][T18268]  do_syscall_64+0xe2/0xf80
[  713.177946][T18268]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.177963][T18268]  ? trace_irq_disable+0x37/0x100
[  713.177983][T18268]  ? clear_bhb_loop+0x40/0x90
[  713.178004][T18268]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  713.178021][T18268] RIP: 0033:0x7f2ca399aeb9
[  713.178037][T18268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  713.178051][T18268] RSP: 002b:00007f2ca48cb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  713.178072][T18268] RAX: ffffffffffffffda RBX: 00007f2ca3c15fa0 RCX: 00007f2ca399aeb9
[  713.178082][T18268] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  713.178092][T18268] RBP: 00007f2ca48cb090 R08: 0000200000000000 R09: 0000000000000000
[  713.178101][T18268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  713.178110][T18268] R13: 00007f2ca3c16038 R14: 00007f2ca3c15fa0 R15: 00007ffce008e638
[  713.178135][T18268]  </TASK>
[  713.768235][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  713.824169][T18287] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3703'.
[  714.241228][T18310] FAULT_INJECTION: forcing a failure.
[  714.241228][T18310] name failslab, interval 1, probability 0, space 0, times 0
[  714.257063][T18310] CPU: 0 UID: 0 PID: 18310 Comm: syz.2.3710 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.257093][T18310] Tainted: [L]=SOFTLOCKUP
[  714.257099][T18310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  714.257109][T18310] Call Trace:
[  714.257116][T18310]  <TASK>
[  714.257124][T18310]  dump_stack_lvl+0xe8/0x150
[  714.257152][T18310]  should_fail_ex+0x412/0x560
[  714.257178][T18310]  should_failslab+0xa8/0x100
[  714.257199][T18310]  __kmalloc_noprof+0xe8/0x760
[  714.257222][T18310]  ? security_prepare_creds+0x52/0x360
[  714.257242][T18310]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  714.257267][T18310]  security_prepare_creds+0x52/0x360
[  714.257289][T18310]  prepare_creds+0x57d/0x820
[  714.257311][T18310]  ovl_fill_super+0x271/0x5e60
[  714.257340][T18310]  ? stack_trace_save+0xa9/0x100
[  714.257362][T18310]  ? __pfx_stack_trace_save+0x10/0x10
[  714.257387][T18310]  ? __lock_acquire+0x6b5/0x2cf0
[  714.257421][T18310]  ? __pfx_ovl_fill_super+0x10/0x10
[  714.257449][T18310]  ? __mutex_trylock_common+0x158/0x260
[  714.257473][T18310]  ? __pfx___mutex_trylock_common+0x10/0x10
[  714.257497][T18310]  ? rcu_is_watching+0x15/0xb0
[  714.257517][T18310]  ? trace_contention_end+0x39/0x100
[  714.257546][T18310]  ? shrinker_register+0x124/0x230
[  714.257569][T18310]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  714.257592][T18310]  ? __pfx___mutex_lock+0x10/0x10
[  714.257612][T18310]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  714.257636][T18310]  ? __raw_spin_lock_init+0x45/0x100
[  714.257659][T18310]  ? __init_swait_queue_head+0xa9/0x150
[  714.257687][T18310]  ? shrinker_register+0x16b/0x230
[  714.257707][T18310]  ? sget_fc+0x962/0xa40
[  714.257731][T18310]  ? __pfx_set_anon_super_fc+0x10/0x10
[  714.257758][T18310]  ? __pfx_ovl_fill_super+0x10/0x10
[  714.257781][T18310]  get_tree_nodev+0xbb/0x150
[  714.257804][T18310]  vfs_get_tree+0x92/0x2a0
[  714.257829][T18310]  do_new_mount+0x341/0xd30
[  714.257847][T18310]  ? apparmor_capable+0x137/0x1a0
[  714.257869][T18310]  ? __pfx_do_new_mount+0x10/0x10
[  714.257888][T18310]  ? ns_capable+0x89/0xe0
[  714.257909][T18310]  ? path_mount+0x690/0x10e0
[  714.257933][T18310]  ? user_path_at+0xd4/0x160
[  714.257957][T18310]  __se_sys_mount+0x31d/0x420
[  714.257982][T18310]  ? __pfx___se_sys_mount+0x10/0x10
[  714.258009][T18310]  ? __x64_sys_mount+0x20/0xc0
[  714.258027][T18310]  do_syscall_64+0xe2/0xf80
[  714.258044][T18310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.258058][T18310]  ? trace_irq_disable+0x37/0x100
[  714.258077][T18310]  ? clear_bhb_loop+0x40/0x90
[  714.258097][T18310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.258112][T18310] RIP: 0033:0x7fbd9f99aeb9
[  714.258128][T18310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  714.258141][T18310] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  714.258160][T18310] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  714.258172][T18310] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  714.258182][T18310] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  714.258191][T18310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  714.258200][T18310] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  714.258228][T18310]  </TASK>
[  714.706674][T18316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.719914][T18316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.958170][   T10] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[  715.108127][   T10] usb 8-1: Using ep0 maxpacket: 16
[  715.115044][   T10] usb 8-1: config 4 has an invalid interface number: 51 but max is 0
[  715.123328][   T10] usb 8-1: config 4 has no interface number 0
[  715.131535][   T10] usb 8-1: config 4 interface 51 has no altsetting 0
[  715.140542][   T10] usb 8-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b
[  715.150371][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.158527][   T10] usb 8-1: Product: syz
[  715.162735][   T10] usb 8-1: Manufacturer: syz
[  715.167376][   T10] usb 8-1: SerialNumber: syz
[  715.175889][   T10] upd78f0730 8-1:4.51: upd78f0730 converter detected
[  715.187696][   T10] usb 8-1: upd78f0730 converter now attached to ttyUSB0
[  715.382306][   T10] usb 8-1: USB disconnect, device number 39
[  715.402091][   T10] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  715.422341][T18336] FAULT_INJECTION: forcing a failure.
[  715.422341][T18336] name failslab, interval 1, probability 0, space 0, times 0
[  715.435316][   T10] upd78f0730 8-1:4.51: device disconnected
[  715.460524][T18336] CPU: 0 UID: 0 PID: 18336 Comm: syz.2.3720 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  715.460552][T18336] Tainted: [L]=SOFTLOCKUP
[  715.460558][T18336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  715.460568][T18336] Call Trace:
[  715.460576][T18336]  <TASK>
[  715.460583][T18336]  dump_stack_lvl+0xe8/0x150
[  715.460611][T18336]  should_fail_ex+0x412/0x560
[  715.460637][T18336]  should_failslab+0xa8/0x100
[  715.460656][T18336]  __kmalloc_noprof+0xe8/0x760
[  715.460689][T18336]  ? ovl_fill_super+0x410/0x5e60
[  715.460716][T18336]  ovl_fill_super+0x410/0x5e60
[  715.460744][T18336]  ? stack_trace_save+0xa9/0x100
[  715.460773][T18336]  ? __lock_acquire+0x6b5/0x2cf0
[  715.460804][T18336]  ? __pfx_ovl_fill_super+0x10/0x10
[  715.460832][T18336]  ? __mutex_trylock_common+0x158/0x260
[  715.460856][T18336]  ? __pfx___mutex_trylock_common+0x10/0x10
[  715.460881][T18336]  ? rcu_is_watching+0x15/0xb0
[  715.460902][T18336]  ? trace_contention_end+0x39/0x100
[  715.460932][T18336]  ? shrinker_register+0x124/0x230
[  715.460955][T18336]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  715.460979][T18336]  ? __pfx___mutex_lock+0x10/0x10
[  715.460998][T18336]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  715.461023][T18336]  ? __raw_spin_lock_init+0x45/0x100
[  715.461046][T18336]  ? __init_swait_queue_head+0xa9/0x150
[  715.461072][T18336]  ? shrinker_register+0x16b/0x230
[  715.461092][T18336]  ? sget_fc+0x962/0xa40
[  715.461114][T18336]  ? __pfx_set_anon_super_fc+0x10/0x10
[  715.461135][T18336]  ? __pfx_ovl_fill_super+0x10/0x10
[  715.461157][T18336]  get_tree_nodev+0xbb/0x150
[  715.461180][T18336]  vfs_get_tree+0x92/0x2a0
[  715.461203][T18336]  do_new_mount+0x341/0xd30
[  715.461221][T18336]  ? apparmor_capable+0x137/0x1a0
[  715.461240][T18336]  ? __pfx_do_new_mount+0x10/0x10
[  715.461258][T18336]  ? ns_capable+0x89/0xe0
[  715.461278][T18336]  ? path_mount+0x690/0x10e0
[  715.461301][T18336]  ? user_path_at+0xd4/0x160
[  715.461325][T18336]  __se_sys_mount+0x31d/0x420
[  715.461350][T18336]  ? __pfx___se_sys_mount+0x10/0x10
[  715.461374][T18336]  ? __x64_sys_mount+0x20/0xc0
[  715.461395][T18336]  do_syscall_64+0xe2/0xf80
[  715.461413][T18336]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.461428][T18336]  ? trace_irq_disable+0x37/0x100
[  715.461447][T18336]  ? clear_bhb_loop+0x40/0x90
[  715.461467][T18336]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.461483][T18336] RIP: 0033:0x7fbd9f99aeb9
[  715.461499][T18336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.461511][T18336] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  715.461528][T18336] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  715.461537][T18336] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  715.461543][T18336] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  715.461549][T18336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  715.461555][T18336] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  715.461570][T18336]  </TASK>
[  715.806381][T18340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.815559][T18340] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.900049][ T5875] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  716.058121][ T5875] usb 4-1: Using ep0 maxpacket: 32
[  716.065065][ T5875] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  716.074444][ T5875] usb 4-1: config 0 has no interface number 0
[  716.080907][ T5875] usb 4-1: config 0 interface 184 has no altsetting 0
[  716.090443][ T5875] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  716.100729][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.115616][ T5875] usb 4-1: Product: syz
[  716.121657][ T5875] usb 4-1: Manufacturer: syz
[  716.126442][ T5875] usb 4-1: SerialNumber: syz
[  716.133746][ T5875] usb 4-1: config 0 descriptor??
[  716.158410][ T5875] smsc75xx v1.0.0
[  716.528361][ T7457] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[  716.688029][ T7457] usb 8-1: Using ep0 maxpacket: 32
[  716.694940][ T7457] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  716.707663][ T7457] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  716.716977][ T7457] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.725057][ T7457] usb 8-1: Product: syz
[  716.729584][ T7457] usb 8-1: Manufacturer: syz
[  716.734415][ T7457] usb 8-1: SerialNumber: syz
[  716.743054][ T7457] usb 8-1: config 0 descriptor??
[  716.752428][ T7457] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  716.755703][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  716.771667][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  716.781779][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  716.794619][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  716.805196][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  716.815637][ T5875] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  716.826092][ T5875] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32
[  716.834578][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  717.183775][T18471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.193019][T18471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.658337][ T7457] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  717.665476][ T7457] gspca_pac7302 8-1:0.0: probe with driver gspca_pac7302 failed with error -110
[  717.769985][T18476] FAULT_INJECTION: forcing a failure.
[  717.769985][T18476] name failslab, interval 1, probability 0, space 0, times 0
[  717.784382][T18476] CPU: 0 UID: 0 PID: 18476 Comm: syz.2.3733 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  717.784402][T18476] Tainted: [L]=SOFTLOCKUP
[  717.784406][T18476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  717.784412][T18476] Call Trace:
[  717.784416][T18476]  <TASK>
[  717.784421][T18476]  dump_stack_lvl+0xe8/0x150
[  717.784440][T18476]  should_fail_ex+0x412/0x560
[  717.784457][T18476]  should_failslab+0xa8/0x100
[  717.784469][T18476]  __kmalloc_noprof+0xe8/0x760
[  717.784485][T18476]  ? ovl_fill_super+0x470/0x5e60
[  717.784499][T18476]  ? __kmalloc_noprof+0x1b8/0x760
[  717.784515][T18476]  ovl_fill_super+0x470/0x5e60
[  717.784531][T18476]  ? stack_trace_save+0xa9/0x100
[  717.784549][T18476]  ? __lock_acquire+0x6b5/0x2cf0
[  717.784569][T18476]  ? __pfx_ovl_fill_super+0x10/0x10
[  717.784585][T18476]  ? __mutex_trylock_common+0x158/0x260
[  717.784600][T18476]  ? __pfx___mutex_trylock_common+0x10/0x10
[  717.784616][T18476]  ? rcu_is_watching+0x15/0xb0
[  717.784628][T18476]  ? trace_contention_end+0x39/0x100
[  717.784646][T18476]  ? shrinker_register+0x124/0x230
[  717.784659][T18476]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  717.784674][T18476]  ? __pfx___mutex_lock+0x10/0x10
[  717.784686][T18476]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  717.784700][T18476]  ? __raw_spin_lock_init+0x45/0x100
[  717.784715][T18476]  ? __init_swait_queue_head+0xa9/0x150
[  717.784731][T18476]  ? shrinker_register+0x16b/0x230
[  717.784743][T18476]  ? sget_fc+0x962/0xa40
[  717.784757][T18476]  ? __pfx_set_anon_super_fc+0x10/0x10
[  717.784769][T18476]  ? __pfx_ovl_fill_super+0x10/0x10
[  717.784783][T18476]  get_tree_nodev+0xbb/0x150
[  717.784798][T18476]  vfs_get_tree+0x92/0x2a0
[  717.784813][T18476]  do_new_mount+0x341/0xd30
[  717.784824][T18476]  ? apparmor_capable+0x137/0x1a0
[  717.784836][T18476]  ? __pfx_do_new_mount+0x10/0x10
[  717.784847][T18476]  ? ns_capable+0x89/0xe0
[  717.784859][T18476]  ? path_mount+0x690/0x10e0
[  717.784873][T18476]  ? user_path_at+0xd4/0x160
[  717.784888][T18476]  __se_sys_mount+0x31d/0x420
[  717.784902][T18476]  ? __pfx___se_sys_mount+0x10/0x10
[  717.784917][T18476]  ? __x64_sys_mount+0x20/0xc0
[  717.784929][T18476]  do_syscall_64+0xe2/0xf80
[  717.784941][T18476]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.784951][T18476]  ? clear_bhb_loop+0x40/0x90
[  717.784963][T18476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.784972][T18476] RIP: 0033:0x7fbd9f99aeb9
[  717.784984][T18476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  717.784992][T18476] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  717.785003][T18476] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  717.785010][T18476] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  717.785016][T18476] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  717.785022][T18476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  717.785028][T18476] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  717.785043][T18476]  </TASK>
[  718.132121][T15686] usb 4-1: USB disconnect, device number 101
[  718.138225][   T10] usb 8-1: USB disconnect, device number 40
[  718.342383][T18487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.360288][T18487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.374796][T18487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.386305][T18487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.474024][T18500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.483987][T18500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.523450][T18503] netlink: 'syz.3.3742': attribute type 3 has an invalid length.
[  718.534338][T18503] netlink: 'syz.3.3742': attribute type 1 has an invalid length.
[  718.542417][T18503] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3742'.
[  718.551664][T18503] NCSI netlink: No device for ifindex 0
[  718.577983][T15686] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[  718.592051][T18505] netlink: 'syz.3.3743': attribute type 21 has an invalid length.
[  718.600192][T18505] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3743'.
[  718.624633][T18505] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3743'.
[  718.737942][T15686] usb 8-1: Using ep0 maxpacket: 32
[  718.744952][T15686] usb 8-1: unable to get BOS descriptor or descriptor too short
[  718.754392][T15686] usb 8-1: config 128 has an invalid interface number: 127 but max is 3
[  718.763053][T15686] usb 8-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  718.774048][T15686] usb 8-1: config 128 has 1 interface, different from the descriptor's value: 4
[  718.783388][T15686] usb 8-1: config 128 has no interface number 0
[  718.789803][T15686] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  718.801077][T15686] usb 8-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  718.811211][T15686] usb 8-1: config 128 interface 127 has no altsetting 0
[  718.820156][T15686] usb 8-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  718.829476][T15686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.838707][T15686] usb 8-1: Product: syz
[  718.842894][T15686] usb 8-1: Manufacturer: syz
[  718.847494][T15686] usb 8-1: SerialNumber: syz
[  718.897942][   T10] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[  719.028162][   T10] usb 4-1: device descriptor read/64, error -71
[  719.060776][T18510] FAULT_INJECTION: forcing a failure.
[  719.060776][T18510] name failslab, interval 1, probability 0, space 0, times 0
[  719.079486][T18510] CPU: 0 UID: 0 PID: 18510 Comm: syz.2.3745 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  719.079515][T18510] Tainted: [L]=SOFTLOCKUP
[  719.079521][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  719.079531][T18510] Call Trace:
[  719.079539][T18510]  <TASK>
[  719.079547][T18510]  dump_stack_lvl+0xe8/0x150
[  719.079573][T18510]  should_fail_ex+0x412/0x560
[  719.079600][T18510]  should_failslab+0xa8/0x100
[  719.079620][T18510]  __kmalloc_noprof+0xe8/0x760
[  719.079644][T18510]  ? ovl_fill_super+0x12eb/0x5e60
[  719.079663][T18510]  ? capable+0x88/0xe0
[  719.079686][T18510]  ovl_fill_super+0x12eb/0x5e60
[  719.079740][T18510]  ? __pfx_ovl_fill_super+0x10/0x10
[  719.079768][T18510]  ? __mutex_trylock_common+0x158/0x260
[  719.079793][T18510]  ? __pfx___mutex_trylock_common+0x10/0x10
[  719.079819][T18510]  ? rcu_is_watching+0x15/0xb0
[  719.079839][T18510]  ? trace_contention_end+0x39/0x100
[  719.079869][T18510]  ? shrinker_register+0x124/0x230
[  719.079892][T18510]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  719.079925][T18510]  ? __raw_spin_lock_init+0x45/0x100
[  719.079948][T18510]  ? __init_swait_queue_head+0xa9/0x150
[  719.079975][T18510]  ? shrinker_register+0x16b/0x230
[  719.079996][T18510]  ? sget_fc+0x962/0xa40
[  719.080019][T18510]  ? __pfx_set_anon_super_fc+0x10/0x10
[  719.080050][T18510]  ? __pfx_ovl_fill_super+0x10/0x10
[  719.080072][T18510]  get_tree_nodev+0xbb/0x150
[  719.080097][T18510]  vfs_get_tree+0x92/0x2a0
[  719.080121][T18510]  do_new_mount+0x341/0xd30
[  719.080139][T18510]  ? apparmor_capable+0x137/0x1a0
[  719.080161][T18510]  ? __pfx_do_new_mount+0x10/0x10
[  719.080180][T18510]  ? ns_capable+0x89/0xe0
[  719.080200][T18510]  ? path_mount+0x690/0x10e0
[  719.080224][T18510]  ? user_path_at+0xd4/0x160
[  719.080248][T18510]  __se_sys_mount+0x31d/0x420
[  719.080273][T18510]  ? __pfx___se_sys_mount+0x10/0x10
[  719.080298][T18510]  ? __x64_sys_mount+0x20/0xc0
[  719.080319][T18510]  do_syscall_64+0xe2/0xf80
[  719.080338][T18510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.080353][T18510]  ? trace_irq_disable+0x37/0x100
[  719.080373][T18510]  ? clear_bhb_loop+0x40/0x90
[  719.080393][T18510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.080410][T18510] RIP: 0033:0x7fbd9f99aeb9
[  719.080427][T18510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.080440][T18510] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  719.080457][T18510] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  719.080469][T18510] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  719.080479][T18510] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  719.080490][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  719.080500][T18510] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  719.080528][T18510]  </TASK>
[  719.124236][T15686] usb 8-1: USB disconnect, device number 41
[  719.215317][T14477] udevd[14477]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  719.403486][   T10] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[  719.538704][   T10] usb 4-1: device descriptor read/64, error -71
[  719.648095][   T10] usb usb4-port1: attempt power cycle
[  719.665494][T18525] SQUASHFS error: Failed to read block 0x0: -5
[  719.686081][T18525] unable to read squashfs_super_block
[  719.837250][T18534] FAULT_INJECTION: forcing a failure.
[  719.837250][T18534] name failslab, interval 1, probability 0, space 0, times 0
[  719.870774][T18534] CPU: 1 UID: 0 PID: 18534 Comm: syz.2.3754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  719.870803][T18534] Tainted: [L]=SOFTLOCKUP
[  719.870809][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  719.870819][T18534] Call Trace:
[  719.870826][T18534]  <TASK>
[  719.870834][T18534]  dump_stack_lvl+0xe8/0x150
[  719.870860][T18534]  should_fail_ex+0x412/0x560
[  719.870883][T18534]  ? ovl_alloc_inode+0x2c/0xa0
[  719.870906][T18534]  should_failslab+0xa8/0x100
[  719.870988][T18534]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  719.871019][T18534]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  719.871039][T18534]  ovl_alloc_inode+0x2c/0xa0
[  719.871060][T18534]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  719.871079][T18534]  alloc_inode+0x6a/0x1b0
[  719.871096][T18534]  ? __pfx_ovl_inode_test+0x10/0x10
[  719.871117][T18534]  ? __pfx_ovl_inode_set+0x10/0x10
[  719.871130][T18534]  iget5_locked+0x4a/0xa0
[  719.871153][T18534]  ovl_get_trap_inode+0x89/0x1c0
[  719.871171][T18534]  ovl_fill_super+0x2351/0x5e60
[  719.871215][T18534]  ? __pfx_ovl_fill_super+0x10/0x10
[  719.871241][T18534]  ? __mutex_trylock_common+0x158/0x260
[  719.871267][T18534]  ? __pfx___mutex_trylock_common+0x10/0x10
[  719.871289][T18534]  ? rcu_is_watching+0x15/0xb0
[  719.871309][T18534]  ? trace_contention_end+0x39/0x100
[  719.871335][T18534]  ? shrinker_register+0x124/0x230
[  719.871356][T18534]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  719.871388][T18534]  ? __raw_spin_lock_init+0x45/0x100
[  719.871410][T18534]  ? __init_swait_queue_head+0xa9/0x150
[  719.871436][T18534]  ? shrinker_register+0x16b/0x230
[  719.871455][T18534]  ? sget_fc+0x962/0xa40
[  719.871479][T18534]  ? __pfx_set_anon_super_fc+0x10/0x10
[  719.871498][T18534]  ? __pfx_ovl_fill_super+0x10/0x10
[  719.871519][T18534]  get_tree_nodev+0xbb/0x150
[  719.871543][T18534]  vfs_get_tree+0x92/0x2a0
[  719.871567][T18534]  do_new_mount+0x341/0xd30
[  719.871586][T18534]  ? apparmor_capable+0x137/0x1a0
[  719.871620][T18534]  ? __pfx_do_new_mount+0x10/0x10
[  719.871638][T18534]  ? ns_capable+0x89/0xe0
[  719.871660][T18534]  ? path_mount+0x690/0x10e0
[  719.871684][T18534]  ? user_path_at+0xd4/0x160
[  719.871708][T18534]  __se_sys_mount+0x31d/0x420
[  719.871733][T18534]  ? __pfx___se_sys_mount+0x10/0x10
[  719.871759][T18534]  ? __x64_sys_mount+0x20/0xc0
[  719.871781][T18534]  do_syscall_64+0xe2/0xf80
[  719.871799][T18534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.871815][T18534]  ? trace_irq_disable+0x37/0x100
[  719.871834][T18534]  ? clear_bhb_loop+0x40/0x90
[  719.871854][T18534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.871869][T18534] RIP: 0033:0x7fbd9f99aeb9
[  719.871886][T18534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.871899][T18534] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  719.871917][T18534] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  719.871937][T18534] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  719.871948][T18534] RBP: 00007fbd9dbf6090 R08: 0000200000000000 R09: 0000000000000000
[  719.871958][T18534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  719.871968][T18534] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  719.871997][T18534]  </TASK>
[  720.206166][   T10] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  720.239186][   T10] usb 4-1: device descriptor read/8, error -71
[  720.251950][T18538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.260799][T18538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.357864][ T7457] usb 8-1: new high-speed USB device number 42 using dummy_hcd
[  720.477867][   T10] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  720.498516][   T10] usb 4-1: device descriptor read/8, error -71
[  720.509654][ T7457] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.520710][ T7457] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.531052][ T7457] usb 8-1: New USB device found, idVendor=046d, idProduct=0026, bcdDevice= 0.00
[  720.540338][ T7457] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.552011][ T7457] usb 8-1: config 0 descriptor??
[  720.608275][   T10] usb usb4-port1: unable to enumerate USB device
[  720.813643][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.822941][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.912717][T18549] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.3760'.
[  720.971496][ T7457] hid-generic 0003:046D:0026.002B: hidraw0: USB HID v0.00 Device [HID 046d:0026] on usb-dummy_hcd.7-1/input0
[  721.175289][ T7457] usb 8-1: USB disconnect, device number 42
[  721.205257][T18564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  721.214377][T18564] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  721.238521][T18553] fido_id[18553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  721.738593][T18569] FAULT_INJECTION: forcing a failure.
[  721.738593][T18569] name failslab, interval 1, probability 0, space 0, times 0
[  721.753006][T18569] CPU: 1 UID: 0 PID: 18569 Comm: syz.7.3767 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.753024][T18569] Tainted: [L]=SOFTLOCKUP
[  721.753028][T18569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  721.753034][T18569] Call Trace:
[  721.753038][T18569]  <TASK>
[  721.753043][T18569]  dump_stack_lvl+0xe8/0x150
[  721.753061][T18569]  should_fail_ex+0x412/0x560
[  721.753077][T18569]  should_failslab+0xa8/0x100
[  721.753089][T18569]  __kmalloc_noprof+0xe8/0x760
[  721.753104][T18569]  ? memcg_list_lru_alloc+0x27e/0x800
[  721.753118][T18569]  memcg_list_lru_alloc+0x27e/0x800
[  721.753128][T18569]  ? do_syscall_64+0xe2/0xf80
[  721.753144][T18569]  ? __pfx_memcg_list_lru_alloc+0x10/0x10
[  721.753159][T18569]  ? __memcg_slab_post_alloc_hook+0x13b/0xa80
[  721.753175][T18569]  __memcg_slab_post_alloc_hook+0x312/0xa80
[  721.753189][T18569]  ? __memcg_slab_post_alloc_hook+0x13b/0xa80
[  721.753206][T18569]  ? ovl_alloc_inode+0x2c/0xa0
[  721.753221][T18569]  kmem_cache_alloc_lru_noprof+0x346/0x640
[  721.753234][T18569]  ? ovl_alloc_inode+0x2c/0xa0
[  721.753247][T18569]  ? kmem_cache_alloc_lru_noprof+0x15c/0x640
[  721.753262][T18569]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  721.753275][T18569]  ovl_alloc_inode+0x2c/0xa0
[  721.753288][T18569]  ? __pfx_ovl_alloc_inode+0x10/0x10
[  721.753300][T18569]  alloc_inode+0x6a/0x1b0
[  721.753311][T18569]  ? __pfx_ovl_inode_test+0x10/0x10
[  721.753325][T18569]  ? __pfx_ovl_inode_set+0x10/0x10
[  721.753332][T18569]  iget5_locked+0x4a/0xa0
[  721.753346][T18569]  ovl_get_trap_inode+0x89/0x1c0
[  721.753356][T18569]  ovl_fill_super+0x2351/0x5e60
[  721.753386][T18569]  ? __pfx_ovl_fill_super+0x10/0x10
[  721.753402][T18569]  ? __mutex_trylock_common+0x158/0x260
[  721.753417][T18569]  ? __pfx___mutex_trylock_common+0x10/0x10
[  721.753433][T18569]  ? rcu_is_watching+0x15/0xb0
[  721.753445][T18569]  ? trace_contention_end+0x39/0x100
[  721.753462][T18569]  ? shrinker_register+0x124/0x230
[  721.753476][T18569]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  721.753495][T18569]  ? __raw_spin_lock_init+0x45/0x100
[  721.753510][T18569]  ? __init_swait_queue_head+0xa9/0x150
[  721.753527][T18569]  ? shrinker_register+0x16b/0x230
[  721.753539][T18569]  ? sget_fc+0x962/0xa40
[  721.753554][T18569]  ? __pfx_set_anon_super_fc+0x10/0x10
[  721.753567][T18569]  ? __pfx_ovl_fill_super+0x10/0x10
[  721.753581][T18569]  get_tree_nodev+0xbb/0x150
[  721.753595][T18569]  vfs_get_tree+0x92/0x2a0
[  721.753610][T18569]  do_new_mount+0x341/0xd30
[  721.753621][T18569]  ? apparmor_capable+0x137/0x1a0
[  721.753633][T18569]  ? __pfx_do_new_mount+0x10/0x10
[  721.753644][T18569]  ? ns_capable+0x89/0xe0
[  721.753656][T18569]  ? path_mount+0x690/0x10e0
[  721.753670][T18569]  ? user_path_at+0xd4/0x160
[  721.753684][T18569]  __se_sys_mount+0x31d/0x420
[  721.753699][T18569]  ? __pfx___se_sys_mount+0x10/0x10
[  721.753713][T18569]  ? __x64_sys_mount+0x20/0xc0
[  721.753726][T18569]  do_syscall_64+0xe2/0xf80
[  721.753736][T18569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.753745][T18569]  ? trace_irq_disable+0x37/0x100
[  721.753759][T18569]  ? clear_bhb_loop+0x40/0x90
[  721.753771][T18569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.753780][T18569] RIP: 0033:0x7fec5b39aeb9
[  721.753798][T18569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  721.753806][T18569] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  721.753817][T18569] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  721.753824][T18569] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 0000000000000000
[  721.753830][T18569] RBP: 00007fec5c2b0090 R08: 0000200000000000 R09: 0000000000000000
[  721.753836][T18569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  721.753841][T18569] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  721.753856][T18569]  </TASK>
[  722.474036][ T7457] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  722.546388][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.599697][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.619903][ T7457] usb 4-1: device descriptor read/64, error -71
[  722.686357][T18589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.707484][T18589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.833943][T17983] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff888038554000 (15)(syzkaller1) start
[  722.851465][T17983] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff888038554000 (10)(syzkaller1) end
[  722.868821][ T7457] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  722.878168][T17983] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff888038554000 (6)(syzkaller1) start
[  722.896547][T17983] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff888038554000 (3)(syzkaller1) end
[  723.017837][ T7457] usb 4-1: device descriptor read/64, error -71
[  723.094924][T18600] lo speed is unknown, defaulting to 1000
[  723.130141][ T7457] usb usb4-port1: attempt power cycle
[  723.348291][T18600] xfrm0 speed is unknown, defaulting to 1000
[  723.487795][ T7457] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  723.521327][ T7457] usb 4-1: device descriptor read/8, error -71
[  723.599170][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3780'.
[  723.777714][ T7457] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  723.817955][ T7457] usb 4-1: device descriptor read/8, error -71
[  723.938059][ T7457] usb usb4-port1: unable to enumerate USB device
[  724.023446][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88802c2ae000 (11)(erspan0) start
[  724.049313][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff88802c2ae000 (4)(erspan0) end
[  724.097271][T18620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  724.105050][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88802c2ae000 (3)(erspan0) start
[  724.114225][T18622] FAULT_INJECTION: forcing a failure.
[  724.114225][T18622] name failslab, interval 1, probability 0, space 0, times 0
[  724.127087][  T153] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff88802c2ae000 (3)(erspan0) end
[  724.137157][T18620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  724.165445][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff888043900000 (3)(gretap0) start
[  724.186896][T18622] CPU: 0 UID: 0 PID: 18622 Comm: syz.7.3786 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  724.186916][T18622] Tainted: [L]=SOFTLOCKUP
[  724.186920][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  724.186926][T18622] Call Trace:
[  724.186931][T18622]  <TASK>
[  724.186935][T18622]  dump_stack_lvl+0xe8/0x150
[  724.186955][T18622]  should_fail_ex+0x412/0x560
[  724.186970][T18622]  should_failslab+0xa8/0x100
[  724.186982][T18622]  __kmalloc_noprof+0xe8/0x760
[  724.186998][T18622]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  724.187015][T18622]  tomoyo_realpath_from_path+0xe3/0x5d0
[  724.187030][T18622]  ? tomoyo_domain+0xd7/0x130
[  724.187046][T18622]  ? tomoyo_path_number_perm+0x219/0x630
[  724.187057][T18622]  tomoyo_path_number_perm+0x246/0x630
[  724.187070][T18622]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  724.187081][T18622]  ? __lock_acquire+0x6b5/0x2cf0
[  724.187100][T18622]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  724.187123][T18622]  ? __fget_files+0x2a/0x420
[  724.187137][T18622]  ? __fget_files+0x2a/0x420
[  724.187148][T18622]  ? __fget_files+0x3a0/0x420
[  724.187159][T18622]  ? __fget_files+0x2a/0x420
[  724.187172][T18622]  security_file_ioctl+0xc3/0x2a0
[  724.187185][T18622]  __se_sys_ioctl+0x47/0x170
[  724.187196][T18622]  do_syscall_64+0xe2/0xf80
[  724.187207][T18622]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.187217][T18622]  ? trace_irq_disable+0x37/0x100
[  724.187230][T18622]  ? clear_bhb_loop+0x40/0x90
[  724.187242][T18622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  724.187251][T18622] RIP: 0033:0x7fec5b39aeb9
[  724.187262][T18622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  724.187269][T18622] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  724.187281][T18622] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  724.187288][T18622] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004
[  724.187294][T18622] RBP: 00007fec5c2b0090 R08: 0000000000000000 R09: 0000000000000000
[  724.187300][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  724.187305][T18622] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  724.187320][T18622]  </TASK>
[  724.187325][T18622] ERROR: Out of memory at tomoyo_realpath_from_path.
[  724.197648][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88805f128000 (13)(syz0) rdma_ndev=ffff8880305dc000 (18)(lo) cookie=ffff888043900000 (3)(gretap0) end
[  724.444144][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff888043900000 (3)(gretap0) start
[  724.460967][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888038468000 (11)(syz1) rdma_ndev=ffff8880296e2000 (27)(xfrm0) cookie=ffff888043900000 (3)(gretap0) end
[  725.066250][ T5836] Bluetooth: hci1: unexpected event for opcode 0x0803
[  725.325883][T18649] FAULT_INJECTION: forcing a failure.
[  725.325883][T18649] name failslab, interval 1, probability 0, space 0, times 0
[  725.339345][T18646] netlink: 'syz.2.3798': attribute type 29 has an invalid length.
[  725.341424][T18649] CPU: 0 UID: 0 PID: 18649 Comm: syz.7.3796 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  725.341450][T18649] Tainted: [L]=SOFTLOCKUP
[  725.341456][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  725.341466][T18649] Call Trace:
[  725.341473][T18649]  <TASK>
[  725.341481][T18649]  dump_stack_lvl+0xe8/0x150
[  725.341507][T18649]  should_fail_ex+0x412/0x560
[  725.341532][T18649]  should_failslab+0xa8/0x100
[  725.341552][T18649]  __kmalloc_noprof+0xe8/0x760
[  725.341576][T18649]  ? tomoyo_encode+0x28b/0x550
[  725.341603][T18649]  tomoyo_encode+0x28b/0x550
[  725.341628][T18649]  tomoyo_realpath_from_path+0x58d/0x5d0
[  725.341650][T18649]  ? tomoyo_domain+0xd7/0x130
[  725.341675][T18649]  ? tomoyo_path_number_perm+0x219/0x630
[  725.341701][T18649]  tomoyo_path_number_perm+0x246/0x630
[  725.341722][T18649]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  725.341738][T18649]  ? __lock_acquire+0x6b5/0x2cf0
[  725.341770][T18649]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  725.341809][T18649]  ? __fget_files+0x2a/0x420
[  725.341831][T18649]  ? __fget_files+0x2a/0x420
[  725.341848][T18649]  ? __fget_files+0x3a0/0x420
[  725.341865][T18649]  ? __fget_files+0x2a/0x420
[  725.341887][T18649]  security_file_ioctl+0xc3/0x2a0
[  725.341907][T18649]  __se_sys_ioctl+0x47/0x170
[  725.341926][T18649]  do_syscall_64+0xe2/0xf80
[  725.341943][T18649]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.341958][T18649]  ? trace_irq_disable+0x37/0x100
[  725.341977][T18649]  ? clear_bhb_loop+0x40/0x90
[  725.341996][T18649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.342012][T18649] RIP: 0033:0x7fec5b39aeb9
[  725.342028][T18649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.342041][T18649] RSP: 002b:00007fec5c2b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  725.342057][T18649] RAX: ffffffffffffffda RBX: 00007fec5b615fa0 RCX: 00007fec5b39aeb9
[  725.342069][T18649] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004
[  725.342079][T18649] RBP: 00007fec5c2b0090 R08: 0000000000000000 R09: 0000000000000000
[  725.342088][T18649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.342098][T18649] R13: 00007fec5b616038 R14: 00007fec5b615fa0 R15: 00007ffeddf37c98
[  725.342149][T18649]  </TASK>
[  725.342400][T18649] ERROR: Out of memory at tomoyo_realpath_from_path.
[  725.349531][T18646] netlink: 'syz.2.3798': attribute type 29 has an invalid length.
[  725.586495][T18659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  725.646652][T18659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  725.807583][ T7457] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[  725.815821][ T5912] usb 8-1: new high-speed USB device number 43 using dummy_hcd
[  725.835481][ T5836] Bluetooth: hci2: unexpected event for opcode 0x0803
[  725.947557][ T7457] usb 4-1: device descriptor read/64, error -71
[  725.967703][ T5912] usb 8-1: Using ep0 maxpacket: 8
[  725.983162][ T5912] usb 8-1: config 127 has an invalid interface number: 171 but max is 1
[  725.991914][ T5912] usb 8-1: config 127 has an invalid descriptor of length 118, skipping remainder of the config
[  726.004494][ T5912] usb 8-1: config 127 has no interface number 1
[  726.011682][ T5912] usb 8-1: config 127 interface 171 has no altsetting 0
[  726.022219][ T5912] usb 8-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[  726.032238][ T5912] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.041853][ T5912] usb 8-1: Product: syz
[  726.046114][ T5912] usb 8-1: Manufacturer: syz
[  726.053385][ T5912] usb 8-1: SerialNumber: syz
[  726.118977][T18680] FAULT_INJECTION: forcing a failure.
[  726.118977][T18680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.133272][T18680] CPU: 0 UID: 0 PID: 18680 Comm: syz.2.3808 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  726.133290][T18680] Tainted: [L]=SOFTLOCKUP
[  726.133293][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  726.133300][T18680] Call Trace:
[  726.133305][T18680]  <TASK>
[  726.133309][T18680]  dump_stack_lvl+0xe8/0x150
[  726.133328][T18680]  should_fail_ex+0x412/0x560
[  726.133347][T18680]  _copy_from_user+0x2d/0xb0
[  726.133363][T18680]  nr_rt_ioctl+0x966/0xfc0
[  726.133382][T18680]  ? kasan_quarantine_put+0xbb/0x1f0
[  726.133396][T18680]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  726.133414][T18680]  ? apparmor_capable+0x137/0x1a0
[  726.133427][T18680]  ? capable+0x88/0xe0
[  726.133440][T18680]  ? nr_ioctl+0x1b1/0x3b0
[  726.133452][T18680]  sock_do_ioctl+0x101/0x320
[  726.133468][T18680]  ? __pfx_sock_do_ioctl+0x10/0x10
[  726.133480][T18680]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  726.133500][T18680]  sock_ioctl+0x5c6/0x7f0
[  726.133522][T18680]  ? __pfx_sock_ioctl+0x10/0x10
[  726.133534][T18680]  ? __fget_files+0x2a/0x420
[  726.133547][T18680]  ? __fget_files+0x3a0/0x420
[  726.133558][T18680]  ? __fget_files+0x2a/0x420
[  726.133571][T18680]  ? bpf_lsm_file_ioctl+0x9/0x20
[  726.133582][T18680]  ? __pfx_sock_ioctl+0x10/0x10
[  726.133595][T18680]  __se_sys_ioctl+0xfc/0x170
[  726.133605][T18680]  do_syscall_64+0xe2/0xf80
[  726.133617][T18680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.133626][T18680]  ? trace_irq_disable+0x37/0x100
[  726.133639][T18680]  ? clear_bhb_loop+0x40/0x90
[  726.133651][T18680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.133660][T18680] RIP: 0033:0x7fbd9f99aeb9
[  726.133671][T18680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.133679][T18680] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  726.133690][T18680] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  726.133697][T18680] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004
[  726.133704][T18680] RBP: 00007fbd9dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  726.133710][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.133715][T18680] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  726.133730][T18680]  </TASK>
[  726.367920][ T7457] usb 4-1: new full-speed USB device number 111 using dummy_hcd
[  726.390627][ T5912] xr_serial 8-1:127.171: xr_serial converter detected
[  726.406591][ T5912] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[  726.417813][ T5912] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  726.445248][ T5912] usb 8-1: USB disconnect, device number 43
[  726.453707][ T5912] xr_serial 8-1:127.171: device disconnected
[  726.507913][ T7457] usb 4-1: device descriptor read/64, error -71
[  726.618194][ T7457] usb usb4-port1: attempt power cycle
[  726.725618][T18695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.735701][T18696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.744748][T18695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.755696][T18696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.957463][ T7457] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[  726.978083][ T7457] usb 4-1: device descriptor read/8, error -71
[  727.030923][T18698] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3814'.
[  727.217412][ T7457] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[  727.237854][ T7457] usb 4-1: device descriptor read/8, error -71
[  727.262872][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3817'.
[  727.357752][ T7457] usb usb4-port1: unable to enumerate USB device
[  727.814426][T18708] 
[  727.816882][T18708] ======================================================
[  727.824075][T18708] WARNING: possible circular locking dependency detected
[  727.831115][T18708] syzkaller #0 Tainted: G             L     
[  727.837087][T18708] ------------------------------------------------------
[  727.844095][T18708] syz.2.3819/18708 is trying to acquire lock:
[  727.850167][T18708] ffffffff8ff62998 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0
[  727.859476][T18708] 
[  727.859476][T18708] but task is already holding lock:
[  727.866912][T18708] ffff8880292ab170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1046/0x2630
[  727.876385][T18708] 
[  727.876385][T18708] which lock already depends on the new lock.
[  727.876385][T18708] 
[  727.886873][T18708] 
[  727.886873][T18708] the existing dependency chain (in reverse order) is:
[  727.896229][T18708] 
[  727.896229][T18708] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  727.904214][T18708]        _raw_spin_lock_bh+0x36/0x50
[  727.909491][T18708]        nr_rt_ioctl+0x215/0xfc0
[  727.914416][T18708]        sock_do_ioctl+0x101/0x320
[  727.919514][T18708]        sock_ioctl+0x5c6/0x7f0
[  727.924357][T18708]        __se_sys_ioctl+0xfc/0x170
[  727.929461][T18708]        do_syscall_64+0xe2/0xf80
[  727.934909][T18708]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.941587][T18708] 
[  727.941587][T18708] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  727.949395][T18708]        _raw_spin_lock_bh+0x36/0x50
[  727.954697][T18708]        nr_rt_device_down+0xbe/0x860
[  727.960163][T18708]        nr_device_event+0x137/0x150
[  727.965959][T18708]        notifier_call_chain+0x19d/0x3a0
[  727.971590][T18708]        __dev_notify_flags+0x16d/0x310
[  727.977221][T18708]        netif_change_flags+0xe8/0x1a0
[  727.983147][T18708]        dev_change_flags+0x130/0x260
[  727.988746][T18708]        dev_ioctl+0x7b4/0x1150
[  727.993762][T18708]        sock_do_ioctl+0x23e/0x320
[  727.998865][T18708]        sock_ioctl+0x5c6/0x7f0
[  728.003789][T18708]        __se_sys_ioctl+0xfc/0x170
[  728.008878][T18708]        do_syscall_64+0xe2/0xf80
[  728.013973][T18708]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.020371][T18708] 
[  728.020371][T18708] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  728.028522][T18708]        __lock_acquire+0x15a5/0x2cf0
[  728.033882][T18708]        lock_acquire+0x106/0x330
[  728.039070][T18708]        _raw_spin_lock_bh+0x36/0x50
[  728.044357][T18708]        nr_remove_neigh+0x25/0xe0
[  728.049565][T18708]        nr_add_node+0x1e4e/0x2630
[  728.054759][T18708]        nr_rt_ioctl+0xe80/0xfc0
[  728.059692][T18708]        sock_do_ioctl+0x101/0x320
[  728.064881][T18708]        sock_ioctl+0x5c6/0x7f0
[  728.069717][T18708]        __se_sys_ioctl+0xfc/0x170
[  728.074905][T18708]        do_syscall_64+0xe2/0xf80
[  728.080003][T18708]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.086402][T18708] 
[  728.086402][T18708] other info that might help us debug this:
[  728.086402][T18708] 
[  728.096790][T18708] Chain exists of:
[  728.096790][T18708]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  728.096790][T18708] 
[  728.110776][T18708]  Possible unsafe locking scenario:
[  728.110776][T18708] 
[  728.118219][T18708]        CPU0                    CPU1
[  728.123576][T18708]        ----                    ----
[  728.129233][T18708]   lock(&nr_node->node_lock);
[  728.134432][T18708]                                lock(nr_node_list_lock);
[  728.141578][T18708]                                lock(&nr_node->node_lock);
[  728.149040][T18708]   lock(nr_neigh_list_lock);
[  728.153945][T18708] 
[  728.153945][T18708]  *** DEADLOCK ***
[  728.153945][T18708] 
[  728.162174][T18708] 1 lock held by syz.2.3819/18708:
[  728.167387][T18708]  #0: ffff8880292ab170 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1046/0x2630
[  728.178007][T18708] 
[  728.178007][T18708] stack backtrace:
[  728.183999][T18708] CPU: 1 UID: 0 PID: 18708 Comm: syz.2.3819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.184023][T18708] Tainted: [L]=SOFTLOCKUP
[  728.184028][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  728.184036][T18708] Call Trace:
[  728.184045][T18708]  <TASK>
[  728.184052][T18708]  dump_stack_lvl+0xe8/0x150
[  728.184073][T18708]  print_circular_bug+0x2e1/0x300
[  728.184091][T18708]  check_noncircular+0x12e/0x150
[  728.184108][T18708]  __lock_acquire+0x15a5/0x2cf0
[  728.184123][T18708]  ? stack_trace_save+0xa9/0x100
[  728.184147][T18708]  ? __pfx_stack_trace_save+0x10/0x10
[  728.184163][T18708]  ? ksys_unshare+0x4f4/0x900
[  728.184180][T18708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.184191][T18708]  ? trim_netdev_trace+0x3a2/0x3d0
[  728.184208][T18708]  ? save_netdev_trace_buffer+0x192/0x610
[  728.184225][T18708]  ? nr_remove_neigh+0x25/0xe0
[  728.184241][T18708]  lock_acquire+0x106/0x330
[  728.184254][T18708]  ? nr_remove_neigh+0x25/0xe0
[  728.184270][T18708]  ? do_raw_spin_lock+0x12b/0x2f0
[  728.184287][T18708]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  728.184303][T18708]  ? nr_remove_neigh+0x25/0xe0
[  728.184318][T18708]  _raw_spin_lock_bh+0x36/0x50
[  728.184330][T18708]  ? nr_remove_neigh+0x25/0xe0
[  728.184345][T18708]  nr_remove_neigh+0x25/0xe0
[  728.184360][T18708]  nr_add_node+0x1e4e/0x2630
[  728.184378][T18708]  ? nr_call_to_digi+0x126/0x1b0
[  728.184394][T18708]  nr_rt_ioctl+0xe80/0xfc0
[  728.184411][T18708]  ? kasan_quarantine_put+0xbb/0x1f0
[  728.184429][T18708]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  728.184446][T18708]  ? apparmor_capable+0x137/0x1a0
[  728.184461][T18708]  ? capable+0x88/0xe0
[  728.184474][T18708]  ? nr_ioctl+0x1b1/0x3b0
[  728.184487][T18708]  sock_do_ioctl+0x101/0x320
[  728.184504][T18708]  ? __pfx_sock_do_ioctl+0x10/0x10
[  728.184519][T18708]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  728.184539][T18708]  sock_ioctl+0x5c6/0x7f0
[  728.184554][T18708]  ? __pfx_sock_ioctl+0x10/0x10
[  728.184569][T18708]  ? __fget_files+0x2a/0x420
[  728.184583][T18708]  ? __fget_files+0x3a0/0x420
[  728.184596][T18708]  ? __fget_files+0x2a/0x420
[  728.184610][T18708]  ? bpf_lsm_file_ioctl+0x9/0x20
[  728.184624][T18708]  ? __pfx_sock_ioctl+0x10/0x10
[  728.184638][T18708]  __se_sys_ioctl+0xfc/0x170
[  728.184650][T18708]  do_syscall_64+0xe2/0xf80
[  728.184664][T18708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.184675][T18708]  ? trace_irq_disable+0x37/0x100
[  728.184692][T18708]  ? clear_bhb_loop+0x40/0x90
[  728.184705][T18708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.184717][T18708] RIP: 0033:0x7fbd9f99aeb9
[  728.184730][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.184740][T18708] RSP: 002b:00007fbd9dbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  728.184755][T18708] RAX: ffffffffffffffda RBX: 00007fbd9fc15fa0 RCX: 00007fbd9f99aeb9
[  728.184764][T18708] RDX: 0000200000000200 RSI: 000000000000890b RDI: 0000000000000004
[  728.184773][T18708] RBP: 00007fbd9dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  728.184781][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.184789][T18708] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  728.184802][T18708]  </TASK>
[  728.537904][T18708] FAULT_INJECTION: forcing a failure.
[  728.537904][T18708] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.572355][T18708] CPU: 0 UID: 0 PID: 18708 Comm: syz.2.3819 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.572398][T18708] Tainted: [L]=SOFTLOCKUP
[  728.572405][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  728.572415][T18708] Call Trace:
[  728.572422][T18708]  <TASK>
[  728.572429][T18708]  dump_stack_lvl+0xe8/0x150
[  728.572454][T18708]  should_fail_ex+0x412/0x560
[  728.572474][T18708]  _copy_to_user+0x31/0xb0
[  728.572490][T18708]  simple_read_from_buffer+0xe1/0x170
[  728.572512][T18708]  proc_fail_nth_read+0x1bb/0x230
[  728.572529][T18708]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  728.572546][T18708]  ? rw_verify_area+0x2a6/0x4d0
[  728.572566][T18708]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  728.572582][T18708]  vfs_read+0x20c/0xa70
[  728.572600][T18708]  ? fdget_pos+0x246/0x320
[  728.572620][T18708]  ? __pfx___mutex_lock+0x10/0x10
[  728.572639][T18708]  ? __pfx_vfs_read+0x10/0x10
[  728.572662][T18708]  ? __fget_files+0x3a0/0x420
[  728.572678][T18708]  ? __fget_files+0x2a/0x420
[  728.572698][T18708]  ksys_read+0x150/0x270
[  728.572718][T18708]  ? __pfx_ksys_read+0x10/0x10
[  728.572739][T18708]  ? rcu_is_watching+0x15/0xb0
[  728.572758][T18708]  do_syscall_64+0xe2/0xf80
[  728.572775][T18708]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.572796][T18708]  ? trace_irq_disable+0x37/0x100
[  728.572815][T18708]  ? clear_bhb_loop+0x40/0x90
[  728.572832][T18708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.572847][T18708] RIP: 0033:0x7fbd9f95b78e
[  728.572862][T18708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  728.572875][T18708] RSP: 002b:00007fbd9dbf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  728.572893][T18708] RAX: ffffffffffffffda RBX: 00007fbd9dbf66c0 RCX: 00007fbd9f95b78e
[  728.572905][T18708] RDX: 000000000000000f RSI: 00007fbd9dbf60a0 RDI: 0000000000000003
[  728.572916][T18708] RBP: 00007fbd9dbf6090 R08: 0000000000000000 R09: 0000000000000000
[  728.572926][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.572936][T18708] R13: 00007fbd9fc16038 R14: 00007fbd9fc15fa0 R15: 00007fff9c643208
[  728.572954][T18708]  </TASK>