last executing test programs:

1m6.181818478s ago: executing program 4 (id=170):
syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00')
r0 = socket(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'})
r1 = getpid()
ptrace$setregs(0xf, 0x0, 0x40, &(0x7f00000006c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fedbdf25020000003136ac50ee94453fc926b4831a05b41d786e53142070798c82fea16323bf834d82770eeba2ddb5ec025325328bf7fa120ed25cdea45cffaf6cdbc6da3ebc387b7ade418b32ed979658d05b7b34d5b83f043345abfc864595660fad544ec905823ffb63011a69e63d4e0c63a4eea883c27e740d1174aeb184d2098166ff6e95572e0868daba3f9280f57e32dedb6382c5fe9c6c01c506565a"], 0x14}, 0x1, 0x0, 0x0, 0x8884}, 0x40004c0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
prlimit64(0x0, 0xa, &(0x7f00000001c0)={0x8, 0x3}, 0x0)
sched_setscheduler(r1, 0x4, &(0x7f0000000180)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000376000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x1c005, &(0x7f0000000400)={[{@enospc_debug}, {@enospc_debug}, {@discard_async}, {@skip_balance}, {@nossd_spread}, {@datacow}, {@discard_async}, {@discard_async}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@enospc_debug}, {@flushoncommit}]}, 0x9, 0x55c2, &(0x7f0000000a80)="$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")
open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060003b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffffffffffff000000000000000003000000000000f9dea93fd02a5b8efe091de88339000000000000000000000000000000000000000000000000000000383fb0eaa2d164292c011dbba588af50ed2ba87997f4728196cd4c15df5bc2915e6c684824d74976ec00f7b144203042e281869b1effb06431ba10517f742faf05f59a2df638530ef221ac3f7d2f7c1fe29b80205fdf069cc5fb6318a2807007f79469029a20fdd62dd366e92cab1b24e2f9c1448b09c38c841416"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m4.533519701s ago: executing program 4 (id=179):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8001, 0xd, 0xfffffff3, r4}, &(0x7f0000000080)=0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000040)={0x3})
r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
unshare(0x22020600)
r8 = eventfd(0x1000)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x53, 0x80a0000, 0x2, r8, 0x1})
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000000)=0x4000000)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x3c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x8, 0x1ed}}, 0x13, @void}}]}, 0x3c}}, 0x0)
r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r13, &(0x7f0000000000), 0xf97c)
r14 = userfaultfd(0x1)
ioctl$UFFDIO_API(r14, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_COPY(r14, 0xc028aa05, 0x0)
r15 = dup(r7)
ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x0)

1m3.669709608s ago: executing program 4 (id=183):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x7ff, 0x80000000, 0x5, 0x1, 0xb, 0x9})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc53a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="202315000000150aa7b7e7da208694c7980b2cea3163fd3bc5180c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000a04fcff", 0x58}], 0x1)
ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x57d)
r2 = syz_clone(0x4282400, &(0x7f0000000280)="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", 0x1000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000001280)="a481e5bad33f8388ff99bb76d760fe3a7f28b5054dec362b896433aca127a6f557d557e0c3ca0f3f16c1070e15ca8f6d1f1826440cf22527a47565eb80e4ecb2c8ff45e05cf8ba4bab9de9253d830dd403e268a86418549b1c6315e1183493c4d79c90a1f8dd103e5dc7937000f7cbf761f7f252de3510a959afafbed49f7061362c16ce7c97c9c359b1704b5b8a8b9473490f1a193a96be0dc55821f09d3fe954c7ff115980d21d5de4330c6dee7dc67f6f1000be12958ff6b7edb23f1f50a09ba7791a7ffda45e68c78733304b4f91a4f75b955b919844424886a6511226a697456769332b6329ee2a69bdbb01bcce")
capset(&(0x7f0000000180)={0x0, r2}, &(0x7f00000001c0)={0x3, 0xa75, 0x0, 0x4, 0x9, 0x2})

1m1.465862341s ago: executing program 4 (id=189):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async)
chroot(&(0x7f0000000100)='./file0\x00') (async, rerun: 32)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (rerun: 32)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (async, rerun: 32)
socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'bridge0\x00', 0x22}, 0x18)
mount(0x0, &(0x7f0000000600)='./file0/../file0\x00', 0x0, 0x44000, 0x0) (async, rerun: 32)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) (async)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009104"]) (async)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{}, {@usrjquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
write$binfmt_script(r4, &(0x7f0000000200)={'#! ', './file1', [{0x20, 'bsddf'}, {0x20, '@.\xad!$}$./\\-.'}, {0x20, 'block_validity'}, {0x20, 'resuid'}, {0x20, 'bsddf'}, {0x20, '-\xae+\'-!\x97'}]}, 0x42) (async)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000100)=0x10) (async, rerun: 32)
get_mempolicy(&(0x7f0000000280), &(0x7f00000002c0), 0x8, &(0x7f0000ffc000/0x3000)=nil, 0x5) (rerun: 32)

1m0.562155059s ago: executing program 4 (id=192):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x60a80, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
dup(r3)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)

59.098532395s ago: executing program 4 (id=197):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x6f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x13, 0xffffffffffffffff, 0x8000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x1de}, 0x8)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000440)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x0, &(0x7f0000000380)=[{&(0x7f0000001640)=""/41}, {&(0x7f00000003c0)=""/82}, {&(0x7f0000001940)=""/193}], 0x0, &(0x7f0000000480)=""/107}, 0x5}, {{&(0x7f00000018c0)=@nl=@proc, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/21}, {&(0x7f00000005c0)=""/4096}, {&(0x7f0000003180)=""/4096}, {&(0x7f00000016c0)=""/234}, {&(0x7f00000017c0)=""/225}], 0x0, &(0x7f0000001640)}, 0x6}], 0xf0c7, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000020103000000000000000000030000026c0002802c00018014000300fe000000000000aa14000400000000000000ffff0a01010106000340000300000c000280050001"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x6657, 0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
socket$inet6(0xa, 0x3, 0x3c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x40)

58.820957938s ago: executing program 32 (id=197):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x6f)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x13, 0xffffffffffffffff, 0x8000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000080)={0x0, 0x1, 0x1de}, 0x8)
r4 = socket(0x10, 0x2, 0x0)
write(r4, &(0x7f0000000440)="1c0000001a009b8a140000003b9b30e6c9dc7c64d5524a1f009d9503", 0x1c)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x0, &(0x7f0000000380)=[{&(0x7f0000001640)=""/41}, {&(0x7f00000003c0)=""/82}, {&(0x7f0000001940)=""/193}], 0x0, &(0x7f0000000480)=""/107}, 0x5}, {{&(0x7f00000018c0)=@nl=@proc, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/21}, {&(0x7f00000005c0)=""/4096}, {&(0x7f0000003180)=""/4096}, {&(0x7f00000016c0)=""/234}, {&(0x7f00000017c0)=""/225}], 0x0, &(0x7f0000001640)}, 0x6}], 0xf0c7, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="84000000020103000000000000000000030000026c0002802c00018014000300fe000000000000aa14000400000000000000ffff0a01010106000340000300000c000280050001"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x4000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x6657, 0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
socket$inet6(0xa, 0x3, 0x3c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock(&(0x7f0000b1d000/0x2000)=nil, 0x2000)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x40)

15.245641782s ago: executing program 2 (id=296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
msgsnd(0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))

14.161814173s ago: executing program 2 (id=299):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000180)={0x30, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8}, @val={0xc, 0x99, {0xffffff51, 0x7c}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)

13.670392722s ago: executing program 2 (id=301):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x2, 0x2cf}, &(0x7f0000000300)=<r3=>0x0, &(0x7f00000002c0)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000107010100000000000000000a00000a1c000780080001"], 0x30}, 0x1, 0x0, 0x0, 0x4008801}, 0x20008004)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0)

9.472170306s ago: executing program 2 (id=311):
mkdir(&(0x7f0000000280)='./file0\x00', 0x324)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='minix\x00', 0x23f08b9, 0x0)
mount$overlay(0x0, &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={[{@uuid_auto, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40400, 0x176)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x6c8303, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x6f, 0x48014)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x200, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x40, 0x0, @loopback}}}, 0x108)
r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000600)={0x60, 0x1, &(0x7f0000001000/0x1000)=nil, &(0x7f0000001000/0x4000)=nil, 0x1, 0x0, 0x0, 0x400000, 0x4, 0x10, 0x32, 0x24})
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendto$inet6(r5, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x40000, 0x0, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000004c0)={0x0, {{0xa, 0x0, 0x80, @loopback, 0x2}}, {{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x108)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000000000003000000000000000800"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000810)
signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0xea5]}, 0x8, 0x800)
syz_io_uring_setup(0x184, &(0x7f0000000080)={0x0, 0x97fd, 0x4, 0x1, 0x4}, &(0x7f0000000200)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x72, 0x4000, @fd_index=0x5, 0xfffffbfffffffffa, &(0x7f00000003c0)="fc9fdacfb815bf36bad6d86f6ee29885df928f76850cb3d09f5cf705", 0x1c, 0xa})
syz_io_uring_setup(0x6770, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$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")

8.994320015s ago: executing program 3 (id=313):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01007161971da5e380f8100000000400018055eab5ac59a2be26"], 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x0)

8.591877176s ago: executing program 3 (id=316):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x200})
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x800000001000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="080000000000000095000040"])
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0)
ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000000140))
getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040))
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRESHEX], 0x0)

8.038096963s ago: executing program 2 (id=318):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000c000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458)

6.668234194s ago: executing program 5 (id=321):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x820c, 0x80000000, 0x8, <r2=>r1}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x6}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000002040)={r1}, &(0x7f0000003080)=0x8) (async, rerun: 32)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_GET_UNIQUE(r3, 0xc0106401, &(0x7f0000000400)={0x0, 0x0})

6.009763508s ago: executing program 5 (id=324):
syz_clone(0x8090400, &(0x7f0000000080)="9fa0e7b5793d7aafa67aec7b0fa0d8653bce98c7e8", 0x15, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="4486a12ec40da18bafaa52d6c0dd95f29ee7da638adfc6695abbcec44cdbf14a6e517f92d68988eb3dbabd61b3591d65afce6db8fffd21429e906b2edf9de32da1a1fd2b1d74a83ea33dd0a54ddb170e9f0fa2737cb1165c64560dbad5b5cac168fbca8354f76c46868ab8969ba4e18c1ee71e42e09ef07f8b3c82e521036bc0b17ab89f205f03fb0d4b6e43ec17a580b23613839898585ceb7199368d36d9f075ce3fe713977094cd231e4ed24eedb4b41d05c66611a443731709bd9e65146da2c8a0768a9e2561fd578814346a72e5b7a3c0e85110f233bf07abfab0860ed1f3feb9b6c087cce0fcc14f178e2185966199f9")
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a})
chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00')
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b18, 0x0)
migrate_pages(0x0, 0x5, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x4)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0)
removexattr(0x0, &(0x7f0000000600)=@known='user.incfs.size\x00')
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r7, 0x6, 0x1b, 0x0, &(0x7f0000003280))
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/kexec_loaded', 0x440200, 0x1b6)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={<r9=>0x0, @in={{0x2, 0x4e22, @empty}}, 0x34055f92, 0x1, 0x401, 0x7f, 0x6}, &(0x7f0000000400)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000440)={r9, @in6={{0xa, 0x4e24, 0x8, @private1, 0x5}}, 0x6, 0x4, 0x92, 0x6, 0x0, 0x7, 0x65}, 0x9c)

5.113024458s ago: executing program 5 (id=326):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01007161971da5e380f8100000000400018055eab5ac59a2be26"], 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x0)

5.073531789s ago: executing program 3 (id=327):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8001, 0xd, 0xfffffff3, r4}, &(0x7f0000000080)=0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000040)={0x3})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
unshare(0x22020600)
eventfd(0x1000)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x4000000)

4.30530919s ago: executing program 0 (id=331):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

3.862502552s ago: executing program 5 (id=332):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'wlan0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de05", 0x12}, {&(0x7f0000000800)="37a8a6c41ef711513a5554633f6ecf4ca3505986", 0x14}], 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000380)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,uid=', @ANYRESHEX=0x0, @ANYBLOB="157569643d", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,nfs,nodots,showexec,flush,nodots,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x13, 0x0, 0x24)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5b5707f6ed1dade4}]}}]}, 0x6c}}, 0x0)
r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r8 = dup(r7)
write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/376], 0x18a)
r9 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00')
pread64(r9, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe)

3.704015875s ago: executing program 0 (id=333):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'wlan0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de05", 0x12}, {&(0x7f0000000800)="37a8a6c41ef711513a5554633f6ecf4ca3505986", 0x14}], 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000380)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,uid=', @ANYRESHEX=0x0, @ANYBLOB="157569643d", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,nfs,nodots,showexec,flush,nodots,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x13, 0x0, 0x24)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r8 = dup(r7)
write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000000001000500380001000600b10600040300000081000000ff00000000000000f50f0000000000000500000000000000b801000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002d00"/376], 0x18a)
r9 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00')
pread64(r9, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe)

3.571691349s ago: executing program 1 (id=334):
r0 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000240)=[0x40, 0x8], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fe4488872dc2051bb200", @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf250200000014000700fe8000000000000000000000000000bb050004000000000008000600ac1e07010500020002000000"], 0x40}}, 0x20004090)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8)
r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000b, 0x12, r6, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x0, 0x240, 0xffffffff, 0x240, 0x0, 0x468, 0x468, 0xffffffff, 0x468, 0x468, 0x5, &(0x7f0000000440), {[{{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0xe442, 0x7, 0x3}}, @common=@ah={{0x30}, {[0x4d2, 0x4d6], 0x800, 0x9}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, @ipv4=@rand_addr=0x64010102, @icmp_id=0x68, @gre_key=0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffff00, 0xffffffff, 0xffffff00], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], 'geneve0\x00', 'syzkaller0\x00', {}, {}, 0x11, 0xde, 0x4, 0x18}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@empty, @gre_key=0x2, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x2, 0x1, [0x1000, 0x2, 0x9, 0x7, 0x7ff, 0x3, 0x9, 0x7e1, 0x3, 0x1, 0x2, 0x4, 0xf18c, 0x9, 0x4, 0x6], 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv6=@loopback, @ipv6=@empty, @gre_key=0x9, @gre_key=0x3}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private=0xa010100, @port=0x4e23, @port=0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
write$qrtrtun(r5, &(0x7f0000000340)="7f12454181586818", 0x8)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r5, 0x4010ae74, &(0x7f0000000100)={0x14e, 0x3af, 0xbe7})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)

3.530327098s ago: executing program 3 (id=335):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
msgsnd(0x0, 0x0, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340))

3.349886684s ago: executing program 5 (id=336):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0})
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r2, 0x0, 0x54)
r4 = getpid()
ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000040))
write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
landlock_create_ruleset(&(0x7f0000000200)={0xe249, 0x1, 0x1}, 0x18, 0x0)

2.378251336s ago: executing program 3 (id=337):
unshare(0x20000400)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

2.307601828s ago: executing program 2 (id=338):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a0b0400000000000000000200000114000480100001800b0001007470726f7879000009402ca600010073797a30000000000900020073797a32000000000500074050000000140a000011000100000000000000000002"], 0x70}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020000103000000006389355e020000040000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r2=>0x0})
sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)}, {&(0x7f0000000180)="52400d53854ad5b7b6cacee6d54913fee023d513a374b3fe67116d4ee8ad9e5f83425bcf771a2e0bce99d35b8261f036cd97db1dd32e6b814dd54b03ae099a112e978633dedbe52d8ec0a0a9ac26b5941b7983545262c18eeb34c4b9fec1c4d6c62bd2947d8a536f6041d2ad6207773ff02a04ecef71eedb2450e7c5d783e2b3250804d8bba48c7dff8d5375172aa91b7addb52fb23cdec6987faeb0dcd0c15fbb90ac49c4a3504a842adf9e", 0xac}, {&(0x7f0000000240)="2a0a361db3c3f5de116188cf6b4201bc52f0f8695ad18c94c1cb482cfe167d57592ebeed75274611378cbe7c601df3008d5fbd18ce78d53fa55305adb9f17b0232449ec9bd96d02c02eee47d4cb33a96b5221b03bb55f38dca517019de2800288f18d8264263e3ca93722ebd635c61aa942d7061efc58a9f19f6bea777f5270c6d2a8802470d737b252b2a9b0b309be04a77bbf5994a2b2b90c324cb6c", 0x9d}, {&(0x7f0000000300)="7b0e3d0e7a2cd2047ac26a552dc8df7749740b8477818c1fe779e701c008e76cc7c6289c", 0x24}, {&(0x7f0000000340)="2167b3cb85960de16c60cc99e79be84f275f89e967", 0x15}, {&(0x7f00000003c0)="cb82215bfcb33bd66db3477dec8b60e7a6bc5eaae33c1d8054f141a1a2c694c58497c91c4b25a0b61dc98934418c7b84cbce440e586ff34b17f9ff3aec4ac7d05c687922a1e2d9d55e790b0df65ce92a90e8dfa9a5d29de53ebb768a8f8a3e78d8d0e226b3fa9d4dcc22e01afa2773efb7d90c235aeac77efc1aab6f3096530442242035fe4aae90754ec40ce5d4f0db26fde4dd610c309215579b449e1f53a5d5bd93ff169f873746d888504780b28b2a8c098224eea9630dfc2f50ac5b123213a471f00f4eabbb771add067e110637da76bb1c9094c50189ba4491512a77dcdd57", 0xe2}, {&(0x7f0000000500)="27eb348b86f8e635ea6da646f00a21f714ad7721f001872608f7fd1739f8", 0x1e}, {&(0x7f0000000540)="ca54d07535d5ec156c8ff3fa1aa88edb8f2103fb74e72799b1167bc136e2fe369edf0e3f26065ba187599c4bc29cb0c9aff3267e0a5ce2a494f3c3bbf949fb47e1e2263b49e6ffc4cea98482717efa5c8765525d065e820e8793460ac594d9580f7cabd63a243b6c5b00d794608e6f789ded97514cbfb83ac31019c2102ad61de0a58f5da27bdb73970f57321c8990d0d742514196f10bfb52473454bcd252895342c9a11618a4bc135332347bacce8e75c6dd99dd350939fcb5", 0xba}], 0x8, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa}}, @ip_retopts={{0x64, 0x0, 0x7, {[@generic={0x86, 0x7, "c7f34ee15e"}, @end, @timestamp_addr={0x44, 0x2c, 0x46, 0x1, 0x4, [{@local, 0x6}, {@remote, 0x8000}, {@local, 0x3}, {@remote, 0xfffffffb}, {@broadcast, 0xfffffffd}]}, @ssrr={0x89, 0x13, 0x11, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x41}]}, @timestamp_prespec={0x44, 0xc, 0x35, 0x3, 0x0, [{@empty}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0xd0}, 0x80)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
r6 = dup(r4)
write$UHID_INPUT(r6, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006)
io_setup(0x1, &(0x7f00000004c0)=<r7=>0x0)
io_submit(r7, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r3, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

2.271174353s ago: executing program 1 (id=339):
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)

2.166363956s ago: executing program 0 (id=340):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)

2.110938119s ago: executing program 1 (id=341):
r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x0, 0x1, 0x3fff6, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x200000c0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, 0x0, 0x9005)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_udplite(0x2, 0x2, 0x88)
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0xfffff, 0xfffffffffffffff9)

1.967597378s ago: executing program 1 (id=342):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01007161971da5e380f8100000000400018055eab5ac59a2be26"], 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x0)

1.936255293s ago: executing program 0 (id=343):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

1.822634241s ago: executing program 0 (id=344):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
r1 = semget$private(0x0, 0x20000000102, 0x0)
semctl$SEM_STAT(r1, 0x2, 0x12, 0x0)
write$vga_arbiter(0xffffffffffffffff, 0x0, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x2040400)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
linkat(r3, &(0x7f0000000180)='./file1\x00', r3, 0x0, 0x1000)
recvmmsg(0xffffffffffffffff, &(0x7f0000001140), 0x700, 0x2, 0x0)
semop(r1, &(0x7f0000000240)=[{0x1, 0xe65b}], 0x1)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r4, &(0x7f00000006c0)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x1, 0x80800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x8000}}, {@errors_remount}, {@zero_size_dir}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x11, 0x151f, &(0x7f0000003080)="$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")
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x1f, 0x0, 0xffffffff, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)

1.57307288s ago: executing program 5 (id=345):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x8001, 0xd, 0xfffffff3, r4}, &(0x7f0000000080)=0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000040)={0x3})
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
unshare(0x22020600)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x4000000)

1.195807219s ago: executing program 1 (id=346):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'wlan0\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de05", 0x12}, {&(0x7f0000000800)="37a8a6c41ef711513a5554633f6ecf4ca3505986", 0x14}], 0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r2)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000380)=ANY=[@ANYBLOB='dots,fmask=00000000000000000006675,uid=', @ANYRESHEX=0x0, @ANYBLOB="157569643d", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,nfs,nodots,showexec,flush,nodots,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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")
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000300)=0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x13, 0x0, 0x24)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x3ff}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5b5707f6ed1dade4}]}}]}, 0x6c}}, 0x0)
r7 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1)
r8 = dup(r7)
write$binfmt_elf64(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/376], 0x18a)
r9 = syz_open_procfs(0x0, &(0x7f0000019340)='net/snmp6\x00')
pread64(r9, &(0x7f0000000300)=""/102383, 0x18fef, 0xffffffffe)

1.096174311s ago: executing program 3 (id=347):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000840, &(0x7f0000000380)=ANY=[], 0x81, 0x14f5, &(0x7f0000001580)="$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")
r1 = open(&(0x7f0000000040)='./file1\x00', 0x163c42, 0x31)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000680)=""/102392, 0x18ff8)
r4 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040), 0x43)
setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r5, 0x8b21, &(0x7f0000000040))
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0)

837.892402ms ago: executing program 0 (id=348):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000c000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458)

0s ago: executing program 1 (id=349):
r0 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x4c, 0x12, 0x400, 0x4, 0x0, {0x10, 0x2, 0x2, 0x0, {0x0, 0x4e21, [0x0, 0x1, 0x0, 0x7], [0x0, 0x2, 0x2], 0x0, [0x3ff, 0x7ff]}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x228002)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18)
r2 = getpgrp(0x0)
sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
tkill(r2, 0x29)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_AP(r6, 0x0, 0x0)
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCFLSH(r7, 0x540b, 0xfffffffffffffffc)
close(r5)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="100000964a91f7101fab5ee834000001000c5fb834a5de10"], 0x10}, 0x2}, 0x0)
sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@loopback, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0x6, 0x5c}, 0x0, 0x10000000, 0xa, 0x1}, 0x5, 0x7}, [@offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts.
[   67.254608][ T5818] cgroup: Unknown subsys name 'net'
[   67.381477][ T5818] cgroup: Unknown subsys name 'cpuset'
[   67.391158][ T5818] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.819347][ T5818] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.472968][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[   71.479489][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[   72.918210][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   72.927017][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   72.932575][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   72.934851][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.941788][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   72.949658][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   72.957308][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   72.970160][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   72.978438][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   72.978812][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.986386][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   73.008544][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   73.027795][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   73.029097][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   73.036375][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   73.044658][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   73.049798][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   73.056081][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   73.071371][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   73.080656][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   73.111791][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   73.120368][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   73.127968][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   73.136903][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   73.144679][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   73.684691][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   73.790165][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   73.872731][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   74.022221][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.029522][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.036954][ T5833] bridge_slave_0: entered allmulticast mode
[   74.044479][ T5833] bridge_slave_0: entered promiscuous mode
[   74.053043][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   74.079218][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.086417][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.094093][ T5833] bridge_slave_1: entered allmulticast mode
[   74.102322][ T5833] bridge_slave_1: entered promiscuous mode
[   74.189820][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.197577][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.205263][ T5834] bridge_slave_0: entered allmulticast mode
[   74.212495][ T5834] bridge_slave_0: entered promiscuous mode
[   74.223214][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.255183][ T5838] chnl_net:caif_netlink_parms(): no params data found
[   74.280586][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.287929][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.295343][ T5834] bridge_slave_1: entered allmulticast mode
[   74.302705][ T5834] bridge_slave_1: entered promiscuous mode
[   74.312064][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.389299][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.396484][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.403744][ T5831] bridge_slave_0: entered allmulticast mode
[   74.410857][ T5831] bridge_slave_0: entered promiscuous mode
[   74.436614][ T5833] team0: Port device team_slave_0 added
[   74.457898][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.465195][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.472541][ T5831] bridge_slave_1: entered allmulticast mode
[   74.479909][ T5831] bridge_slave_1: entered promiscuous mode
[   74.494260][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.505600][ T5833] team0: Port device team_slave_1 added
[   74.545079][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.565445][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.572713][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.580412][ T5828] bridge_slave_0: entered allmulticast mode
[   74.587475][ T5828] bridge_slave_0: entered promiscuous mode
[   74.644453][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.652231][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.659602][ T5828] bridge_slave_1: entered allmulticast mode
[   74.666689][ T5828] bridge_slave_1: entered promiscuous mode
[   74.679735][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.712709][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   74.719896][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.746865][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   74.787363][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.796748][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.804162][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.811405][ T5838] bridge_slave_0: entered allmulticast mode
[   74.819424][ T5838] bridge_slave_0: entered promiscuous mode
[   74.829147][ T5834] team0: Port device team_slave_0 added
[   74.835319][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.842482][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.849742][ T5838] bridge_slave_1: entered allmulticast mode
[   74.856740][ T5838] bridge_slave_1: entered promiscuous mode
[   74.864380][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   74.871603][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   74.897709][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   74.911614][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   74.949866][ T5834] team0: Port device team_slave_1 added
[   74.974451][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   74.994648][ T5831] team0: Port device team_slave_0 added
[   75.030043][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.053291][ T5831] team0: Port device team_slave_1 added
[   75.068715][ T5837] Bluetooth: hci1: command tx timeout
[   75.071234][ T5843] Bluetooth: hci3: command tx timeout
[   75.082665][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.089745][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.116398][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.130217][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.147812][ T5843] Bluetooth: hci2: command tx timeout
[   75.156494][ T5828] team0: Port device team_slave_0 added
[   75.162188][ T5843] Bluetooth: hci0: command tx timeout
[   75.165487][ T5828] team0: Port device team_slave_1 added
[   75.196482][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.203733][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.230977][ T5843] Bluetooth: hci4: command tx timeout
[   75.236609][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.303197][ T5838] team0: Port device team_slave_0 added
[   75.321499][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.328821][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.355363][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.371906][ T5833] hsr_slave_0: entered promiscuous mode
[   75.378466][ T5833] hsr_slave_1: entered promiscuous mode
[   75.401179][ T5838] team0: Port device team_slave_1 added
[   75.420228][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.427209][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.453637][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.465347][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.472922][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.498895][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.537127][ T5834] hsr_slave_0: entered promiscuous mode
[   75.543827][ T5834] hsr_slave_1: entered promiscuous mode
[   75.550713][ T5834] debugfs: 'hsr0' already exists in 'hsr'
[   75.556541][ T5834] Cannot create hsr debugfs directory
[   75.563238][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.570257][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.596218][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.643593][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.650633][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.676625][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.689918][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.696903][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   75.722988][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.869668][ T5828] hsr_slave_0: entered promiscuous mode
[   75.876037][ T5828] hsr_slave_1: entered promiscuous mode
[   75.882362][ T5828] debugfs: 'hsr0' already exists in 'hsr'
[   75.888231][ T5828] Cannot create hsr debugfs directory
[   75.934063][ T5831] hsr_slave_0: entered promiscuous mode
[   75.940442][ T5831] hsr_slave_1: entered promiscuous mode
[   75.946542][ T5831] debugfs: 'hsr0' already exists in 'hsr'
[   75.955906][ T5831] Cannot create hsr debugfs directory
[   76.034260][ T5838] hsr_slave_0: entered promiscuous mode
[   76.040988][ T5838] hsr_slave_1: entered promiscuous mode
[   76.047235][ T5838] debugfs: 'hsr0' already exists in 'hsr'
[   76.053132][ T5838] Cannot create hsr debugfs directory
[   76.361693][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   76.373781][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   76.409192][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   76.455716][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   76.565884][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   76.576464][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   76.587176][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   76.612144][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   76.676110][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   76.691020][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   76.704003][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   76.733688][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   76.844238][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   76.854955][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   76.867034][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   76.889333][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.001776][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.013057][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.035088][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.046047][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.078224][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.149374][ T5843] Bluetooth: hci3: command tx timeout
[   77.151550][ T5837] Bluetooth: hci1: command tx timeout
[   77.174910][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   77.225927][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.233245][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.239140][ T5843] Bluetooth: hci2: command tx timeout
[   77.245964][ T5837] Bluetooth: hci0: command tx timeout
[   77.258716][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.273965][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.281129][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.300245][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.308329][ T5837] Bluetooth: hci4: command tx timeout
[   77.332430][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[   77.361831][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.369145][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.400822][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.415443][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.422669][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.443426][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   77.487691][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.494894][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.516407][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.546807][ T5838] 8021q: adding VLAN 0 to HW filter on device team0
[   77.562082][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.569358][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.622301][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.629572][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.654087][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.661321][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.691132][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   77.732030][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.739270][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.807257][  T351] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.814515][  T351] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.102135][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.202743][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.372472][ T5833] veth0_vlan: entered promiscuous mode
[   78.406158][ T5834] veth0_vlan: entered promiscuous mode
[   78.429432][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.460305][ T5833] veth1_vlan: entered promiscuous mode
[   78.488722][ T5834] veth1_vlan: entered promiscuous mode
[   78.540387][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.596745][ T5833] veth0_macvtap: entered promiscuous mode
[   78.622325][ T5833] veth1_macvtap: entered promiscuous mode
[   78.684410][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.721138][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.742119][ T5828] veth0_vlan: entered promiscuous mode
[   78.763988][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.779022][ T5834] veth0_macvtap: entered promiscuous mode
[   78.823713][ T5834] veth1_macvtap: entered promiscuous mode
[   78.834733][ T3448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.845203][  T351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.860844][ T5828] veth1_vlan: entered promiscuous mode
[   78.870739][  T351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.880186][  T351] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.974618][ T5831] veth0_vlan: entered promiscuous mode
[   79.000150][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.037064][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.077271][ T5831] veth1_vlan: entered promiscuous mode
[   79.106045][ T3439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.116243][ T5838] veth0_vlan: entered promiscuous mode
[   79.124506][ T5828] veth0_macvtap: entered promiscuous mode
[   79.138388][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.149365][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.150100][ T3439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.166106][ T3439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.180906][ T5828] veth1_macvtap: entered promiscuous mode
[   79.197458][ T3439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.229142][ T5837] Bluetooth: hci3: command tx timeout
[   79.234598][ T5837] Bluetooth: hci1: command tx timeout
[   79.245314][ T5838] veth1_vlan: entered promiscuous mode
[   79.271130][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.279400][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.294370][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.310521][ T5837] Bluetooth: hci0: command tx timeout
[   79.314249][ T5843] Bluetooth: hci2: command tx timeout
[   79.352929][ T5831] veth0_macvtap: entered promiscuous mode
[   79.365484][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.393505][ T5831] veth1_macvtap: entered promiscuous mode
[   79.399590][ T5843] Bluetooth: hci4: command tx timeout
[   79.413347][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   79.440994][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.452807][ T3439] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.485982][ T3439] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.495208][ T3439] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.525752][ T5838] veth0_macvtap: entered promiscuous mode
[   79.586589][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.601491][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.626389][  T351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.645666][  T351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.689378][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.723159][ T5838] veth1_macvtap: entered promiscuous mode
[   79.732254][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.742408][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.810499][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.832885][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.849607][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.863895][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.672941][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.771187][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.779902][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.794656][   T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.826020][   T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.853746][   T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.877923][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.885875][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.900842][   T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.998256][ T1210] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.002512][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.033369][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.041816][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.042430][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.056386][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.104774][  T351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.123833][  T351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.196335][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.222758][ T1210] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   81.256082][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.271124][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.286829][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.308773][ T5843] Bluetooth: hci1: command tx timeout
[   81.308894][ T5837] Bluetooth: hci3: command tx timeout
[   81.325839][ T1210] usb 2-1: config 0 descriptor??
[   81.360498][ T5959] loop2: detected capacity change from 0 to 512
[   81.398112][ T5837] Bluetooth: hci0: command tx timeout
[   81.404248][ T5843] Bluetooth: hci2: command tx timeout
[   81.434821][ T5959] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   81.468163][ T5837] Bluetooth: hci4: command tx timeout
[   81.530525][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.562594][ T5959] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.7: iget: bad extended attribute block 851968
[   81.570865][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.583279][ T1210] usb 2-1: string descriptor 0 read error: -32
[   81.844671][ T5966] loop0: detected capacity change from 0 to 1024
[   82.064181][ T1210] pwc: Askey VC010 type 2 USB webcam detected.
[   82.077550][ T1210] pwc: recv_control_msg error -32 req 02 val 2b00
[   82.105951][ T5959] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.7: couldn't read orphan inode 15 (err -117)
[   82.135448][ T1210] pwc: recv_control_msg error -32 req 02 val 2700
[   82.199001][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.232319][ T5970] loop3: detected capacity change from 0 to 512
[   82.259041][ T1210] pwc: recv_control_msg error -32 req 02 val 2c00
[   82.266544][ T1210] pwc: recv_control_msg error -32 req 04 val 1000
[   82.272327][ T3571] hfsplus: b-tree write err: -5, ino 4
[   82.283814][ T5970] =======================================================
[   82.283814][ T5970] WARNING: The mand mount option has been deprecated and
[   82.283814][ T5970]          and is ignored by this kernel. Remove the mand
[   82.283814][ T5970]          option from the mount to silence this warning.
[   82.283814][ T5970] =======================================================
[   82.420073][   T30] audit: type=1804 audit(1760141234.303:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.7" name="/newroot/1/file0/bus" dev="loop2" ino=18 res=1 errno=0
[   82.445820][ T5970] FAT-fs (loop3): error, corrupted directory (invalid entries)
[   82.562699][ T5959] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.692900][ T1210] pwc: recv_control_msg error -71 req 02 val 2000
[   82.741645][ T1210] pwc: recv_control_msg error -71 req 02 val 2100
[   82.781913][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   82.787796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   82.823049][ T1210] pwc: recv_control_msg error -71 req 04 val 1500
[   82.864050][ T1210] pwc: recv_control_msg error -71 req 02 val 2500
[   82.872144][ T5976] loop4: detected capacity change from 0 to 512
[   82.888154][ T1210] pwc: recv_control_msg error -71 req 02 val 2400
[   82.914713][ T5976] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[   82.924944][ T1210] pwc: recv_control_msg error -71 req 02 val 2600
[   82.950535][ T5976] EXT4-fs (loop4): invalid journal inode
[   82.956873][ T1210] pwc: recv_control_msg error -71 req 02 val 2900
[   82.976159][ T5976] EXT4-fs (loop4): can't get journal size
[   83.005691][ T5976] EXT4-fs (loop4): 1 truncate cleaned up
[   83.012034][ T5980] warning: `syz.2.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   83.027223][ T1210] pwc: recv_control_msg error -71 req 02 val 2800
[   83.029566][ T5976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.037868][ T5971] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   83.067910][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   83.067919][ T1210] pwc: recv_control_msg error -71 req 04 val 1100
[   83.068311][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   83.121382][ T5979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   83.158630][ T5976] EXT4-fs warning (device loop4): ext4_group_add:1736: No reserved GDT blocks, can't resize
[   83.183483][ T1210] pwc: recv_control_msg error -71 req 04 val 1200
[   83.216843][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   83.255586][ T1210] pwc: Registered as video103.
[   83.288131][ T5976] Zero length message leads to an empty skb
[   83.296077][ T1210] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[   83.388495][ T5971] usb 1-1: Using ep0 maxpacket: 16
[   83.422753][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   83.426564][ T5971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   83.468241][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   83.608032][ T1210] usb 2-1: USB disconnect, device number 2
[   83.653594][ T5971] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   83.708929][    T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!!
[   83.804628][ T5989] loop3: detected capacity change from 0 to 32768
[   83.826861][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.867931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   83.871649][ T5987] mmap: syz.1.11 (5987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   83.876171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   83.945768][ T5971] usb 1-1: Product: syz
[   83.955991][ T5971] usb 1-1: Manufacturer: syz
[   83.965473][ T5989] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: signature = IN

[   83.980231][ T5989] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   83.990057][ T5989] OCFS2: File system is now read-only.
[   83.995492][ T5989] (syz.3.12,5989,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[   84.003809][ T5989] (syz.3.12,5989,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[   84.013181][ T5989] (syz.3.12,5989,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[   84.022661][ T5989] (syz.3.12,5989,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[   84.022681][ T5989] (syz.3.12,5989,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[   84.047177][ T5989] (syz.3.12,5989,0):ocfs2_initialize_super:2198 ERROR: status = -30
[   84.055347][ T5989] (syz.3.12,5989,0):ocfs2_fill_super:1177 ERROR: status = -30
[   84.065240][ T5971] usb 1-1: SerialNumber: syz
[   84.073868][ T5971] usb 1-1: config 0 descriptor??
[   84.085395][ T5971] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   84.109329][ T5971] em28xx 1-1:0.0: DVB interface 0 found: bulk
[   84.503072][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.788065][ T5971] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   85.053066][ T5971] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[   85.105700][ T5971] em28xx 1-1:0.0: board has no eeprom
[   85.471922][ T6001] loop2: detected capacity change from 0 to 256
[   85.481294][ T5971] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[   85.597528][ T5971] em28xx 1-1:0.0: dvb set to bulk mode.
[   85.618572][    T9] em28xx 1-1:0.0: Binding DVB extension
[   85.697570][ T5971] usb 1-1: USB disconnect, device number 2
[   86.299212][ T6003] loop4: detected capacity change from 0 to 131072
[   86.378776][ T6001] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[   86.395731][ T5971] em28xx 1-1:0.0: Disconnecting em28xx
[   86.398775][ T6003] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[   86.557462][    T9] em28xx 1-1:0.0: Registering input extension
[   86.595944][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.604171][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.628806][ T5971] em28xx 1-1:0.0: Closing input extension
[   86.743241][ T6003] XFS (loop4): Starting recovery (logdev: internal)
[   86.776168][ T6019] bridge0: entered promiscuous mode
[   86.789325][ T6003] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x4 
[   86.801701][ T6003] XFS (loop4): Unmount and run xfs_repair
[   86.807418][ T6003] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[   86.814849][ T6003] 00000000: 49 41 42 54 00 00 00 01 ff ff ff ff ff ff ff ff  IABT............
[   86.823702][ T6003] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 40  ...............@
[   86.834667][ T6003] 00000020: b9 3a 89 37 cc d4 41 a2 86 c7 66 a1 57 0a 28 46  .:.7..A...f.W.(F
[   86.843562][ T6003] 00000030: 00 00 00 00 0b 39 42 28 00 00 00 35 00 00 1f cb  .....9B(...5....
[   86.852419][ T6003] 00000040: 00 00 00 35 00 00 1f cb 00 00 00 00 00 00 00 00  ...5............
[   86.861320][ T6003] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.870252][ T6003] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.879105][ T6003] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.890323][ T6003] XFS (loop4): log mount/recovery failed: error -74
[   86.898786][ T5971] em28xx 1-1:0.0: Freeing device
[   86.900528][ T6003] XFS (loop4): log mount failed
[   86.909586][ T6019] bridge0: entered allmulticast mode
[   86.930125][ T1226] cfg80211: failed to load regulatory.db
[   87.223833][ T6021] syz.3.20 uses obsolete (PF_INET,SOCK_PACKET)
[   87.350807][ T6025] loop2: detected capacity change from 0 to 128
[   87.352368][ T6027] loop3: detected capacity change from 0 to 256
[   87.427617][ T6027] msdos: Bad value for 'uid'
[   87.432632][ T6027] msdos: Bad value for 'uid'
[   87.591148][ T6031] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   87.865818][ T6025] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   87.891727][ T6025] hpfs: filesystem error: improperly stopped
[   87.951423][ T6025] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   88.234546][ T6025] hpfs: You really don't want any checks? You are crazy...
[   88.268773][ T6025] hpfs: hpfs_map_sector(): read error
[   88.308832][ T6025] hpfs: code page support is disabled
[   88.315306][ T6025] hpfs: hpfs_map_4sectors(): unaligned read
[   88.392214][ T6025] hpfs: hpfs_map_4sectors(): unaligned read
[   88.435910][ T6025] hpfs: filesystem error: unable to find root dir
[   88.461456][ T6025] hpfs: hpfs_map_4sectors(): unaligned read
[   88.490334][ T6025] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.18'.
[   88.531842][ T6025] openvswitch: netlink: Missing key (keys=40, expected=80)
[   88.692393][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'.
[   89.277893][   T24] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   89.592256][   T24] usb 4-1: config 135 has an invalid interface number: 230 but max is 0
[   89.633995][   T24] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[   89.902699][   T24] usb 4-1: config 135 has no interface number 0
[   89.921019][   T24] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   89.983632][   T24] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[   90.019858][ T6062] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.042412][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.085525][   T24] usb 4-1: Product: syz
[   90.105024][   T24] usb 4-1: Manufacturer: syz
[   90.158600][   T24] usb 4-1: SerialNumber: syz
[   90.252425][ T6062] loop0: detected capacity change from 0 to 64
[   90.270655][   T24] uvcvideo 4-1:135.230: probe with driver uvcvideo failed with error -22
[   90.341491][ T6062] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[   90.514991][ T6062] BFS-fs: bfs_fill_super(): Last block not available on loop0: 4139327
[   92.042913][ T5886] usb 4-1: USB disconnect, device number 2
[   92.384828][ T1226] IPVS: starting estimator thread 0...
[   92.508832][ T6084] IPVS: using max 29 ests per chain, 69600 per kthread
[   93.134688][ T6091] RDS: rds_bind could not find a transport for fe80::29, load rds_tcp or rds_rdma?
[   93.387814][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   93.511257][ T6076] loop4: detected capacity change from 0 to 16
[   93.950297][ T6101] usb usb1: check_ctrlrecip: process 6101 (syz.3.39) requesting ep 01 but needs 81
[   93.961985][ T6101] usb usb1: usbfs: process 6101 (syz.3.39) did not claim interface 0 before use
[   93.996008][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.39'.
[   94.331455][ T6102] loop1: detected capacity change from 0 to 4096
[   94.483174][ T6102] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[   94.494759][ T6106] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.555232][ T6102] Remounting filesystem read-only
[   94.574934][ T6102] NILFS (loop1): error -5 reading inode: ino=2
[   94.593637][ T6102] NILFS (loop1): error -5 getting root inode
[   95.191113][ T6111] loop2: detected capacity change from 0 to 256
[   95.204912][ T6102] process 'syz.1.40' launched '/dev/fd/8' with NULL argv: empty string added
[   95.294700][ T6111] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[   95.423976][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'.
[   95.452487][ T6115] netlink: 'syz.1.44': attribute type 2 has an invalid length.
[   95.653072][ T6115] Driver unsupported XDP return value 0 on prog  (id 11) dev N/A, expect packet loss!
[   95.855990][ T6122] FAULT_INJECTION: forcing a failure.
[   95.855990][ T6122] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   95.911013][ T6122] CPU: 0 UID: 0 PID: 6122 Comm: syz.4.45 Not tainted syzkaller #0 PREEMPT(full) 
[   95.911038][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   95.911055][ T6122] Call Trace:
[   95.911063][ T6122]  <TASK>
[   95.911070][ T6122]  dump_stack_lvl+0x189/0x250
[   95.911095][ T6122]  ? __pfx____ratelimit+0x10/0x10
[   95.911115][ T6122]  ? __pfx_dump_stack_lvl+0x10/0x10
[   95.911132][ T6122]  ? __pfx__printk+0x10/0x10
[   95.911164][ T6122]  should_fail_ex+0x414/0x560
[   95.911195][ T6122]  _copy_to_user+0x31/0xb0
[   95.911220][ T6122]  simple_read_from_buffer+0xe1/0x170
[   95.911246][ T6122]  proc_fail_nth_read+0x1b3/0x220
[   95.911275][ T6122]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   95.911302][ T6122]  ? rw_verify_area+0x2a6/0x4d0
[   95.911323][ T6122]  ? __lock_acquire+0xab9/0xd20
[   95.911344][ T6122]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   95.911369][ T6122]  vfs_read+0x200/0xa30
[   95.911385][ T6122]  ? fdget_pos+0x247/0x320
[   95.911411][ T6122]  ? __pfx___mutex_lock+0x10/0x10
[   95.911432][ T6122]  ? __pfx_vfs_read+0x10/0x10
[   95.911451][ T6122]  ? __fget_files+0x2a/0x420
[   95.911475][ T6122]  ? __fget_files+0x3a0/0x420
[   95.911493][ T6122]  ? __fget_files+0x2a/0x420
[   95.911522][ T6122]  ksys_read+0x145/0x250
[   95.911542][ T6122]  ? __pfx_ksys_read+0x10/0x10
[   95.911564][ T6122]  ? do_syscall_64+0xbe/0xfa0
[   95.911587][ T6122]  do_syscall_64+0xfa/0xfa0
[   95.911610][ T6122]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.911629][ T6122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.911645][ T6122]  ? clear_bhb_loop+0x60/0xb0
[   95.911667][ T6122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.911684][ T6122] RIP: 0033:0x7fe70998d8dc
[   95.911704][ T6122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   95.911717][ T6122] RSP: 002b:00007fe70a8bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   95.911736][ T6122] RAX: ffffffffffffffda RBX: 00007fe709be5fa0 RCX: 00007fe70998d8dc
[   95.911748][ T6122] RDX: 000000000000000f RSI: 00007fe70a8bc0a0 RDI: 0000000000000004
[   95.911759][ T6122] RBP: 00007fe70a8bc090 R08: 0000000000000000 R09: 0000000000000000
[   95.911769][ T6122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   95.911779][ T6122] R13: 00007fe709be6038 R14: 00007fe709be5fa0 R15: 00007ffe937677b8
[   95.911811][ T6122]  </TASK>
[   96.150188][    C0] vkms_vblank_simulate: vblank timer overrun
[   96.849132][ T1226] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   97.148815][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.54'.
[   97.211338][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.222398][ T1226] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.233614][ T1226] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   97.246828][ T1226] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.256144][ T1226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.368397][ T1226] usb 2-1: config 0 descriptor??
[   97.571326][ T6133] loop3: detected capacity change from 0 to 32768
[   97.795725][ T6133] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   98.119953][ T6158] loop0: detected capacity change from 0 to 1024
[   98.394612][ T1226] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   98.451661][ T6149] loop4: detected capacity change from 0 to 32768
[   98.514908][ T6149] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[   98.555436][ T6149] (syz.4.54,6149,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[   98.555436][ T6149] found = 0, set = 0, taken = 0, off = 8
[   98.696983][ T6149] (syz.4.54,6149,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[   98.749087][ T6149] (syz.4.54,6149,0):ocfs2_check_volume:2404 ERROR: status = -22
[   98.766696][ T5831] ocfs2: Unmounting device (7,3) on (node local)
[   98.796539][ T6149] (syz.4.54,6149,0):ocfs2_check_volume:2432 ERROR: status = -22
[   98.867827][ T6149] (syz.4.54,6149,1):ocfs2_mount_volume:1764 ERROR: status = -22
[   98.917205][ T6149] (syz.4.54,6149,1):ocfs2_fill_super:1177 ERROR: status = -22
[   99.384553][ T6172] RDS: rds_bind could not find a transport for fe80::29, load rds_tcp or rds_rdma?
[   99.777771][ T1210] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  100.268750][ T1226] usb 2-1: USB disconnect, device number 3
[  100.272797][ T6182] FAULT_INJECTION: forcing a failure.
[  100.272797][ T6182] name failslab, interval 1, probability 0, space 0, times 1
[  100.289014][ T6182] CPU: 1 UID: 0 PID: 6182 Comm: syz.3.62 Not tainted syzkaller #0 PREEMPT(full) 
[  100.289036][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  100.289047][ T6182] Call Trace:
[  100.289054][ T6182]  <TASK>
[  100.289061][ T6182]  dump_stack_lvl+0x189/0x250
[  100.289084][ T6182]  ? __pfx____ratelimit+0x10/0x10
[  100.289101][ T6182]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.289118][ T6182]  ? __pfx__printk+0x10/0x10
[  100.289141][ T6182]  ? __pfx___might_resched+0x10/0x10
[  100.289164][ T6182]  ? fs_reclaim_acquire+0x7d/0x100
[  100.289188][ T6182]  should_fail_ex+0x414/0x560
[  100.289217][ T6182]  should_failslab+0xa8/0x100
[  100.289240][ T6182]  kmem_cache_alloc_node_noprof+0x77/0x710
[  100.289259][ T6182]  ? __alloc_skb+0x112/0x2d0
[  100.289281][ T6182]  ? netlink_autobind+0xdb/0x300
[  100.289303][ T6182]  __alloc_skb+0x112/0x2d0
[  100.289329][ T6182]  netlink_sendmsg+0x5c6/0xb30
[  100.289352][ T6182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.289384][ T6182]  ? aa_sock_msg_perm+0xf1/0x1d0
[  100.289406][ T6182]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  100.289437][ T6182]  ? __pfx_netlink_sendmsg+0x10/0x10
[  100.289460][ T6182]  __sock_sendmsg+0x21c/0x270
[  100.289484][ T6182]  ____sys_sendmsg+0x505/0x830
[  100.289508][ T6182]  ? __pfx_____sys_sendmsg+0x10/0x10
[  100.289532][ T6182]  ? import_iovec+0x74/0xa0
[  100.289557][ T6182]  ___sys_sendmsg+0x21f/0x2a0
[  100.289574][ T6182]  ? __pfx____sys_sendmsg+0x10/0x10
[  100.289625][ T6182]  ? __fget_files+0x2a/0x420
[  100.289645][ T6182]  ? __fget_files+0x3a0/0x420
[  100.289675][ T6182]  __x64_sys_sendmsg+0x19b/0x260
[  100.289695][ T6182]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  100.289722][ T6182]  ? __pfx_ksys_write+0x10/0x10
[  100.289744][ T6182]  ? do_syscall_64+0xbe/0xfa0
[  100.289767][ T6182]  do_syscall_64+0xfa/0xfa0
[  100.289784][ T6182]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.289802][ T6182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.289818][ T6182]  ? clear_bhb_loop+0x60/0xb0
[  100.289839][ T6182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.289855][ T6182] RIP: 0033:0x7f0b1c78eec9
[  100.289871][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  100.289883][ T6182] RSP: 002b:00007f0b1d567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  100.289901][ T6182] RAX: ffffffffffffffda RBX: 00007f0b1c9e5fa0 RCX: 00007f0b1c78eec9
[  100.289914][ T6182] RDX: 0000000028008000 RSI: 00002000000002c0 RDI: 0000000000000003
[  100.289924][ T6182] RBP: 00007f0b1d567090 R08: 0000000000000000 R09: 0000000000000000
[  100.289933][ T6182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  100.289943][ T6182] R13: 00007f0b1c9e6038 R14: 00007f0b1c9e5fa0 R15: 00007fffc6802488
[  100.289972][ T6182]  </TASK>
[  100.581728][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.59'.
[  100.664279][ T1210] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  100.710524][ T6186] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.63'.
[  100.760060][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.760433][ T6186] tipc: Started in network mode
[  100.777759][ T6186] tipc: Node identity d6e7faaeaf42, cluster identity 4711
[  100.786155][ T6186] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  100.813446][ T6186] syzkaller0: entered promiscuous mode
[  100.819182][ T6186] syzkaller0: entered allmulticast mode
[  100.831516][ T6185] tipc: Resetting bearer <eth:syzkaller0>
[  100.835125][ T1210] usb 3-1: config 0 descriptor??
[  100.852900][ T6185] tipc: Disabling bearer <eth:syzkaller0>
[  100.985154][ T6191] syzkaller0: entered promiscuous mode
[  100.991999][ T6191] syzkaller0: entered allmulticast mode
[  101.086373][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.094127][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.102787][ T6194] bridge0: entered promiscuous mode
[  101.102966][ T6195] loop1: detected capacity change from 0 to 512
[  101.108158][ T6194] bridge0: entered allmulticast mode
[  101.149981][ T6195] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[  101.310290][ T6197] 9pnet_fd: Insufficient options for proto=fd
[  101.355900][ T1210] ath6kl: Failed to submit usb control message: -71
[  101.379432][ T1210] ath6kl: unable to send the bmi data to the device: -71
[  101.386511][ T1210] ath6kl: Unable to send get target info: -71
[  101.447586][ T1210] ath6kl: Failed to init ath6kl core: -71
[  101.643591][ T1210] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  102.097757][ T1210] usb 3-1: USB disconnect, device number 2
[  103.355894][ T6211] RDS: rds_bind could not find a transport for fe80::29, load rds_tcp or rds_rdma?
[  103.662992][ T6216] loop4: detected capacity change from 0 to 1024
[  103.767524][ T6216] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.025993][ T6216] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  104.065915][ T6216] System zones: 0-1, 3-36
[  104.131451][ T6216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.206993][ T6216] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure
[  104.223789][ T6216] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.73: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled
[  104.292085][ T6228] loop1: detected capacity change from 0 to 256
[  104.341009][ T6228] msdos: Bad value for 'uid'
[  104.366454][ T6228] msdos: Bad value for 'uid'
[  104.706659][ T6235] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  104.999597][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.068366][ T6240] syzkaller0: entered promiscuous mode
[  105.073887][ T6240] syzkaller0: entered allmulticast mode
[  105.094404][ T1226] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  105.174705][ T6242] FAULT_INJECTION: forcing a failure.
[  105.174705][ T6242] name failslab, interval 1, probability 0, space 0, times 0
[  105.188598][ T6242] CPU: 1 UID: 0 PID: 6242 Comm: syz.4.80 Not tainted syzkaller #0 PREEMPT(full) 
[  105.188625][ T6242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.188635][ T6242] Call Trace:
[  105.188642][ T6242]  <TASK>
[  105.188650][ T6242]  dump_stack_lvl+0x189/0x250
[  105.188675][ T6242]  ? __pfx____ratelimit+0x10/0x10
[  105.188696][ T6242]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.188713][ T6242]  ? __pfx__printk+0x10/0x10
[  105.188735][ T6242]  ? __pfx___might_resched+0x10/0x10
[  105.188755][ T6242]  ? fs_reclaim_acquire+0x7d/0x100
[  105.188780][ T6242]  should_fail_ex+0x414/0x560
[  105.188810][ T6242]  should_failslab+0xa8/0x100
[  105.188841][ T6242]  __kmalloc_noprof+0xcb/0x7f0
[  105.188858][ T6242]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  105.188879][ T6242]  ? rcu_is_watching+0x15/0xb0
[  105.188906][ T6242]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  105.188934][ T6242]  genl_family_rcv_msg_doit+0xb8/0x300
[  105.188962][ T6242]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  105.188988][ T6242]  ? apparmor_capable+0x137/0x1b0
[  105.189013][ T6242]  ? bpf_lsm_capable+0x9/0x20
[  105.189029][ T6242]  ? security_capable+0x7e/0x2e0
[  105.189052][ T6242]  genl_rcv_msg+0x60e/0x790
[  105.189078][ T6242]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.189095][ T6242]  ? __pfx_nl802154_pre_doit+0x10/0x10
[  105.189112][ T6242]  ? __pfx_nl802154_set_max_csma_backoffs+0x10/0x10
[  105.189129][ T6242]  ? __pfx_nl802154_post_doit+0x10/0x10
[  105.189161][ T6242]  netlink_rcv_skb+0x208/0x470
[  105.189182][ T6242]  ? __lock_acquire+0xab9/0xd20
[  105.189201][ T6242]  ? __pfx_genl_rcv_msg+0x10/0x10
[  105.189220][ T6242]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  105.189257][ T6242]  ? down_read+0x1ad/0x2e0
[  105.189277][ T6242]  genl_rcv+0x28/0x40
[  105.189292][ T6242]  netlink_unicast+0x82f/0x9e0
[  105.189320][ T6242]  ? __pfx_netlink_unicast+0x10/0x10
[  105.189340][ T6242]  ? netlink_sendmsg+0x642/0xb30
[  105.189352][ T6242]  ? skb_put+0x11b/0x210
[  105.189371][ T6242]  netlink_sendmsg+0x805/0xb30
[  105.189397][ T6242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.189423][ T6242]  ? aa_sock_msg_perm+0xf1/0x1d0
[  105.189444][ T6242]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  105.189464][ T6242]  ? __pfx_netlink_sendmsg+0x10/0x10
[  105.189486][ T6242]  __sock_sendmsg+0x21c/0x270
[  105.189509][ T6242]  ____sys_sendmsg+0x505/0x830
[  105.189530][ T6242]  ? __pfx_____sys_sendmsg+0x10/0x10
[  105.189554][ T6242]  ? import_iovec+0x74/0xa0
[  105.189578][ T6242]  ___sys_sendmsg+0x21f/0x2a0
[  105.189596][ T6242]  ? __pfx____sys_sendmsg+0x10/0x10
[  105.189643][ T6242]  ? __fget_files+0x2a/0x420
[  105.189663][ T6242]  ? __fget_files+0x3a0/0x420
[  105.189690][ T6242]  __x64_sys_sendmsg+0x19b/0x260
[  105.189709][ T6242]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  105.189734][ T6242]  ? __pfx_ksys_write+0x10/0x10
[  105.189757][ T6242]  ? do_syscall_64+0xbe/0xfa0
[  105.189780][ T6242]  do_syscall_64+0xfa/0xfa0
[  105.189798][ T6242]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.189822][ T6242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.189840][ T6242]  ? clear_bhb_loop+0x60/0xb0
[  105.189859][ T6242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.189873][ T6242] RIP: 0033:0x7fe70998eec9
[  105.189888][ T6242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  105.189900][ T6242] RSP: 002b:00007fe70a8bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  105.189918][ T6242] RAX: ffffffffffffffda RBX: 00007fe709be5fa0 RCX: 00007fe70998eec9
[  105.189928][ T6242] RDX: 0000000000008008 RSI: 0000200000000480 RDI: 0000000000000005
[  105.189937][ T6242] RBP: 00007fe70a8bc090 R08: 0000000000000000 R09: 0000000000000000
[  105.189945][ T6242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  105.189955][ T6242] R13: 00007fe709be6038 R14: 00007fe709be5fa0 R15: 00007ffe937677b8
[  105.189984][ T6242]  </TASK>
[  105.570181][ T1226] usb 4-1: device descriptor read/64, error -71
[  105.607543][ T6244] loop0: detected capacity change from 0 to 4096
[  105.678438][   T30] audit: type=1326 audit(1760141257.563:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6247 comm="syz.4.84" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe70998eec9 code=0x0
[  105.719372][ T6248] loop1: detected capacity change from 0 to 8192
[  105.729896][ T6248] vfat: Unknown parameter 'uÀb{ÌõÙq$ßÂWÐ�ÅÿZ£[°€°	0x¶'Â?€ªDï~¶õæ-Gó€•ÜÒ±W©´Ž'oîøVÏ	t/žÄ«d^	�_'
[  105.795638][ T6251] hub 9-0:1.0: USB hub found
[  105.803668][ T6251] hub 9-0:1.0: 1 port detected
[  106.050576][ T1226] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  106.206775][ T6254] binder: 6247:6254 ioctl 4040942c 200000000300 returned -22
[  106.215989][ T1226] usb 4-1: device descriptor read/64, error -71
[  106.328991][ T1226] usb usb4-port1: attempt power cycle
[  106.369435][ T6259] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  106.526757][ T6261] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  106.987524][ T1226] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  107.152511][ T6261] netlink: 32 bytes leftover after parsing attributes in process `syz.2.86'.
[  107.388351][ T1226] usb 4-1: device descriptor read/8, error -71
[  107.618260][ T6267] RDS: rds_bind could not find a transport for fe80::29, load rds_tcp or rds_rdma?
[  107.652323][   T30] audit: type=1800 audit(1760141259.533:4): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.82" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=38 res=0 errno=0
[  108.034004][ T6269] loop1: detected capacity change from 0 to 512
[  108.071417][ T6269] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.132065][ T6269] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  108.196006][ T6269] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.87: Invalid block bitmap block 0 in block_group 0
[  108.232017][ T6269] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  108.282031][ T6269] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.87: attempt to clear invalid blocks 983261 len 1
[  108.318330][ T6269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.87: Invalid inode table block 0 in block_group 0
[  108.363406][ T6269] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  108.374782][ T5894] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  108.389068][ T6269] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem
[  108.543669][ T6282] loop0: detected capacity change from 0 to 256
[  108.793962][ T6269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.87: Invalid inode table block 0 in block_group 0
[  108.835240][ T6269] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem
[  108.846821][ T6269] EXT4-fs error (device loop1): ext4_truncate:4637: inode #11: comm syz.1.87: mark_inode_dirty error
[  108.869524][ T6269] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem
[  108.882761][ T6282] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  108.897997][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  108.906697][ T6269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.87: Invalid inode table block 0 in block_group 0
[  108.922062][ T5894] usb 3-1: unable to get BOS descriptor or descriptor too short
[  108.957843][ T5894] usb 3-1: config 4 has an invalid interface number: 30 but max is 0
[  108.972351][ T6269] EXT4-fs (loop1): 1 truncate cleaned up
[  108.979066][ T5894] usb 3-1: config 4 has no interface number 0
[  108.985148][ T5894] usb 3-1: config 4 interface 30 has no altsetting 0
[  109.004168][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.008496][ T6286] netlink: 'syz.3.93': attribute type 1 has an invalid length.
[  109.021507][ T5894] usb 3-1: string descriptor 0 read error: -22
[  109.032148][ T5894] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[  109.047701][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.072771][ T6286] nbd: couldn't find a device at index 20
[  109.094844][ T6269] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.87: Invalid inode bitmap blk 0 in block_group 0
[  109.114161][ T5894] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[  109.127302][ T5894] dw2102: su3000_power_ctrl: 1, initialized 0
[  109.138312][ T5894] dvb-usb: bulk message failed: -22 (2/0)
[  109.187315][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  109.216875][ T5894] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[  109.254978][ T5894] usb 3-1: media controller created
[  109.278009][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.293804][ T5894] dw2102: i2c transfer failed.
[  109.307953][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.323400][ T5894] dw2102: i2c transfer failed.
[  109.331569][ T6276] dw2102: i2c rd: len=75 is too big!
[  109.331569][ T6276] 
[  109.341076][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.348774][ T5894] dw2102: i2c transfer failed.
[  109.366044][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  109.376143][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.383678][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.392699][ T1226] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  109.405212][ T5894] dw2102: i2c transfer failed.
[  109.410325][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.494490][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  109.548442][ T1226] usb 5-1: Using ep0 maxpacket: 8
[  109.569398][ T1226] usb 5-1: unable to get BOS descriptor or descriptor too short
[  109.594228][ T5894] dw2102: i2c transfer failed.
[  109.599837][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[  109.605597][ T5894] dw2102: i2c transfer failed.
[  109.610426][ T5894] dvb-usb: MAC address: 02:02:02:02:02:02
[  109.640298][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.650858][ T1226] usb 5-1: config 17 has an invalid interface number: 8 but max is 1
[  109.660131][ T1226] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2
[  109.671729][ T1226] usb 5-1: config 17 has no interface number 0
[  109.679409][ T1226] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[  110.057206][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  110.149270][ T5894] dw2102: command 0x0e transfer failed.
[  110.192709][ T1226] usb 5-1: config 17 interface 8 has no altsetting 0
[  110.202479][ T1226] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  110.255665][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  110.261861][ T5894] dw2102: command 0x0e transfer failed.
[  110.278194][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.318565][ T1226] usb 5-1: Product: д
[  110.322898][ T1226] usb 5-1: Manufacturer: â°�
[  110.348141][ T1226] usb 5-1: SerialNumber: 檮嫄칚뛔㨴㫗딲��龾咃�ഄ닔�ឭ笳୘䯣猖㣊헄况�鈪��ੴ豕�徧�拉�鯉젇羅飮㛺ζꟷ梖�瞚嚳�挰ᯂ庥팢롸깨뇤��⾉쥞ꗧ儤�罿䀺�㬓鶰뻻ῑꀅ癠�⌮⿽ꃔ⺚뇸晵뽒U洴⋃鉅
[  110.375549][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.404546][ T6306] loop1: detected capacity change from 0 to 256
[  110.412146][ T6306] msdos: Bad value for 'uid'
[  110.416756][ T6306] msdos: Bad value for 'uid'
[  110.637832][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  110.712003][ T6308] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  110.859472][ T5894] dw2102: command 0x0e transfer failed.
[  110.865473][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[  110.895826][ T5894] dw2102: command 0x0e transfer failed.
[  111.009955][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.017834][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.025917][ T6305] bridge0: entered promiscuous mode
[  111.031234][ T6305] bridge0: entered allmulticast mode
[  111.043870][ T6289] loop4: detected capacity change from 0 to 64
[  111.061645][ T5894] dvb-usb: bulk message failed: -22 (1/0)
[  111.067421][ T5894] dw2102: command 0x51 transfer failed.
[  111.079188][ T5894] dvb-usb: bulk message failed: -22 (5/0)
[  111.085891][ T5894] dw2102: i2c probe for address 0x68 failed.
[  111.266921][ T5894] dvb-usb: bulk message failed: -22 (5/0)
[  111.417702][ T6316] loop3: detected capacity change from 0 to 256
[  111.557015][ T5894] dw2102: i2c probe for address 0x69 failed.
[  111.606147][ T6316] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  111.627887][ T5894] dvb-usb: bulk message failed: -22 (5/0)
[  111.643322][ T5894] dw2102: i2c probe for address 0x6a failed.
[  111.671214][ T5894] dw2102: probing for demodulator failed. Is the external power switched on?
[  111.705565][ T5894] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[  111.747362][ T1226] usb 5-1: selecting invalid altsetting 0
[  111.857795][ T1226] usb 5-1: USB disconnect, device number 2
[  111.967684][ T5894] rc_core: IR keymap rc-tt-1500 not found
[  111.975486][ T5894] Registered IR keymap rc-empty
[  112.139736][ T6321] loop0: detected capacity change from 0 to 4096
[  112.159626][ T5894] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  112.528738][ T5894] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input7
[  112.559769][ T6321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.639104][ T5894] dvb-usb: schedule remote query interval to 250 msecs.
[  112.656551][ T5894] dw2102: su3000_power_ctrl: 0, initialized 1
[  112.664310][ T5894] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[  112.718045][ T6321] EXT4-fs error (device loop0): ext4_get_first_dir_block:3549: inode #12: block 80: comm syz.0.101: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0
[  112.775755][ T5894] usb 3-1: USB disconnect, device number 3
[  113.084390][ T6321] EXT4-fs error (device loop0): ext4_get_first_dir_block:3552: inode #12: comm syz.0.101: directory missing '..'
[  113.092464][ T6337] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.383572][ T6339] autofs: Unknown parameter '77777777777m(Ìxv	žvœv†ÜÈ'ëȃqu$3ÐzF¦Nð‹·I9«ƒµ�4[Y$¼¾wBI�†\±mɱ¹¤'
[  113.438641][ T6337] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  113.477277][ T5894] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[  113.531573][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.929490][ T6361] 9pnet_fd: Insufficient options for proto=fd
[  113.960051][  T856] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  114.275017][  T856] usb 5-1: Using ep0 maxpacket: 32
[  114.289035][  T856] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  114.298954][ T6346] loop1: detected capacity change from 0 to 32768
[  114.303752][  T856] usb 5-1: config 0 has no interface number 0
[  114.332605][  T856] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=2c.d8
[  114.359131][  T856] usb 5-1: New USB device strings: Mfr=193, Product=2, SerialNumber=3
[  114.392315][  T856] usb 5-1: Product: syz
[  114.396527][  T856] usb 5-1: Manufacturer: syz
[  114.402669][ T6346] ea_get: invalid extended attribute
[  114.411476][  T856] usb 5-1: SerialNumber: syz
[  114.425640][ T6346] ffff8880599cb0f8: 04 00 00 00                                      ....
[  114.442431][  T856] usb 5-1: config 0 descriptor??
[  114.470028][  T856] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  114.577325][  T856] usb 5-1: selecting invalid altsetting 1
[  114.620187][  T856] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  114.960011][  T856] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  114.994751][  T856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  115.014187][  T856] usb 5-1: media controller created
[  115.076181][  T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.569130][  T856] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  115.594376][ T6376] loop0: detected capacity change from 0 to 256
[  115.608159][ T6376] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  115.627877][  T856] zl10353_read_register: readreg error (reg=127, ret==-71)
[  115.660176][  T856] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  115.692617][ T6380] loop2: detected capacity change from 0 to 1024
[  115.725937][ T6380] EXT4-fs: Ignoring removed orlov option
[  115.815697][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.888444][  T856] usb 5-1: USB disconnect, device number 3
[  116.037319][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.118453][ T6387] can: request_module (can-proto-3) failed.
[  116.380293][ T5894] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  116.647787][ T5894] usb 2-1: device descriptor read/64, error -71
[  116.937903][ T5894] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  117.030474][ T6403] syzkaller0: entered promiscuous mode
[  117.079014][ T5894] usb 2-1: device descriptor read/64, error -71
[  117.105648][ T6403] syzkaller0: entered allmulticast mode
[  117.242576][ T5894] usb usb2-port1: attempt power cycle
[  117.257489][ T6396] syz.0.120 (6396) used greatest stack depth: 16696 bytes left
[  117.368688][  T856] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.450410][ T6407] loop2: detected capacity change from 0 to 4096
[  117.561129][  T856] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb
[  117.579826][ T6407] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  117.594189][  T856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201
[  117.608909][ T6407] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  117.626333][  T856] usb 4-1: Product: syz
[  117.636161][  T856] usb 4-1: Manufacturer: syz
[  117.649342][ T5894] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  117.667284][  T856] usb 4-1: SerialNumber: syz
[  117.716345][ T5894] usb 2-1: device descriptor read/8, error -71
[  117.724407][  T856] usb 4-1: config 0 descriptor??
[  117.786336][  T856] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state.
[  117.843143][  T856] dvb-usb: bulk message failed: -22 (2/0)
[  117.885069][  T856] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  117.907715][   T60] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  117.954112][  T856] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB)
[  117.973159][ T5834] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  117.999101][  T856] usb 4-1: media controller created
[  118.006496][ T5834] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  118.066537][ T6410] loop4: detected capacity change from 0 to 8
[  118.081385][ T6410] squashfs: Unknown parameter '00000000000000000000000000000000000000000670x0000000000000043'
[  118.148213][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  118.354189][ T5834] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  118.400277][ T5894] usb 2-1: device descriptor read/8, error -71
[  118.428605][ T3439] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  118.558654][ T5894] usb usb2-port1: unable to enumerate USB device
[  118.655254][  T856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.140710][  T856] cxusb: set interface failed
[  120.145447][  T856] dvb-usb: bulk message failed: -22 (1/0)
[  120.372636][  T856] DVB: Unable to find symbol mt352_attach()
[  120.393619][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.130'.
[  120.407739][  T856] dvb-usb: bulk message failed: -22 (5/0)
[  120.424844][  T856] zl10353_read_register: readreg error (reg=127, ret==-121)
[  120.437785][ T6427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.130'.
[  120.446790][  T856] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB'
[  120.587767][  T856] rc_core: IR keymap rc-dvico-mce not found
[  120.602917][  T856] Registered IR keymap rc-empty
[  120.794051][ T6437] loop1: detected capacity change from 0 to 1024
[  120.802914][  T856] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[  120.816036][  T856] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input8
[  120.829161][  T856] dvb-usb: schedule remote query interval to 100 msecs.
[  120.836197][  T856] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected.
[  120.843752][   T30] audit: type=1326 audit(1760141272.683:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6430 comm="syz.3.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1c78eec9 code=0x0
[  120.854891][  T856] usb 4-1: USB disconnect, device number 7
[  120.887884][ T6437] EXT4-fs: Ignoring removed nobh option
[  120.893492][ T6437] EXT4-fs: Ignoring removed bh option
[  120.940740][ T6435] binder: 6430:6435 ioctl 4040942c 200000000300 returned -22
[  120.949835][ T6435] binder_alloc: 6430: binder_alloc_buf, no vma
[  121.024810][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.247751][  T856] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected.
[  122.617595][ T6444] loop4: detected capacity change from 0 to 1024
[  122.849838][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.089628][ T6460] loop2: detected capacity change from 0 to 1024
[  125.301467][ T6488] loop3: detected capacity change from 0 to 1024
[  125.345355][ T6488] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.373965][ T6487] loop2: detected capacity change from 0 to 8192
[  125.399119][ T6488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  125.412114][ T6488] System zones: 0-1, 3-36
[  125.486620][ T6488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.573206][ T6487] netlink: 32 bytes leftover after parsing attributes in process `syz.2.145'.
[  125.675956][ T6498] loop1: detected capacity change from 0 to 256
[  125.719042][ T6498] msdos: Bad value for 'uid'
[  125.743922][ T6498] msdos: Bad value for 'uid'
[  125.848489][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.003794][ T6502] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  126.474093][ T6505] loop4: detected capacity change from 0 to 512
[  126.502492][ T6505] EXT4-fs: inline encryption not supported
[  126.561845][ T6505] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  126.615577][ T6505] EXT4-fs (loop4): group descriptors corrupted!
[  130.716508][ T6527] loop4: detected capacity change from 0 to 256
[  130.739814][ T6527] msdos: Bad value for 'uid'
[  130.744466][ T6527] msdos: Bad value for 'uid'
[  130.768523][ T6530] loop1: detected capacity change from 0 to 256
[  130.795524][ T6530] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  130.970156][ T6535] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  132.507152][ T6536] loop3: detected capacity change from 0 to 32768
[  132.517794][ T5971] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  132.550383][ T6536] btrfs: Deprecated parameter 'usebackuproot'
[  132.568209][ T6536] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  132.607354][ T6536] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.158 (6536)
[  132.675952][ T6536] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.690187][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.708249][ T6536] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  132.716952][ T5971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.745954][ T5971] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.776290][ T5971] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.794349][ T5971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.806518][ T5971] usb 2-1: config 0 descriptor??
[  132.887899][ T6536] BTRFS info (device loop3): rebuilding free space tree
[  132.926837][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  132.934138][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  133.032119][ T6536] BTRFS info (device loop3): allowing degraded mounts
[  133.057713][ T6536] BTRFS info (device loop3): enabling ssd optimizations
[  133.064744][ T6536] BTRFS info (device loop3): enabling free space tree
[  133.087743][ T6536] BTRFS info (device loop3): force clearing of disk cache
[  133.118135][ T6536] BTRFS info (device loop3): trying to use backup root at mount time
[  133.308698][ T5971] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[  133.363364][ T6585] loop2: detected capacity change from 0 to 256
[  133.390279][ T5971] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  133.412609][ T6585] msdos: Bad value for 'uid'
[  133.448715][ T6585] msdos: Bad value for 'uid'
[  134.045852][ T1226] usb 2-1: USB disconnect, device number 8
[  134.074594][ T6589] fido_id[6589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  134.227743][ T5971] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.408167][ T5971] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  134.430727][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.457836][ T5971] usb 4-1: Product: syz
[  134.468072][ T5971] usb 4-1: Manufacturer: syz
[  134.488101][ T5971] usb 4-1: SerialNumber: syz
[  134.519856][ T5971] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  134.571622][ T1226] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  134.794131][    C0] usb 4-1: ath9k_htc: invalid pkt_len (fd7e)
[  134.941427][ T6595] loop4: detected capacity change from 0 to 32768
[  134.965455][ T6595] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.170 (6595)
[  135.026243][ T6595] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  135.072430][ T6595] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  135.117457][ T6578] loop0: detected capacity change from 0 to 32768
[  135.434525][   T50] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0x8883588ed640b7a5f22f0afabea3add9399913a6417ca0e34e9d294b2a9d89c6 level 0
[  135.459250][ T6578] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.475240][ T6595] BTRFS warning (device loop4): couldn't read tree root
[  135.552954][ T6578] XFS (loop0): Ending clean mount
[  135.559648][ T6595] BTRFS error (device loop4): open_ctree failed: -5
[  135.637907][ T1226] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  135.657071][ T1226] ath9k_htc: Failed to initialize the device
[  135.706135][ T5828] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  135.771701][ T1226] usb 4-1: ath9k_htc: USB layer deinitialized
[  135.823871][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  136.039179][ T5971] usb 4-1: USB disconnect, device number 8
[  136.051824][ T5846] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  136.168833][ T5846] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  136.179269][ T5846] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  136.192052][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.206012][ T6632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  136.261321][ T5846] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  136.291257][ T5831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.442216][ T6632] loop2: detected capacity change from 0 to 256
[  136.493511][ T6632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  137.020860][ T5846] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  137.232623][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.339114][ T6654] loop0: detected capacity change from 0 to 64
[  137.361166][ T5846] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[  137.417844][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.430726][ T6645] loop1: detected capacity change from 0 to 1024
[  137.437296][ T5846] usb 5-1: config 0 descriptor??
[  137.455852][ T6655] binder: 6653:6655 ioctl 4040942c 200000000300 returned -22
[  137.490349][ T6645] hfsplus: Unknown parameter 'id'
[  137.513556][ T6654] loop0: detected capacity change from 0 to 2048
[  137.582579][ T6654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.641312][ T6654] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  137.673999][ T6657] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  137.860630][ T5846] logitech-djreceiver 0003:046D:C53A.0003: item fetching failed at offset 2/5
[  137.882366][ T5846] logitech-djreceiver 0003:046D:C53A.0003: logi_dj_probe: parse failed
[  137.905346][ T5846] logitech-djreceiver 0003:046D:C53A.0003: probe with driver logitech-djreceiver failed with error -22
[  138.119447][ T5894] usb 5-1: USB disconnect, device number 4
[  139.102728][ T5846] usb 3-1: USB disconnect, device number 4
[  141.283783][ T6690] loop0: detected capacity change from 0 to 128
[  141.343513][ T6690] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  141.393521][ T6690] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  141.430790][   T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.485766][ T6690] tipc: Started in network mode
[  141.497739][ T6690] tipc: Node identity 4ebaac840648, cluster identity 4711
[  141.505052][ T6690] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  141.528801][ T6690] syzkaller0: entered promiscuous mode
[  141.534300][ T6690] syzkaller0: entered allmulticast mode
[  141.624871][   T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.798765][ T6702] tipc: Resetting bearer <eth:syzkaller0>
[  142.108590][   T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.185008][ T6689] tipc: Resetting bearer <eth:syzkaller0>
[  142.320774][ T6689] tipc: Disabling bearer <eth:syzkaller0>
[  142.363451][   T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.440704][ T5828] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.815751][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  142.826393][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  142.844093][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  142.852109][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  142.869829][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  142.962379][   T60] bridge_slave_1: left allmulticast mode
[  142.971911][   T60] bridge_slave_1: left promiscuous mode
[  142.979742][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.017326][   T60] bridge_slave_0: left allmulticast mode
[  143.024701][   T60] bridge_slave_0: left promiscuous mode
[  143.030700][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.425491][ T6718] input: syz0 as /devices/virtual/input/input11
[  143.811852][ T6696] loop3: detected capacity change from 0 to 32768
[  143.835092][ T6696] Mount JFS Failure: -22
[  143.855510][ T6696] jfs_mount failed w/return code = -22
[  144.258104][ T6709] loop2: detected capacity change from 0 to 32768
[  144.277211][ T6723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'.
[  145.001975][ T5843] Bluetooth: hci4: command tx timeout
[  145.011583][   T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  145.023737][   T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  145.035201][   T60] bond0 (unregistering): Released all slaves
[  145.633027][ T6736] loop0: detected capacity change from 0 to 256
[  145.828867][ T6736] msdos: Bad value for 'uid'
[  145.833613][ T6736] msdos: Bad value for 'uid'
[  147.101095][ T5843] Bluetooth: hci4: command tx timeout
[  147.716052][ T6759] syzkaller0: entered promiscuous mode
[  147.737988][ T6759] syzkaller0: entered allmulticast mode
[  147.887360][ T6778] loop0: detected capacity change from 0 to 256
[  147.936199][ T6778] msdos: Bad value for 'uid'
[  147.955242][ T6778] msdos: Bad value for 'uid'
[  148.478098][ T6787] loop1: detected capacity change from 0 to 1024
[  149.167941][ T5843] Bluetooth: hci4: command tx timeout
[  149.285951][ T6455] hfsplus: b-tree write err: -5, ino 4
[  149.822644][   T60] hsr_slave_0: left promiscuous mode
[  149.857733][   T60] hsr_slave_1: left promiscuous mode
[  149.872282][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.890942][   T60] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.909845][   T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.930325][   T60] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.998674][   T60] veth1_macvtap: left promiscuous mode
[  150.010958][   T60] veth0_macvtap: left promiscuous mode
[  150.025002][ T6779] loop3: detected capacity change from 0 to 32768
[  150.031876][   T60] veth1_vlan: left promiscuous mode
[  150.037477][   T60] veth0_vlan: left promiscuous mode
[  150.061182][ T6779] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  150.276204][ T6779] (syz.3.218,6779,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64
[  150.319704][ T6779] (syz.3.218,6779,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  151.110935][ T6809] loop2: detected capacity change from 0 to 1024
[  151.111696][ T6779] (syz.3.218,6779,1):ocfs2_mknod:301 ERROR: status = -2
[  151.124491][ T6779] (syz.3.218,6779,1):ocfs2_mknod:505 ERROR: status = -2
[  151.131951][ T6779] (syz.3.218,6779,1):ocfs2_create:678 ERROR: status = -2
[  151.227800][ T5843] Bluetooth: hci4: command tx timeout
[  151.424080][ T5831] ocfs2: Unmounting device (7,3) on (node local)
[  151.560935][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.226'.
[  151.565885][ T6821] netlink: 200 bytes leftover after parsing attributes in process `syz.1.228'.
[  151.729570][ T6826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.226'.
[  152.045645][   T60] team0 (unregistering): Port device team_slave_1 removed
[  152.114015][   T60] team0 (unregistering): Port device team_slave_0 removed
[  152.143360][ T6830] netlink: 168 bytes leftover after parsing attributes in process `syz.1.230'.
[  153.362577][ T6820] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  153.375106][ T6711] chnl_net:caif_netlink_parms(): no params data found
[  155.123052][ T6849] loop3: detected capacity change from 0 to 16
[  155.162270][ T6849] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  155.201895][ T6849] erofs (device loop3): mounted with root inode @ nid 36.
[  155.408215][ T6858] syz.3.233: attempt to access beyond end of device
[  155.408215][ T6858] loop3: rw=0, sector=1152, nr_sectors = 257 limit=16
[  155.426197][ T6858] erofs (device loop3): read error -5 @ 0 of nid 36
[  155.484736][ T6858] syz.3.233: attempt to access beyond end of device
[  155.484736][ T6858] loop3: rw=0, sector=1152, nr_sectors = 257 limit=16
[  155.484778][ T6855] loop2: detected capacity change from 0 to 256
[  155.609737][ T6858] erofs (device loop3): read error -5 @ 0 of nid 36
[  155.648014][ T6855] msdos: Bad value for 'uid'
[  155.715342][ T6855] msdos: Bad value for 'uid'
[  159.135083][ T6867] loop1: detected capacity change from 0 to 1024
[  159.945366][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.242'.
[  159.965593][   T24] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  160.174692][   T24] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  160.260439][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.315864][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.242'.
[  160.330796][   T24] usb 3-1: config 0 descriptor??
[  160.536317][ T6890] vlan2: entered promiscuous mode
[  160.568714][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.586210][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.614106][ T6883] loop1: detected capacity change from 0 to 512
[  160.621149][ T6883] EXT4-fs: Ignoring removed i_version option
[  160.627279][ T6883] EXT4-fs: Ignoring removed nobh option
[  160.634530][ T6883] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  160.650720][ T6890] bond1: entered promiscuous mode
[  160.653731][ T6883] EXT4-fs (loop1): 1 truncate cleaned up
[  160.662589][ T6883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.708249][ T6890] vlan2: entered allmulticast mode
[  160.717133][ T6876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.731927][ T6876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.752660][ T6890] bond1: entered allmulticast mode
[  160.781115][ T6711] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.816885][ T6711] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.839128][ T6711] bridge_slave_0: entered allmulticast mode
[  160.849577][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.855581][ T6711] bridge_slave_0: entered promiscuous mode
[  160.910642][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.929399][ T6711] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.936775][ T6711] bridge_slave_1: entered allmulticast mode
[  160.945862][ T6711] bridge_slave_1: entered promiscuous mode
[  161.454390][ T6906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.239'.
[  162.700550][ T6711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.724887][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'.
[  162.731415][ T6711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.748692][   T24] pegasus 3-1:0.0: probe with driver pegasus failed with error -110
[  163.851955][    T9] usb 3-1: USB disconnect, device number 5
[  164.017535][ T6711] team0: Port device team_slave_0 added
[  164.099113][ T6711] team0: Port device team_slave_1 added
[  164.722980][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.698959][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  165.727712][ T6711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  166.702414][ T6711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.709472][ T6711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  166.962632][ T6944] loop0: detected capacity change from 0 to 1024
[  167.199386][ T6942] loop1: detected capacity change from 0 to 1024
[  167.733983][ T6711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.788588][ T6944] hfsplus: failed to load extents file
[  168.808135][ T6942] hfsplus: failed to load extents file
[  168.934119][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'.
[  169.084189][ T6957] netlink: 40 bytes leftover after parsing attributes in process `syz.3.253'.
[  169.271874][ T6963] loop0: detected capacity change from 0 to 256
[  169.291263][ T6963] msdos: Bad value for 'uid'
[  169.302352][ T6963] msdos: Bad value for 'uid'
[  169.326135][ T6955] vlan3: entered promiscuous mode
[  169.342424][ T6955] bond2: entered promiscuous mode
[  169.348257][ T6955] vlan3: entered allmulticast mode
[  169.371496][ T6955] bond2: entered allmulticast mode
[  169.421376][ T6961] loop1: detected capacity change from 0 to 40427
[  169.435531][ T6961] F2FS-fs (loop1): invalid crc value
[  169.482432][ T6961] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.494456][ T6961] F2FS-fs (loop1): Start checkpoint disabled!
[  169.538348][ T6961] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  169.552705][ T6961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  170.300420][   T30] audit: type=1800 audit(1760141322.183:6): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.254" name="file1" dev="loop1" ino=10 res=0 errno=0
[  170.353947][ T6964] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  170.732023][ T6789] kworker/u8:13: attempt to access beyond end of device
[  170.732023][ T6789] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  170.791279][ T6711] hsr_slave_0: entered promiscuous mode
[  170.801912][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) 
[  170.801938][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  170.801948][ T6789] Workqueue: writeback wb_workfn (flush-7:1)
[  170.801984][ T6789] Call Trace:
[  170.801992][ T6789]  <TASK>
[  170.802000][ T6789]  dump_stack_lvl+0x189/0x250
[  170.802024][ T6789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.802042][ T6789]  ? __pfx_queue_work_on+0x10/0x10
[  170.802065][ T6789]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.802083][ T6789]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.802109][ T6789]  f2fs_handle_critical_error+0x37c/0x540
[  170.802137][ T6789]  f2fs_write_end_io+0x886/0xb60
[  170.802176][ T6789]  __submit_merged_bio+0x27a/0x6a0
[  170.802201][ T6789]  __submit_merged_write_cond+0x255/0x530
[  170.802228][ T6789]  f2fs_write_data_pages+0x261d/0x3000
[  170.802280][ T6789]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.802311][ T6789]  ? unwind_next_frame+0xa5/0x2390
[  170.802387][ T6789]  ? trace_pelt_se_tp+0x39/0x130
[  170.802433][ T6789]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.802452][ T6789]  do_writepages+0x32e/0x550
[  170.802484][ T6789]  ? reacquire_held_locks+0x127/0x1d0
[  170.802507][ T6789]  ? writeback_sb_inodes+0x384/0x1010
[  170.802534][ T6789]  __writeback_single_inode+0x145/0xff0
[  170.802553][ T6789]  ? do_raw_spin_unlock+0x122/0x240
[  170.802575][ T6789]  writeback_sb_inodes+0x6c7/0x1010
[  170.802619][ T6789]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  170.802679][ T6789]  ? rcu_is_watching+0x15/0xb0
[  170.802720][ T6789]  wb_writeback+0x43b/0xaf0
[  170.802745][ T6789]  ? queue_io+0x321/0x590
[  170.802765][ T6789]  ? __pfx_wb_writeback+0x10/0x10
[  170.802789][ T6789]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.802811][ T6789]  wb_workfn+0x409/0xef0
[  170.802845][ T6789]  ? __pfx_wb_workfn+0x10/0x10
[  170.802871][ T6789]  ? __lock_acquire+0xab9/0xd20
[  170.802898][ T6789]  ? process_scheduled_works+0x9ef/0x17b0
[  170.802928][ T6789]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.802944][ T6789]  ? process_scheduled_works+0x9ef/0x17b0
[  170.802963][ T6789]  ? process_scheduled_works+0x9ef/0x17b0
[  170.802987][ T6789]  process_scheduled_works+0xae1/0x17b0
[  170.803038][ T6789]  ? __pfx_process_scheduled_works+0x10/0x10
[  170.803074][ T6789]  worker_thread+0x8a0/0xda0
[  170.803097][ T6789]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.803119][ T6789]  ? __kthread_parkme+0x7b/0x200
[  170.803151][ T6789]  kthread+0x711/0x8a0
[  170.803171][ T6789]  ? __pfx_worker_thread+0x10/0x10
[  170.803190][ T6789]  ? __pfx_kthread+0x10/0x10
[  170.803208][ T6789]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.803223][ T6789]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.803240][ T6789]  ? __pfx_kthread+0x10/0x10
[  170.803256][ T6789]  ret_from_fork+0x4bc/0x870
[  170.803279][ T6789]  ? __pfx_ret_from_fork+0x10/0x10
[  170.803304][ T6789]  ? __switch_to_asm+0x39/0x70
[  170.803321][ T6789]  ? __switch_to_asm+0x33/0x70
[  170.803335][ T6789]  ? __pfx_kthread+0x10/0x10
[  170.803350][ T6789]  ret_from_fork_asm+0x1a/0x30
[  170.803383][ T6789]  </TASK>
[  170.803392][ T6789] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  170.829577][ T6711] hsr_slave_1: entered promiscuous mode
[  170.830448][ T6711] debugfs: 'hsr0' already exists in 'hsr'
[  171.138385][ T6711] Cannot create hsr debugfs directory
[  171.524684][ T6984] loop0: detected capacity change from 0 to 4096
[  171.629278][ T6984] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  171.722172][ T6987] veth0_to_bridge: entered allmulticast mode
[  171.867923][ T6984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'.
[  171.901435][ T6990] loop3: detected capacity change from 0 to 256
[  171.908985][  T856] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  171.940665][ T6990] msdos: Bad value for 'uid'
[  171.945305][ T6990] msdos: Bad value for 'uid'
[  172.097746][  T856] usb 3-1: device descriptor read/64, error -71
[  172.189287][ T6984] vlan2: entered allmulticast mode
[  172.358059][  T856] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  172.527928][  T856] usb 3-1: device descriptor read/64, error -71
[  172.643854][ T6998] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  172.669453][  T856] usb usb3-port1: attempt power cycle
[  172.773617][ T6711] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.808786][ T7006] pim6reg: entered allmulticast mode
[  172.814853][ T6711] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.855149][ T6711] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  172.881472][   T30] audit: type=1800 audit(1760141324.763:7): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.257" name="bus" dev="overlay" ino=327 res=0 errno=0
[  172.927906][ T6711] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  172.942214][ T7010] loop3: detected capacity change from 0 to 16
[  172.966540][ T7010] erofs (device loop3): mounted with root inode @ nid 36.
[  173.048138][  T856] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  173.083497][  T856] usb 3-1: device descriptor read/8, error -71
[  173.338495][  T856] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  173.446963][  T856] usb 3-1: device descriptor read/8, error -71
[  173.552329][ T7010] netlink: 48 bytes leftover after parsing attributes in process `syz.3.263'.
[  173.601668][ T7019] loop0: detected capacity change from 0 to 256
[  173.660571][  T856] usb usb3-port1: unable to enumerate USB device
[  173.723239][ T7019] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  173.770605][ T6711] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.882733][ T6711] 8021q: adding VLAN 0 to HW filter on device team0
[  173.907053][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.914312][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.965079][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.972255][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.088230][ T1226] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  174.100725][ T7038] loop0: detected capacity change from 0 to 256
[  174.202139][ T7040] netlink: 56 bytes leftover after parsing attributes in process `syz.1.268'.
[  174.271641][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  174.300618][ T1226] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.345265][ T1226] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  174.381763][ T1226] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  174.398109][ T1226] usb 4-1: Manufacturer: syz
[  174.442779][ T1226] usb 4-1: config 0 descriptor??
[  174.896327][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.272'.
[  174.922658][ T6711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.938101][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'.
[  174.967016][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'.
[  175.045229][ T1226] usbhid 4-1:0.0: can't add hid device: -71
[  175.064497][ T1226] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  175.083373][ T1226] usb 4-1: USB disconnect, device number 9
[  175.350287][ T7075] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.275'.
[  175.381588][ T7075] netlink: 24 bytes leftover after parsing attributes in process `syz.1.275'.
[  175.716503][ T7080] loop2: detected capacity change from 0 to 1024
[  176.518889][ T6453] hfsplus: b-tree write err: -5, ino 4
[  176.638027][ T7083] loop0: detected capacity change from 0 to 256
[  176.690285][ T7083] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  177.909553][ T7101] loop1: detected capacity change from 0 to 164
[  178.029976][ T6711] veth0_vlan: entered promiscuous mode
[  178.065168][ T6711] veth1_vlan: entered promiscuous mode
[  178.134097][ T6711] veth0_macvtap: entered promiscuous mode
[  178.305252][ T6711] veth1_macvtap: entered promiscuous mode
[  178.364927][ T7112] loop1: detected capacity change from 0 to 32768
[  178.380869][ T7112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.282 (7112)
[  178.397121][ T7112] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.407728][ T7112] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  178.429126][  T856] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  178.468370][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.489276][ T7112] BTRFS info (device loop1): enabling ssd optimizations
[  178.496242][ T7112] BTRFS info (device loop1): enabling free space tree
[  178.510900][ T6711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.653751][  T856] usb 3-1: device descriptor read/64, error -71
[  178.666087][   T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.689271][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.185298][   T30] audit: type=1800 audit(1760141330.663:8): pid=7131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="file2" dev="loop1" ino=261 res=0 errno=0
[  179.318162][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.429865][   T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.438676][  T856] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  179.513658][ T5833] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.578562][  T856] usb 3-1: device descriptor read/64, error -71
[  179.640148][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.283'.
[  179.688969][  T856] usb usb3-port1: attempt power cycle
[  179.875869][ T6455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.943876][ T6455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.040477][  T856] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  180.073954][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.084244][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.106809][  T856] usb 3-1: device descriptor read/8, error -71
[  180.197867][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  180.371243][  T856] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  180.385140][ T5893] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  180.422308][  T856] usb 3-1: device descriptor read/8, error -71
[  180.443116][ T5893] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  180.844945][ T7154] loop0: detected capacity change from 0 to 1024
[  181.180872][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  181.276749][ T5893] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  181.291913][  T856] usb usb3-port1: unable to enumerate USB device
[  181.425360][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.441409][ T5893] usb 2-1: Product: syz
[  181.445982][ T5893] usb 2-1: Manufacturer: syz
[  181.462284][   T60] hfsplus: b-tree write err: -5, ino 4
[  181.506407][ T5893] usb 2-1: SerialNumber: syz
[  181.569199][ T1226] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  181.610302][ T5893] usb 2-1: config 0 descriptor??
[  181.717347][ T5893] uvcvideo 2-1:0.0: Found UVC 34.00 device syz (8086:0b5b)
[  181.732922][ T5893] uvcvideo 2-1:0.0: No valid video chain found.
[  181.941719][ T1226] usb 6-1: Using ep0 maxpacket: 16
[  182.032374][ T7165] FAULT_INJECTION: forcing a failure.
[  182.032374][ T7165] name failslab, interval 1, probability 0, space 0, times 0
[  182.045224][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.2.287 Not tainted syzkaller #0 PREEMPT(full) 
[  182.045248][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  182.045262][ T7165] Call Trace:
[  182.045272][ T7165]  <TASK>
[  182.045282][ T7165]  dump_stack_lvl+0x189/0x250
[  182.045320][ T7165]  ? __pfx____ratelimit+0x10/0x10
[  182.045341][ T7165]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.045359][ T7165]  ? __pfx__printk+0x10/0x10
[  182.045385][ T7165]  ? __pfx___might_resched+0x10/0x10
[  182.045415][ T7165]  should_fail_ex+0x414/0x560
[  182.045448][ T7165]  should_failslab+0xa8/0x100
[  182.045473][ T7165]  __kmalloc_noprof+0xcb/0x7f0
[  182.045491][ T7165]  ? kfree+0x4d/0x6d0
[  182.045504][ T7165]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  182.045532][ T7165]  tomoyo_realpath_from_path+0xe3/0x5d0
[  182.045554][ T7165]  ? tomoyo_domain+0xd9/0x130
[  182.045579][ T7165]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  182.045604][ T7165]  tomoyo_path_number_perm+0x1e8/0x5a0
[  182.045632][ T7165]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  182.045656][ T7165]  ? __pfx___schedule+0x10/0x10
[  182.045713][ T7165]  ? __fget_files+0x2a/0x420
[  182.045740][ T7165]  ? __fget_files+0x3a0/0x420
[  182.045757][ T7165]  ? __fget_files+0x2a/0x420
[  182.045781][ T7165]  security_file_ioctl+0xcb/0x2d0
[  182.045808][ T7165]  __se_sys_ioctl+0x47/0x170
[  182.045828][ T7165]  do_syscall_64+0xfa/0xfa0
[  182.045850][ T7165]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.045867][ T7165]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  182.045883][ T7165]  ? clear_bhb_loop+0x60/0xb0
[  182.045904][ T7165]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.045922][ T7165] RIP: 0033:0x7f5a1ab8eec9
[  182.045945][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  182.045958][ T7165] RSP: 002b:00007f5a1ba4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.045983][ T7165] RAX: ffffffffffffffda RBX: 00007f5a1ade6180 RCX: 00007f5a1ab8eec9
[  182.045996][ T7165] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000008
[  182.046012][ T7165] RBP: 00007f5a1ba4c090 R08: 0000000000000000 R09: 0000000000000000
[  182.046022][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.046032][ T7165] R13: 00007f5a1ade6218 R14: 00007f5a1ade6180 R15: 00007ffdfc9ea028
[  182.046064][ T7165]  </TASK>
[  182.277198][ T7165] ERROR: Out of memory at tomoyo_realpath_from_path.
[  182.296037][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.307097][ T1226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.358554][ T1226] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  182.373163][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.452251][ T1226] usb 6-1: config 0 descriptor??
[  182.599925][ T7169] loop3: detected capacity change from 0 to 256
[  182.845037][ T7169] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  183.024985][ T7177] loop2: detected capacity change from 0 to 256
[  183.065303][ T7177] msdos: Bad value for 'uid'
[  183.088525][ T7177] msdos: Bad value for 'uid'
[  183.272828][ T1226] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0
[  183.298124][ T7166] loop1: detected capacity change from 0 to 2048
[  183.305823][ T7166] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485
[  183.435113][ T7166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.720054][ T1226] corsair 0003:1B1C:1B02.0004: Failed to get K90 initial state (error -71).
[  183.765656][ T1226] usb 6-1: USB disconnect, device number 2
[  183.848007][ T7188] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  183.968696][ T7189] fido_id[7189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  185.031054][ T1226] usb 2-1: USB disconnect, device number 9
[  185.104254][ T7197] loop5: detected capacity change from 0 to 256
[  185.170592][ T7202] veth0_to_bridge: entered allmulticast mode
[  185.516524][ T7207] loop0: detected capacity change from 0 to 32768
[  185.600394][ T7207] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.295 (7207)
[  185.622545][ T7207] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.633204][ T7207] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  185.717499][ T7197] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  185.724283][ T7207] BTRFS info (device loop0): enabling ssd optimizations
[  185.736361][ T7209] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  185.736763][ T7207] BTRFS info (device loop0): enabling free space tree
[  185.877730][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  186.257716][   T24] usb 4-1: device descriptor read/64, error -71
[  186.280146][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.2.299'.
[  186.628019][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  186.711576][ T7209] netlink: 'syz.1.298': attribute type 16 has an invalid length.
[  186.807774][ T7209] netlink: 'syz.1.298': attribute type 17 has an invalid length.
[  186.938125][   T24] usb 4-1: device descriptor read/64, error -71
[  187.347961][   T24] usb usb4-port1: attempt power cycle
[  187.438248][ T7209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.483048][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.301'.
[  187.706419][ T5828] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.756221][   T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  187.811880][   T24] usb 4-1: device descriptor read/8, error -71
[  188.077700][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  188.335402][   T24] usb 4-1: device descriptor read/8, error -71
[  188.419987][ T7272] loop1: detected capacity change from 0 to 256
[  188.471817][   T24] usb usb4-port1: unable to enumerate USB device
[  188.584886][ T7272] program syz.1.305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.055331][ T7258] loop5: detected capacity change from 0 to 32768
[  190.156778][ T7258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.304 (7258)
[  190.209642][ T7258] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.256469][ T7258] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  190.493912][ T7295] loop1: detected capacity change from 0 to 2048
[  190.765506][ T5849]  loop1: p1 < > p4
[  190.812929][ T7258] BTRFS info (device loop5): enabling ssd optimizations
[  190.832581][ T5849] loop1: p4 start 42180 is beyond EOD, truncated
[  190.845139][ T7258] BTRFS info (device loop5): enabling free space tree
[  190.957813][ T7258] BTRFS info (device loop5): enabling auto defrag
[  190.991316][ T7295]  loop1: p1 < > p4
[  191.058402][ T7295] loop1: p4 start 42180 is beyond EOD, truncated
[  191.498448][ T6711] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.558723][ T7314] loop2: detected capacity change from 0 to 2048
[  191.718893][ T7320] loop0: detected capacity change from 0 to 256
[  191.910478][ T7314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.995360][ T7320] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  192.097777][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  192.219797][ T5834] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.336579][ T5971] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  192.469118][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  192.498721][ T5971] usb 4-1: device descriptor read/64, error -71
[  192.614770][ T7348] loop1: detected capacity change from 0 to 256
[  192.712175][ T7348] msdos: Bad value for 'uid'
[  192.739217][ T5971] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  192.762275][ T7352] loop0: detected capacity change from 0 to 256
[  192.779249][ T7348] msdos: Bad value for 'uid'
[  192.907315][ T7352] msdos: Bad value for 'uid'
[  193.005002][ T7354] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  193.077668][ T5971] usb 4-1: device descriptor read/64, error -71
[  193.187654][ T7352] msdos: Bad value for 'uid'
[  193.523349][ T5971] usb usb4-port1: attempt power cycle
[  193.594881][ T7358] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  194.104682][ T5971] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  194.167782][ T5971] usb 4-1: device descriptor read/8, error -71
[  194.293064][ T7375] loop5: detected capacity change from 0 to 128
[  194.342557][ T7375] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.372716][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  194.479039][ T7375] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.479589][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  194.667064][ T5971] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  194.746961][ T5971] usb 4-1: device descriptor read/8, error -71
[  194.988759][ T5971] usb usb4-port1: unable to enumerate USB device
[  194.996760][ T7375] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  195.007880][ T7375] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  195.037409][ T7375] fscrypt: loop5: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[  195.199513][ T6711] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.246938][ T7399] loop1: detected capacity change from 0 to 256
[  196.366372][ T7399] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  196.427818][ T5842] Bluetooth: hci0: command 0x0406 tx timeout
[  196.434144][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  196.440566][ T5839] Bluetooth: hci3: command 0x0406 tx timeout
[  196.446765][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  196.613244][ T7407] loop5: detected capacity change from 0 to 256
[  196.658828][ T7407] msdos: Bad value for 'uid'
[  196.663477][ T7407] msdos: Bad value for 'uid'
[  196.751199][ T7407] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  196.870100][ T7415] loop0: detected capacity change from 0 to 256
[  196.940801][ T7415] msdos: Bad value for 'uid'
[  196.956013][ T7415] msdos: Bad value for 'uid'
[  198.045687][ T7440] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'.
[  198.367741][ T5971] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  198.531033][ T5971] usb 3-1: Using ep0 maxpacket: 16
[  198.671778][ T5971] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  198.786566][ T5971] usb 3-1: config 0 has no interface number 0
[  198.935893][ T5971] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 211, changing to 11
[  199.057840][ T5971] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 33230, setting to 1024
[  199.095918][ T7459] loop0: detected capacity change from 0 to 256
[  199.124196][ T5971] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  199.128182][ T7459] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349bb1de, utbl_chksum : 0xe619d30d)
[  199.168333][ T5971] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  199.191712][ T5971] usb 3-1: Product: syz
[  199.227539][ T5971] usb 3-1: SerialNumber: syz
[  199.251455][ T5971] usb 3-1: config 0 descriptor??
[  199.253025][ T7466] loop3: detected capacity change from 0 to 256
[  199.284781][ T7469] loop1: detected capacity change from 0 to 256
[  199.294208][ T5971] cm109 3-1:0.8: invalid payload size 1024, expected 4
[  199.315255][ T7469] msdos: Bad value for 'uid'
[  199.338987][ T5971] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12
[  199.349820][ T7469] msdos: Bad value for 'uid'
[  199.350382][ T7466] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  199.409489][ T7469] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  200.280756][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  200.287759][    C0] ------------[ cut here ]------------
[  200.293591][    C0] URB ffff88802fe3e900 submitted while active
[  200.300246][    C0] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0xf8c/0x18b0, CPU#0: syz.2.338/7438
[  200.310332][    C0] Modules linked in:
[  200.314414][    C0] CPU: 0 UID: 0 PID: 7438 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) 
[  200.323603][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.333650][    C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0
[  200.339204][    C0] Code: 00 00 00 e8 36 0b c6 fa e9 25 f1 ff ff e8 2c 0b c6 fa c6 05 55 fb 8d 08 01 90 48 c7 c7 c0 84 12 8c 48 89 de e8 05 28 89 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 06 0b c6 fa c6 05 37 32 a4 08 01 41
[  200.358803][    C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046
[  200.364870][    C0] RAX: c1e812b87d157400 RBX: ffff88802fe3e900 RCX: 0000000000040000
[  200.372831][    C0] RDX: ffffc90002191000 RSI: 00000000000065e7 RDI: 00000000000065e8
[  200.380794][    C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852
[  200.388754][    C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820
[  200.396715][    C0] R13: ffff888053056830 R14: ffff88802fe3e908 R15: dffffc0000000000
[  200.404688][    C0] FS:  00005555583da500(0000) GS:ffff888125d0b000(0000) knlGS:0000000000000000
[  200.413609][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  200.420262][    C0] CR2: 0000001b30d24224 CR3: 0000000068e14000 CR4: 00000000003526f0
[  200.428312][    C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 000000000000000c
[  200.436271][    C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  200.444227][    C0] Call Trace:
[  200.447497][    C0]  <IRQ>
[  200.450320][    C0]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  200.455673][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  200.461542][    C0]  ? kcov_remote_start+0x97/0x7f0
[  200.466556][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  200.471916][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  200.477271][    C0]  dummy_timer+0x85f/0x44c0
[  200.481769][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  200.487122][    C0]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  200.492835][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  200.497757][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  200.502674][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  200.507588][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  200.512770][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  200.518737][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  200.524441][    C0]  ? read_tsc+0x9/0x20
[  200.528496][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  200.534290][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  200.539391][    C0]  handle_softirqs+0x286/0x870
[  200.544136][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  200.548904][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  200.554173][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  200.559360][    C0]  __irq_exit_rcu+0xca/0x1f0
[  200.563928][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  200.569108][    C0]  irq_exit_rcu+0x9/0x30
[  200.573345][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  200.578981][    C0]  </IRQ>
[  200.581908][    C0]  <TASK>
[  200.584832][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  200.590798][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  200.597292][    C0] Code: 74 05 e8 6b 1c 79 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 4a 41 f6 65 8b 05 dc 68 42 07 85 c0 74 40 48 c7 04 24 0e 36
[  200.616880][    C0] RSP: 0018:ffffc9000217fa00 EFLAGS: 00000206
[  200.622930][    C0] RAX: c1e812b87d157400 RBX: 0000000000000a02 RCX: c1e812b87d157400
[  200.630879][    C0] RDX: 0000000000000006 RSI: ffffffff8d7e9b20 RDI: 0000000000000001
[  200.638833][    C0] RBP: ffffc9000217fa90 R08: ffffffff8f9e1877 R09: 1ffffffff1f3c30e
[  200.646780][    C0] R10: dffffc0000000000 R11: fffffbfff1f3c30f R12: dffffc0000000000
[  200.654726][    C0] R13: ffff8881443faa00 R14: ffffffff8edae380 R15: 1ffff9200042ff40
[  200.662686][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.668995][    C0]  ? usb_hcd_giveback_urb+0x2f8/0x420
[  200.674345][    C0]  usb_hcd_poll_rh_status+0x406/0x620
[  200.679701][    C0]  ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[  200.685577][    C0]  dummy_pullup+0x19b/0x200
[  200.690053][    C0]  ? __pfx_dummy_pullup+0x10/0x10
[  200.695052][    C0]  usb_gadget_disconnect_locked+0x143/0x4b0
[  200.700941][    C0]  gadget_unbind_driver+0xc4/0x430
[  200.706035][    C0]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  200.711731][    C0]  device_release_driver_internal+0x46f/0x800
[  200.717795][    C0]  driver_detach+0x1f3/0x2d0
[  200.722389][    C0]  bus_remove_driver+0x226/0x2f0
[  200.727323][    C0]  usb_gadget_unregister_driver+0x4e/0x70
[  200.733031][    C0]  raw_release+0xd7/0x260
[  200.737339][    C0]  ? __pfx_raw_release+0x10/0x10
[  200.742252][    C0]  __fput+0x44c/0xa70
[  200.746223][    C0]  task_work_run+0x1d4/0x260
[  200.750793][    C0]  ? __pfx_task_work_run+0x10/0x10
[  200.755904][    C0]  ? exit_to_user_mode_loop+0x40/0x130
[  200.761368][    C0]  exit_to_user_mode_loop+0xe9/0x130
[  200.766688][    C0]  do_syscall_64+0x2bd/0xfa0
[  200.771263][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.776438][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.782481][    C0]  ? clear_bhb_loop+0x60/0xb0
[  200.787139][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.793008][    C0] RIP: 0033:0x7f5a1ab8eec9
[  200.797412][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  200.816997][    C0] RSP: 002b:00007ffdfc9ea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  200.825394][    C0] RAX: 0000000000000000 RBX: 00007f5a1ade7da0 RCX: 00007f5a1ab8eec9
[  200.833351][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  200.841312][    C0] RBP: 00007f5a1ade7da0 R08: 0000000000000148 R09: 00000010fc9ea47f
[  200.849273][    C0] R10: 00000000003ffc94 R11: 0000000000000246 R12: 0000000000031964
[  200.857227][    C0] R13: 00007f5a1ade6090 R14: ffffffffffffffff R15: 00007ffdfc9ea2a0
[  200.865278][    C0]  </TASK>
[  200.868320][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  200.875594][    C0] CPU: 0 UID: 0 PID: 7438 Comm: syz.2.338 Not tainted syzkaller #0 PREEMPT(full) 
[  200.884770][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.894809][    C0] Call Trace:
[  200.898158][    C0]  <IRQ>
[  200.900987][    C0]  dump_stack_lvl+0x99/0x250
[  200.905557][    C0]  ? __asan_memcpy+0x40/0x70
[  200.910128][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.915307][    C0]  ? __pfx__printk+0x10/0x10
[  200.919881][    C0]  vpanic+0x237/0x6d0
[  200.923847][    C0]  ? __pfx_vpanic+0x10/0x10
[  200.928331][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  200.933515][    C0]  panic+0xb9/0xc0
[  200.937217][    C0]  ? __pfx_panic+0x10/0x10
[  200.941620][    C0]  __warn+0x334/0x4c0
[  200.945580][    C0]  ? usb_submit_urb+0xf8c/0x18b0
[  200.950496][    C0]  ? usb_submit_urb+0xf8c/0x18b0
[  200.955412][    C0]  report_bug+0x2be/0x4f0
[  200.959723][    C0]  ? usb_submit_urb+0xf8c/0x18b0
[  200.964642][    C0]  ? usb_submit_urb+0xf8c/0x18b0
[  200.969558][    C0]  ? usb_submit_urb+0xf8e/0x18b0
[  200.974476][    C0]  handle_bug+0x84/0x160
[  200.978699][    C0]  exc_invalid_op+0x1a/0x50
[  200.983181][    C0]  asm_exc_invalid_op+0x1a/0x20
[  200.988006][    C0] RIP: 0010:usb_submit_urb+0xf8c/0x18b0
[  200.993549][    C0] Code: 00 00 00 e8 36 0b c6 fa e9 25 f1 ff ff e8 2c 0b c6 fa c6 05 55 fb 8d 08 01 90 48 c7 c7 c0 84 12 8c 48 89 de e8 05 28 89 fa 90 <0f> 0b 90 90 e9 ec f0 ff ff e8 06 0b c6 fa c6 05 37 32 a4 08 01 41
[  201.013219][    C0] RSP: 0018:ffffc90000007878 EFLAGS: 00010046
[  201.019302][    C0] RAX: c1e812b87d157400 RBX: ffff88802fe3e900 RCX: 0000000000040000
[  201.027265][    C0] RDX: ffffc90002191000 RSI: 00000000000065e7 RDI: 00000000000065e8
[  201.035222][    C0] RBP: 000000000000000f R08: ffff8880b8624293 R09: 1ffff110170c4852
[  201.043177][    C0] R10: dffffc0000000000 R11: ffffed10170c4853 R12: 0000000000000820
[  201.051308][    C0] R13: ffff888053056830 R14: ffff88802fe3e908 R15: dffffc0000000000
[  201.059273][    C0]  ? usb_submit_urb+0xf8b/0x18b0
[  201.064198][    C0]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  201.069548][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  201.075417][    C0]  ? kcov_remote_start+0x97/0x7f0
[  201.080425][    C0]  cm109_urb_irq_callback+0x709/0xca0
[  201.085782][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  201.091132][    C0]  dummy_timer+0x85f/0x44c0
[  201.095627][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  201.100975][    C0]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  201.106682][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  201.111598][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  201.116511][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  201.121425][    C0]  __hrtimer_run_queues+0x52c/0xc60
[  201.126603][    C0]  ? ktime_get_update_offsets_now+0x67/0x3d0
[  201.132567][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  201.138262][    C0]  ? read_tsc+0x9/0x20
[  201.142307][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  201.148115][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  201.153218][    C0]  handle_softirqs+0x286/0x870
[  201.158052][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  201.162797][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  201.168064][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  201.173242][    C0]  __irq_exit_rcu+0xca/0x1f0
[  201.177816][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  201.183060][    C0]  irq_exit_rcu+0x9/0x30
[  201.187282][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  201.192895][    C0]  </IRQ>
[  201.195806][    C0]  <TASK>
[  201.198716][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  201.204675][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  201.211153][    C0] Code: 74 05 e8 6b 1c 79 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> d3 4a 41 f6 65 8b 05 dc 68 42 07 85 c0 74 40 48 c7 04 24 0e 36
[  201.230928][    C0] RSP: 0018:ffffc9000217fa00 EFLAGS: 00000206
[  201.236994][    C0] RAX: c1e812b87d157400 RBX: 0000000000000a02 RCX: c1e812b87d157400
[  201.244951][    C0] RDX: 0000000000000006 RSI: ffffffff8d7e9b20 RDI: 0000000000000001
[  201.252917][    C0] RBP: ffffc9000217fa90 R08: ffffffff8f9e1877 R09: 1ffffffff1f3c30e
[  201.260870][    C0] R10: dffffc0000000000 R11: fffffbfff1f3c30f R12: dffffc0000000000
[  201.268839][    C0] R13: ffff8881443faa00 R14: ffffffff8edae380 R15: 1ffff9200042ff40
[  201.276805][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.283111][    C0]  ? usb_hcd_giveback_urb+0x2f8/0x420
[  201.288463][    C0]  usb_hcd_poll_rh_status+0x406/0x620
[  201.293837][    C0]  ? __pfx_usb_hcd_poll_rh_status+0x10/0x10
[  201.299758][    C0]  dummy_pullup+0x19b/0x200
[  201.304242][    C0]  ? __pfx_dummy_pullup+0x10/0x10
[  201.309242][    C0]  usb_gadget_disconnect_locked+0x143/0x4b0
[  201.315119][    C0]  gadget_unbind_driver+0xc4/0x430
[  201.320230][    C0]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  201.325958][    C0]  device_release_driver_internal+0x46f/0x800
[  201.332034][    C0]  driver_detach+0x1f3/0x2d0
[  201.336628][    C0]  bus_remove_driver+0x226/0x2f0
[  201.341566][    C0]  usb_gadget_unregister_driver+0x4e/0x70
[  201.347273][    C0]  raw_release+0xd7/0x260
[  201.351582][    C0]  ? __pfx_raw_release+0x10/0x10
[  201.356494][    C0]  __fput+0x44c/0xa70
[  201.360464][    C0]  task_work_run+0x1d4/0x260
[  201.365037][    C0]  ? __pfx_task_work_run+0x10/0x10
[  201.370126][    C0]  ? exit_to_user_mode_loop+0x40/0x130
[  201.375565][    C0]  exit_to_user_mode_loop+0xe9/0x130
[  201.380830][    C0]  do_syscall_64+0x2bd/0xfa0
[  201.385403][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.390579][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.396621][    C0]  ? clear_bhb_loop+0x60/0xb0
[  201.401278][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.407150][    C0] RIP: 0033:0x7f5a1ab8eec9
[  201.411548][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.431137][    C0] RSP: 002b:00007ffdfc9ea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  201.439529][    C0] RAX: 0000000000000000 RBX: 00007f5a1ade7da0 RCX: 00007f5a1ab8eec9
[  201.447478][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  201.455423][    C0] RBP: 00007f5a1ade7da0 R08: 0000000000000148 R09: 00000010fc9ea47f
[  201.463371][    C0] R10: 00000000003ffc94 R11: 0000000000000246 R12: 0000000000031964
[  201.471324][    C0] R13: 00007f5a1ade6090 R14: ffffffffffffffff R15: 00007ffdfc9ea2a0
[  201.479314][    C0]  </TASK>
[  202.589090][    C0] Shutting down cpus with NMI
[  202.594136][    C0] Kernel Offset: disabled
[  202.598461][    C0] Rebooting in 86400 seconds..