last executing test programs:

5m52.150164677s ago: executing program 2 (id=913):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x48000)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0)

5m51.607449798s ago: executing program 2 (id=915):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000240)='md0', 0x3)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r1, 0x40480923, &(0x7f0000000300)="0000000000000000000000000000000001000000000400000200000002")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8c0000004400010029bd700004000000010000000400488071000180c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb"], 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4008094)
ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006")
ioctl(r1, 0x400c0930, 0x0)

5m51.290169233s ago: executing program 2 (id=917):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x1005}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x0)

5m51.063643579s ago: executing program 2 (id=922):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29)
write(r1, &(0x7f0000000000)='7', 0x1)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3)

5m50.122878002s ago: executing program 2 (id=925):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0xfdef)

5m48.588644936s ago: executing program 2 (id=931):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELTABLE={0xbc, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x80, 0x6, "389ccbb6ef03fc85a06f6c3f003c2b67e12c3e01cb71258545bc3cbbec9a7ddae7b805f4f4261c6cec68a393af38bd409549b566656747ccfe5c07c789e591a4262d43e3729a5ab1438ff8b1956f0e78813ebb28e40be720d4cb9a32ad111fa2e565bca5e4e869e9e0759f7472d17d5a54ab673cecc9617aeb18f205"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd, 0x6, "36fb9e4f28ebed75ac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x274}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0))
dup(0xffffffffffffffff)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100df"], 0x4080)

5m48.061631873s ago: executing program 32 (id=931):
r0 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELTABLE={0xbc, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x80, 0x6, "389ccbb6ef03fc85a06f6c3f003c2b67e12c3e01cb71258545bc3cbbec9a7ddae7b805f4f4261c6cec68a393af38bd409549b566656747ccfe5c07c789e591a4262d43e3729a5ab1438ff8b1956f0e78813ebb28e40be720d4cb9a32ad111fa2e565bca5e4e869e9e0759f7472d17d5a54ab673cecc9617aeb18f205"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x18}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x883e}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x107, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xd, 0x6, "36fb9e4f28ebed75ac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x274}, 0x1, 0x0, 0x0, 0x8084}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0))
dup(0xffffffffffffffff)
open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100df"], 0x4080)

4m48.738161342s ago: executing program 4 (id=1203):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0)

4m48.563857507s ago: executing program 4 (id=1204):
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
socket$inet6(0xa, 0x3, 0xb)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2841, 0x0)
close(r7)
r8 = socket$unix(0x1, 0x1, 0x0)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="d2b7010000001f91cdfa02e0864c", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x6, 0xfff1}, {0xffff, 0x4}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x2, 0x9, 0x0, 0xaba}, 0x4, 0x0, 0x3ff, 0x100001, 0x9, 0x1c, 0x6, 0x1f, 0x5, 0x9, {0x8, 0x400, 0x80, 0x8274, 0x3, 0x15}}}}]}, 0x78}}, 0x20040084)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000300)={'ip6erspan0\x00', @remote})
r12 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x38, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfffd, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
r13 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r13, &(0x7f0000000340)={&(0x7f0000000140)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @private0, 0x2}}, 0x80, &(0x7f0000000680)}, 0x4011)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000780)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\f', @ANYRES16=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000)

4m45.833640396s ago: executing program 4 (id=1217):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001100)={[{@clear_cache}, {@compress}, {@ssd_spread}, {@rescan_uuid_tree}, {@skip_balance}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000100)={{r0}, "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"})
chdir(&(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x40000, 0x0)
r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x8400, 0x0)
ioctl$FITRIM(r2, 0xc4009420, &(0x7f0000000180)={0x5, 0x204})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000002480)={{r1}, 0x0, 0x0, @inherit={0x68, 0x0}, @subvolid=0x3})

4m44.278705944s ago: executing program 4 (id=1227):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]})

4m43.833402605s ago: executing program 4 (id=1231):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10)

4m42.894257187s ago: executing program 4 (id=1237):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r1)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0)
close(r3)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)

4m42.533841921s ago: executing program 33 (id=1237):
syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, r1)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mkdir(&(0x7f0000000540)='./sys\x00', 0x0)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
getpid()
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0)
write(r2, &(0x7f00000000c0)='1\x00', 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, 0x0, 0x0)
close(r3)
listen(r4, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)

11.328099422s ago: executing program 3 (id=2508):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x14000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
chdir(&(0x7f0000000140)='./file0\x00')
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)

11.129071583s ago: executing program 3 (id=2510):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5)
sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x80}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
preadv(r2, &(0x7f0000003e40), 0x0, 0xb0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x0, 0x4f, 0x627, 0x5, 0x5, "d0993d0554caddbd3a00", 0x3ff})

10.790642152s ago: executing program 1 (id=2512):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$char_usb(r1, &(0x7f0000000580)="37ef", 0x2)
write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xc, {[@global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x1, 0x1, 0x9, "ff"}, @main=@item_012={0x0, 0x0, 0xa}, @global, @global=@item_4={0x3, 0x1, 0x3, "dbca9954"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x44, 0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000b40)={0x20, 0x85, 0x4, 0x4aa4e1c3}, 0x0, 0x0, 0x0})

8.79687509s ago: executing program 3 (id=2514):
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x70)

8.568841107s ago: executing program 3 (id=2515):
syz_usb_connect(0x3, 0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="92010002000000401107500500000102030109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

8.084385196s ago: executing program 5 (id=2517):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
close(r1)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400))
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$binfmt_script(r5, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

7.115606054s ago: executing program 5 (id=2519):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000001580), 0x0}, 0x20)
r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x20, 0x7800, 0x0, 0x3)

7.110706395s ago: executing program 1 (id=2520):
setns(0xc9, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4800)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54)

6.899759159s ago: executing program 1 (id=2521):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$evdev(0x0, 0x2, 0x862b01)
write$char_usb(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000100)={0x20, 0x8, 0x5, "e45892696b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

6.872755264s ago: executing program 3 (id=2522):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
r0 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
symlink(0x0, &(0x7f0000000240)='./file0\x00')
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x40)
recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000480)=""/133, 0x85, &(0x7f0000000640)={0x0, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef3942f496aa0c8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1dca2b1ee2195ea26e6a2229", 0xb3})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_GET_EVENT(r4, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
r8 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil)
shmat(r8, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
shmdt(0x0)
syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0)

6.071923158s ago: executing program 5 (id=2523):
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x70)

5.882234266s ago: executing program 0 (id=2524):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}}, 0x18}}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}}}, 0x24}}, 0x0)

5.836635896s ago: executing program 5 (id=2525):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@grpid}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x101}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x3, 0x8, 0x72a, 0x7fff, 0x7}, 0x5a, [0xfffe0000, 0x0, 0xc62, 0x6, 0x8, 0x7, 0x2, 0x2, 0x5a1, 0x5, 0x2, 0xb88, 0x6, 0x7, 0x8001, 0xf, 0x4b, 0x101, 0x7, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x4, 0xf, 0xde, 0x101, 0x9, 0x9, 0x8, 0x200, 0x4, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x1ff, 0x8001, 0xfffffffb, 0xfaa1, 0x7, 0x1, 0x3d3, 0x3ff, 0x8, 0x8, 0x3, 0x6, 0x9, 0x7, 0x90f2, 0x9, 0xff, 0x57, 0x2, 0x4, 0x1, 0xfffffffa, 0x6, 0xb759, 0x40, 0x8001, 0x8000, 0x7, 0x0, 0xc4b2, 0x25d, 0x1000, 0x3, 0x5, 0x1, 0x4, 0x1, 0x6, 0x83, 0x1, 0x5, 0x7fff, 0x10000, 0x227, 0x8, 0x9, 0x1, 0x401, 0x5, 0x9, 0x9, 0x3d, 0x8, 0x7fffffff, 0xfffffffe, 0x4, 0xac9ea37, 0xf934, 0x10, 0x7fffffff, 0x1e, 0x7, 0x10001, 0x1, 0x4, 0xc96b, 0x1ff, 0x9, 0x9, 0x4, 0x5, 0x401, 0x2f3289cd, 0x7, 0x2, 0x7fffffff, 0xfffffff7, 0xd, 0xffff8000, 0x0, 0x2, 0x9, 0x3, 0x9, 0xffffffff, 0x1, 0xcb3, 0x0, 0x1000, 0x9, 0x2, 0x101, 0xe2da, 0x101, 0x8, 0x0, 0xfffff001, 0x8, 0x6, 0xff, 0x200, 0x4, 0x8, 0x3, 0x5, 0x1, 0x3, 0xe, 0x2, 0x6, 0x42, 0x1ff, 0xa, 0x1, 0x4, 0x8, 0x10, 0x4277, 0x3, 0x8001, 0xba7b, 0xc0, 0x6, 0xa, 0xfff, 0x4, 0xf9b, 0x5, 0x400, 0x9, 0x3, 0xa1ed, 0x1, 0x1000, 0xffffffff, 0x8001, 0x4, 0x6, 0x0, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x5, 0x7, 0xfffffffc, 0x7f, 0x401, 0x9, 0x6, 0x9, 0x4, 0x101, 0x0, 0x2, 0x7, 0xbff, 0x9aa, 0x200, 0x3, 0x1000, 0x1, 0x7, 0x5, 0x8, 0x8, 0x6, 0xfffeffff, 0x2, 0x6, 0x80000000, 0x10000, 0x6, 0x400, 0x1, 0x2daf, 0x3, 0x3, 0x3, 0x4, 0xd9b3, 0x3, 0x2, 0x80000000, 0x67e9, 0x70, 0x6, 0x3, 0x7f, 0x9, 0x1189a640, 0x7ff, 0x4, 0x81, 0xe43, 0x9, 0x40, 0x8, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x1, 0x0, 0x4, 0x6f7, 0x3, 0xfff, 0x7f, 0x140, 0x4c8, 0xfffffffc, 0x0, 0x7fff, 0x7ff, 0x6, 0xbe3, 0x80000000, 0x1ce0000, 0x8, 0x7, 0xb, 0x2, 0x7f, 0xc, 0x6, 0x2, 0xfffffff9, 0x3, 0x30, 0x80, 0x31, 0x6a5dc3c6, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1, 0x3, 0x5, 0xf62c, 0xfffffffc, 0x0, 0x5, 0x1, 0xea, 0x7f, 0x2, 0x9, 0xf, 0x4, 0x6, 0x0, 0x4, 0x94c1, 0x9, 0xffffff40, 0x10001, 0x4, 0x0, 0xffffffff, 0x18c9, 0x6, 0x4, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0x2, 0x548d, 0x2, 0x7, 0xffffffff, 0x0, 0x7f, 0x7, 0x2, 0x20008001, 0x8, 0x9, 0xffffffff, 0x10000, 0xcf9f, 0x0, 0x3ae, 0x0, 0x2, 0x8000, 0x800, 0x2, 0x14000000, 0x80000000, 0xfffffffc, 0xffffffff, 0x40, 0x4, 0x8, 0xcf, 0x2, 0x4b, 0x7f, 0x6, 0x0, 0x0, 0x5, 0x85, 0x6, 0xea7a, 0x1d4, 0x5, 0x6db3996, 0x8, 0x3, 0x5, 0x3, 0x82, 0xf0d6, 0x8, 0x401, 0x6, 0x6, 0x2, 0x4, 0x0, 0xfffffffb, 0x0, 0xfffffffa, 0x7f, 0x10, 0x33a, 0x1, 0x41, 0x7ff, 0xfffffe01, 0x2, 0x1, 0xde, 0x6000, 0x8000, 0xfffffff8, 0x7, 0x44, 0x1ae5, 0xb93, 0x0, 0x81, 0xffff, 0x4, 0x6, 0x1ff, 0x3ff, 0x6, 0x6, 0x1, 0x23fd, 0xdb91, 0x6, 0x8, 0x2, 0x9, 0x7fff, 0x7, 0xb5c, 0xa9, 0x4, 0x9, 0x1, 0x7, 0x80000000, 0x8001, 0x0, 0x8, 0x5, 0x1000, 0x0, 0xfffffaf2, 0x6, 0x101, 0xfff, 0x1, 0x3e8, 0xfffffff8, 0x2, 0x4c0, 0x0, 0x2, 0x40000000, 0x80000000, 0x5658, 0x7, 0x81, 0x5e, 0x7ff, 0x32, 0x9, 0xf1d0, 0x4, 0x6, 0x78d4, 0x80, 0x2000, 0x4, 0x60, 0x80000000, 0x0, 0x1, 0x6, 0x183c, 0xf3, 0x1, 0x4, 0x4, 0x8, 0x2, 0x6, 0x200, 0x95, 0xe, 0x7, 0x9, 0xe12, 0x5, 0x4, 0x5, 0xdf4, 0x10000, 0x9, 0x8000, 0x5, 0x6, 0x0, 0x800, 0x7, 0x2, 0x700000, 0xe881, 0x7, 0x1ff, 0x1, 0x1, 0x3, 0x7, 0x8, 0x4, 0x6, 0x10001, 0x4, 0xfffffffa, 0x1, 0x0, 0x10001, 0x8e, 0x40, 0x3, 0x8, 0xfffffffd, 0x800, 0x1, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x7, 0x7, 0x9, 0x4, 0x4ce1, 0x5, 0x2, 0x6, 0x8000, 0x1000, 0xff, 0x2, 0x5, 0x2e0, 0x8000, 0x5f1, 0x7, 0x3ff, 0x1, 0x22, 0x8000, 0x3, 0xe, 0x8a5, 0x3, 0x41, 0x0, 0xa2d, 0xaf, 0x5, 0xb3fa, 0xe, 0x0, 0x1, 0x4, 0x9, 0x3f, 0x401, 0xc, 0x6, 0xc, 0x6, 0x0, 0x5, 0x3, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x1, 0xd4, 0x5, 0xffffffff, 0x0, 0x1, 0x5, 0x1000, 0x9, 0x1ff, 0x6, 0xfcee, 0x7fff, 0x3ff, 0x40, 0xfffffffe, 0x6, 0x9f, 0x0, 0x80000001, 0xc, 0x1f, 0x1, 0x7f, 0x7, 0xdac, 0xff, 0x80, 0xf21, 0xffff, 0x4, 0x7, 0x1, 0xac9, 0x1, 0x7, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x4, 0x80000001, 0x9, 0x7ff, 0x3, 0x9, 0x7fe8, 0x10000, 0x1, 0xf7, 0x10, 0x3, 0x800, 0x2, 0xfffffffc, 0x1000, 0x86, 0x81, 0x0, 0x0, 0x9bb1, 0x3, 0xb, 0x3, 0x9b0, 0x8, 0x9b, 0x10001, 0x4, 0x3835, 0x7ff, 0x4, 0x8, 0x7ff, 0x10001, 0x5f0, 0x4, 0x1, 0xd, 0x1, 0x8000, 0x2, 0x800, 0x60, 0x6, 0x5, 0x51, 0x5, 0x7, 0x3, 0x8, 0xff, 0x5, 0x4, 0x7, 0x8, 0x9, 0x1, 0x9, 0x7, 0x26d, 0x8001, 0x0, 0x5, 0x9, 0x5e25, 0x0, 0x3, 0x81, 0x1, 0x3, 0x80000001, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x7, 0xef74, 0x7f, 0x7, 0x6f9d0a6b, 0x9, 0xe, 0x5, 0x2, 0x7, 0x3, 0x7, 0x6, 0x3, 0x81, 0x80000001, 0x3f80, 0x0, 0x1000, 0x10001, 0xebc2, 0x2a2, 0x4, 0xb, 0x762, 0x7, 0x1, 0x5, 0xff, 0x1, 0x8000, 0x5, 0x6, 0x5, 0x81, 0xc4f0, 0x2, 0x3, 0x1, 0x7, 0xfffffffc, 0x2, 0x5, 0xe, 0x4, 0x8000, 0x8, 0x5, 0xb3, 0xa, 0x9, 0x1000, 0x2, 0x1, 0x10, 0x1, 0x8, 0x12c1fb67, 0x3, 0x274b, 0x1, 0xfffffffc, 0x8, 0x0, 0x656580, 0x0, 0x7, 0x5, 0x9, 0xfffffff6, 0x7, 0x5cf, 0xbd, 0x7, 0x6e, 0x2, 0xc, 0x10000, 0x2, 0x4, 0x60, 0x7f, 0x1, 0x4, 0x0, 0x3, 0xf, 0x3, 0xb4c, 0xb, 0x5, 0x1, 0x7f, 0x0, 0x7, 0xc7, 0x3, 0x2, 0x5, 0x81, 0x5, 0x40, 0x400, 0x6, 0x6, 0x0, 0xfffffffa, 0xf, 0xf57d, 0x3ff, 0x7, 0xe1, 0x8, 0x0, 0xbc, 0x1, 0x7, 0x6, 0x0, 0x8000, 0x3, 0x1, 0x9, 0xe6, 0x8, 0x3, 0x7, 0x1, 0x101, 0x8001, 0x6, 0x39, 0x9, 0xe, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0x2, 0x80, 0x8d, 0xffffffff, 0x6, 0x6, 0x8000, 0x3, 0x1, 0x2, 0xff, 0x6280, 0xd82, 0x6, 0x0, 0x4, 0xfffffff7, 0xe2, 0x0, 0x0, 0xf, 0x9, 0x7, 0x81, 0x10, 0x2, 0x4, 0x7fff, 0x7, 0x0, 0xffff, 0xffffffff, 0x5, 0x4, 0x5, 0xdd13c0cc, 0x81, 0x14, 0x800000, 0x5, 0x8, 0x6, 0x3, 0x2, 0x401, 0x593d, 0x9, 0x0, 0x6, 0x9, 0x860b, 0x1, 0xfffffffb, 0x6, 0x2, 0x2, 0xd2, 0x8000, 0x3ff, 0x7, 0x8, 0x1, 0x3, 0x5, 0x2, 0xffffff7f, 0xd8fc, 0x7ff, 0x40, 0x6, 0x2, 0x8, 0x40000000, 0x5e27, 0x4, 0xf6, 0x6, 0xffffffff, 0x7f, 0x6, 0x6, 0x3, 0xa, 0x8, 0x1, 0xfffffff8, 0x3, 0xfffffffb, 0x101, 0x0, 0xcff3, 0x1, 0xb78, 0x6, 0x22, 0x200, 0x3, 0x4, 0x0, 0x7f, 0xe, 0x2, 0x7, 0x4a4c, 0x3, 0xed, 0x80, 0x80000001, 0x3ff, 0x5, 0x158000, 0x58, 0x66a, 0x0, 0x7, 0x7, 0x0, 0x4, 0x3, 0x1, 0x4, 0x0, 0x7ff, 0x470, 0x59fc, 0x9c4, 0x4, 0x18d, 0xb, 0x3, 0x9, 0x8, 0x6, 0x4, 0xb, 0x6, 0x6, 0xe5f3, 0xfffffff8, 0x4, 0x9, 0x9, 0x3, 0xb0a, 0x2, 0x4, 0x200, 0x6, 0x0, 0x3, 0x100, 0x2, 0x5, 0x2, 0x1, 0x7, 0x5574, 0x3, 0x5, 0x0, 0x1, 0x22, 0x1e64d565, 0x242, 0x3, 0x9, 0x8, 0x2d, 0x4, 0x7a, 0xb7, 0xd2a, 0x531c, 0x5, 0xc6, 0x0, 0xfffffffe, 0x8001, 0x1000, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x10, 0x1, 0x5, 0x9a7c, 0x3ff, 0x9, 0x80000000, 0x1, 0x5, 0x7, 0x7, 0x6, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x5, 0x9, 0xff, 0x12000, 0x7fffffff, 0x7, 0x7]})
socket$nl_generic(0x10, 0x3, 0x10)
getdents64(r0, &(0x7f0000000400)=""/213, 0xd5)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)

5.102532477s ago: executing program 0 (id=2526):
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x8090, &(0x7f0000000180)={[{@dots}, {@dots}, {@nodots}, {@fat=@gid}, {@nodots}, {@dots}, {@nodots}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@dots}, {@nodots}, {@fat=@gid}, {@nodots}, {@fat=@nfs}]}, 0x1, 0x267, &(0x7f0000000540)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x6, &(0x7f0000000680))
bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="19000000040000000800000008", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000079d0ba84fed6657f8e82677815000000000000fe8723b930060b13da32b728c78441d57009ad8a684146ceadd136ec83121d1ceb9c95291142f6ceb6899927df8ebdb162e125cb1a624edb73dc8c7556e850a944899de1f3b26b7deab26b761d2c0630ba52e2ae18edf48c15751f5395c834f3b6ee0ed5a7a474d783ac182f340ea4b573f8d8422a7f9ea8ea5f0f4071c9c76727013194d2a42263345389d330db266d4e574f"], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
rt_sigqueueinfo(0x0, 0x13, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbff, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x481a859b, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x8007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)

4.778030193s ago: executing program 1 (id=2527):
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
socket$nl_rdma(0x10, 0x3, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x3}, 0x8)
close(r1)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000400))
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2)
r5 = fcntl$dupfd(r4, 0x0, r4)
write$binfmt_script(r5, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

4.547839359s ago: executing program 5 (id=2528):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9)
write$char_usb(r1, 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe, 0xf, "cf0d416510d44aa84085a068b5207a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000280)={0x14, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.078132986s ago: executing program 0 (id=2529):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
keyctl$set_reqkey_keyring(0xe, 0x2)
request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='q\xa9', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
capget(&(0x7f0000000000)={0x19980330, r0}, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
ptrace(0x10, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000020000103d56e616c0000000002000004000000011f0000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x44004)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r5], 0x20}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0)

2.430188893s ago: executing program 3 (id=2530):
syz_usb_connect$midi(0x5, 0x2a, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x18, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"})
syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x80000000002, 0x30004)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x85, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848a21c183f47b929f27e98d8652089ec6cc4ede58c3d63cfbd83c9abbdc1c7abeccc97cd32"}, 0x0, 0x0})
syz_usb_ep_write(r1, 0x81, 0x3, &(0x7f0000000080)="0041c3")

2.416614966s ago: executing program 1 (id=2531):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a40, 0x0)
mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setitimer(0x1, &(0x7f0000000340)={{}, {0x0, 0x2710}}, &(0x7f0000000380))
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940), 0x40000000000017d, 0x888)
timer_create(0x3, 0x0, &(0x7f0000044000))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f0000000600)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"})
r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18)

2.356060758s ago: executing program 0 (id=2532):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x1068, &(0x7f0000000000)="$eJzszzFKxkAQBeD3R1fXQhCF1B7FC1jmHNpamfOIjY2FlXfRQ4ggI0m8Qyy+r1jY4T2GCbtqyfuQ3I2XNT2/XCUPr8ssh7flzU9VranP8+QiY1JV1XP9V//6nltyk9yenC3/x608Jzk+pGc46i19XXOaVrlva2Dzkelpp7MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4F/5DQAA//8s1hb8")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FICLONERANGE(r0, 0x4020940d, 0x0)

1.803651061s ago: executing program 0 (id=2533):
socket(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x27c8, &(0x7f0000000540)={0x0, 0x800069ea, 0x3000, 0x3, 0x14b}, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x8, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x70)

1.628472447s ago: executing program 0 (id=2534):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b3f00000000000109022200010100803209040000010300000009211101000122170007058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0905a10185020941150026ff00750895098102c0"], 0x0}, 0x0)

1.375943079s ago: executing program 1 (id=2535):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r1)

0s ago: executing program 5 (id=2536):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000152,iocharset=iso8859-1,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030372c646973636172642c00214b3cf244ea5fb7437f2c69f67a093e240a6e978fa4cd2d"], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@grpid}, {@grpid}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@min_batch_time={'min_batch_time', 0x3d, 0x101}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000025c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000004c0)={{0x2, 0x3, 0x8, 0x72a, 0x7fff, 0x7}, 0x5a, [0xfffe0000, 0x0, 0xc62, 0x6, 0x8, 0x7, 0x2, 0x2, 0x5a1, 0x5, 0x2, 0xb88, 0x6, 0x7, 0x8001, 0xf, 0x4b, 0x101, 0x7, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x4, 0xf, 0xde, 0x101, 0x9, 0x9, 0x8, 0x200, 0x4, 0x8, 0x6, 0x8, 0x3, 0x7fff, 0x1ff, 0x8001, 0xfffffffb, 0xfaa1, 0x7, 0x1, 0x3d3, 0x3ff, 0x8, 0x8, 0x3, 0x6, 0x9, 0x7, 0x90f2, 0x9, 0xff, 0x57, 0x2, 0x4, 0x1, 0xfffffffa, 0x6, 0xb759, 0x40, 0x8001, 0x8000, 0x7, 0x0, 0xc4b2, 0x25d, 0x1000, 0x3, 0x5, 0x1, 0x4, 0x1, 0x6, 0x83, 0x1, 0x5, 0x7fff, 0x10000, 0x227, 0x8, 0x9, 0x1, 0x401, 0x5, 0x9, 0x9, 0x3d, 0x8, 0x7fffffff, 0xfffffffe, 0x4, 0xac9ea37, 0xf934, 0x10, 0x7fffffff, 0x1e, 0x7, 0x10001, 0x1, 0x4, 0xc96b, 0x1ff, 0x9, 0x9, 0x4, 0x5, 0x401, 0x2f3289cd, 0x7, 0x2, 0x7fffffff, 0xfffffff7, 0xd, 0xffff8000, 0x0, 0x2, 0x9, 0x3, 0x9, 0xffffffff, 0x1, 0xcb3, 0x0, 0x1000, 0x9, 0x2, 0x101, 0xe2da, 0x101, 0x8, 0x0, 0xfffff001, 0x8, 0x6, 0xff, 0x200, 0x4, 0x8, 0x3, 0x5, 0x1, 0x3, 0xe, 0x2, 0x6, 0x42, 0x1ff, 0xa, 0x1, 0x4, 0x8, 0x10, 0x4277, 0x3, 0x8001, 0xba7b, 0xc0, 0x6, 0xa, 0xfff, 0x4, 0xf9b, 0x5, 0x400, 0x9, 0x3, 0xa1ed, 0x1, 0x1000, 0xffffffff, 0x8001, 0x4, 0x6, 0x0, 0x1, 0x8, 0x10001, 0x4, 0x3, 0x5, 0x7, 0xfffffffc, 0x7f, 0x401, 0x9, 0x6, 0x9, 0x4, 0x101, 0x0, 0x2, 0x7, 0xbff, 0x9aa, 0x200, 0x3, 0x1000, 0x1, 0x7, 0x5, 0x8, 0x8, 0x6, 0xfffeffff, 0x2, 0x6, 0x80000000, 0x10000, 0x6, 0x400, 0x1, 0x2daf, 0x3, 0x3, 0x3, 0x4, 0xd9b3, 0x3, 0x2, 0x80000000, 0x67e9, 0x70, 0x6, 0x3, 0x7f, 0x9, 0x1189a640, 0x7ff, 0x4, 0x81, 0xe43, 0x9, 0x40, 0x8, 0x1, 0x7, 0x7ff, 0x7, 0x8, 0x1, 0x0, 0x4, 0x6f7, 0x3, 0xfff, 0x7f, 0x140, 0x4c8, 0xfffffffc, 0x0, 0x7fff, 0x7ff, 0x6, 0xbe3, 0x80000000, 0x1ce0000, 0x8, 0x7, 0xb, 0x2, 0x7f, 0xc, 0x6, 0x2, 0xfffffff9, 0x3, 0x30, 0x80, 0x31, 0x6a5dc3c6, 0x0, 0x3, 0x0, 0x1, 0x8, 0x1, 0x3, 0x5, 0xf62c, 0xfffffffc, 0x0, 0x5, 0x1, 0xea, 0x7f, 0x2, 0x9, 0xf, 0x4, 0x6, 0x0, 0x4, 0x94c1, 0x9, 0xffffff40, 0x10001, 0x4, 0x0, 0xffffffff, 0x18c9, 0x6, 0x4, 0x1, 0x2, 0x9, 0x5, 0x1, 0x6, 0x2, 0x548d, 0x2, 0x7, 0xffffffff, 0x0, 0x7f, 0x7, 0x2, 0x20008001, 0x8, 0x9, 0xffffffff, 0x10000, 0xcf9f, 0x0, 0x3ae, 0x0, 0x2, 0x8000, 0x800, 0x2, 0x14000000, 0x80000000, 0xfffffffc, 0xffffffff, 0x40, 0x4, 0x8, 0xcf, 0x2, 0x4b, 0x7f, 0x6, 0x0, 0x0, 0x5, 0x85, 0x6, 0xea7a, 0x1d4, 0x5, 0x6db3996, 0x8, 0x3, 0x5, 0x3, 0x82, 0xf0d6, 0x8, 0x401, 0x6, 0x6, 0x2, 0x4, 0x0, 0xfffffffb, 0x0, 0xfffffffa, 0x7f, 0x10, 0x33a, 0x1, 0x41, 0x7ff, 0xfffffe01, 0x2, 0x1, 0xde, 0x6000, 0x8000, 0xfffffff8, 0x7, 0x44, 0x1ae5, 0xb93, 0x0, 0x81, 0xffff, 0x4, 0x6, 0x1ff, 0x3ff, 0x6, 0x6, 0x1, 0x23fd, 0xdb91, 0x6, 0x8, 0x2, 0x9, 0x7fff, 0x7, 0xb5c, 0xa9, 0x4, 0x9, 0x1, 0x7, 0x80000000, 0x8001, 0x0, 0x8, 0x5, 0x1000, 0x0, 0xfffffaf2, 0x6, 0x101, 0xfff, 0x1, 0x3e8, 0xfffffff8, 0x2, 0x4c0, 0x0, 0x2, 0x40000000, 0x80000000, 0x5658, 0x7, 0x81, 0x5e, 0x7ff, 0x32, 0x9, 0xf1d0, 0x4, 0x6, 0x78d4, 0x80, 0x2000, 0x4, 0x60, 0x80000000, 0x0, 0x1, 0x6, 0x183c, 0xf3, 0x1, 0x4, 0x4, 0x8, 0x2, 0x6, 0x200, 0x95, 0xe, 0x7, 0x9, 0xe12, 0x5, 0x4, 0x5, 0xdf4, 0x10000, 0x9, 0x8000, 0x5, 0x6, 0x0, 0x800, 0x7, 0x2, 0x700000, 0xe881, 0x7, 0x1ff, 0x1, 0x1, 0x3, 0x7, 0x8, 0x4, 0x6, 0x10001, 0x4, 0xfffffffa, 0x1, 0x0, 0x10001, 0x8e, 0x40, 0x3, 0x8, 0xfffffffd, 0x800, 0x1, 0x0, 0xfffffffc, 0x2, 0x2, 0x0, 0x7, 0x7, 0x9, 0x4, 0x4ce1, 0x5, 0x2, 0x6, 0x8000, 0x1000, 0xff, 0x2, 0x5, 0x2e0, 0x8000, 0x5f1, 0x7, 0x3ff, 0x1, 0x22, 0x8000, 0x3, 0xe, 0x8a5, 0x3, 0x41, 0x0, 0xa2d, 0xaf, 0x5, 0xb3fa, 0xe, 0x0, 0x1, 0x4, 0x9, 0x3f, 0x401, 0xc, 0x6, 0xc, 0x6, 0x0, 0x5, 0x3, 0x6, 0x8, 0xffffffff, 0x2, 0x9, 0x1, 0xd4, 0x5, 0xffffffff, 0x0, 0x1, 0x5, 0x1000, 0x9, 0x1ff, 0x6, 0xfcee, 0x7fff, 0x3ff, 0x40, 0xfffffffe, 0x6, 0x9f, 0x0, 0x80000001, 0xc, 0x1f, 0x1, 0x7f, 0x7, 0xdac, 0xff, 0x80, 0xf21, 0xffff, 0x4, 0x7, 0x1, 0xac9, 0x1, 0x7, 0x1ff, 0x3, 0x6, 0xfffffffd, 0x4, 0x80000001, 0x9, 0x7ff, 0x3, 0x9, 0x7fe8, 0x10000, 0x1, 0xf7, 0x10, 0x3, 0x800, 0x2, 0xfffffffc, 0x1000, 0x86, 0x81, 0x0, 0x0, 0x9bb1, 0x3, 0xb, 0x3, 0x9b0, 0x8, 0x9b, 0x10001, 0x4, 0x3835, 0x7ff, 0x4, 0x8, 0x7ff, 0x10001, 0x5f0, 0x4, 0x1, 0xd, 0x1, 0x8000, 0x2, 0x800, 0x60, 0x6, 0x5, 0x51, 0x5, 0x7, 0x3, 0x8, 0xff, 0x5, 0x4, 0x7, 0x8, 0x9, 0x1, 0x9, 0x7, 0x26d, 0x8001, 0x0, 0x5, 0x9, 0x5e25, 0x0, 0x3, 0x81, 0x1, 0x3, 0x80000001, 0x2, 0x0, 0x6, 0x5, 0x2, 0x0, 0x7, 0xef74, 0x7f, 0x7, 0x6f9d0a6b, 0x9, 0xe, 0x5, 0x2, 0x7, 0x3, 0x7, 0x6, 0x3, 0x81, 0x80000001, 0x3f80, 0x0, 0x1000, 0x10001, 0xebc2, 0x2a2, 0x4, 0xb, 0x762, 0x7, 0x1, 0x5, 0xff, 0x1, 0x8000, 0x5, 0x6, 0x5, 0x81, 0xc4f0, 0x2, 0x3, 0x1, 0x7, 0xfffffffc, 0x2, 0x5, 0xe, 0x4, 0x8000, 0x8, 0x5, 0xb3, 0xa, 0x9, 0x1000, 0x2, 0x1, 0x10, 0x1, 0x8, 0x12c1fb67, 0x3, 0x274b, 0x1, 0xfffffffc, 0x8, 0x0, 0x656580, 0x0, 0x7, 0x5, 0x9, 0xfffffff6, 0x7, 0x5cf, 0xbd, 0x7, 0x6e, 0x2, 0xc, 0x10000, 0x2, 0x4, 0x60, 0x7f, 0x1, 0x4, 0x0, 0x3, 0xf, 0x3, 0xb4c, 0xb, 0x5, 0x1, 0x7f, 0x0, 0x7, 0xc7, 0x3, 0x2, 0x5, 0x81, 0x5, 0x40, 0x400, 0x6, 0x6, 0x0, 0xfffffffa, 0xf, 0xf57d, 0x3ff, 0x7, 0xe1, 0x8, 0x0, 0xbc, 0x1, 0x7, 0x6, 0x0, 0x8000, 0x3, 0x1, 0x9, 0xe6, 0x8, 0x3, 0x7, 0x1, 0x101, 0x8001, 0x6, 0x39, 0x9, 0xe, 0x3, 0x9, 0x3, 0x5, 0x5, 0x7, 0x2, 0x80, 0x8d, 0xffffffff, 0x6, 0x6, 0x8000, 0x3, 0x1, 0x2, 0xff, 0x6280, 0xd82, 0x6, 0x0, 0x4, 0xfffffff7, 0xe2, 0x0, 0x0, 0xf, 0x9, 0x7, 0x81, 0x10, 0x2, 0x4, 0x7fff, 0x7, 0x0, 0xffff, 0xffffffff, 0x5, 0x4, 0x5, 0xdd13c0cc, 0x81, 0x14, 0x800000, 0x5, 0x8, 0x6, 0x3, 0x2, 0x401, 0x593d, 0x9, 0x0, 0x6, 0x9, 0x860b, 0x1, 0xfffffffb, 0x6, 0x2, 0x2, 0xd2, 0x8000, 0x3ff, 0x7, 0x8, 0x1, 0x3, 0x5, 0x2, 0xffffff7f, 0xd8fc, 0x7ff, 0x40, 0x6, 0x2, 0x8, 0x40000000, 0x5e27, 0x4, 0xf6, 0x6, 0xffffffff, 0x7f, 0x6, 0x6, 0x3, 0xa, 0x8, 0x1, 0xfffffff8, 0x3, 0xfffffffb, 0x101, 0x0, 0xcff3, 0x1, 0xb78, 0x6, 0x22, 0x200, 0x3, 0x4, 0x0, 0x7f, 0xe, 0x2, 0x7, 0x4a4c, 0x3, 0xed, 0x80, 0x80000001, 0x3ff, 0x5, 0x158000, 0x58, 0x66a, 0x0, 0x7, 0x7, 0x0, 0x4, 0x3, 0x1, 0x4, 0x0, 0x7ff, 0x470, 0x59fc, 0x9c4, 0x4, 0x18d, 0xb, 0x3, 0x9, 0x8, 0x6, 0x4, 0xb, 0x6, 0x6, 0xe5f3, 0xfffffff8, 0x4, 0x9, 0x9, 0x3, 0xb0a, 0x2, 0x4, 0x200, 0x6, 0x0, 0x3, 0x100, 0x2, 0x5, 0x2, 0x1, 0x7, 0x5574, 0x3, 0x5, 0x0, 0x1, 0x22, 0x1e64d565, 0x242, 0x3, 0x9, 0x8, 0x2d, 0x4, 0x7a, 0xb7, 0xd2a, 0x531c, 0x5, 0xc6, 0x0, 0xfffffffe, 0x8001, 0x1000, 0x7, 0x3, 0x8001, 0x4, 0x5, 0x10, 0x1, 0x5, 0x9a7c, 0x3ff, 0x9, 0x80000000, 0x1, 0x5, 0x7, 0x7, 0x6, 0x0, 0x2, 0x5, 0x8, 0x3, 0x1, 0x5, 0x9, 0xff, 0x12000, 0x7fffffff, 0x7, 0x7]})
socket$nl_generic(0x10, 0x3, 0x10)
getdents64(r0, &(0x7f0000000400)=""/213, 0xd5)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  452.788941][T11280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1417'.
[  453.063032][T11295] bonding: bo is being created...
[  453.337426][ T6019] net_ratelimit: 25 callbacks suppressed
[  454.085009][T11317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1428'.
[  454.270453][ T5086] Bluetooth: hci3: ACL packet for unknown connection handle 201
[  454.353391][T11308] futex_wake_op: syz.5.1426 tries to shift op by 144; fix this program
[  454.362615][T11308] futex_wake_op: syz.5.1426 tries to shift op by 144; fix this program
[  454.449363][T11319] lo speed is unknown, defaulting to 1000
[  454.475034][T11324] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  455.378929][T11347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1437'.
[  456.466690][T11360] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  456.476177][T11360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  456.485944][T11360] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  457.078799][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'.
[  457.189275][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'.
[  457.274053][T11370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'.
[  457.424337][ T9136] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  457.541725][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1448'.
[  457.633877][ T9136] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[  457.671842][ T9136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.962952][ T9136] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[  458.385311][ T5997] net_ratelimit: 23 callbacks suppressed
[  458.647001][ T9135] usb 6-1: USB disconnect, device number 4
[  458.921869][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'.
[  458.988885][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1455'.
[  459.108182][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1457'.
[  459.642976][T11433] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  459.836686][T11437] bonding: bond is being created...
[  459.995743][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'.
[  460.029751][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1466'.
[  460.154000][T11448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1467'.
[  460.630876][T11465] bonding: bond1 is being created...
[  460.844762][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'.
[  460.879017][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'.
[  461.402256][T11496] loop5: detected capacity change from 0 to 512
[  461.443904][T11496] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1487: inode has both inline data and extents flags
[  461.469731][T11496] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1487: couldn't read orphan inode 15 (err -117)
[  461.500780][T11496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  461.604775][   T27] audit: type=1804 audit(1790736373.004:15): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1487" name="/newroot/42/file0/bus" dev="loop5" ino=18 res=1 errno=0
[  461.676995][T10467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.745993][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1490'.
[  461.780013][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1490'.
[  463.652844][    C0] net_ratelimit: 24 callbacks suppressed
[  463.876150][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  463.959193][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1501'.
[  464.169374][T11589] batman_adv: batadv0: Adding interface: macvtap4
[  464.189927][T11589] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  464.243204][T11589] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active
[  464.671674][T11599] loop5: detected capacity change from 0 to 32768
[  464.688093][T11599] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1510 (11599)
[  464.726309][T11599] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  464.752902][T11599] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  464.761573][T11599] BTRFS info (device loop5): setting nodatacow, compression disabled
[  464.783153][T11599] BTRFS info (device loop5): setting datasum, datacow enabled
[  464.790655][T11599] BTRFS info (device loop5): force clearing of disk cache
[  464.813021][T11599] BTRFS info (device loop5): turning on sync discard
[  464.823018][T11599] BTRFS info (device loop5): enabling ssd optimizations
[  464.852865][T11599] BTRFS info (device loop5): using spread ssd allocation scheme
[  464.860542][T11599] BTRFS info (device loop5): not using ssd optimizations
[  464.883002][T11599] BTRFS info (device loop5): not using spread ssd allocation scheme
[  464.890997][T11599] BTRFS info (device loop5): using free space tree
[  464.981486][T11610] ªªªªªª: renamed from vlan0 (while UP)
[  465.119166][T11599] BTRFS info (device loop5): rebuilding free space tree
[  465.320225][T10467] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  465.323120][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  465.514011][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'.
[  466.473327][ T9135] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  466.683761][ T9135] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  466.703814][ T9135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.732059][ T9135] usb 6-1: config 0 descriptor??
[  466.745576][T11668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'.
[  466.884138][T11668] veth3: entered promiscuous mode
[  467.022166][T11651] batman_adv: batadv0: Adding interface: macvtap3
[  467.031325][T11651] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  467.071666][T11651] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active
[  467.203870][ T9135] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  467.212389][ T9135] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  467.250784][ T9135] [drm:udl_init] *ERROR* Selecting channel failed
[  467.290318][ T9135] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  467.303910][ T9135] [drm] Initialized udl on minor 2
[  467.312221][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  467.330736][ T9135] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  467.339025][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  467.369852][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  467.378544][ T9135] usb 6-1: USB disconnect, device number 5
[  467.388270][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  468.047547][T11709] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  468.578019][T11727] Core dump to core aborted: cannot preserve file permissions
[  468.587241][T11726] netlink: 'syz.3.1550': attribute type 1 has an invalid length.
[  468.627741][T11726] bond2: entered promiscuous mode
[  468.633702][T11726] 8021q: adding VLAN 0 to HW filter on device bond2
[  468.737507][T11726] 8021q: adding VLAN 0 to HW filter on device bond2
[  468.760091][T11726] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  468.771722][T11726] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  468.790073][T11726] bond2: (slave ip6gre1): making interface the new active one
[  468.801485][T11726] ip6gre1: entered promiscuous mode
[  468.810266][T11726] bond2: (slave ip6gre1): Enslaving as an active interface with an up link
[  468.844565][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'.
[  468.863623][ T6019] net_ratelimit: 25 callbacks suppressed
[  468.961352][T11736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'.
[  468.989446][T11741] loop5: detected capacity change from 0 to 512
[  469.067758][T11741] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1555: inode has both inline data and extents flags
[  469.085091][T11741] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1555: couldn't read orphan inode 15 (err -117)
[  469.121820][T11741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  469.407275][T11753] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  469.471194][T10467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  469.575395][T11757] FAULT_INJECTION: forcing a failure.
[  469.575395][T11757] name failslab, interval 1, probability 0, space 0, times 0
[  469.589510][T11757] CPU: 1 PID: 11757 Comm: syz.5.1561 Not tainted syzkaller #0
[  469.596972][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  469.607022][T11757] Call Trace:
[  469.610292][T11757]  <TASK>
[  469.613214][T11757]  dump_stack_lvl+0x18c/0x250
[  469.617931][T11757]  ? show_regs_print_info+0x20/0x20
[  469.623143][T11757]  ? load_image+0x420/0x420
[  469.627691][T11757]  ? __might_sleep+0xe0/0xe0
[  469.632277][T11757]  ? __lock_acquire+0x7d80/0x7d80
[  469.637313][T11757]  should_fail_ex+0x394/0x4c0
[  469.642012][T11757]  should_failslab+0x9/0x20
[  469.646520][T11757]  slab_pre_alloc_hook+0x59/0x300
[  469.651553][T11757]  ? rcu_is_watching+0x15/0xb0
[  469.656324][T11757]  ? kvmalloc_node+0x70/0x180
[  469.661021][T11757]  ? kvmalloc_node+0x70/0x180
[  469.665700][T11757]  __kmem_cache_alloc_node+0x53/0x250
[  469.671106][T11757]  ? __mutex_lock+0x30d/0xc80
[  469.675872][T11757]  ? kvmalloc_node+0x70/0x180
[  469.680544][T11757]  __kmalloc_node+0xa6/0x240
[  469.685148][T11757]  kvmalloc_node+0x70/0x180
[  469.689681][T11757]  nf_hook_entries_grow+0x27c/0x710
[  469.694948][T11757]  __nf_register_net_hook+0x2c9/0x910
[  469.700319][T11757]  nf_register_net_hook+0xb2/0x190
[  469.705439][T11757]  nf_register_net_hooks+0x44/0x1b0
[  469.710655][T11757]  ip_vs_register_hooks+0xce/0x150
[  469.715817][T11757]  ip_vs_add_service+0x2c9/0x1330
[  469.720876][T11757]  do_ip_vs_set_ctl+0x8cc/0xab0
[  469.725752][T11757]  ? ipvs_proc_est_nice+0x360/0x360
[  469.730979][T11757]  ? trace_contention_end+0x39/0xe0
[  469.736192][T11757]  ? mutex_unlock+0x10/0x10
[  469.740729][T11757]  ? aa_af_perm+0x330/0x330
[  469.745255][T11757]  nf_setsockopt+0x263/0x280
[  469.745283][T11757]  ? sock_common_recvmsg+0x190/0x190
[  469.745325][T11757]  do_sock_setsockopt+0x175/0x1a0
[  469.760219][T11757]  ? __fdget+0x180/0x210
[  469.764498][T11757]  __x64_sys_setsockopt+0x182/0x200
[  469.769730][T11757]  do_syscall_64+0x55/0xb0
[  469.774177][T11757]  ? clear_bhb_loop+0x40/0x90
[  469.778953][T11757]  ? clear_bhb_loop+0x40/0x90
[  469.783663][T11757]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  469.789583][T11757] RIP: 0033:0x7fb74a59e159
[  469.794016][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.813622][T11757] RSP: 002b:00007fb74b551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  469.822036][T11757] RAX: ffffffffffffffda RBX: 00007fb74a825fa0 RCX: 00007fb74a59e159
[  469.822057][T11757] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000006
[  469.838254][T11757] RBP: 00007fb74a63506b R08: 000000000000002c R09: 0000000000000000
[  469.838271][T11757] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  469.838285][T11757] R13: 00007fb74a826038 R14: 00007fb74a825fa0 R15: 00007ffc79b4b518
[  469.838317][T11757]  </TASK>
[  470.236995][T11778] nvme_fcloop: unknown parameter or missing value 'ww'
[  470.256345][T11780] 9pnet_virtio: no channels available for device syz
[  471.432579][T11790] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  471.820939][T11808] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  473.092464][T11832] batman_adv: batadv0: Adding interface: macvtap2
[  473.111348][T11832] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  473.141881][T11832] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[  473.155195][T11835] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  473.173469][T11835] batman_adv: batadv0: Removing interface: batadv_slave_0
[  473.199285][T11835] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  473.224159][T11835] batman_adv: batadv0: Removing interface: batadv_slave_1
[  473.246132][T11835] batman_adv: batadv0: Removing interface: macvtap1
[  473.270538][T11835] batman_adv: batadv0: Removing interface: macvtap2
[  473.283270][T11835] batman_adv: batadv0: Removing interface: macvtap3
[  473.973134][ T6009] net_ratelimit: 26 callbacks suppressed
[  474.009227][T11848] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  475.697721][ T9135] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  475.898610][ T9135] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  475.931355][ T9135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.969405][ T9135] usb 6-1: config 0 descriptor??
[  476.873929][T11872] batman_adv: batadv0: Adding interface: macvtap4
[  476.880414][T11872] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  476.940570][T11872] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active
[  477.015275][T11897] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  477.048411][ T9135] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  477.074391][ T9135] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  477.103683][ T9135] [drm:udl_init] *ERROR* Selecting channel failed
[  477.152934][ T9135] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  477.170667][ T9135] [drm] Initialized udl on minor 2
[  477.182049][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  477.205461][ T9135] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  477.230230][ T5813] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  477.249748][ T9135] usb 6-1: USB disconnect, device number 6
[  477.263117][ T5813] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  477.468784][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1613'.
[  477.925723][T11936] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  478.051702][T11939] batman_adv: batadv0: Adding interface: macvtap3
[  478.081470][T11939] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.112001][T11939] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active
[  479.092916][    C0] net_ratelimit: 19 callbacks suppressed
[  480.930997][T11975] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  481.239617][T11982] batman_adv: batadv0: Adding interface: macvtap5
[  481.248798][T11982] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.278939][T11982] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active
[  481.861604][T11987] mmap: syz.5.1641 (11987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  482.975194][T12016] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  483.774399][T12051] FAULT_INJECTION: forcing a failure.
[  483.774399][T12051] name failslab, interval 1, probability 0, space 0, times 0
[  483.787788][T12051] CPU: 1 PID: 12051 Comm: syz.5.1658 Not tainted syzkaller #0
[  483.787813][T12051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  483.804540][T12053] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1659'.
[  483.805305][T12051] Call Trace:
[  483.805315][T12051]  <TASK>
[  483.820467][T12051]  dump_stack_lvl+0x18c/0x250
[  483.825155][T12051]  ? show_regs_print_info+0x20/0x20
[  483.825187][T12051]  ? load_image+0x420/0x420
[  483.835156][T12051]  ? __might_sleep+0xe0/0xe0
[  483.835188][T12051]  ? __lock_acquire+0x7d80/0x7d80
[  483.839959][T12051]  should_fail_ex+0x394/0x4c0
[  483.849622][T12051]  should_failslab+0x9/0x20
[  483.849656][T12051]  slab_pre_alloc_hook+0x59/0x300
[  483.859339][T12051]  ? check_cond_jmp_op+0x13ab/0x28b0
[  483.859374][T12051]  ? push_jmp_history+0x14b/0x4f0
[  483.869638][T12051]  ? push_jmp_history+0x14b/0x4f0
[  483.869669][T12051]  __kmem_cache_alloc_node+0x53/0x250
[  483.880021][T12051]  ? push_jmp_history+0x14b/0x4f0
[  483.880053][T12051]  __kmalloc_node_track_caller+0xa4/0x230
[  483.890752][T12051]  krealloc+0x86/0x120
[  483.890786][T12051]  push_jmp_history+0x14b/0x4f0
[  483.899657][T12051]  do_check+0x4b4d/0xd0a0
[  483.899695][T12051]  ? __stack_depot_save+0x1f/0x660
[  483.909086][T12051]  ? __kasan_kmalloc+0x8f/0xa0
[  483.909117][T12051]  ? __sys_bpf+0x5ba/0x890
[  483.918244][T12051]  ? __x64_sys_bpf+0x7c/0x90
[  483.918272][T12051]  ? do_syscall_64+0x55/0xb0
[  483.927433][T12051]  ? init_func_state+0x2d10/0x2d10
[  483.932550][T12051]  ? __asan_memset+0x22/0x40
[  483.937142][T12051]  ? init_func_state+0x1dc6/0x2d10
[  483.937170][T12051]  ? btf_check_subprog_arg_match+0x142/0x2a0
[  483.937202][T12051]  do_check_common+0xacc/0x1410
[  483.948258][T12051]  bpf_check+0x65df/0xec40
[  483.957488][T12051]  ? __lock_acquire+0x1336/0x7d80
[  483.957525][T12051]  ? bpf_get_btf_vmlinux+0x20/0x20
[  483.967603][T12051]  ? __lock_acquire+0x1262/0x7d80
[  483.972636][T12051]  ? mark_lock+0x94/0x320
[  483.976969][T12051]  ? __lock_acquire+0x1336/0x7d80
[  483.977016][T12051]  ? verify_lock_unused+0x140/0x140
[  483.977045][T12051]  ? verify_lock_unused+0x140/0x140
[  483.977068][T12051]  ? verify_lock_unused+0x140/0x140
[  483.987259][T12051]  ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[  483.997610][T12051]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  483.997638][T12051]  ? __lock_acquire+0x7d80/0x7d80
[  484.009381][T12051]  ? lock_chain_count+0x20/0x20
[  484.019218][T12051]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  484.019254][T12051]  ? lockdep_hardirqs_on+0x98/0x150
[  484.030637][T12051]  ? ktime_get_with_offset+0x103/0x330
[  484.030666][T12051]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  484.042318][T12051]  ? ktime_get_real_ts64+0x440/0x440
[  484.042348][T12051]  ? do_raw_spin_unlock+0x121/0x230
[  484.052785][T12051]  ? bpf_obj_name_cpy+0x194/0x1e0
[  484.057810][T12051]  bpf_prog_load+0x10fa/0x1610
[  484.057848][T12051]  ? map_freeze+0x420/0x420
[  484.067072][T12051]  ? __might_fault+0xaa/0x120
[  484.067098][T12051]  ? __might_fault+0xc6/0x120
[  484.076398][T12051]  ? __might_fault+0xaa/0x120
[  484.076421][T12051]  ? bpf_lsm_bpf+0x9/0x10
[  484.076446][T12051]  ? security_bpf+0x7e/0xa0
[  484.076473][T12051]  __sys_bpf+0x5ba/0x890
[  484.085428][T12051]  ? bpf_link_show_fdinfo+0x560/0x560
[  484.094135][T12051]  ? lock_chain_count+0x20/0x20
[  484.094169][T12051]  __x64_sys_bpf+0x7c/0x90
[  484.094194][T12051]  do_syscall_64+0x55/0xb0
[  484.104368][T12051]  ? clear_bhb_loop+0x40/0x90
[  484.113145][T12051]  ? clear_bhb_loop+0x40/0x90
[  484.113175][T12051]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  484.113203][T12051] RIP: 0033:0x7fb74a59e159
[  484.122511][T12051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  484.132768][T12051] RSP: 002b:00007fb74b551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  484.132792][T12051] RAX: ffffffffffffffda RBX: 00007fb74a825fa0 RCX: 00007fb74a59e159
[  484.132807][T12051] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  484.132821][T12051] RBP: 00007fb74a63506b R08: 0000000000000000 R09: 0000000000000000
[  484.132836][T12051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  484.160815][T12051] R13: 00007fb74a826038 R14: 00007fb74a825fa0 R15: 00007ffc79b4b518
[  484.176730][T12051]  </TASK>
[  484.221025][ T6009] net_ratelimit: 18 callbacks suppressed
[  484.666485][T12069] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  484.979470][T12081] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1668'.
[  485.058973][T12083] batman_adv: batadv0: Adding interface: macvtap6
[  485.074090][T12083] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  485.101123][T12083] batman_adv: batadv0: Not using interface macvtap6 (retrying later): interface not active
[  485.965249][T12098] lo speed is unknown, defaulting to 1000
[  486.787347][T12125] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1678'.
[  487.520985][T12124] loop5: detected capacity change from 0 to 32768
[  487.566405][T12124] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1677 (12124)
[  487.670398][T12124] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  487.712173][T12128] warning: `syz.1.1679' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  487.724971][T12124] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  487.737072][T12124] BTRFS info (device loop5): setting nodatacow, compression disabled
[  487.748277][T12124] BTRFS info (device loop5): setting datasum, datacow enabled
[  487.767854][T12124] BTRFS info (device loop5): force clearing of disk cache
[  487.778019][T12124] BTRFS info (device loop5): turning on sync discard
[  487.784786][T12124] BTRFS info (device loop5): enabling ssd optimizations
[  487.791850][T12124] BTRFS info (device loop5): using spread ssd allocation scheme
[  487.804920][T12124] BTRFS info (device loop5): not using ssd optimizations
[  487.812375][T12124] BTRFS info (device loop5): not using spread ssd allocation scheme
[  487.812447][T12124] BTRFS info (device loop5): using free space tree
[  487.932352][T12124] BTRFS info (device loop5): rebuilding free space tree
[  488.208981][T10467] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  488.265266][T12148] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  488.529855][T12152] batman_adv: batadv0: Adding interface: macvtap7
[  488.563869][T12152] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.623717][T12152] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active
[  488.654827][T12154] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  489.267482][T12177] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1687'.
[  489.438087][ T5086] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  489.892823][    C1] net_ratelimit: 26 callbacks suppressed
[  489.926770][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'.
[  490.707910][T12191] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  490.942366][T12203] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1696'.
[  491.324038][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'.
[  491.361595][T12224] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1700'.
[  491.461980][ T9136] hid-generic 0005:046E:0007.0001: unknown main item tag 0x1
[  491.480597][ T9136] hid-generic 0005:046E:0007.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  491.576406][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1701'.
[  491.668570][T12232] lo speed is unknown, defaulting to 1000
[  491.863963][T12243] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1705'.
[  492.308638][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'.
[  492.378997][T12264] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  492.434805][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'.
[  492.467681][ T6019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.512834][ T6019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.668290][T12273] batman_adv: batadv0: Adding interface: macvtap8
[  492.678585][T12273] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  492.718567][T12273] batman_adv: batadv0: Not using interface macvtap8 (retrying later): interface not active
[  492.745208][T12272] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  493.230392][T12292] ªªªªªª: renamed from vlan0 (while UP)
[  494.227663][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'.
[  494.311957][T12293] null_blk: disk nullb1 created
[  494.441370][T12310] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'.
[  494.482657][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1721'.
[  494.740539][T12319] mac80211_hwsim hwsim12 wlan0: left promiscuous mode
[  494.932885][    C0] net_ratelimit: 24 callbacks suppressed
[  495.073286][T12338] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  495.172887][ T9136] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  495.206332][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'.
[  495.248367][T12346] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  495.352409][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'.
[  495.386241][ T9136] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  495.402508][ T9136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  495.424617][ T9136] usb 6-1: config 0 descriptor??
[  495.561748][T12361] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  495.647271][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1747'.
[  495.675927][T12330] batman_adv: batadv0: Adding interface: macvtap5
[  495.688827][T12330] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  495.714552][T12330] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active
[  495.731406][T12367] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  495.927546][ T9136] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  495.950557][   T27] audit: type=1326 audit(1790736407.344:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  495.982965][ T9136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  495.995074][   T27] audit: type=1326 audit(1790736407.354:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.019436][ T9136] [drm:udl_init] *ERROR* Selecting channel failed
[  496.047865][   T27] audit: type=1326 audit(1790736407.354:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.073524][ T9136] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  496.081025][ T9136] [drm] Initialized udl on minor 2
[  496.096067][   T27] audit: type=1326 audit(1790736407.354:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.120324][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  496.128725][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  496.139559][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  496.150389][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  496.160132][   T27] audit: type=1326 audit(1790736407.354:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.186438][ T9136] usb 6-1: USB disconnect, device number 7
[  496.192527][ T9135] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  496.217062][   T27] audit: type=1326 audit(1790736407.384:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26ffd5e98e code=0x7ffc0000
[  496.242502][   T27] audit: type=1326 audit(1790736407.384:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.273546][   T27] audit: type=1326 audit(1790736407.384:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12375 comm="syz.3.1750" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f26ffd9e159 code=0x7ffc0000
[  496.310813][T12373] lo speed is unknown, defaulting to 1000
[  496.853972][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'.
[  497.630513][T12414] batman_adv: batadv0: Adding interface: macvtap9
[  497.661222][T12414] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  497.716263][T12414] batman_adv: batadv0: Not using interface macvtap9 (retrying later): interface not active
[  498.423340][T12430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1763'.
[  498.831658][ T9135] IPVS: starting estimator thread 0...
[  498.938971][T12445] IPVS: using max 20 ests per chain, 48000 per kthread
[  499.679129][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'.
[  499.743090][ T9136] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  499.925070][ T9136] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  499.936123][ T9136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.948262][ T9136] usb 6-1: config 0 descriptor??
[  500.213590][ T5997] net_ratelimit: 51 callbacks suppressed
[  500.251306][T12461] batman_adv: batadv0: Adding interface: macvtap6
[  500.262277][T12461] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  500.296538][T12461] batman_adv: batadv0: Not using interface macvtap6 (retrying later): interface not active
[  500.325995][T12500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'.
[  500.517051][ T9136] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  500.552689][ T9136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  500.567311][ T9136] [drm:udl_init] *ERROR* Selecting channel failed
[  500.598532][ T9136] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  500.621274][ T9136] [drm] Initialized udl on minor 2
[  500.627675][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  500.646541][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  500.673056][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  500.691614][ T9136] usb 6-1: USB disconnect, device number 8
[  500.705013][ T9135] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  500.919126][T12514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'.
[  501.316849][T12533] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode
[  501.496420][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  501.503295][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  501.956479][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1794'.
[  502.482932][ T9135] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  502.624974][T12568] capability: warning: `syz.3.1802' uses 32-bit capabilities (legacy support in use)
[  502.686080][ T9135] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  502.703052][ T9135] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.720063][ T9135] usb 6-1: config 0 descriptor??
[  502.933968][T12583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1805'.
[  503.000986][T12548] batman_adv: batadv0: Adding interface: macvtap7
[  503.017800][T12548] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  503.049671][T12548] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active
[  503.081394][ T9135] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  503.098218][ T9135] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  503.108658][ T9135] [drm:udl_init] *ERROR* Selecting channel failed
[  503.140361][ T9135] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  503.149317][ T9135] [drm] Initialized udl on minor 2
[  503.155893][ T9135] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.166630][ T9135] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  503.175795][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.189805][ T9135] usb 6-1: USB disconnect, device number 9
[  503.212961][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  503.560254][T12607] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  504.765303][T12630] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  505.445996][T12647] batman_adv: batadv0: Adding interface: macvtap10
[  505.452508][T12647] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  505.482884][T12647] batman_adv: batadv0: Not using interface macvtap10 (retrying later): interface not active
[  505.573110][    C1] net_ratelimit: 51 callbacks suppressed
[  506.165082][T12658] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  508.139671][T12711] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  508.624273][T12725] tc_dump_action: action bad kind
[  510.103474][T10609] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  510.285252][T10609] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  510.303387][T10609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.317274][T10609] usb 6-1: config 0 descriptor??
[  510.578352][T12750] batman_adv: batadv0: Adding interface: macvtap8
[  510.616490][T12750] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  510.659876][T12750] batman_adv: batadv0: Not using interface macvtap8 (retrying later): interface not active
[  510.707099][T10609] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  510.719681][T10609] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  510.730980][T10609] [drm:udl_init] *ERROR* Selecting channel failed
[  510.752118][T10609] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  510.768476][T10609] [drm] Initialized udl on minor 2
[  510.783005][T10609] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  510.796294][T10609] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  510.805558][ T5780] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  510.818067][T10609] usb 6-1: USB disconnect, device number 10
[  510.824714][ T5780] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  510.932868][    C0] net_ratelimit: 44 callbacks suppressed
[  511.073627][T12773] bond2: entered promiscuous mode
[  511.396591][T12790] 9pnet_virtio: no channels available for device syz
[  512.474821][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1878'.
[  513.413641][ T6015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.446905][ T6015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.744385][T12837] xt_time: unknown flags 0xf4
[  513.770028][T12837] random: crng reseeded on system resumption
[  513.888709][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'.
[  515.039299][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'.
[  515.360618][T12855] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  515.373916][T12855] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  515.380822][T12855] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  515.777447][T12855] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  515.997823][T12855] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  516.037193][T12855] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  516.086192][ T5814] net_ratelimit: 89 callbacks suppressed
[  516.134408][T12855] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  516.693112][ T5086] Bluetooth: hci1: command 0x0406 tx timeout
[  517.414566][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  517.458155][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1905'.
[  517.649221][T12918] IPVS: length: 217 != 24
[  517.813092][ T5086] Bluetooth: hci3: command 0x0406 tx timeout
[  518.053654][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout
[  519.036841][T12956] batman_adv: batadv0: Adding interface: macvtap11
[  519.050541][T12956] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.083688][T12956] batman_adv: batadv0: Not using interface macvtap11 (retrying later): interface not active
[  519.305029][T12961] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1920'.
[  519.492843][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  519.860478][T12971] Driver unsupported XDP return value 0 on prog  (id 47) dev N/A, expect packet loss!
[  520.133205][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout
[  521.382704][T12998] batman_adv: batadv0: Adding interface: macvtap4
[  521.409539][T12998] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.435081][    C0] net_ratelimit: 77 callbacks suppressed
[  521.492641][T12998] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active
[  522.213190][ T5086] Bluetooth: hci0: command 0x0c1a tx timeout
[  524.053453][ T9136] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  524.264805][ T9136] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  524.289609][ T9136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.319960][ T9136] usb 6-1: config 0 descriptor??
[  524.613826][T13034] batman_adv: batadv0: Adding interface: macvtap9
[  524.631866][T13034] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  524.663882][T13050] 9pnet_virtio: no channels available for device syz
[  524.728767][T13034] batman_adv: batadv0: Not using interface macvtap9 (retrying later): interface not active
[  524.873760][ T9136] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  524.882306][ T9136] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  524.934387][ T9136] [drm:udl_init] *ERROR* Selecting channel failed
[  524.969150][ T9136] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  524.979021][ T9136] [drm] Initialized udl on minor 2
[  524.993840][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  525.009921][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  525.026097][ T5813] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  525.046172][ T9136] usb 6-1: USB disconnect, device number 11
[  525.058501][ T5813] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  525.285784][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'.
[  526.239695][T13101] batman_adv: batadv0: Adding interface: macvtap12
[  526.249990][T13101] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  526.300583][T13101] batman_adv: batadv0: Not using interface macvtap12 (retrying later): interface not active
[  526.459975][ T5993] net_ratelimit: 38 callbacks suppressed
[  528.668360][T13156] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  528.686613][T13156] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  528.762928][ T5813] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  528.957369][ T5813] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  529.013182][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.047978][ T5813] usb 6-1: config 0 descriptor??
[  529.341192][T13143] batman_adv: batadv0: Adding interface: macvtap10
[  529.363998][ T9136] kernel write not supported for file bpf-map (pid: 9136 comm: kworker/1:8)
[  529.402909][T13143] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.445358][T13143] batman_adv: batadv0: Not using interface macvtap10 (retrying later): interface not active
[  529.544589][ T5813] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  529.573696][ T5813] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  529.583280][ T5813] [drm:udl_init] *ERROR* Selecting channel failed
[  529.626022][ T5813] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  529.660553][ T5813] [drm] Initialized udl on minor 2
[  529.677828][ T5813] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  529.698518][ T5813] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  529.738346][ T9136] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  529.760467][ T5813] usb 6-1: USB disconnect, device number 12
[  529.767060][ T9136] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  531.492826][    C1] net_ratelimit: 46 callbacks suppressed
[  531.618195][ T5086] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  531.961002][ T5086] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  533.631613][T13231] overlayfs: failed to clone upperpath
[  533.727585][T13231] netlink: 'syz.0.2010': attribute type 3 has an invalid length.
[  533.843515][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2012'.
[  534.030078][ T5086] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  535.244855][T13275] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2022'.
[  535.498972][ T5086] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  535.928683][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'.
[  536.081148][T13321] Bluetooth: MGMT ver 1.22
[  536.124541][T13323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2036'.
[  536.692827][    C0] net_ratelimit: 34 callbacks suppressed
[  537.083333][ T5086] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  538.357463][ T5086] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  538.836979][T13407] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  539.448983][ T9136] hid-generic 0005:046E:0007.0002: unknown main item tag 0x1
[  539.493100][ T9136] hid-generic 0005:046E:0007.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  539.594344][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'.
[  539.723165][T13429] lo speed is unknown, defaulting to 1000
[  540.221088][T13447] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  540.827922][T13471] bond1: entered promiscuous mode
[  540.922357][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2082'.
[  541.041823][ T9136] libceph: connect (1)[c::]:6789 error -22
[  541.079582][ T9136] libceph: mon0 (1)[c::]:6789 connect error
[  541.136376][ T9136] libceph: connect (1)[c::]:6789 error -22
[  541.169677][ T9136] libceph: mon0 (1)[c::]:6789 connect error
[  541.447098][ T9136] libceph: connect (1)[c::]:6789 error -22
[  541.475478][ T9136] libceph: mon0 (1)[c::]:6789 connect error
[  541.776626][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2089'.
[  541.812127][T13483] ceph: No mds server is up or the cluster is laggy
[  541.892802][    C1] net_ratelimit: 37 callbacks suppressed
[  542.259092][T13523] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2091'.
[  542.625636][T13530] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  542.718443][ T5436] 8021q: adding VLAN 0 to HW filter on device bond1
[  542.741359][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2095'.
[  543.105524][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2098'.
[  543.149472][ T5086] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  543.250645][T13555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2098'.
[  543.344985][ T5814] hid-generic 0005:046E:0007.0003: unknown main item tag 0x1
[  543.345450][T13563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2098'.
[  543.382598][ T5814] hid-generic 0005:046E:0007.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  543.457881][T13563] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2098'.
[  543.487446][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2101'.
[  543.594741][ T5436] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  543.603567][ T5436] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  543.611754][ T5436] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  543.619968][ T5436] netdevsim netdevsim2 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  543.628183][ T5436] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  543.636608][ T5436] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  543.636637][ T5436] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  543.636664][ T5436] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  543.755184][T13571] lo speed is unknown, defaulting to 1000
[  544.336798][T13592] bridge_slave_1: left allmulticast mode
[  544.342470][T13592] bridge_slave_1: left promiscuous mode
[  544.348250][T13592] bridge0: port 2(bridge_slave_1) entered disabled state
[  544.361657][T13592] bridge_slave_0: left allmulticast mode
[  544.368144][T13592] bridge_slave_0: left promiscuous mode
[  544.373889][T13592] bridge0: port 1(bridge_slave_0) entered disabled state
[  544.829754][T13607] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  545.903109][T13638] __nla_validate_parse: 2 callbacks suppressed
[  545.903123][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'.
[  546.072897][T10609] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  546.938521][T10609] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  546.957345][T10609] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.987086][T10609] usb 6-1: config 0 descriptor??
[  547.035366][T13646] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  547.092785][    C1] net_ratelimit: 34 callbacks suppressed
[  547.235143][T10609] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  547.262904][T10609] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  547.279850][T10609] [drm:udl_init] *ERROR* Selecting channel failed
[  547.322289][T10609] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  547.348524][T10609] [drm] Initialized udl on minor 2
[  547.370926][T10609] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  547.389654][T10609] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  547.409082][    T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  547.427955][T10609] usb 6-1: USB disconnect, device number 13
[  547.437731][    T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  547.808461][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'.
[  547.860769][ T5086] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15
[  548.799584][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2120'.
[  548.850929][T13676] lo speed is unknown, defaulting to 1000
[  550.395281][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2135'.
[  550.688770][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2137'.
[  552.102836][T13734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'.
[  552.204727][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2144'.
[  552.213677][    C1] net_ratelimit: 24 callbacks suppressed
[  552.282436][T13733] lo speed is unknown, defaulting to 1000
[  552.293022][T13739] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  553.196440][T13755] syzkaller0: entered promiscuous mode
[  553.201947][T13755] syzkaller0: entered allmulticast mode
[  553.229062][T13755] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.286971][T13755] tipc: Resetting bearer <eth:syzkaller0>
[  553.352503][T13754] tipc: Resetting bearer <eth:syzkaller0>
[  553.391936][T13754] tipc: Disabling bearer <eth:syzkaller0>
[  553.460797][ T5086] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  554.288020][T13773] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  554.895128][T13780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2155'.
[  555.059420][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'.
[  556.738358][T10609] Process accounting resumed
[  556.751716][T13790] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  556.762445][ T5086] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  556.907600][T13800] bond2: entered promiscuous mode
[  557.262830][    C1] net_ratelimit: 31 callbacks suppressed
[  558.327252][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2168'.
[  558.638834][T13811] lo speed is unknown, defaulting to 1000
[  559.057420][ T5086] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  560.362745][    C0] sched: RT throttling activated
[  560.514702][T13829] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  560.588909][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2173'.
[  561.352228][T13854] loop5: detected capacity change from 0 to 2048
[  561.462042][T13854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  561.488481][T13854] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  561.679469][T10467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.206840][ T5086] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  562.292814][    C0] net_ratelimit: 28 callbacks suppressed
[  562.944223][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  563.292813][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  563.374829][T13892] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  563.626126][T13898] bond2: entered promiscuous mode
[  564.161303][T13931] FAULT_INJECTION: forcing a failure.
[  564.161303][T13931] name failslab, interval 1, probability 0, space 0, times 0
[  564.184783][ T5086] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  564.228473][T13931] CPU: 1 PID: 13931 Comm: syz.5.2191 Not tainted syzkaller #0
[  564.235968][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  564.246040][T13931] Call Trace:
[  564.249335][T13931]  <TASK>
[  564.252278][T13931]  dump_stack_lvl+0x18c/0x250
[  564.256985][T13931]  ? show_regs_print_info+0x20/0x20
[  564.262209][T13931]  ? load_image+0x420/0x420
[  564.266737][T13931]  ? __lock_acquire+0x7d80/0x7d80
[  564.271789][T13931]  should_fail_ex+0x394/0x4c0
[  564.276505][T13931]  should_failslab+0x9/0x20
[  564.281033][T13931]  slab_pre_alloc_hook+0x59/0x300
[  564.286089][T13931]  ? security_sk_alloc+0x4b/0x130
[  564.291133][T13931]  ? security_sk_alloc+0x4b/0x130
[  564.296184][T13931]  __kmem_cache_alloc_node+0x53/0x250
[  564.301594][T13931]  ? security_sk_alloc+0x4b/0x130
[  564.306639][T13931]  __kmalloc+0xa7/0x240
[  564.310823][T13931]  ? sk_prot_alloc+0xe7/0x210
[  564.315529][T13931]  security_sk_alloc+0x4b/0x130
[  564.320405][T13931]  sk_prot_alloc+0x101/0x210
[  564.325009][T13931]  ? sk_alloc+0x24/0x350
[  564.329274][T13931]  sk_alloc+0x3a/0x350
[  564.333363][T13931]  __netlink_create+0x6c/0x290
[  564.338229][T13931]  __netlink_kernel_create+0x148/0x7b0
[  564.343711][T13931]  ? rcu_read_lock_any_held+0xb4/0x140
[  564.349189][T13931]  ? rcu_read_lock_bh_held+0x100/0x100
[  564.354669][T13931]  ? netlink_set_err+0x3b0/0x3b0
[  564.359628][T13931]  ? crypto_netlink_init+0xa8/0x150
[  564.364853][T13931]  crypto_netlink_init+0xbd/0x150
[  564.369899][T13931]  ? crypto_alg_match+0x2d0/0x2d0
[  564.374944][T13931]  ? crypto_netlink_exit+0x60/0x60
[  564.380081][T13931]  ? nf_register_net_hook+0xc8/0x190
[  564.385396][T13931]  ? nf_register_net_hooks+0x8f/0x1b0
[  564.390802][T13931]  ops_init+0x391/0x640
[  564.394987][T13931]  setup_net+0x3b6/0xa20
[  564.399254][T13931]  ? copy_net_ns+0x530/0x530
[  564.403863][T13931]  ? copy_net_ns+0x347/0x530
[  564.408468][T13931]  ? down_read_killable+0x1d0/0x340
[  564.413690][T13931]  copy_net_ns+0x361/0x530
[  564.418129][T13931]  create_new_namespaces+0x3ce/0x700
[  564.423451][T13931]  unshare_nsproxy_namespaces+0x11a/0x160
[  564.429195][T13931]  ksys_unshare+0x4fa/0x8f0
[  564.433727][T13931]  ? sighand_ctor+0x50/0x50
[  564.438250][T13931]  ? lock_chain_count+0x20/0x20
[  564.443127][T13931]  ? syscall_enter_from_user_mode+0x25/0x80
[  564.449042][T13931]  __x64_sys_unshare+0x38/0x40
[  564.453827][T13931]  do_syscall_64+0x55/0xb0
[  564.458264][T13931]  ? clear_bhb_loop+0x40/0x90
[  564.462965][T13931]  ? clear_bhb_loop+0x40/0x90
[  564.467669][T13931]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  564.473584][T13931] RIP: 0033:0x7fb74a59e159
[  564.478017][T13931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.497641][T13931] RSP: 002b:00007fb74b551028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  564.506083][T13931] RAX: ffffffffffffffda RBX: 00007fb74a825fa0 RCX: 00007fb74a59e159
[  564.514071][T13931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  564.522055][T13931] RBP: 00007fb74a63506b R08: 0000000000000000 R09: 0000000000000000
[  564.530043][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.538032][T13931] R13: 00007fb74a826038 R14: 00007fb74a825fa0 R15: 00007ffc79b4b518
[  564.546040][T13931]  </TASK>
[  565.069764][T13934] lo speed is unknown, defaulting to 1000
[  565.418665][T13955] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  566.575903][T13975] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  566.607623][T13975] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  566.621547][T13975] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  566.652118][T13975] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  566.670267][T13975] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  566.683241][T13975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  567.025706][T13972] lo speed is unknown, defaulting to 1000
[  567.255450][T13981] bond2: entered promiscuous mode
[  567.533062][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'.
[  567.759395][ T6024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.894850][ T6024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  567.928338][ T5436] 8021q: adding VLAN 0 to HW filter on device bond2
[  568.031009][ T6024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.064980][    C1] net_ratelimit: 35 callbacks suppressed
[  568.189778][ T6024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.853034][ T5086] Bluetooth: hci4: command tx timeout
[  568.930696][ T6024] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  569.015128][ T6024] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  569.086684][ T6024] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  569.677142][ T6024] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  569.704059][T13972] chnl_net:caif_netlink_parms(): no params data found
[  569.814624][ T6024] tipc: Left network mode
[  570.029206][ T6024] bond2: (slave ip6gre1): Releasing backup interface
[  570.043635][ T6024] ip6gre1 (unregistering): left promiscuous mode
[  570.054684][ T6024] bond2: Destroying bond
[  570.307029][ T6024] bond2 (unregistering): Released all slaves
[  570.758102][T13972] bridge0: port 1(bridge_slave_0) entered blocking state
[  570.772259][T13972] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.790438][T13972] bridge_slave_0: entered allmulticast mode
[  570.813063][T13972] bridge_slave_0: entered promiscuous mode
[  570.839572][T14044] syzkaller0: entered promiscuous mode
[  570.853285][T14044] syzkaller0: entered allmulticast mode
[  570.867901][T14039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.939874][ T5086] Bluetooth: hci4: command tx timeout
[  570.988703][T13972] bridge0: port 2(bridge_slave_1) entered blocking state
[  571.019953][T13972] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.040988][T13972] bridge_slave_1: entered allmulticast mode
[  571.057981][T13972] bridge_slave_1: entered promiscuous mode
[  571.174636][T14039] tipc: Resetting bearer <eth:syzkaller0>
[  571.336986][T14038] tipc: Resetting bearer <eth:syzkaller0>
[  571.374902][T14038] tipc: Disabling bearer <eth:syzkaller0>
[  571.648118][T13972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  573.102835][ T5086] Bluetooth: hci4: command tx timeout
[  573.133189][    C1] net_ratelimit: 22 callbacks suppressed
[  573.211159][T13972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  573.700835][T13972] team0: Port device team_slave_0 added
[  573.816732][T13972] team0: Port device team_slave_1 added
[  574.392677][T13972] batman_adv: batadv0: Adding interface: batadv_slave_0
[  574.425339][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.497200][T13972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  574.544434][T13972] batman_adv: batadv0: Adding interface: batadv_slave_1
[  574.551388][T13972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  574.623182][T13972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  574.980494][T13972] hsr_slave_0: entered promiscuous mode
[  575.038548][T13972] hsr_slave_1: entered promiscuous mode
[  575.069068][T13972] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  575.097293][T13972] Cannot create hsr debugfs directory
[  575.172894][ T5086] Bluetooth: hci4: command tx timeout
[  575.363236][T14103] lo speed is unknown, defaulting to 1000
[  575.424094][ T6024] hsr_slave_0: left promiscuous mode
[  575.496883][ T6024] hsr_slave_1: left promiscuous mode
[  575.509252][ T6024] bridge_slave_1: left allmulticast mode
[  575.525283][ T6024] bridge_slave_1: left promiscuous mode
[  575.543098][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.593327][ T6024] bridge_slave_0: left allmulticast mode
[  575.601012][ T6024] bridge_slave_0: left promiscuous mode
[  575.616083][ T6024] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.693910][ T6024] veth1_vlan: left promiscuous mode
[  575.699396][ T6024] veth0_vlan: left promiscuous mode
[  576.716138][ T6024] bond1 (unregistering): Released all slaves
[  577.331614][ T5814] infiniband syz2: ib_query_port failed (-19)
[  577.339205][ T6024] team0 (unregistering): Port device team_slave_1 removed
[  577.398767][ T6024] team0 (unregistering): Port device team_slave_0 removed
[  577.451805][ T6024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  577.516205][ T6024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  577.933696][ T6024] bond0 (unregistering): Released all slaves
[  578.622834][    C1] net_ratelimit: 29 callbacks suppressed
[  578.858321][ T6024] IPVS: stop unused estimator thread 0...
[  578.920946][T13972] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  579.073886][T13972] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  579.455717][T13972] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  579.765805][T13972] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  580.473759][T14157] bond3: entered promiscuous mode
[  580.518081][T13972] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  580.735145][T13972] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  581.178140][T13972] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  581.483426][T13972] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  581.948217][T13972] 8021q: adding VLAN 0 to HW filter on device bond0
[  582.056296][T14192] overlayfs: failed to clone upperpath
[  582.201364][T13972] 8021q: adding VLAN 0 to HW filter on device team0
[  582.249166][ T6024] bridge0: port 1(bridge_slave_0) entered blocking state
[  582.256347][ T6024] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.340040][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.347227][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.194928][T14207] lo speed is unknown, defaulting to 1000
[  583.272461][T13972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.434740][T13972] veth0_vlan: entered promiscuous mode
[  583.488091][T13972] veth1_vlan: entered promiscuous mode
[  583.591746][T13972] veth0_macvtap: entered promiscuous mode
[  583.632569][T13972] veth1_macvtap: entered promiscuous mode
[  583.702547][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.745953][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.760871][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  583.787483][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.808073][T13972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.875274][T13972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  583.892814][    C1] net_ratelimit: 21 callbacks suppressed
[  583.919487][T13972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  583.941221][T13972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.985258][T13972] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  584.018965][T13972] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  584.042779][T13972] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  584.071821][T13972] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  584.556170][ T6019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.577361][ T6019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.759886][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  584.778324][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  586.978605][T13975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  587.003068][T13975] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  587.012452][T13975] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  587.022210][T13975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  587.031306][T13975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  587.039613][T13975] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  587.356357][T14263] lo speed is unknown, defaulting to 1000
[  587.431092][T14273] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  587.911207][ T5436] 8021q: adding VLAN 0 to HW filter on device bond3
[  588.225196][T14267] loop5: detected capacity change from 0 to 40427
[  588.257652][ T5997] netdevsim netdevsim1 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  588.261201][T14267] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  588.300178][ T5997] netdevsim netdevsim1 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  588.315092][T14267] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  588.318214][T14267] F2FS-fs (loop5): invalid crc value
[  588.366253][T14267] F2FS-fs (loop5): Found nat_bits in checkpoint
[  588.399701][ T5997] netdevsim netdevsim1 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  588.499955][T14267] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  588.511151][T14267] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  588.521495][ T5997] netdevsim netdevsim1 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  588.672517][ T5997] tipc: Left network mode
[  588.908831][T14263] chnl_net:caif_netlink_parms(): no params data found
[  588.932809][    C1] net_ratelimit: 61 callbacks suppressed
[  589.173464][T13975] Bluetooth: hci3: command tx timeout
[  589.527240][T14304] lo speed is unknown, defaulting to 1000
[  590.178043][T14263] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.209406][T14263] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.238682][T14263] bridge_slave_0: entered allmulticast mode
[  590.272075][T14263] bridge_slave_0: entered promiscuous mode
[  590.312160][T14263] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.344302][T14263] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.383111][T14263] bridge_slave_1: entered allmulticast mode
[  590.404770][T14263] bridge_slave_1: entered promiscuous mode
[  591.399767][ T5086] Bluetooth: hci3: command tx timeout
[  591.675033][T14263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.852664][T14263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.110882][ T5997] batman_adv: batadv0: Removing interface: macvtap1
[  592.191010][ T5997] batman_adv: batadv0: Removing interface: macvtap2
[  592.269165][ T5997] batman_adv: batadv0: Removing interface: macvtap3
[  592.336163][ T5997] batman_adv: batadv0: Removing interface: macvtap4
[  592.383605][ T5997] batman_adv: batadv0: Removing interface: macvtap5
[  592.434514][ T5997] batman_adv: batadv0: Removing interface: macvtap6
[  592.601483][ T5997] batman_adv: batadv0: Removing interface: macvtap7
[  592.633872][ T5997] batman_adv: batadv0: Removing interface: macvtap8
[  592.656852][ T5997] batman_adv: batadv0: Removing interface: macvtap9
[  592.679206][ T5997] batman_adv: batadv0: Removing interface: macvtap10
[  592.711031][ T5997] batman_adv: batadv0: Removing interface: macvtap11
[  592.737407][ T5997] batman_adv: batadv0: Removing interface: macvtap12
[  592.771137][T14336] loop5: detected capacity change from 0 to 128
[  592.947179][T14337] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  592.963414][T14263] team0: Port device team_slave_0 added
[  592.984586][T14263] team0: Port device team_slave_1 added
[  593.246170][T14263] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.273214][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.311033][T14263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.394209][T14263] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.408700][T14263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  593.443391][ T5086] Bluetooth: hci3: command tx timeout
[  593.520389][T14263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.821961][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  593.833332][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  593.865645][ T5997] bond2 (unregistering): Released all slaves
[  594.320579][ T5997] bond1 (unregistering): Released all slaves
[  594.376142][    C1] net_ratelimit: 37 callbacks suppressed
[  595.153953][ T5997] team0 (unregistering): Port device team_slave_1 removed
[  595.211296][ T5997] team0 (unregistering): Port device team_slave_0 removed
[  595.270394][ T5997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  595.330039][ T5997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  595.507594][ T5086] Bluetooth: hci3: command tx timeout
[  595.758455][ T5997] bond0 (unregistering): Released all slaves
[  595.808533][ T6015] smc: removing ib device s
z1
[  595.879734][T14263] hsr_slave_0: entered promiscuous mode
[  595.920365][T14263] hsr_slave_1: entered promiscuous mode
[  595.939876][T14263] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  595.955281][T14263] Cannot create hsr debugfs directory
[  596.082385][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'.
[  596.421003][T14361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2260'.
[  597.618635][T14263] netdevsim netdevsim1 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.822110][T14263] netdevsim netdevsim1 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.927830][T14263] netdevsim netdevsim1 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  597.948973][T14369] loop5: detected capacity change from 0 to 40427
[  597.981124][T14369] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  598.013922][T14369] F2FS-fs (loop5): invalid crc value
[  598.038350][T14369] F2FS-fs (loop5): Found nat_bits in checkpoint
[  598.291002][T14369] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  598.305630][T14263] netdevsim netdevsim1 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  599.266784][T14263] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  599.336127][T14263] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  599.380937][T14263] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  599.429470][T14263] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  599.732804][    C1] net_ratelimit: 31 callbacks suppressed
[  599.861388][T14263] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.951189][T14263] 8021q: adding VLAN 0 to HW filter on device team0
[  600.017683][T10353] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.024843][T10353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.127683][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.136140][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state
[  600.312265][T14418] bond1: entered promiscuous mode
[  601.677742][T14263] 8021q: adding VLAN 0 to HW filter on device batadv0
[  601.988386][T14263] veth0_vlan: entered promiscuous mode
[  602.067087][T14263] veth1_vlan: entered promiscuous mode
[  602.080920][T14415] loop5: detected capacity change from 0 to 40427
[  602.141654][T14415] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  602.202855][T14415] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  602.280857][T14415] F2FS-fs (loop5): invalid crc value
[  602.301143][T14263] veth0_macvtap: entered promiscuous mode
[  602.342539][T14415] F2FS-fs (loop5): Found nat_bits in checkpoint
[  602.392479][T14263] veth1_macvtap: entered promiscuous mode
[  602.527359][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.599695][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.649925][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.677551][T14415] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  602.695137][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.715590][T14415] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  602.740869][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  602.798870][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.844775][T14263] batman_adv: batadv0: Interface activated: batadv_slave_0
[  602.910047][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  602.973212][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  602.991254][T14263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  603.004922][T14263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.016815][T14263] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.048118][T14263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.072881][T14263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.081784][T14263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.098753][T14263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  603.328377][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.352784][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.517460][ T5997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  603.540499][ T5997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  603.951253][T14484] loop5: detected capacity change from 0 to 128
[  603.996691][T14396] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  604.671000][T14499] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  604.932803][    C1] net_ratelimit: 68 callbacks suppressed
[  604.993271][ T5780] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  605.186517][ T5780] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  605.201387][ T5780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  605.212138][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.220515][ T5780] usb 2-1: Product: syz
[  605.225127][ T5780] usb 2-1: Manufacturer: syz
[  605.229742][ T5780] usb 2-1: SerialNumber: syz
[  605.853438][ T5780] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  605.867905][ T5780] cdc_ncm 2-1:1.0: bind() failure
[  605.888756][ T5780] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  605.913134][ T5780] cdc_ncm 2-1:1.1: bind() failure
[  605.930697][T14515] loop5: detected capacity change from 0 to 40427
[  605.938613][ T5780] usb 2-1: USB disconnect, device number 2
[  605.954364][T14515] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  605.987846][T14515] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  606.031387][T14515] F2FS-fs (loop5): invalid crc value
[  606.175602][T14515] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  606.182671][T14515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  606.288549][ T6009] bio_check_eod: 2 callbacks suppressed
[  606.288559][ T6009] kworker/u4:24: attempt to access beyond end of device
[  606.288559][ T6009] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  606.349407][ T6009] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  609.288466][T14543] tipc: Started in network mode
[  609.323682][T14543] tipc: Node identity 4, cluster identity 4711
[  609.329871][T14543] tipc: Node number set to 4
[  609.339735][T14543] tipc: Enabled bearer <eth:syz_tun>, priority 0
[  609.367207][T14543] tipc: Resetting bearer <eth:syz_tun>
[  609.514931][T14543] tipc: Disabling bearer <eth:syz_tun>
[  609.716697][ T9135] hid-generic 0005:046E:0007.0004: unknown main item tag 0x1
[  609.735906][ T9135] hid-generic 0005:046E:0007.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  610.052833][    C0] net_ratelimit: 61 callbacks suppressed
[  610.651066][T14569] loop5: detected capacity change from 0 to 512
[  610.677600][T14569] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  610.718736][T14569] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  610.730331][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2304'.
[  610.782162][T14569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  610.792714][T14569] System zones: 1-12
[  610.798168][T14569] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.2301: bad orphan inode 131072
[  610.832070][T14569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.054626][T14569] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3388598089 (433740555392 ns) > initial count (348709850752 ns). Using initial count to start timer.
[  611.099208][T14585] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  611.128938][ T9135] hid-generic 0005:046E:0007.0005: unknown main item tag 0x1
[  611.159411][ T9135] hid-generic 0005:046E:0007.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  611.326577][T10467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.722401][T14599] loop5: detected capacity change from 0 to 256
[  611.804212][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2314'.
[  611.909623][T14599] FAT-fs (loop5): Directory bread(block 64) failed
[  611.942913][T14599] FAT-fs (loop5): Directory bread(block 65) failed
[  611.963503][T14599] FAT-fs (loop5): Directory bread(block 66) failed
[  611.986584][T14599] FAT-fs (loop5): Directory bread(block 67) failed
[  612.015285][T14599] FAT-fs (loop5): Directory bread(block 68) failed
[  612.035382][T14599] FAT-fs (loop5): Directory bread(block 69) failed
[  612.058362][T14599] FAT-fs (loop5): Directory bread(block 70) failed
[  612.087268][T14599] FAT-fs (loop5): Directory bread(block 71) failed
[  612.113116][T14599] FAT-fs (loop5): Directory bread(block 72) failed
[  612.119667][T14599] FAT-fs (loop5): Directory bread(block 73) failed
[  612.192472][T14610] loop3: detected capacity change from 0 to 256
[  612.267950][T14610] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  614.328459][T13975] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  614.346861][T14620] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  614.371072][T13975] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  614.380099][T13975] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  614.393526][T13975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  614.416386][T13975] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  614.433778][T13975] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  614.916757][ T6015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.092835][    C0] net_ratelimit: 38 callbacks suppressed
[  615.163001][ T5086] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  615.264429][T14615] loop5: detected capacity change from 0 to 40427
[  615.283002][T14615] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  615.290751][T14615] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  615.306463][T14615] F2FS-fs (loop5): invalid crc value
[  615.319360][ T6015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.352334][T14615] F2FS-fs (loop5): Found nat_bits in checkpoint
[  615.505767][ T6015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.623089][T14615] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  615.630787][T14615] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  615.703859][ T6015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.139799][ T6015] netdevsim netdevsim0 eth9: set [0, 0] type 1 family 0 port 8472 - 0
[  616.245531][ T6015] netdevsim netdevsim0 eth10: set [0, 0] type 1 family 0 port 8472 - 0
[  616.386728][ T6015] netdevsim netdevsim0 eth11: set [0, 0] type 1 family 0 port 8472 - 0
[  616.450959][T14649] loop1: detected capacity change from 0 to 1024
[  616.468439][ T5086] Bluetooth: hci1: command tx timeout
[  616.485389][ T6015] netdevsim netdevsim0 eth12: set [0, 0] type 1 family 0 port 8472 - 0
[  616.556125][T14649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  616.643962][T14649] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  616.742981][ T6015] tipc: Left network mode
[  616.794077][   T27] audit: type=1800 audit(1790736528.194:24): pid=14649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2327" name="file1" dev="loop1" ino=15 res=0 errno=0
[  616.821295][T14649] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.2327: lblock 0 mapped to illegal pblock 0 (length 6)
[  616.885382][   T27] audit: type=1800 audit(1790736528.224:25): pid=14649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2327" name="file1" dev="loop1" ino=15 res=0 errno=0
[  616.908701][T14649] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.2327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  616.950430][T14661] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.2327: lblock 0 mapped to illegal pblock 0 (length 1)
[  616.971508][T14661] EXT4-fs error (device loop1): ext4_ext_remove_space:2957: inode #15: comm syz.1.2327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  617.197070][T14263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  617.237402][T14619] chnl_net:caif_netlink_parms(): no params data found
[  617.572391][T14680] tipc: Enabling of bearer <eth:syz_tun> rejected, failed to enable media
[  617.633896][ T5813] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  617.677227][T14685] loop3: detected capacity change from 0 to 512
[  617.833691][ T5813] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.872947][ T5813] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00
[  617.896648][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.935429][ T5813] usb 2-1: Product: syz
[  617.939615][ T5813] usb 2-1: Manufacturer: syz
[  617.950395][ T5813] usb 2-1: SerialNumber: syz
[  618.013509][ T5813] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  618.029533][ T5813] cdc_wdm 2-1:1.0: Unknown control protocol
[  618.210652][ T5813] usb 2-1: USB disconnect, device number 3
[  618.335526][T14619] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.351406][T14619] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.366251][T14619] bridge_slave_0: entered allmulticast mode
[  618.374247][T14619] bridge_slave_0: entered promiscuous mode
[  618.386903][T14619] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.396300][T14619] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.405023][T14619] bridge_slave_1: entered allmulticast mode
[  618.425369][T14619] bridge_slave_1: entered promiscuous mode
[  618.540546][ T5086] Bluetooth: hci1: command tx timeout
[  618.559123][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.572831][T10609] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  618.678642][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.742866][T10609] usb 6-1: device descriptor read/64, error -71
[  618.908971][T14619] team0: Port device team_slave_0 added
[  618.994464][T14619] team0: Port device team_slave_1 added
[  619.017798][T10609] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  619.669988][ T6015] batman_adv: batadv0: Removing interface: macvtap1
[  620.196195][ T6015] batman_adv: batadv0: Removing interface: macvtap2
[  620.286365][ T6015] batman_adv: batadv0: Removing interface: macvtap3
[  620.393234][ T6015] batman_adv: batadv0: Removing interface: macvtap4
[  620.500337][    C0] net_ratelimit: 33 callbacks suppressed
[  620.573173][T10609] usb 6-1: device descriptor read/64, error -71
[  620.615853][ T5086] Bluetooth: hci1: command tx timeout
[  620.651828][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  620.701090][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  620.728257][T10609] usb usb6-port1: attempt power cycle
[  620.772715][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  620.846379][ T6015] hsr_slave_0: left promiscuous mode
[  620.885334][ T6015] hsr_slave_1: left promiscuous mode
[  620.891663][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  620.915988][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_0
[  620.936700][ T6015] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  620.955279][ T6015] batman_adv: batadv0: Removing interface: batadv_slave_1
[  621.029157][ T6015] veth1_macvtap: left promiscuous mode
[  621.042858][ T6015] veth0_macvtap: left promiscuous mode
[  621.048445][ T6015] veth1_vlan: left promiscuous mode
[  621.064209][ T6015] veth0_vlan: left promiscuous mode
[  621.173485][T10609] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  621.235067][T10609] usb 6-1: device descriptor read/8, error -71
[  621.544716][ T6015] bond2 (unregistering): Released all slaves
[  621.991592][T14709] loop1: detected capacity change from 0 to 40427
[  622.003635][ T6015] bond1 (unregistering): (slave dummy0): Releasing backup interface
[  622.013853][T14709] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  622.021662][T14709] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  622.036144][ T6015] bond1 (unregistering): Released all slaves
[  622.047501][T14709] F2FS-fs (loop1): invalid crc value
[  622.074816][T14709] F2FS-fs (loop1): Found nat_bits in checkpoint
[  622.288164][T14709] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  622.329362][T14709] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  622.702856][ T5086] Bluetooth: hci1: command tx timeout
[  624.389618][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  624.396794][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  625.021684][ T6015] team0 (unregistering): Port device team_slave_1 removed
[  625.103827][ T6015] team0 (unregistering): Port device team_slave_0 removed
[  625.160415][ T6015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  625.226794][ T6015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  625.662825][    C0] net_ratelimit: 50 callbacks suppressed
[  625.720312][ T6015] bond0 (unregistering): Released all slaves
[  625.764306][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  625.771267][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  625.802324][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  625.903155][T14742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2342'.
[  625.928729][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'.
[  626.832954][ T5813] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  626.951859][T14619] hsr_slave_0: entered promiscuous mode
[  627.193251][T14619] hsr_slave_1: entered promiscuous mode
[  627.292848][ T5813] usb 6-1: Using ep0 maxpacket: 32
[  627.334747][ T5813] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  627.349905][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.360884][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  627.374389][ T5813] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  627.383702][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.401407][ T5813] usb 6-1: config 0 descriptor??
[  627.739779][ T6015] IPVS: stop unused estimator thread 0...
[  627.836373][T14773] loop1: detected capacity change from 0 to 128
[  627.910674][ T5813] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x0
[  627.947252][ T5813] hid-led 0003:0FC5:B080.0006: unknown main item tag 0x4
[  628.251370][ T5813] hid-led: probe of 0003:0FC5:B080.0006 failed with error -32
[  628.290935][ T5813] usb 6-1: USB disconnect, device number 18
[  628.297468][T14619] netdevsim netdevsim0 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  628.460008][T14619] netdevsim netdevsim0 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  628.596153][T14619] netdevsim netdevsim0 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  628.623204][ T9136] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  628.834945][ T9136] usb 2-1: Using ep0 maxpacket: 32
[  628.939865][T14797] loop1: detected capacity change from 0 to 1024
[  629.010894][T14619] netdevsim netdevsim0 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  629.038098][T14797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  629.087943][T14804] loop5: detected capacity change from 0 to 16
[  629.214260][T14804] erofs: (device loop5): mounted with root inode @ nid 36.
[  629.826269][ T9136] usb 2-1: unable to get BOS descriptor or descriptor too short
[  629.884695][ T9136] usb 2-1: unable to read config index 0 descriptor/start: -71
[  629.892301][ T9136] usb 2-1: can't read configurations, error -71
[  629.929308][T14619] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  629.964956][T14263] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.056255][T14619] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  630.124982][T14619] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  630.138844][T14822] loop1: detected capacity change from 0 to 256
[  630.201509][T14619] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  630.283748][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  630.514366][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  630.535694][    T9] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  630.572945][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.625932][    T9] usb 6-1: config 0 descriptor??
[  630.642413][T14619] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.692393][T14619] 8021q: adding VLAN 0 to HW filter on device team0
[  630.746039][T10745] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.753204][T10745] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.777313][    C0] net_ratelimit: 31 callbacks suppressed
[  630.820344][T10745] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.827560][T10745] bridge0: port 2(bridge_slave_1) entered forwarding state
[  632.122278][T14619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  632.362347][T14619] veth0_vlan: entered promiscuous mode
[  632.528959][T14619] veth1_vlan: entered promiscuous mode
[  632.608318][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  632.622930][    T9] usbhid: probe of 6-1:0.0 failed with error -71
[  632.663208][    T9] usb 6-1: USB disconnect, device number 19
[  632.924174][T14619] veth0_macvtap: entered promiscuous mode
[  632.970429][T14619] veth1_macvtap: entered promiscuous mode
[  633.090618][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  633.125319][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.140849][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  633.155034][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.174192][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  633.208040][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.235783][T14619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  633.269723][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.282899][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  633.307441][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.319157][T14619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  633.332466][T14619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  633.364172][T14619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  633.410134][T14619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  633.435804][T14619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  633.446257][T14619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  633.458220][T14619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  633.527009][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  633.568869][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  633.620474][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  633.669147][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  633.696208][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.726223][    T9] usb 6-1: config 0 descriptor??
[  633.920389][ T6015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  633.954317][ T6015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.105085][ T6009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.118753][ T6009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.195370][    T9] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  634.248190][    T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  634.488301][T10609] usb 6-1: USB disconnect, device number 20
[  635.419184][T14929] loop3: detected capacity change from 0 to 512
[  635.648959][T14929] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.2376: iget: bad i_size value: 38620345925642
[  635.893608][    C1] net_ratelimit: 66 callbacks suppressed
[  636.547187][T14929] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.2376: couldn't read orphan inode 15 (err -117)
[  636.579620][T14929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  636.724547][T14948] loop0: detected capacity change from 0 to 256
[  638.184254][T14948] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  638.234717][T13972] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.628449][T14986] loop3: detected capacity change from 0 to 512
[  641.012792][    C0] net_ratelimit: 27 callbacks suppressed
[  641.552823][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  642.131697][ T5814] usb 1-1: Using ep0 maxpacket: 32
[  642.460432][T15001] loop3: detected capacity change from 0 to 512
[  642.614573][T15001] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  642.725451][ T5814] usb 1-1: unable to get BOS descriptor or descriptor too short
[  642.735673][ T5814] usb 1-1: unable to read config index 0 descriptor/start: -71
[  642.747145][ T5814] usb 1-1: can't read configurations, error -71
[  642.803384][T15001] loop3: detected capacity change from 0 to 1024
[  642.813116][T15001] EXT4-fs: Mount option(s) incompatible with ext3
[  645.819585][T15024] loop3: detected capacity change from 0 to 256
[  645.938834][T15024] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  646.062841][ T9134] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  646.266713][ T9134] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  646.285584][ T9134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.311965][ T9134] usb 6-1: config 0 descriptor??
[  646.452803][    C1] net_ratelimit: 59 callbacks suppressed
[  646.594819][T15037] loop0: detected capacity change from 0 to 40427
[  646.625744][T15037] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff
[  646.663330][T15037] F2FS-fs (loop0): invalid crc value
[  646.711515][T15037] F2FS-fs (loop0): Found nat_bits in checkpoint
[  646.917428][T15037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  647.164522][T15052] loop1: detected capacity change from 0 to 512
[  647.970569][ T9134] usb 6-1: Cannot set autoneg
[  647.982996][ T9134] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71
[  648.010496][ T9134] usb 6-1: USB disconnect, device number 21
[  648.044437][T14619] syz-executor: attempt to access beyond end of device
[  648.044437][T14619] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  648.067113][T14619] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  648.154944][T14619] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  650.227761][T15073] loop1: detected capacity change from 0 to 128
[  650.602416][T15082] loop1: detected capacity change from 0 to 512
[  650.972699][T15085] loop1: detected capacity change from 0 to 256
[  651.035918][T15085] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc1ffa985, utbl_chksum : 0xe619d30d)
[  651.492798][    C1] net_ratelimit: 47 callbacks suppressed
[  651.511206][T15105] loop3: detected capacity change from 0 to 128
[  653.559884][T15113] loop3: detected capacity change from 0 to 512
[  654.306714][T15137] loop0: detected capacity change from 0 to 128
[  654.382555][T15138] loop3: detected capacity change from 0 to 512
[  654.460770][T14396] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  656.560875][    C1] net_ratelimit: 33 callbacks suppressed
[  656.830791][T15146] loop0: detected capacity change from 0 to 4096
[  656.845901][T15146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  656.897252][T15146] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  656.919175][T15146] EXT4-fs (loop0): mount failed
[  657.033006][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  657.332927][    T9] usb 2-1: Using ep0 maxpacket: 32
[  657.706269][T15169] loop3: detected capacity change from 0 to 8192
[  657.718894][T15172] loop0: detected capacity change from 0 to 512
[  658.693237][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  658.702366][    T9] usb 2-1: unable to read config index 0 descriptor/start: -71
[  658.722888][    T9] usb 2-1: can't read configurations, error -71
[  659.245709][T15191] bond1: entered promiscuous mode
[  660.571010][T15210] loop0: detected capacity change from 0 to 512
[  661.838066][    C1] net_ratelimit: 59 callbacks suppressed
[  663.792380][T15227] bond1: entered promiscuous mode
[  663.963538][T15231] loop5: detected capacity change from 0 to 512
[  664.033212][T14396] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  666.299010][T15254] loop0: detected capacity change from 0 to 256
[  666.381812][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2468'.
[  666.852803][    C0] net_ratelimit: 28 callbacks suppressed
[  667.454083][T15263] bond4: entered promiscuous mode
[  667.780376][T15278] loop1: detected capacity change from 0 to 512
[  668.797498][T15290] loop5: detected capacity change from 0 to 1024
[  668.855784][T15290] EXT4-fs (loop5): DAX unsupported by block device.
[  668.958548][T15295] fuse: Unknown parameter '00000000000000000000'
[  669.094876][ T9134] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  669.782934][T15317] bond5: entered promiscuous mode
[  671.318981][ T5436] 8021q: adding VLAN 0 to HW filter on device bond4
[  671.494278][T15332] loop0: detected capacity change from 0 to 512
[  671.892912][    C1] net_ratelimit: 42 callbacks suppressed
[  672.651491][T15348] ip6gretap0: entered promiscuous mode
[  673.123454][   T27] audit: type=1107 audit(1790736584.524:26): pid=15365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  673.283255][T10609] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  674.702592][T10609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.713691][T10609] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  674.733731][T10609] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  674.746627][T10609] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  674.755807][T10609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.785449][T10609] usb 2-1: config 0 descriptor??
[  674.818667][T15377] loop0: detected capacity change from 0 to 512
[  675.058676][ T5436] 8021q: adding VLAN 0 to HW filter on device bond5
[  675.526681][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.565233][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.584756][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.591487][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.611578][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.620537][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.700733][T15392] loop0: detected capacity change from 0 to 1024
[  675.711687][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.724976][T15392] EXT4-fs: quotafile must be on filesystem root
[  675.740519][T15389] bond6: entered promiscuous mode
[  675.784840][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.791546][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.852131][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.891670][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  675.961815][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.032932][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.041016][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.052158][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.059641][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.066905][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.073831][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  676.178666][T15397] loop5: detected capacity change from 0 to 512
[  676.446450][T15397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  677.092813][    C1] net_ratelimit: 37 callbacks suppressed
[  677.506808][T15407] FAULT_INJECTION: forcing a failure.
[  677.506808][T15407] name failslab, interval 1, probability 0, space 0, times 0
[  677.531979][T15409] loop3: detected capacity change from 0 to 16
[  677.576933][T15409] erofs: (device loop3): mounted with root inode @ nid 36.
[  677.597177][T15407] CPU: 1 PID: 15407 Comm: syz.1.2500 Not tainted syzkaller #0
[  677.604678][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  677.614750][T15407] Call Trace:
[  677.618040][T15407]  <TASK>
[  677.620983][T15407]  dump_stack_lvl+0x18c/0x250
[  677.625685][T15407]  ? show_regs_print_info+0x20/0x20
[  677.630905][T15407]  ? load_image+0x420/0x420
[  677.635429][T15407]  ? __lock_acquire+0x7d80/0x7d80
[  677.640478][T15407]  should_fail_ex+0x394/0x4c0
[  677.645181][T15407]  should_failslab+0x9/0x20
[  677.649708][T15407]  slab_pre_alloc_hook+0x59/0x300
[  677.654760][T15407]  ? security_sk_alloc+0x4b/0x130
[  677.659796][T15407]  ? security_sk_alloc+0x4b/0x130
[  677.664831][T15407]  __kmem_cache_alloc_node+0x53/0x250
[  677.670230][T15407]  ? security_sk_alloc+0x4b/0x130
[  677.675269][T15407]  __kmalloc+0xa7/0x240
[  677.679444][T15407]  ? sk_prot_alloc+0xe7/0x210
[  677.684136][T15407]  security_sk_alloc+0x4b/0x130
[  677.689005][T15407]  sk_prot_alloc+0x101/0x210
[  677.693607][T15407]  ? sk_alloc+0x24/0x350
[  677.697864][T15407]  sk_alloc+0x3a/0x350
[  677.701947][T15407]  __netlink_create+0x6c/0x290
[  677.706733][T15407]  __netlink_kernel_create+0x148/0x7b0
[  677.712215][T15407]  ? netlink_set_err+0x3b0/0x3b0
[  677.717172][T15407]  ? nfnl_pernet+0x23/0x230
[  677.721694][T15407]  ? nfnl_pernet+0x23/0x230
[  677.726208][T15407]  ? nfnetlink_net_init+0xb2/0x150
[  677.731336][T15407]  nfnetlink_net_init+0xc9/0x150
[  677.736269][T15407]  ? nfnetlink_broadcast+0x70/0x70
[  677.741397][T15407]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  677.746956][T15407]  ? nfnetlink_rcv+0x2490/0x2490
[  677.751906][T15407]  ? nfnetlink_bind+0x3c0/0x3c0
[  677.756786][T15407]  ops_init+0x391/0x640
[  677.760965][T15407]  setup_net+0x3b6/0xa20
[  677.765228][T15407]  ? copy_net_ns+0x530/0x530
[  677.769837][T15407]  ? copy_net_ns+0x347/0x530
[  677.774440][T15407]  ? down_read_killable+0x1d0/0x340
[  677.779659][T15407]  copy_net_ns+0x361/0x530
[  677.784099][T15407]  create_new_namespaces+0x3ce/0x700
[  677.789416][T15407]  unshare_nsproxy_namespaces+0x11a/0x160
[  677.795158][T15407]  ksys_unshare+0x4fa/0x8f0
[  677.799685][T15407]  ? sighand_ctor+0x50/0x50
[  677.804205][T15407]  ? lock_chain_count+0x20/0x20
[  677.809079][T15407]  ? syscall_enter_from_user_mode+0x25/0x80
[  677.814971][T15407]  __x64_sys_unshare+0x38/0x40
[  677.814997][T15407]  do_syscall_64+0x55/0xb0
[  677.815019][T15407]  ? clear_bhb_loop+0x40/0x90
[  677.815045][T15407]  ? clear_bhb_loop+0x40/0x90
[  677.815078][T15407]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  677.815101][T15407] RIP: 0033:0x7f31ff59e159
[  677.815121][T15407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  677.815139][T15407] RSP: 002b:00007f32003be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  677.815161][T15407] RAX: ffffffffffffffda RBX: 00007f31ff825fa0 RCX: 00007f31ff59e159
[  677.815178][T15407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  677.815192][T15407] RBP: 00007f31ff63506b R08: 0000000000000000 R09: 0000000000000000
[  677.815206][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  677.815219][T15407] R13: 00007f31ff826038 R14: 00007f31ff825fa0 R15: 00007fffa4d3fa18
[  677.815251][T15407]  </TASK>
[  678.074527][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.081297][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.088118][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.094981][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.101696][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.115602][T15409] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  678.144094][T10609] lua 0003:1E7D:2C2E.0008: unknown main item tag 0x0
[  678.151452][T10467] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  678.180183][T15409] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  678.225397][T10609] lua 0003:1E7D:2C2E.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  678.339611][T10609] usb 2-1: USB disconnect, device number 8
[  680.242482][T15431] loop3: detected capacity change from 0 to 512
[  681.611852][T15446] bond7: entered promiscuous mode
[  682.212790][    C1] net_ratelimit: 42 callbacks suppressed
[  682.216642][T10609] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  682.412586][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'.
[  682.655624][T10609] usb 2-1: Using ep0 maxpacket: 32
[  682.686517][T10609] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  682.696686][T15466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2513'.
[  682.725651][T10609] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  682.767915][T10609] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  682.808916][T10609] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  682.847611][T10609] usb 2-1: config 0 interface 0 has no altsetting 0
[  682.870960][T10609] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  682.895035][T10609] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  682.919160][T10609] usb 2-1: Product: syz
[  682.931664][T10609] usb 2-1: Manufacturer: syz
[  682.942213][T10609] usb 2-1: SerialNumber: syz
[  682.967131][T10609] usb 2-1: config 0 descriptor??
[  682.999318][T10609] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  683.037099][T10609] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  683.237037][T15461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.272637][T15461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.465611][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  683.472240][T10609] usb 2-1: USB disconnect, device number 9
[  683.487219][T15461] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  683.542088][T15475] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19
[  683.571358][T10609] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  684.102892][T10609] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  684.333312][T10609] usb 2-1: Using ep0 maxpacket: 32
[  684.392485][T10609] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  684.431748][T10609] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  684.459542][T10609] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  684.489319][T14895] hid-generic 0005:046E:0007.0009: unknown main item tag 0x1
[  684.503132][T10609] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  684.526850][T14895] hid-generic 0005:046E:0007.0009: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1
[  684.543374][T10609] usb 2-1: config 0 interface 0 has no altsetting 0
[  684.573690][T10609] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  684.593729][ T5814] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  684.603082][T10609] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  684.630428][T10609] usb 2-1: Product: syz
[  684.643404][T10609] usb 2-1: Manufacturer: syz
[  684.656774][T10609] usb 2-1: SerialNumber: syz
[  684.672660][T10609] usb 2-1: config 0 descriptor??
[  684.695300][T10609] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  684.714535][T10609] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  684.807901][ T5814] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[  684.826031][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.837441][ T5814] usb 4-1: Product: syz
[  684.844557][ T5814] usb 4-1: Manufacturer: syz
[  684.849181][ T5814] usb 4-1: SerialNumber: syz
[  684.865935][ T5814] usb 4-1: USB2VGA dongle found at address 5
[  684.875976][ T5814] usb 4-1: Allocated 8 output buffers
[  684.892607][ T5814] usb 4-1: Failed to early initialize device
[  684.912177][T15461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  684.946989][T15461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.976654][ T9134] usb 2-1: USB disconnect, device number 10
[  684.992420][ T9134] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  685.112588][ T9135] usb 4-1: USB disconnect, device number 5
[  685.217820][ T5436] 8021q: adding VLAN 0 to HW filter on device bond6
[  685.612889][ T5814] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  685.652124][T15524] bond8: entered promiscuous mode
[  685.820504][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  685.827347][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  685.844283][ T5814] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  685.871944][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  685.909450][ T5814] usb 1-1: config 0 descriptor??
[  686.046887][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  686.087766][ T5436] 8021q: adding VLAN 0 to HW filter on device bond7
[  686.151890][ T5814] hackrf 1-1:0.0: usb_control_msg() failed -32 request 0e
[  686.168270][ T5814] hackrf 1-1:0.0: Could not detect board
[  686.186268][ T5814] hackrf: probe of 1-1:0.0 failed with error -32
[  686.218247][ T5814] usb 1-1: USB disconnect, device number 11
[  686.253001][    T9] usb 2-1: Using ep0 maxpacket: 32
[  686.262015][    T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  686.279117][    T9] usb 2-1: config 0 has no interface number 0
[  686.289229][   T27] audit: type=1800 audit(1790736597.694:27): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2519" name="file1" dev="sda1" ino=2054 res=0 errno=0
[  686.316228][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  686.334882][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.346871][    T9] usb 2-1: Product: syz
[  686.351117][    T9] usb 2-1: Manufacturer: syz
[  686.360078][    T9] usb 2-1: SerialNumber: syz
[  686.376934][    T9] usb 2-1: config 0 descriptor??
[  686.390984][    T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  686.614870][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  686.650621][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  686.823458][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.863264][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.884178][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.905193][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'.
[  686.921954][T15550] loop5: detected capacity change from 0 to 256
[  686.929487][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.972312][T15550] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  687.042552][T15553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2524'.
[  687.171174][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  687.197791][T14895] usb 2-1: USB disconnect, device number 11
[  687.223174][T14895] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  687.252858][    C0] net_ratelimit: 36 callbacks suppressed
[  687.275950][T14895] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  687.318104][T14895] quatech2 2-1:0.51: device disconnected
[  687.648862][T15560] loop0: detected capacity change from 0 to 512
[  687.710692][T15325] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  688.472980][ T9134] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  688.515444][ T5436] 8021q: adding VLAN 0 to HW filter on device bond8
[  688.787457][ T9134] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  688.920549][ T9134] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  689.011572][ T9134] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00
[  689.592850][ T9134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.201595][ T9134] usb 6-1: probing VID:PID(0424:012C)   
[  690.316762][ T9134] usb 6-1: vub300 testing BULK IN EndPoint(0) 81
[  690.353052][ T9134] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02
[  690.366507][ T9134] usb 6-1: vub300 testing BULK IN EndPoint(2) 83
[  690.389487][ T9134] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04
[  690.417343][ T9134] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83
[  690.638211][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.672329][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.702299][ T9134] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets
[  690.912706][ T9134] usb 6-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted
[  691.202865][T14895] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  691.322886][ T9135] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  691.394262][T14895] usb 4-1: unable to get BOS descriptor or descriptor too short
[  691.408376][T14895] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  691.420975][T14895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.435133][T14895] usb 4-1: Product: syz
[  691.439325][T14895] usb 4-1: Manufacturer: syz
[  691.448567][T14895] usb 4-1: SerialNumber: syz
[  691.539401][ T9135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.555081][ T9135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  691.567665][ T9135] usb 1-1: New USB device found, idVendor=056a, idProduct=3f3b, bcdDevice= 0.00
[  691.582031][ T9135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  691.592591][ T9136] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  691.786154][ T9136] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  691.806333][ T9136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.820743][ T9136] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  691.849965][ T9136] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  691.868039][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.880712][ T9136] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  691.890092][ T9136] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  691.898374][ T9136] usb 2-1: Product: syz
[  691.902871][ T9136] usb 2-1: Manufacturer: syz
[  691.913950][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.937422][ T9136] cdc_wdm 2-1:1.0: skipping garbage
[  691.947499][ T9136] cdc_wdm 2-1:1.0: skipping garbage
[  691.974579][ T9134] usb 6-1: USB disconnect, device number 22
[  691.992309][   T28] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19
[  692.016502][ T9136] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  692.033371][ T9136] cdc_wdm 2-1:1.0: Unknown control protocol
[  692.103496][ T9135] wacom 0003:056A:3F3B.000A: hidraw0: USB HID v1.11 Device [HID 056a:3f3b] on usb-dummy_hcd.0-1/input0
[  692.144242][ T9134] USB vub300 remote SDIO host controller[0] now disconnected
[  692.154374][ T9135] input: Wacom HID 056a:3f3b Finger as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:3F3B.000A/input/input25
[  692.196041][    T9] usb 2-1: USB disconnect, device number 12
[  692.303995][ T9135] usb 1-1: USB disconnect, device number 12
[  692.369854][T15638] fido_id[15638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  692.640164][T15641] loop5: detected capacity change from 0 to 256
[  692.694750][T14895] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  692.701512][T15641] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  692.703252][T14895] usb 4-1: MIDIStreaming interface descriptor not found
[  692.774022][    C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3414
[  692.783509][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15641, name: syz.5.2536
[  692.783571][    C1] preempt_count: 100, expected: 0
[  692.783582][    C1] RCU nest depth: 1, expected: 0
[  692.783601][    C1] 4 locks held by syz.5.2536/15641:
[  692.783614][    C1]  #0: ffff888019e52418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  692.783689][    C1]  #1: ffff8880650de118 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120
[  692.783758][    C1]  #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_get_entry+0xce/0x3f0
[  692.783817][    C1]  #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[  692.793905][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  692.798176][    C1] Preemption disabled at:
[  692.798186][    C1] [<ffffffff8152e001>] handle_softirqs+0x101/0x820
[  692.828313][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Not tainted syzkaller #0
[  692.828334][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  692.828347][    C1] Call Trace:
[  692.848504][    C1]  <IRQ>
[  692.860321][    C1]  dump_stack_lvl+0x18c/0x250
[  692.874245][    C1]  ? show_regs_print_info+0x20/0x20
[  692.887536][    C1]  ? load_image+0x420/0x420
[  692.895041][    C1]  ? handle_softirqs+0x101/0x820
[  692.904709][    C1]  __might_resched+0x48d/0x5f0
[  692.914521][    C1]  ? handle_softirqs+0x101/0x820
[  692.919485][    C1]  ? __might_sleep+0xe0/0xe0
[  692.924078][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  692.924108][    C1]  ? _raw_spin_unlock+0x40/0x40
[  692.924130][    C1]  ? kasan_set_track+0x5f/0x70
[  692.939570][    C1]  ? kasan_save_free_info+0x28/0x40
[  692.939603][    C1]  ? ____kasan_slab_free+0x126/0x1f0
[  692.939622][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  692.944969][    C1]  __flush_work+0x10f/0xac0
[  692.945001][    C1]  ? flush_work+0x20/0x20
[  692.945020][    C1]  ? __timer_delete+0x6b/0x290
[  692.945047][    C1]  ? mark_lock+0x94/0x320
[  692.956033][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  692.964830][    C1]  ? mod_delayed_work_on+0x1c0/0x1c0
[  692.964856][    C1]  ? lock_chain_count+0x20/0x20
[  692.964882][    C1]  ? __cancel_work_timer+0x36e/0x560
[  692.964906][    C1]  __cancel_work_timer+0x3f8/0x560
[  692.964930][    C1]  ? cancel_work_sync+0x20/0x20
[  692.964951][    C1]  ? kobject_put+0x260/0x450
[  692.979987][    C1]  ? __kmem_cache_free+0xba/0x1f0
[  692.980025][    C1]  ? kobject_put+0x421/0x450
[  692.990124][    C1]  mmc_free_host+0x19/0x30
[  693.000624][    C1]  call_timer_fn+0x189/0x540
[  693.010008][    C1]  ? kref_get+0x70/0x70
[  693.019585][    C1]  ? call_timer_fn+0xd2/0x540
[  693.028554][    C1]  ? __run_timers+0x810/0x810
[  693.037359][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  693.047202][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  693.047224][    C1]  ? kref_get+0x70/0x70
[  693.056533][    C1]  __run_timers+0x570/0x810
[  693.056571][    C1]  ? detach_timer+0x2b0/0x2b0
[  693.065693][    C1]  ? lock_chain_count+0x20/0x20
[  693.065724][    C1]  run_timer_softirq+0x67/0xf0
[  693.075279][    C1]  handle_softirqs+0x27d/0x820
[  693.080234][    C1]  ? read_tsc+0x9/0x20
[  693.084302][    C1]  ? ktime_get+0x24b/0x280
[  693.084332][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  693.084359][    C1]  ? do_softirq+0x1a0/0x1a0
[  693.098013][    C1]  __irq_exit_rcu+0xd3/0x190
[  693.102597][    C1]  ? irq_exit_rcu+0x20/0x20
[  693.107093][    C1]  irq_exit_rcu+0x9/0x20
[  693.111312][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  693.116946][    C1]  </IRQ>
[  693.116955][    C1]  <TASK>
[  693.116963][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  693.116992][    C1] RIP: 0010:xas_load+0xd0/0x140
[  693.117017][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  693.117035][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  693.117061][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  693.117076][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  693.117091][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  693.117106][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  693.117122][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  693.117155][    C1]  ? filemap_get_entry+0xce/0x3f0
[  693.128963][    C1]  filemap_get_entry+0x182/0x3f0
[  693.128996][    C1]  ? page_cache_prev_miss+0x390/0x390
[  693.129026][    C1]  ? page_copy_sane+0x4e/0x270
[  693.153687][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  693.153740][    C1]  shmem_write_begin+0xf2/0x430
[  693.153772][    C1]  generic_perform_write+0x2fe/0x5c0
[  693.153810][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  693.153843][    C1]  ? file_update_time+0x192/0x1a0
[  693.153871][    C1]  shmem_file_write_iter+0xfb/0x120
[  693.153900][    C1]  vfs_write+0x474/0x9a0
[  693.153932][    C1]  ? file_end_write+0x250/0x250
[  693.153964][    C1]  ? __fget_files+0x3fc/0x460
[  693.153999][    C1]  ? __fdget_pos+0x1d8/0x330
[  693.167991][    C1]  ? ksys_write+0x74/0x260
[  693.184046][    C1]  ksys_write+0x151/0x260
[  693.199944][    C1]  ? __ia32_sys_read+0x90/0x90
[  693.209863][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  693.219943][    C1]  do_syscall_64+0x55/0xb0
[  693.229947][    C1]  ? clear_bhb_loop+0x40/0x90
[  693.240984][    C1]  ? clear_bhb_loop+0x40/0x90
[  693.246370][    C0] net_ratelimit: 40 callbacks suppressed
[  693.251153][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  693.260190][    C1] RIP: 0033:0x7fb74a55e98e
[  693.260209][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.260227][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246
[  693.269432][    C1]  ORIG_RAX: 0000000000000001
[  693.273834][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  693.273854][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  693.282903][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  693.282919][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  693.282931][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  693.282959][    C1]  </TASK>
[  693.313684][    C1] 
[  693.337441][    C1] =============================
[  693.348149][    C1] WARNING: suspicious RCU usage
[  693.348159][    C1] syzkaller #0 Tainted: G        W         
[  693.364101][    C1] -----------------------------
[  693.364110][    C1] kernel/rcu/srcutree.c:1377 Illegal synchronize_srcu() in same-type SRCU (or in RCU) read-side critical section!
[  693.364126][    C1] 
[  693.364126][    C1] other info that might help us debug this:
[  693.364126][    C1] 
[  693.380041][    C1] 
[  693.380041][    C1] rcu_scheduler_active = 2, debug_locks = 1
[  693.380055][    C1] 4 locks held by syz.5.2536/15641:
[  693.391027][    C1]  #0: ffff888019e52418 (sb_writers#5
[  693.393423][    C1] ){.+.+}-{0:0}
[  693.398393][    T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  693.403107][    C1] , at: vfs_write+0x21e/0x9a0
[  693.403138][    C1]  #1: ffff8880650de118 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120
[  693.403208][    C1]  #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_get_entry+0xce/0x3f0
[  693.413978][    C1]  #3: ffffc900001f0be0
[  693.436174][    C1]  ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[  693.449417][    C1] 
[  693.449417][    C1] stack backtrace:
[  693.449426][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Tainted: G        W          syzkaller #0
[  693.458210][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  693.458223][    C1] Call Trace:
[  693.458232][    C1]  <IRQ>
[  693.458240][    C1]  dump_stack_lvl+0x18c/0x250
[  693.471842][    C1]  ? show_regs_print_info+0x20/0x20
[  693.492437][    C1]  ? load_image+0x420/0x420
[  693.492476][    C1]  lockdep_rcu_suspicious+0x1e1/0x300
[  693.505166][    C1]  __synchronize_srcu+0x150/0x3d0
[  693.505198][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  693.519971][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[  693.520006][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  693.533302][    C1]  ? _raw_spin_unlock+0x40/0x40
[  693.533329][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  693.538073][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  693.540817][    C1]  ? read_tsc+0x9/0x20
[  693.550492][    C1]  ? ktime_get_mono_fast_ns+0x19d/0x1c0
[  693.550523][    C1]  ? synchronize_srcu+0x25a/0x280
[  693.556018][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  693.560911][    C1]  wakeup_source_unregister+0x116/0x190
[  693.560946][    C1]  mmc_host_classdev_release+0x47/0x100
[  693.572541][    C1]  ? mmc_free_host+0x30/0x30
[  693.583250][    C1]  device_release+0xbc/0x1e0
[  693.591926][    T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.599162][    C1]  kobject_put+0x21b/0x450
[  693.599192][    C1]  call_timer_fn+0x189/0x540
[  693.599213][    C1]  ? kref_get+0x70/0x70
[  693.599233][    C1]  ? call_timer_fn+0xd2/0x540
[  693.599253][    C1]  ? __run_timers+0x810/0x810
[  693.599283][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  693.599307][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  693.599327][    C1]  ? kref_get+0x70/0x70
[  693.599348][    C1]  __run_timers+0x570/0x810
[  693.608954][    C1]  ? detach_timer+0x2b0/0x2b0
[  693.622854][    C1]  ? lock_chain_count+0x20/0x20
[  693.622887][    C1]  run_timer_softirq+0x67/0xf0
[  693.633937][    C1]  handle_softirqs+0x27d/0x820
[  693.643082][    C1]  ? read_tsc+0x9/0x20
[  693.658285][    C1]  ? ktime_get+0x24b/0x280
[  693.666983][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  693.681462][    C1]  ? do_softirq+0x1a0/0x1a0
[  693.690775][    C1]  __irq_exit_rcu+0xd3/0x190
[  693.699912][    C1]  ? irq_exit_rcu+0x20/0x20
[  693.699943][    C1]  irq_exit_rcu+0x9/0x20
[  693.709488][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  693.718279][    C1]  </IRQ>
[  693.722681][    C1]  <TASK>
[  693.722693][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  693.731919][    C1] RIP: 0010:xas_load+0xd0/0x140
[  693.731946][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  693.731963][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  693.731984][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  693.731997][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  693.732012][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  693.732027][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  693.732042][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  693.732075][    C1]  ? filemap_get_entry+0xce/0x3f0
[  693.732101][    C1]  filemap_get_entry+0x182/0x3f0
[  693.732128][    C1]  ? page_cache_prev_miss+0x390/0x390
[  693.741179][    C1]  ? page_copy_sane+0x4e/0x270
[  693.745567][    T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  693.751013][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  693.751067][    C1]  shmem_write_begin+0xf2/0x430
[  693.758026][    T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  693.762871][    C1]  generic_perform_write+0x2fe/0x5c0
[  693.762912][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  693.767845][    T9] usb 2-1: Product: syz
[  693.787312][    C1]  ? file_update_time+0x192/0x1a0
[  693.787344][    C1]  shmem_file_write_iter+0xfb/0x120
[  693.787372][    C1]  vfs_write+0x474/0x9a0
[  693.787405][    C1]  ? file_end_write+0x250/0x250
[  693.787438][    C1]  ? __fget_files+0x3fc/0x460
[  693.787474][    C1]  ? __fdget_pos+0x1d8/0x330
[  693.787505][    C1]  ? ksys_write+0x74/0x260
[  693.787534][    C1]  ksys_write+0x151/0x260
[  693.787564][    C1]  ? __ia32_sys_read+0x90/0x90
[  693.787594][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  693.787617][    C1]  do_syscall_64+0x55/0xb0
[  693.787643][    C1]  ? clear_bhb_loop+0x40/0x90
[  693.787668][    C1]  ? clear_bhb_loop+0x40/0x90
[  693.787696][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  693.787721][    C1] RIP: 0033:0x7fb74a55e98e
[  693.787740][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  693.787756][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  693.801759][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  693.817665][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  693.817682][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  693.817694][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  693.817706][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  693.817736][    C1]  </TASK>
[  693.817813][    C1] BUG: sleeping function called from invalid context at kernel/rcu/srcutree.c:1381
[  693.817826][    C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 15641, name: syz.5.2536
[  693.817841][    C1] preempt_count: 100, expected: 0
[  693.817852][    C1] RCU nest depth: 1, expected: 0
[  693.817863][    C1] 4 locks held by syz.5.2536/15641:
[  693.817876][    C1]  #0: ffff888019e52418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  693.817949][    C1]  #1: ffff8880650de118 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120
[  693.818016][    C1]  #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_get_entry+0xce/0x3f0
[  693.818074][    C1]  #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[  693.830162][    T9] usb 2-1: Manufacturer: syz
[  693.834076][    C1] Preemption disabled at:
[  693.834085][    C1] [<ffffffff8152e001>] handle_softirqs+0x101/0x820
[  693.844029][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Tainted: G        W          syzkaller #0
[  693.844051][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  693.844064][    C1] Call Trace:
[  693.844072][    C1]  <IRQ>
[  693.844080][    C1]  dump_stack_lvl+0x18c/0x250
[  693.844112][    C1]  ? show_regs_print_info+0x20/0x20
[  693.844140][    C1]  ? load_image+0x420/0x420
[  693.844170][    C1]  ? handle_softirqs+0x101/0x820
[  693.844195][    C1]  __might_resched+0x48d/0x5f0
[  693.853577][    T9] device: '2-1': device_add
[  693.854299][    C1]  ? show_regs_print_info+0x20/0x20
[  693.866393][T14895] kobject: 'card3' (ffff8880252e6000): kobject_uevent_env: filter function caused the event to drop!
[  693.868472][    C1]  ? handle_softirqs+0x101/0x820
[  693.874837][    T9] kobject: '2-1' (ffff8880186be0a8): kobject_add_internal: parent: 'usb2', set: 'devices'
[  693.881248][    C1]  ? __might_sleep+0xe0/0xe0
[  693.881291][    C1]  __synchronize_srcu+0x197/0x3d0
[  693.891605][T14895] device: 'mixer3': device_add
[  693.892341][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  693.892372][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[  693.892401][    C1]  ? read_tsc+0x9/0x20
[  693.898854][T14895] kobject: 'mixer3' (ffff8880243dd000): kobject_add_internal: parent: 'card3', set: 'devices'
[  693.901795][    C1]  ? ktime_get_mono_fast_ns+0x19d/0x1c0
[  693.901837][    C1]  ? synchronize_srcu+0x25a/0x280
[  693.911190][    T9] usb 2-1: ACPI companion not found
[  693.911232][    C1]  wakeup_source_unregister+0x116/0x190
[  693.917128][    T9] usb 2-1: No ACPI support
[  693.920735][    C1]  mmc_host_classdev_release+0x47/0x100
[  693.920771][    C1]  ? mmc_free_host+0x30/0x30
[  693.928533][T14895] sound mixer3: No ACPI support
[  693.929731][    C1]  device_release+0xbc/0x1e0
[  693.935677][T14895] PM: Adding info for No Bus:mixer3
[  693.938778][    C1]  kobject_put+0x21b/0x450
[  693.938808][    C1]  call_timer_fn+0x189/0x540
[  693.947829][    T9] bus: 'usb': add device 2-1
[  693.948383][    C1]  ? kref_get+0x70/0x70
[  693.954364][    T9] PM: Adding info for usb:2-1
[  693.957683][    C1]  ? call_timer_fn+0xd2/0x540
[  693.957707][    C1]  ? __run_timers+0x810/0x810
[  693.966994][T14895] kobject: 'mixer3' (ffff8880243dd000): kobject_uevent_env
[  693.967985][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  693.992817][    T9] kobject: '2-1' (ffff8880186be0a8): kobject_uevent_env
[  693.995952][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  693.995976][    C1]  ? kref_get+0x70/0x70
[  693.996001][    C1]  __run_timers+0x570/0x810
[  694.008302][    T9] kobject: '2-1' (ffff8880186be0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.1/usb2/2-1'
[  694.011912][    C1]  ? detach_timer+0x2b0/0x2b0
[  694.021058][T14895] kobject: 'mixer3' (ffff8880243dd000): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/mixer3'
[  694.027829][    C1]  ? lock_chain_count+0x20/0x20
[  694.027862][    C1]  run_timer_softirq+0x67/0xf0
[  694.027885][    C1]  handle_softirqs+0x27d/0x820
[  694.027905][    C1]  ? read_tsc+0x9/0x20
[  694.027928][    C1]  ? ktime_get+0x24b/0x280
[  694.027955][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  694.027980][    C1]  ? do_softirq+0x1a0/0x1a0
[  694.028012][    C1]  __irq_exit_rcu+0xd3/0x190
[  694.028032][    C1]  ? irq_exit_rcu+0x20/0x20
[  694.040649][    T9] bus: 'usb': __driver_probe_device: matched device 2-1 with driver usb
[  694.048269][    C1]  irq_exit_rcu+0x9/0x20
[  694.048293][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  694.048315][    C1]  </IRQ>
[  694.048323][    C1]  <TASK>
[  694.048331][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  694.048360][    C1] RIP: 0010:xas_load+0xd0/0x140
[  694.071202][T14895] driver: 'snd-usb-audio': driver_bound: bound to device '4-1:1.0'
[  694.072554][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  694.072574][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  694.072595][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  694.086041][    T9] bus: 'usb': really_probe: probing driver usb with device 2-1
[  694.092495][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  694.092512][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  694.092528][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  694.092544][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  694.102703][T14895] kobject: '4-1:1.0' (ffff888063833078): kobject_uevent_env
[  694.112471][    C1]  ? filemap_get_entry+0xce/0x3f0
[  694.112501][    C1]  filemap_get_entry+0x182/0x3f0
[  694.121146][T14895] kobject: '4-1:1.0' (ffff888063833078): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0'
[  694.121377][    C1]  ? page_cache_prev_miss+0x390/0x390
[  694.129070][    T9] usb 2-1: usb_probe_device
[  694.136779][    C1]  ? page_copy_sane+0x4e/0x270
[  694.136813][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  694.136861][    C1]  shmem_write_begin+0xf2/0x430
[  694.136890][    C1]  generic_perform_write+0x2fe/0x5c0
[  694.136930][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  694.136961][    C1]  ? file_update_time+0x192/0x1a0
[  694.136985][    C1]  shmem_file_write_iter+0xfb/0x120
[  694.137009][    C1]  vfs_write+0x474/0x9a0
[  694.137040][    C1]  ? file_end_write+0x250/0x250
[  694.137066][    C1]  ? __fget_files+0x3fc/0x460
[  694.137098][    C1]  ? __fdget_pos+0x1d8/0x330
[  694.137119][    C1]  ? ksys_write+0x74/0x260
[  694.137147][    C1]  ksys_write+0x151/0x260
[  694.137178][    C1]  ? __ia32_sys_read+0x90/0x90
[  694.137207][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.137231][    C1]  do_syscall_64+0x55/0xb0
[  694.137257][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.137284][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.137313][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.137340][    C1] RIP: 0033:0x7fb74a55e98e
[  694.137358][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  694.137376][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.137397][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  694.137413][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  694.137427][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.137439][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  694.137452][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  694.137491][    C1]  </TASK>
[  694.137533][    C1] ODEBUG: object ffffc900001f09c0 is NOT on stack ffffc9000bce0000, but annotated.
[  694.139540][    C1] 
[  694.139547][    C1] ======================================================
[  694.139553][    C1] WARNING: possible circular locking dependency detected
[  694.139560][    C1] syzkaller #0 Tainted: G        W         
[  694.139570][    C1] ------------------------------------------------------
[  694.139576][    C1] syz.5.2536/15641 is trying to acquire lock:
[  694.139585][    C1] ffffffff8d1263e0 (console_owner){-.-.}-{0:0}, at: vprintk_emit+0x30b/0x610
[  694.139630][    C1] 
[  694.139630][    C1] but task is already holding lock:
[  694.139635][    C1] ffffffff9750c388 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450
[  694.139676][    C1] 
[  694.139676][    C1] which lock already depends on the new lock.
[  694.139676][    C1] 
[  694.139681][    C1] 
[  694.139681][    C1] the existing dependency chain (in reverse order) is:
[  694.139687][    C1] 
[  694.139687][    C1] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}:
[  694.139708][    C1]        _raw_spin_lock_irqsave+0xb4/0x100
[  694.139730][    C1]        debug_object_activate+0x6c/0x500
[  694.139752][    C1]        insert_work+0x35/0x310
[  694.139769][    C1]        __queue_work+0xbfd/0xfd0
[  694.139786][    C1]        queue_work_on+0x128/0x1f0
[  694.139801][    C1]        start_poll_synchronize_rcu_expedited+0x105/0x140
[  694.139827][    C1]        rcu_init+0x10d/0x160
[  694.139877][    C1]        start_kernel+0x1fd/0x4e0
[  694.139899][    C1]        x86_64_start_reservations+0x2a/0x30
[  694.139914][    C1]        copy_bootdata+0x0/0xd0
[  694.139937][    C1]        secondary_startup_64_no_verify+0x179/0x17b
[  694.139959][    C1] 
[  694.139959][    C1] -> #3 (&pool->lock){-.-.}-{2:2}:
[  694.139979][    C1]        _raw_spin_lock+0x2e/0x40
[  694.139996][    C1]        __queue_work+0x72f/0xfd0
[  694.140012][    C1]        queue_work_on+0x128/0x1f0
[  694.140028][    C1]        rpm_suspend+0x1133/0x1b60
[  694.140053][    C1]        __pm_runtime_idle+0x12f/0x1a0
[  694.140075][    C1]        __device_attach+0x352/0x420
[  694.140091][    C1]        bus_probe_device+0x180/0x260
[  694.140113][    C1]        device_add+0x87c/0xc40
[  694.140131][    C1]        serial_base_port_add+0x2f6/0x430
[  694.140151][    C1]        serial_core_register_port+0x378/0x20b0
[  694.140168][    C1]        serial8250_register_8250_port+0x15fd/0x1f40
[  694.140188][    C1]        serial_pnp_probe+0x577/0x750
[  694.140208][    C1]        pnp_device_probe+0x305/0x4b0
[  694.140228][    C1]        really_probe+0x247/0xae0
[  694.140244][    C1]        __driver_probe_device+0x1f5/0x390
[  694.140260][    C1]        driver_probe_device+0x4f/0x420
[  694.140275][    C1]        __driver_attach+0x444/0x6d0
[  694.140290][    C1]        bus_for_each_dev+0x235/0x2b0
[  694.140312][    C1]        bus_add_driver+0x340/0x630
[  694.140335][    C1]        driver_register+0x23a/0x310
[  694.140351][    C1]        serial8250_init+0x9a/0x170
[  694.140372][    C1]        do_one_initcall+0x242/0x790
[  694.140392][    C1]        do_initcall_level+0x13d/0x1f0
[  694.140409][    C1]        do_initcalls+0x69/0xd0
[  694.140426][    C1]        kernel_init_freeable+0x3d9/0x560
[  694.140443][    C1]        kernel_init+0x1d/0x1c0
[  694.140465][    C1]        ret_from_fork+0x48/0x80
[  694.140485][    C1]        ret_from_fork_asm+0x11/0x20
[  694.140505][    C1] 
[  694.140505][    C1] -> #2 (&dev->power.lock){-...}-{2:2}:
[  694.140527][    C1]        _raw_spin_lock_irqsave+0xb4/0x100
[  694.140545][    C1]        __pm_runtime_resume+0x10f/0x170
[  694.140569][    C1]        __uart_start+0x171/0x3e0
[  694.140584][    C1]        uart_write+0x449/0x5d0
[  694.140599][    C1]        n_tty_write+0xd3d/0x11e0
[  694.140623][    C1]        file_tty_write+0x529/0x960
[  694.140643][    C1]        vfs_write+0x474/0x9a0
[  694.140664][    C1]        ksys_write+0x151/0x260
[  694.140695][    C1]        do_syscall_64+0x55/0xb0
[  694.140715][    C1]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.140738][    C1] 
[  694.140738][    C1] -> #1 (&port_lock_key){-.-.}-{2:2}:
[  694.140759][    C1]        _raw_spin_lock_irqsave+0xb4/0x100
[  694.140777][    C1]        serial8250_console_write+0x181/0x18b0
[  694.140800][    C1]        console_flush_all+0x6ad/0xcf0
[  694.140820][    C1]        console_unlock+0xad/0x350
[  694.140838][    C1]        vprintk_emit+0x497/0x610
[  694.140857][    C1]        _printk+0xde/0x130
[  694.140874][    C1]        register_console+0xb96/0xf00
[  694.140894][    C1]        univ8250_console_init+0x45/0x50
[  694.140909][    C1]        console_init+0x17b/0x5d0
[  694.140925][    C1]        start_kernel+0x2c8/0x4e0
[  694.140941][    C1]        x86_64_start_reservations+0x2a/0x30
[  694.140956][    C1]        copy_bootdata+0x0/0xd0
[  694.140978][    C1]        secondary_startup_64_no_verify+0x179/0x17b
[  694.140999][    C1] 
[  694.140999][    C1] -> #0 (console_owner){-.-.}-{0:0}:
[  694.141020][    C1]        __lock_acquire+0x37ef/0x7d80
[  694.141038][    C1]        lock_acquire+0x19e/0x420
[  694.141056][    C1]        vprintk_emit+0x328/0x610
[  694.141074][    C1]        _printk+0xde/0x130
[  694.141090][    C1]        __debug_object_init+0x18d/0x450
[  694.141111][    C1]        __synchronize_srcu+0x2ae/0x3d0
[  694.141131][    C1]        wakeup_source_unregister+0x116/0x190
[  694.141150][    C1]        mmc_host_classdev_release+0x47/0x100
[  694.141175][    C1]        device_release+0xbc/0x1e0
[  694.141195][    C1]        kobject_put+0x21b/0x450
[  694.141211][    C1]        call_timer_fn+0x189/0x540
[  694.141227][    C1]        __run_timers+0x570/0x810
[  694.141243][    C1]        run_timer_softirq+0x67/0xf0
[  694.141259][    C1]        handle_softirqs+0x27d/0x820
[  694.141274][    C1]        __irq_exit_rcu+0xd3/0x190
[  694.141289][    C1]        irq_exit_rcu+0x9/0x20
[  694.141305][    C1]        sysvec_apic_timer_interrupt+0xa4/0xc0
[  694.141321][    C1]        asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  694.141343][    C1]        xas_load+0xd0/0x140
[  694.141361][    C1]        filemap_get_entry+0x182/0x3f0
[  694.141378][    C1]        shmem_get_folio_gfp+0x2a4/0x2b40
[  694.141395][    C1]        shmem_write_begin+0xf2/0x430
[  694.141413][    C1]        generic_perform_write+0x2fe/0x5c0
[  694.141431][    C1]        shmem_file_write_iter+0xfb/0x120
[  694.141451][    C1]        vfs_write+0x474/0x9a0
[  694.141477][    C1]        ksys_write+0x151/0x260
[  694.141498][    C1]        do_syscall_64+0x55/0xb0
[  694.141518][    C1]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.141540][    C1] 
[  694.141540][    C1] other info that might help us debug this:
[  694.141540][    C1] 
[  694.141546][    C1] Chain exists of:
[  694.141546][    C1]   console_owner --> &pool->lock --> &obj_hash[i].lock
[  694.141546][    C1] 
[  694.141570][    C1]  Possible unsafe locking scenario:
[  694.141570][    C1] 
[  694.141575][    C1]        CPU0                    CPU1
[  694.141580][    C1]        ----                    ----
[  694.141584][    C1]   lock(&obj_hash[i].lock);
[  694.141594][    C1]                                lock(&pool->lock);
[  694.141605][    C1]                                lock(&obj_hash[i].lock);
[  694.141617][    C1]   lock(console_owner);
[  694.141626][    C1] 
[  694.141626][    C1]  *** DEADLOCK ***
[  694.141626][    C1] 
[  694.141631][    C1] 5 locks held by syz.5.2536/15641:
[  694.141641][    C1]  #0: ffff888019e52418 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0
[  694.141690][    C1]  #1: ffff8880650de118 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: shmem_file_write_iter+0x82/0x120
[  694.141737][    C1]  #2: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: filemap_get_entry+0xce/0x3f0
[  694.141777][    C1]  #3: ffffc900001f0be0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd2/0x540
[  694.141815][    C1]  #4: ffffffff9750c388 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0x5c/0x450
[  694.141860][    C1] 
[  694.141860][    C1] stack backtrace:
[  694.141865][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Tainted: G        W          syzkaller #0
[  694.141884][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  694.141893][    C1] Call Trace:
[  694.141900][    C1]  <IRQ>
[  694.141906][    C1]  dump_stack_lvl+0x18c/0x250
[  694.141930][    C1]  ? load_image+0x420/0x420
[  694.141949][    C1]  ? show_regs_print_info+0x20/0x20
[  694.141975][    C1]  ? print_circular_bug+0x12b/0x1a0
[  694.141998][    C1]  check_noncircular+0x2fc/0x400
[  694.142022][    C1]  ? print_deadlock_bug+0x5d0/0x5d0
[  694.142043][    C1]  ? lockdep_lock+0xf5/0x230
[  694.142065][    C1]  ? _find_first_zero_bit+0xd6/0x100
[  694.142083][    C1]  __lock_acquire+0x37ef/0x7d80
[  694.142112][    C1]  ? verify_lock_unused+0x140/0x140
[  694.142133][    C1]  ? verify_lock_unused+0x140/0x140
[  694.142153][    C1]  ? prb_final_commit+0x6f/0x90
[  694.142180][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  694.142201][    C1]  ? _raw_spin_unlock+0x40/0x40
[  694.142222][    C1]  lock_acquire+0x19e/0x420
[  694.142242][    C1]  ? vprintk_emit+0x30b/0x610
[  694.142265][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  694.142285][    C1]  ? do_raw_spin_lock+0x11f/0x2b0
[  694.142306][    C1]  ? read_lock_is_recursive+0x20/0x20
[  694.142327][    C1]  ? __rwlock_init+0x150/0x150
[  694.142351][    C1]  ? do_raw_spin_unlock+0x121/0x230
[  694.142374][    C1]  ? vprintk_emit+0x30b/0x610
[  694.142394][    C1]  vprintk_emit+0x328/0x610
[  694.142414][    C1]  ? vprintk_emit+0x30b/0x610
[  694.142436][    C1]  ? printk_sprint+0x460/0x460
[  694.142465][    C1]  ? do_raw_spin_lock+0x11f/0x2b0
[  694.142490][    C1]  _printk+0xde/0x130
[  694.142511][    C1]  ? load_image+0x420/0x420
[  694.142530][    C1]  ? alloc_object+0x1c/0x640
[  694.142556][    C1]  __debug_object_init+0x18d/0x450
[  694.142581][    C1]  __synchronize_srcu+0x2ae/0x3d0
[  694.142604][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  694.142625][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[  694.142652][    C1]  ? read_tsc+0x9/0x20
[  694.142671][    C1]  ? ktime_get_mono_fast_ns+0x19d/0x1c0
[  694.142693][    C1]  ? synchronize_srcu+0x25a/0x280
[  694.142719][    C1]  wakeup_source_unregister+0x116/0x190
[  694.142741][    C1]  mmc_host_classdev_release+0x47/0x100
[  694.142768][    C1]  ? mmc_free_host+0x30/0x30
[  694.142792][    C1]  device_release+0xbc/0x1e0
[  694.142815][    C1]  kobject_put+0x21b/0x450
[  694.142834][    C1]  call_timer_fn+0x189/0x540
[  694.142852][    C1]  ? kref_get+0x70/0x70
[  694.142867][    C1]  ? call_timer_fn+0xd2/0x540
[  694.142885][    C1]  ? __run_timers+0x810/0x810
[  694.142906][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  694.142925][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.142942][    C1]  ? kref_get+0x70/0x70
[  694.142957][    C1]  __run_timers+0x570/0x810
[  694.142982][    C1]  ? detach_timer+0x2b0/0x2b0
[  694.143001][    C1]  ? lock_chain_count+0x20/0x20
[  694.143023][    C1]  run_timer_softirq+0x67/0xf0
[  694.143040][    C1]  handle_softirqs+0x27d/0x820
[  694.143058][    C1]  ? read_tsc+0x9/0x20
[  694.143076][    C1]  ? ktime_get+0x24b/0x280
[  694.143097][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  694.143115][    C1]  ? do_softirq+0x1a0/0x1a0
[  694.143136][    C1]  __irq_exit_rcu+0xd3/0x190
[  694.143154][    C1]  ? irq_exit_rcu+0x20/0x20
[  694.143175][    C1]  irq_exit_rcu+0x9/0x20
[  694.143191][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  694.143208][    C1]  </IRQ>
[  694.143213][    C1]  <TASK>
[  694.143219][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  694.143243][    C1] RIP: 0010:xas_load+0xd0/0x140
[  694.143265][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  694.143280][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  694.143294][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  694.143306][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  694.143318][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  694.143331][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  694.143344][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  694.143364][    C1]  ? filemap_get_entry+0xce/0x3f0
[  694.143384][    C1]  filemap_get_entry+0x182/0x3f0
[  694.143402][    C1]  ? page_cache_prev_miss+0x390/0x390
[  694.143426][    C1]  ? page_copy_sane+0x4e/0x270
[  694.143450][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  694.143489][    C1]  shmem_write_begin+0xf2/0x430
[  694.143511][    C1]  generic_perform_write+0x2fe/0x5c0
[  694.143537][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  694.143561][    C1]  ? file_update_time+0x192/0x1a0
[  694.143583][    C1]  shmem_file_write_iter+0xfb/0x120
[  694.143605][    C1]  vfs_write+0x474/0x9a0
[  694.143630][    C1]  ? file_end_write+0x250/0x250
[  694.143656][    C1]  ? __fget_files+0x3fc/0x460
[  694.143683][    C1]  ? __fdget_pos+0x1d8/0x330
[  694.143705][    C1]  ? ksys_write+0x74/0x260
[  694.143737][    C1]  ksys_write+0x151/0x260
[  694.143763][    C1]  ? __ia32_sys_read+0x90/0x90
[  694.143788][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.143805][    C1]  do_syscall_64+0x55/0xb0
[  694.143827][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.143850][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.143874][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.143897][    C1] RIP: 0033:0x7fb74a55e98e
[  694.143910][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  694.143924][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.143941][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  694.143955][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  694.143966][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.143976][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  694.143986][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  694.144005][    C1]  </TASK>
[  694.149385][T14895] bus: 'usb': really_probe: bound device 4-1:1.0 to driver snd-usb-audio
[  694.151402][    C1] ------------[ cut here ]------------
[  694.154155][T14895] driver: 'usb': driver_bound: bound to device '4-1'
[  694.158476][    C1] WARNING: CPU: 1 PID: 15641 at lib/debugobjects.c:558 __debug_object_init+0x18d/0x450
[  694.164900][    T9] usb 2-1: configuration #1 chosen from 1 choice
[  694.168142][    C1] Modules linked in:
[  694.168154][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Tainted: G        W          syzkaller #0
[  694.173157][T14895] kobject: '4-1' (ffff888019ef90a8): kobject_uevent_env
[  694.177802][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  694.177814][    C1] RIP: 0010:__debug_object_init+0x18d/0x450
[  694.184087][T14895] kobject: '4-1' (ffff888019ef90a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1'
[  694.187471][    C1] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[  694.187489][    C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046
[  694.187504][    C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: a5e09de7b5a7ea00
[  694.187518][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  694.187530][    C1] RBP: dffffc0000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d
[  694.198386][    C0] virtqueue callback for ffff88801de63e00 (ffffffff84a02460)
[  694.203249][    C1] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff888024efbc20
[  694.213139][    C0] virtqueue interrupt with no work for ffff88801de63c00
[  694.217664][    C1] R13: ffff88805c4eb5e8 R14: 0000000000000001 R15: ffffffff8acbe000
[  694.222655][    C0] virtqueue interrupt with no work for ffff88801de63a00
[  694.227386][    C1] FS:  00007fb74b5516c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  694.233761][T15620] raw-gadget.0 gadget.1: fail, endpoint is not enabled
[  694.238935][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  694.243124][T15620] dummy_udc dummy_udc.1: enabled ep1in-bulk (ep1in-intr) maxpacket 101 stream disabled
[  694.253184][    C1] CR2: 00007fb7405f6000 CR3: 000000007b1e4000 CR4: 00000000003506e0
[  694.258827][T10609] Added buffer head 0 to ffff88801de63e00
[  694.263700][    C1] Call Trace:
[  694.263709][    C1]  <IRQ>
[  694.263719][    C1]  __synchronize_srcu+0x2ae/0x3d0
[  694.271266][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[  694.274423][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  694.278809][    C0] kcov: kcov_start: t = ffff888024b9bc00, size = 262144, area = ffffc900020c1000
[  694.284324][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[  694.288896][    C0] kcov: kcov_start: t = ffff888024b9bc00, size = 1048576, area = ffffc90017e61000
[  694.293713][    C1]  ? read_tsc+0x9/0x20
[  694.298266][    C0] kcov: kcov_move_area: ffffc9001e00a000 1048576 <= ffffc900020c1000 14
[  694.303432][    C1]  ? ktime_get_mono_fast_ns+0x19d/0x1c0
[  694.309552][T15620] kcov: kcov_task_exit: t = ffff888022925a00, kcov->t = ffff888022925a00
[  694.312380][    C1]  ? synchronize_srcu+0x25a/0x280
[  694.329440][T15620] bus: 'gadget': remove driver raw-gadget.0
[  694.330401][    C1]  wakeup_source_unregister+0x116/0x190
[  694.335158][T15620] kernfs bind: removing
[  694.342230][    C1]  mmc_host_classdev_release+0x47/0x100
[  694.342264][    C1]  ? mmc_free_host+0x30/0x30
[  694.348701][    T9] usb 2-1: adding 2-1:1.0 (config #1, interface 0)
[  694.354346][    C1]  device_release+0xbc/0x1e0
[  694.354375][    C1]  kobject_put+0x21b/0x450
[  694.359680][T15620] kernfs unbind: removing
[  694.363685][    C1]  call_timer_fn+0x189/0x540
[  694.363708][    C1]  ? kref_get+0x70/0x70
[  694.363726][    C1]  ? call_timer_fn+0xd2/0x540
[  694.363745][    C1]  ? __run_timers+0x810/0x810
[  694.363768][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  694.363791][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.363811][    C1]  ? kref_get+0x70/0x70
[  694.363827][    C1]  __run_timers+0x570/0x810
[  694.369414][T15620] kernfs uevent: removing
[  694.379128][    C1]  ? detach_timer+0x2b0/0x2b0
[  694.379153][    C1]  ? lock_chain_count+0x20/0x20
[  694.379177][    C1]  run_timer_softirq+0x67/0xf0
[  694.379197][    C1]  handle_softirqs+0x27d/0x820
[  694.379217][    C1]  ? read_tsc+0x9/0x20
[  694.379238][    C1]  ? ktime_get+0x24b/0x280
[  694.379261][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  694.379282][    C1]  ? do_softirq+0x1a0/0x1a0
[  694.379305][    C1]  __irq_exit_rcu+0xd3/0x190
[  694.388364][    T9] device: '2-1:1.0': device_add
[  694.397366][    C1]  ? irq_exit_rcu+0x20/0x20
[  694.397394][    C1]  irq_exit_rcu+0x9/0x20
[  694.403997][T14895] bus: 'usb': really_probe: bound device 4-1 to driver usb
[  694.406956][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  694.406982][    C1]  </IRQ>
[  694.411774][T15620] kernfs gadget.1: removing
[  694.415752][    C1]  <TASK>
[  694.415760][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  694.415790][    C1] RIP: 0010:xas_load+0xd0/0x140
[  694.420290][    T9] kobject: '2-1:1.0' (ffff8880243de078): kobject_add_internal: parent: '2-1', set: 'devices'
[  694.424918][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  694.424936][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  694.424954][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  694.424968][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  694.424981][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  694.424996][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  694.425011][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  694.425035][    C1]  ? filemap_get_entry+0xce/0x3f0
[  694.425058][    C1]  filemap_get_entry+0x182/0x3f0
[  694.425079][    C1]  ? page_cache_prev_miss+0x390/0x390
[  694.430847][T15620] kernfs driver: removing
[  694.434111][    C1]  ? page_copy_sane+0x4e/0x270
[  694.434141][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  694.443962][    T9] usb 2-1:1.0: No ACPI support
[  694.446933][    C1]  shmem_write_begin+0xf2/0x430
[  694.451309][T14895] device: 'ep_00': device_add
[  694.456765][    C1]  generic_perform_write+0x2fe/0x5c0
[  694.456796][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  694.456823][    C1]  ? file_update_time+0x192/0x1a0
[  694.456846][    C1]  shmem_file_write_iter+0xfb/0x120
[  694.456867][    C1]  vfs_write+0x474/0x9a0
[  694.456894][    C1]  ? file_end_write+0x250/0x250
[  694.456921][    C1]  ? __fget_files+0x3fc/0x460
[  694.456950][    C1]  ? __fdget_pos+0x1d8/0x330
[  694.469856][T15620] udc dummy_udc.1: unbinding gadget driver [USB Raw Gadget]
[  694.473564][    C1]  ? ksys_write+0x74/0x260
[  694.473596][    C1]  ksys_write+0x151/0x260
[  694.473623][    C1]  ? __ia32_sys_read+0x90/0x90
[  694.491801][T14895] kobject: 'ep_00' (ffff8880243dc010): kobject_add_internal: parent: '4-1', set: 'devices'
[  694.501063][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.501089][    C1]  do_syscall_64+0x55/0xb0
[  694.501113][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.501139][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.501165][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.501191][    C1] RIP: 0033:0x7fb74a55e98e
[  694.517877][T15620] dummy_hcd dummy_hcd.1: port status 0x00010100 has changes
[  694.522712][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  694.532140][    T9] bus: 'usb': add device 2-1:1.0
[  694.538614][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.538638][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  694.549077][T15270] kobject: 'card3' (ffff888024d9e3f0): kobject_uevent_env
[  694.554549][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  694.554565][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.554578][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  694.561948][T15620] kobject: 'dummy_udc.1' (ffff888025b2e018): kobject_uevent_env
[  694.566832][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  694.566859][    C1]  </TASK>
[  694.566867][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  694.566878][    C1] CPU: 1 PID: 15641 Comm: syz.5.2536 Tainted: G        W          syzkaller #0
[  694.566896][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  694.566893][    C0] kcov: kcov_remote_start: handle = 100000000000002, context: softirq
[  694.566914][    C1] Call Trace:
[  694.566911][    C0] kcov: kcov_start: t = ffff888022925a00, size = 262144, area = ffffc900020c1000
[  694.566922][    C1]  <IRQ>
[  694.566928][    C1]  dump_stack_lvl+0x18c/0x250
[  694.566942][    C0] kcov: kcov_move_area: ffffc9001e00a000 1048576 <= ffffc900020c1000 26
[  694.566957][    C1]  ? show_regs_print_info+0x20/0x20
[  694.566981][    C1]  ? load_image+0x420/0x420
[  694.567006][    C1]  panic+0x2ca/0x720
[  694.567028][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  694.567055][    C1]  __warn+0x2e0/0x470
[  694.567073][    C1]  ? __debug_object_init+0x18d/0x450
[  694.567097][    C1]  ? __debug_object_init+0x18d/0x450
[  694.567120][    C1]  report_bug+0x2be/0x4f0
[  694.567213][    C1]  ? __debug_object_init+0x18d/0x450
[  694.567236][    C1]  ? __debug_object_init+0x18d/0x450
[  694.567259][    C1]  ? __debug_object_init+0x18f/0x450
[  694.567282][    C1]  handle_bug+0xcf/0x120
[  694.567305][    C1]  exc_invalid_op+0x1a/0x50
[  694.567329][    C1]  asm_exc_invalid_op+0x1a/0x20
[  694.567352][    C1] RIP: 0010:__debug_object_init+0x18d/0x450
[  694.567378][    C1] Code: 24 08 74 2f 41 ff c6 44 89 35 2f 5b 25 13 48 c7 c1 40 44 1d 8b 48 c7 c7 a0 44 1d 8b 84 c0 48 0f 45 f9 48 89 de e8 33 98 4a 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f
[  694.567393][    C1] RSP: 0018:ffffc900001f0928 EFLAGS: 00010046
[  694.567409][    C1] RAX: 0000000000000050 RBX: ffffc900001f09c0 RCX: a5e09de7b5a7ea00
[  694.567423][    C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000
[  694.567434][    C1] RBP: dffffc0000000000 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d
[  694.567448][    C1] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff888024efbc20
[  694.567462][    C1] R13: ffff88805c4eb5e8 R14: 0000000000000001 R15: ffffffff8acbe000
[  694.567482][    C1]  ? __debug_object_init+0x18d/0x450
[  694.567508][    C1]  __synchronize_srcu+0x2ae/0x3d0
[  694.567532][    C1]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  694.567554][    C1]  ? synchronize_srcu_expedited+0x20/0x20
[  694.567582][    C1]  ? read_tsc+0x9/0x20
[  694.567602][    C1]  ? ktime_get_mono_fast_ns+0x19d/0x1c0
[  694.567625][    C1]  ? synchronize_srcu+0x25a/0x280
[  694.567648][    C1]  wakeup_source_unregister+0x116/0x190
[  694.567672][    C1]  mmc_host_classdev_release+0x47/0x100
[  694.567701][    C1]  ? mmc_free_host+0x30/0x30
[  694.567725][    C1]  device_release+0xbc/0x1e0
[  694.567749][    C1]  kobject_put+0x21b/0x450
[  694.567769][    C1]  call_timer_fn+0x189/0x540
[  694.567788][    C1]  ? kref_get+0x70/0x70
[  694.567804][    C1]  ? call_timer_fn+0xd2/0x540
[  694.567822][    C1]  ? __run_timers+0x810/0x810
[  694.567843][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  694.567864][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.567881][    C1]  ? kref_get+0x70/0x70
[  694.567898][    C1]  __run_timers+0x570/0x810
[  694.567929][    C1]  ? detach_timer+0x2b0/0x2b0
[  694.567949][    C1]  ? lock_chain_count+0x20/0x20
[  694.567972][    C1]  run_timer_softirq+0x67/0xf0
[  694.567990][    C1]  handle_softirqs+0x27d/0x820
[  694.568009][    C1]  ? read_tsc+0x9/0x20
[  694.568028][    C1]  ? ktime_get+0x24b/0x280
[  694.568048][    C1]  ? __irq_exit_rcu+0xd3/0x190
[  694.568068][    C1]  ? do_softirq+0x1a0/0x1a0
[  694.568089][    C1]  __irq_exit_rcu+0xd3/0x190
[  694.568108][    C1]  ? irq_exit_rcu+0x20/0x20
[  694.568129][    C1]  irq_exit_rcu+0x9/0x20
[  694.568145][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  694.568164][    C1]  </IRQ>
[  694.568170][    C1]  <TASK>
[  694.568176][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  694.568201][    C1] RIP: 0010:xas_load+0xd0/0x140
[  694.568223][    C1] Code: ee e8 f4 07 04 f7 41 38 ed 77 6e 48 8b 7c 24 08 4c 89 f6 e8 f2 07 00 00 48 89 c3 43 0f b6 04 3c 84 c0 75 3a 41 80 3e 00 74 56 <e8> 6b 07 04 f7 e9 6b ff ff ff 48 8b 0c 24 80 e1 07 38 c1 7c 99 48
[  694.568238][    C1] RSP: 0018:ffffc9000bce7870 EFLAGS: 00000206
[  694.568252][    C1] RAX: 0000000000000000 RBX: ffff88805aff5b82 RCX: 0000000000080000
[  694.568264][    C1] RDX: ffffc9000cb31000 RSI: 00000000000355db RDI: 00000000000355dc
[  694.568277][    C1] RBP: 0000000000000006 R08: dffffc0000000000 R09: 1ffffffff223d6a0
[  694.568290][    C1] R10: dffffc0000000000 R11: fffffbfff223d6a1 R12: 1ffff11008f023c8
[  694.568304][    C1] R13: 0000000000000000 R14: ffff888047811e40 R15: dffffc0000000000
[  694.568325][    C1]  ? filemap_get_entry+0xce/0x3f0
[  694.568346][    C1]  filemap_get_entry+0x182/0x3f0
[  694.568366][    C1]  ? page_cache_prev_miss+0x390/0x390
[  694.568390][    C1]  ? page_copy_sane+0x4e/0x270
[  694.568414][    C1]  shmem_get_folio_gfp+0x2a4/0x2b40
[  694.568447][    C1]  shmem_write_begin+0xf2/0x430
[  694.568469][    C1]  generic_perform_write+0x2fe/0x5c0
[  694.568497][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[  694.568521][    C1]  ? file_update_time+0x192/0x1a0
[  694.568544][    C1]  shmem_file_write_iter+0xfb/0x120
[  694.568567][    C1]  vfs_write+0x474/0x9a0
[  694.568593][    C1]  ? file_end_write+0x250/0x250
[  694.568619][    C1]  ? __fget_files+0x3fc/0x460
[  694.568646][    C1]  ? __fdget_pos+0x1d8/0x330
[  694.568669][    C1]  ? ksys_write+0x74/0x260
[  694.568693][    C1]  ksys_write+0x151/0x260
[  694.568718][    C1]  ? __ia32_sys_read+0x90/0x90
[  694.568743][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  694.568762][    C1]  do_syscall_64+0x55/0xb0
[  694.568784][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.568807][    C1]  ? clear_bhb_loop+0x40/0x90
[  694.568832][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.568854][    C1] RIP: 0033:0x7fb74a55e98e
[  694.568869][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  694.568884][    C1] RSP: 002b:00007fb74b550da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  694.568902][    C1] RAX: ffffffffffffffda RBX: 00007fb74b5516c0 RCX: 00007fb74a55e98e
[  694.568921][    C1] RDX: 0000000000200000 RSI: 00007fb7403f7000 RDI: 0000000000000008
[  694.568934][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  694.568944][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  694.568955][    C1] R13: 00007fb74b550ee0 R14: 00007fb74b550ea0 R15: 00007fb7403f7000
[  694.568975][    C1]  </TASK>
[  694.572200][    C1] Kernel Offset: disabled