last executing test programs:

7m52.447176795s ago: executing program 2 (id=2244):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x80483, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000009040), 0x2080, 0x0)
setresuid(0xee00, 0xee00, 0x0)
renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r4, 0x3af85000)
epoll_create1(0x0)
openat$comedi(0xffffff9c, 0x0, 0x101403, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x181800, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffffffffffffffff, 0x28081)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000"], 0x122}, 0x1, 0x0, 0x0, 0x48084}, 0x604c015)
r6 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00')
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x3c)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffffffffffffff)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000280)={{0x6000, 0x30000, 0x0, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x5, 0xc, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x2}, {0xffff1000, 0x25000, 0xe, 0xf, 0x5, 0x3, 0xc3, 0x6, 0x3, 0x6, 0x7, 0x3}, {0xd000, 0x3000, 0xb, 0xc, 0x7f, 0x6, 0x8, 0x7f, 0x9, 0x2, 0x0, 0x6}, {0x30000, 0x100000, 0x0, 0xd, 0x59, 0xad, 0x5, 0xc, 0xfc, 0x0, 0xf8, 0xe5}, {0xeeee8000, 0x8092000, 0xe, 0xbd, 0x6, 0x7, 0x8, 0x1, 0xbf, 0x7, 0x2, 0x7}, {0x70000, 0x8000000, 0xd, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0xdddd0000, 0xffff, 0xf, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0x8, 0x0, 0xfe}, {0x1, 0xedd8}, {0xffff1003, 0x17}, 0x40019, 0x0, 0x54000, 0x0, 0x300000002, 0x4900, 0xdddd1000, [0x5, 0x2, 0x4000000000000009, 0x7]})
listen(0xffffffffffffffff, 0x9)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628)

7m52.263849605s ago: executing program 2 (id=2245):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4)
bind$inet6(r0, 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4801}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
readv(r2, &(0x7f0000000700), 0x0)
pwritev(r1, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)="010000002b", 0x5}], 0x2, 0x8, 0x4080000)
ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000180)={0x9a0, 0x40, 0x0, 0x3d, 0x4, 0x1, 0x0, 0x4, 0x4, 0x3, 0x20, 0xd, &(0x7f0000000100)=[0x7, 0x4e, 0x8, 0xe0], 0x4, &(0x7f0000000140)="eeff26b9660fdb37bccb36560c8462931300e6b7ef1385821501b2821044dd75c35a6fc85edf347b3699a2ceeec83c0086e09b0cc96f73", 0x37})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4050}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000000), 0xd)

7m52.206628202s ago: executing program 2 (id=2247):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000)
rt_sigtimedwait(&(0x7f0000000000)={[0x5]}, 0x0, 0x0, 0x8)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0)
r3 = io_uring_setup(0x67bb, &(0x7f00000025c0)={0x0, 0x1999, 0x80, 0x1, 0x6e})
close(r3)
landlock_restrict_self(r2, 0xe)

7m51.210773836s ago: executing program 2 (id=2254):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0)

7m49.663189402s ago: executing program 2 (id=2263):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@getpolicy={0x70, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private0}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc}, @policy_type={0xa}]}, 0x70}}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

7m48.553804674s ago: executing program 2 (id=2266):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40000, &(0x7f0000000140)=ANY=[], 0xc, 0xac, &(0x7f0000000200)="$eJzs0rFNxEAQBdC/iBMkSOQEdHA9XAXUcLrQzhwZEbkfmkAipQR3QOCUZJHZDWgB9F6ws18/nPn4en3IkjwuSa31utaU9kud5ufhPE7zYTiPSQ55T1P6vAl/3FVf5yntBvb8eWpd6f26vVzWrVz22Zqnt/wcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D+X+d7pLcjz2cLs/3wEAAP//FC4djA==")
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open(&(0x7f0000000300)='.\x00', 0xc00, 0x21)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000)
flock(r3, 0x6)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
r8 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x5000)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x6a)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x48}]}, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x18, 0x0, 0xfffffffffe000001})

7m33.156206911s ago: executing program 32 (id=2266):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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")
r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18)
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x40000, &(0x7f0000000140)=ANY=[], 0xc, 0xac, &(0x7f0000000200)="$eJzs0rFNxEAQBdC/iBMkSOQEdHA9XAXUcLrQzhwZEbkfmkAipQR3QOCUZJHZDWgB9F6ws18/nPn4en3IkjwuSa31utaU9kud5ufhPE7zYTiPSQ55T1P6vAl/3FVf5yntBvb8eWpd6f26vVzWrVz22Zqnt/wcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8D+X+d7pLcjz2cLs/3wEAAP//FC4djA==")
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open(&(0x7f0000000300)='.\x00', 0xc00, 0x21)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000)
flock(r3, 0x6)
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108)
r8 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x5000)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x6a)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x48}]}, 0x10)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r9, 0xf505, 0x0)
fallocate(r0, 0x0, 0xbf5, 0x2000402)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x18, 0x0, 0xfffffffffe000001})

2m27.666250164s ago: executing program 0 (id=3239):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000019c0)=@newtaction={0x18, 0x76, 0x1, 0x4000006, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8003}, 0x40000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="001d5933b55bd31ac3830ebbee275adf1db2744fe57fb1082c"], 0x1, 0x232, &(0x7f0000000340)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvMGKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyChkc5gPyMziABnEwMAw+U/EvQcskgwiYLPWXArKnHJVlOOf2KmW5avMOu8zzOiYlsbAaDCLg4GBQe+I7kw7A95uJqiZxZVV2Yk5OalFxWcYUM2fzLifSZERpO7M36vBDxjtGLpjGRgZ5Db4qy3+9keqcuOm+sjpVRE1U7ubbi5dH8ewTf/vFROp9xMzwv4/OCSoZZGX/2GejNL3zQ1zPtTUPTFx7GxUnsvfevnvu/cxtcUJakyPxbsK2fgT3LRqPjk7uVk+npte3b6lWHFBVprLxGNTL/5NOL6WgWHyhSe2+jVnDsUrxnBKuVXOjbnrlivItUz9fN0bBoaDUZ8nMjAuZ2RgYmCYGbZzD9Rf7CB/lTdAI4OBmYGBQYWBgYGJgYUhLTMn1cCDgZGBWQPCMWSBqoKpZmLgAEvoJefnpLQzMDKwQiUMljOwwM0wfMzACucYIXOMLRqgGhjaobQKlPaA0suh9GMGBjYGpOQFSzYsYBP6oTyNBpCyisSSkiJDkHIICy5mBBczEoDbzAS1dS4TqueOMzGMglEwCkbBKBgFo2AUjIJRMApGwUgGgAAAAP//DYm1qA==")

2m27.551020382s ago: executing program 0 (id=3240):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

2m26.488050339s ago: executing program 0 (id=3242):
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000001a80))
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x11ffffce1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x6}, 0x1c)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmmsg$inet(r3, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="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", 0x142}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000a80)="759bfef39394a6772f8a3e6cb3eccf817fef4ba2c021404e0e148ddbc36b70d6115c79b1b7cd35676b126dace910ba46cb0260228fc452696a1e2fd90b6693d9d2c952a1804a7ff566ede2f62b62635e85c312914277f7575288785b060acc21951d7f290adb99fe6ae3b07a0e947ec17a6ea06574042d64", 0x78}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000002f40)=[{0x0}, {&(0x7f0000002d00)}, {&(0x7f0000000240)="1d9b36a54812957553802a6166198cffbe01dac555952732a4d7276ed2a4b1d5df0a07a6bb69b28dcbe068cce0f5f7bab01361", 0x33}], 0x3, &(0x7f0000003000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010100}}}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x5, 0x4000001)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0)
copy_file_range(r6, &(0x7f0000000040), r5, &(0x7f00000002c0)=0x401, 0x4, 0x0)

2m26.109283724s ago: executing program 0 (id=3245):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0)
ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000040))
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x12)
r4 = dup(r3)
ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x4)
ioctl$TIOCGPTPEER(r2, 0x5441, 0x40)
close_range(r1, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={<r5=>0x0}, &(0x7f0000000180)=0xc)
r6 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280), r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x8, 0x787, 0xffff, 0x80000001, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x67, 0x0, 0x2, 0x2f, 0x0, @empty, @private=0xa010101}}}})
getpeername$tipc(r6, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10)
syz_open_dev$dri(&(0x7f00000001c0), 0x9, 0x301000)
r7 = syz_open_procfs(r5, &(0x7f0000000140)='net/softnet_stat\x00')
read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$DVB_DEMUX_DMX_QBUF(r7, 0xc0186f3f, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x2, 0x0, 0x4})

2m25.117636036s ago: executing program 0 (id=3252):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

2m24.108368369s ago: executing program 0 (id=3254):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x27, 0x2}, {0x5}}}}, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112710000000000bc701000000000009500000000000000902b781776ede51375403effa2c5eb7d4ad5188fe4bfb9ecf2ff75cf1d5d3ea8a6e8ee4e20518bf3621c0425c2430a1779a4a6f12a4d9b"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000)
fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000000)=0x7fffffffffffffff, 0x12)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="754d02c3150a0104000000000800034000001a0109000200330000000000000100"], 0x28}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
splice(r1, 0x0, r2, 0x0, 0x200000000005, 0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)

2m8.105676336s ago: executing program 33 (id=3254):
syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_ecred_reconf_rsp={{0x1a, 0x27, 0x2}, {0x5}}}}, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000000000007112710000000000bc701000000000009500000000000000902b781776ede51375403effa2c5eb7d4ad5188fe4bfb9ecf2ff75cf1d5d3ea8a6e8ee4e20518bf3621c0425c2430a1779a4a6f12a4d9b"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40000)
fcntl$setpipe(r0, 0x407, 0x7fffffffffffffff)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_int(r2, &(0x7f0000000000)=0x7fffffffffffffff, 0x12)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="754d02c3150a0104000000000800034000001a0109000200330000000000000100"], 0x28}}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
splice(r1, 0x0, r2, 0x0, 0x200000000005, 0x6)
socket$inet_mptcp(0x2, 0x1, 0x106)

19.476600555s ago: executing program 4 (id=3601):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x15, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0xf000, 0x0, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r5, 0x4})

16.106949721s ago: executing program 4 (id=3609):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xd4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = syz_open_procfs(0x0, 0x0)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

15.022167435s ago: executing program 4 (id=3612):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000001840), 0x0, &(0x7f0000000600)=""/177, 0xb1}}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/crypto\x00', 0x0, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0x1d5}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000000)={0xfff2, 0xfff1, 0x81, 0xff}, 0x8)
sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x8000)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, 0x0, &(0x7f0000000300))
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r2)
sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24100000", @ANYRES16=r8, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40800)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r10, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r10, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_open_dev$sndctrl(&(0x7f00000007c0), 0x0, 0x44540)
setsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, &(0x7f0000000080)={0x1}, 0x2)
r11 = landlock_create_ruleset(&(0x7f0000000080)={0xc0c8, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r11, 0x0)
open(&(0x7f0000000080)='./file1\x00', 0x48141, 0x0)

11.286619135s ago: executing program 5 (id=3618):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100))
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
socket$inet6_sctp(0xa, 0x0, 0x84)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r4, &(0x7f0000001900)=[{{&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001940)=""/253, 0xfd}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f00000004c0)=""/226, 0xe2}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000000040)=""/9, 0x9}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/16, 0xffffffe5}, {&(0x7f0000001700)=""/243, 0xf3}], 0xa, &(0x7f00000018c0)=""/49, 0x31}, 0xf}], 0x1, 0x2, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x3, 0x841)
syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
close_range(r5, 0xffffffffffffffff, 0x0)

10.906127347s ago: executing program 4 (id=3619):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x15, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0xf000, 0x0, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r5, 0x4})

9.00397226s ago: executing program 6 (id=3624):
unshare(0x20000400)
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f00000000c0)={[], [{@flag='async'}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @subvolid=0x3})
socket$inet6_mptcp(0xa, 0x1, 0x106)

8.833287064s ago: executing program 1 (id=3626):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x462b5000) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYBLOB="9b5c76cb8d818d359e3f0d7eb38dfbc1433ba868750e29140dcf8fa34c89fd74014872abe9cdf0d7188321f7530918994bb222fe7a9829a7324f5240b6754688e1247682e84fe09c819bf92f0cf3715079deb30a0575a8a8605b9d0931469db69928f6c3844507fb5c1a0edfb2b1f9816b46e17bae8a0f6bb954bceba11a61b165054802bd612a042b2bfe614eb16102cc34f647f6cfe96eaa530eb95b3a85c51f1804833869a1e27d1bf89315ad88e68d5ddac4142b1415f41ee1381d4ad6a7ba5c0a35efb020fc1ccf9d63232b447bb136e197e578"], 0x1, 0x446c, &(0x7f0000004480)="$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") (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x34) (async)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x0) (async)
r3 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)='G', 0x1, 0xfffffffffffffffb)
keyctl$update(0x2, r3, &(0x7f0000000000)="11868a0fceae284c0000000100000010", 0x10) (async)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r6=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000080)={0x0, r6, r5}) (async)
add_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="2652a96326cee069aa53c15edea4c161af8b48a2fe643240a9faa8af0c3868c9aa56c3904a4afcc004e935636d4ce3c114ee1a3c01621f872c91ea069025d4437595216f0b4ba4249ecd14ef26c3300c7b6eb2fd7f3288050992721d9195f71527db5a0a3440482e3b60dc79ed5ab389025953c810245a8a08", 0x79, r3)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0x0, r7, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x7, 0xfffffffe}}) (async)
syz_clone(0x18a24000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x0, 0x4, 0x0, 0xf45, 0xc})

8.730108609s ago: executing program 5 (id=3627):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, 0x10000000, {0x800000000000040, 0xd08, 0x0, 0x100, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x6e, 0x0, 0x0, 0x10, 0x1}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r2, 0x80140912, 0x200000000005)

8.562694183s ago: executing program 5 (id=3629):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xd4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$swradio(0x0, 0x1, 0x2)
r4 = syz_open_procfs(0x0, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7.586923383s ago: executing program 4 (id=3631):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000300))
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0xb49e, 0x10, 0x3, 0x800}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0)

7.390046107s ago: executing program 5 (id=3632):
socket(0x10, 0x803, 0x6)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x10000)
ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000140))
syz_open_procfs$namespace(0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x9, 0x180, 0x2, 0x10, 0xed, 0x100000001, 0x1, 0x5, 0xfffffffffffffffd, 0x29, 0x0, 0x6, 0x0, 0xbd9], 0xffff1001, 0x53100})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x6, 0xa7c, 0x68ff, 0x7, 0x8000000009, 0x803, 0x0, 0x9, 0x7ff], 0xeeee8000, 0xd1a07})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc}, 0x94)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x8000000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x30000, 0x3000, 0x9, 0x0, 0x1, 0x5, 0x75, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x4, 0x6, 0x5, 0x7f, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0xd000, 0xf, 0x3, 0x16, 0x86, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x4}, {0x3000, 0x18227000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x42, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xe, 0x7, 0x91}, {0xeeee0000, 0x1}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x106024, 0x2, 0x0, 0x8080000, [0x6800000000000000, 0x4, 0x3, 0x8]})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000004c40)=""/102376, 0x18fe8)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)

7.221037998s ago: executing program 1 (id=3633):
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newchain={0x24, 0x64, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xd}, {0x7, 0x8}, {0x0, 0xffff}}}, 0x24}}, 0x80000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x800, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008400}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, &(0x7f0000001900), 0x4)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x400400, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setrlimit(0x1, &(0x7f0000000180)={0x200, 0x5})
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r7 = io_uring_setup(0x1d4c, &(0x7f0000000040)={0x0, 0xbf94, 0xc000, 0x0, 0x58})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0)

6.954551366s ago: executing program 6 (id=3634):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x12, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x2665, &(0x7f00000002c0)={0x0, 0x3e9a, 0x2000, 0x3, 0x384}, &(0x7f0000000040), &(0x7f0000000240)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd_index=0xa, 0x0, 0x0, 0xffffffdc, 0x2, 0x1, {0x0, r4}})
syz_io_uring_submit(r1, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000400)="9365d1468cb7838b4ada77ce484bf6427b46656cd05743d5b3a92b785700ece43641ccd0c9f1eaabfed6ae66f4869b04281fd057563b7faa2e6191813a11c2f591d85a3df99ac91ff204c73c8d8a79d8bcd761bf272a67b57cd13599fb9c46839f3e8891f1d4215e4a48a5be45196e04d3f06526767bb5241f3ecb55ea3e4c4d41", 0x81, 0x40800, 0x1, {0x0, r4}})
write(r0, &(0x7f0000000340)="18000000010003", 0x7)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x20000045)
setuid(0xee00)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x400, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x3c, 0x1, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x3, {0x0, 0x67995b4bc3b1f69e}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000)
r6 = syz_io_uring_setup(0x693f, &(0x7f0000000100)={0x0, 0x888b, 0x400, 0x20000000, 0x1ad, 0x0, r2}, &(0x7f0000000080), &(0x7f00000000c0))
setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x8000000000000000})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r8, 0x0)
mbind(&(0x7f00004c2000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x1fc9, 0x0)
mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3)
mremap(&(0x7f0000984000/0x3000)=nil, 0x3000, 0x2000, 0xf, &(0x7f00004d9000/0x2000)=nil)
mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)

5.521909588s ago: executing program 1 (id=3635):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@uid}, {@gid}, {}, {@nobarrier}, {@barrier}, {@uid}, {@nls={'nls', 0x3d, 'cp863'}}]}, 0x44, 0x6ff, &(0x7f0000000240)="$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")
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1a29143, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7)
fchown(r2, 0x0, 0xee01)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f0000000040)={0x8, 'bridge_slave_0\x00', {'veth1_to_team\x00'}, 0x2c})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'wg0\x00', 0x3}, 0x18)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\x8f\x98\xb9\x89Q\xa4Pxy0\x01\x8cC\x1f|\xad\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file1\x00', 0x0, 0x1a39143, 0x0)

5.34727635s ago: executing program 5 (id=3637):
unshare(0x8000600)
mq_open(&(0x7f00000000c0)='ns\xbf\x12\xe1\v\xc8E\xe0\x03r\x917kj\x9cL\xceZ\x99\xf8Q%#-\xd3\xd2\x13\xe8\xdc\xe1\xfd\xde\xef\xf2\xa7\xd2\xab\x97\xc2e\'\xfc\x10\x85\x03\x00\x00\x002\xb80\x10_\\KA\x97\xb7.[O\xd56\xec^F\xdfT\xda\x9817\"\xf5h\xc0\xf8\a\x9e\xce\xa9&\xffq\xebA\x98\x96~\x17|\xc9xR\\z\x9a\x8cRJ\x85\\u\xb2\\\xedB4\xb5z\xbb\xee\xbd\x96\x19\xd1\x98\xeb\xe8\xc1u\x8b\xf8hc\x81#\r\xe8\xf8%\xd9\x7f\r\x12M\x00', 0x40, 0x31, 0x0)
unshare(0xc040400)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000000200)=0x33)
r1 = socket(0x2, 0x2, 0x1)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./bus\x00', 0x3210052, &(0x7f0000000880)={[{}, {@nodiscard}, {@norecovery}, {@errors_continue}, {}, {@norecovery}, {@norecovery}, {@errors_remount_ro}], [], 0x2c}, 0x3, 0xf0b, &(0x7f0000001e40)="$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")
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200000, &(0x7f0000000300), 0x21, 0x4bd, &(0x7f00000006c0)="$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")
openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x81, 0xc}, 0x18)
mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x28, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711008000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x7, 0x3, 0x17, "3eccd8000000000000000010000000040100"})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)={0x18, 0x36, 0x107, 0x3, 0x2000000, {0x1, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc010)
bind$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x84000)
r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x87f1, 0x8000)
r6 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
fsmount(r6, 0x0, 0x2)
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0xa4f)
read$FUSE(r5, &(0x7f00000043c0)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="74726102131d44346c5d44ebbd01ec07786eb3f13ada3698544bbc1bfb05e7536f", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)

4.478525406s ago: executing program 4 (id=3639):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) (async)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x5008, 0x0) (async)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f00000000c0)) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
r4 = accept4$inet6(r3, 0x0, &(0x7f0000000000), 0x80800)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x0, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x402e6, 0x5ef0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800000000}, {0xfffffffffffffffd, 0x2, 0x0, 0x2000000002}, 0x0, 0xfffffffe, 0x1}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x1, 0x0, 0xfffffc01}}, 0xe8) (async)
listen(r3, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

3.919427355s ago: executing program 3 (id=3640):
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
getrlimit(0x1, &(0x7f0000000080))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xd4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000005f30cce80d1e81808515d62c42872f0000007f000001000000000000000000c64d000000000000000000000092010000000000000000001c250800000000000200000000000010f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000001f0028fb3b"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$swradio(0x0, 0x1, 0x2)
r2 = syz_open_procfs(0x0, 0x0)
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040))
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x0, 0x40000000, 0xff, 0x8c, 0x1}, 0x50)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffff7fc, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000580)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@nobh}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"])

3.47460565s ago: executing program 5 (id=3641):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x15, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000000c0)={0xf000, 0xf000, 0x0, r5})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x0, r5, 0x4})

3.120193286s ago: executing program 3 (id=3642):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c040}, 0xd4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_open_dev$swradio(0x0, 0x1, 0x2)
r4 = syz_open_procfs(0x0, 0x0)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.066772161s ago: executing program 6 (id=3643):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x2, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x6, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x80020200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0x7, 0xfffffff8, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0xffffffff, 0x7, 0x1, 0x8, 0x3, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x803, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7f, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x4, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x1000004, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x81, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.10969247s ago: executing program 1 (id=3644):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000000600000000060015000400000014001680100008800c00038005"], 0x38}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = fsmount(r0, 0x0, 0x0)
openat$cgroup_subtree(r2, &(0x7f0000000280), 0x2, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2000000008, 0xfffffffffffffffd, 0x126f, 0x0, 0x1000001000, 0x6}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x5, 0xf, 0x80000002}, 0x0, 0x0)

2.106657516s ago: executing program 3 (id=3645):
open(0x0, 0x40, 0x1a)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendto$packet(r0, &(0x7f0000000000)="dbe104b35716e67da422221d3286", 0xe, 0x24000894, &(0x7f0000000100)={0x11, 0x7, r1, 0x1, 0x5, 0x6, @local}, 0x14)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x9}, {0xd, 0x8}, {0xb}}}, 0x24}}, 0x20000000)

1.934271305s ago: executing program 1 (id=3646):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0xc142, 0x801)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x4, r2})
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e24, 0x8c, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffcb91}}, 0x0, 0x0, 0xc, 0x0, "3f114438efdaca16d374b49a08003535d5bd9db3c8572560f4d1be5cd41f771666fd81baadb27900"}, 0xd8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f00000003c0)="b9c0060000b848000000ba000000000f30b95d0b00000f3266b81a010f00d065360f35f30f09660f3803c166ba610066ed660f38816001440f20c03501000000440f22c066ba4200ec", 0x49}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x8, 0x9, 0x0, 0x10000, 0x9, 0x9, 0xc4, 0x7, 0x0, 0x3, 0x7f, 0x0, 0xfffffff0, 0x5, 0x1, 0x5, 0xf, 0x1c, '\x00', 0x5, 0x1})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.907394889s ago: executing program 6 (id=3647):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@minixdf}, {}, {@oldalloc}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@bh}, {@barrier_val={'barrier', 0x3d, 0xaa72}}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=")
r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000000))
mknodat(r0, &(0x7f0000000140)='./bus\x00', 0x100, 0xfffffffe)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x28, 0x36, 0x117, 0xfffffffc, 0x814000, {0x1, 0x7c}, [@typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)

1.72181242s ago: executing program 3 (id=3648):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108)
pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x455365a2136d6b91)

1.535256625s ago: executing program 3 (id=3649):
syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, <r0=>0x0})
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$nl_route(0x10, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102379, 0x18feb)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, &(0x7f00000003c0))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="94000000885f20e2caef03489bbd92be1932f7f3b5678b2351234e72eee24f4c08044464870a5d030e", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000370000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000000000a001a0008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x4000885)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00')
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0001002cbd700000000084d6200017"], 0x1c}, 0x1, 0x0, 0x0, 0x481}, 0x4008881)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@deltfilter={0x2c, 0x2d, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0xfff2}, {0xfff3, 0x2}, {0xfff1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x80}}]}, 0x2c}}, 0x0)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x1, 0x1, r6, 0x7f}, 0xc)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0c8c"])
syz_fuse_handle_req(r7, 0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.350757248s ago: executing program 6 (id=3650):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a)
recvmmsg(r1, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c8e}, {{0x0, 0x0, 0x0}, 0xa}], 0x2, 0x40, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

1.350252174s ago: executing program 3 (id=3651):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$pagemap(r3, &(0x7f00000001c0))
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048055}, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8010, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3, 0x0, 0x0)
pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x5)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\b\x00', 0x2)

529.394024ms ago: executing program 6 (id=3652):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e54452447400400f50400000014bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000"], 0x78)

433.811172ms ago: executing program 1 (id=3653):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = memfd_create(&(0x7f0000000880)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6ID\x93\xe0\x86a,4\xb3<\xfb\xca\xf1Pj\xbf\x12\xac\xcd\xcd\xde{\x14N\xd9\xe1Wz\xe3\xe9\x1f\xc7\xdd\x192\x9a,\bcHn\xbb\xfa\x8f\xef\xaco\xcb\xdcgN\xc3\x1f%\x9f\xf7@\xd0\xa2\x8b\xc93f\xec~\xc9\xc6T\x8b\x84D\xa7Aj0\n\x89\x1d9a\x19\x10N\xe4C\x1cl\xe0cL\xb4A\xc4P7\xe2)$\xe1\xb8\xf1V\xa0`\xec\xd5\x02\xc9\xda^\x8f\xc8\x0e\x85\xcc\x02\xdb\xec\x137\x87nr\xa6\xeck\xa5 \xe9.`\xc3\xb8\xf1\xe9V\xfek^\xfcP\xfd\x05\x03i\xd1\a^\xc7\\}F\xd6\xa1\xf7\xe0\\\xa4\xf6+\xf3\x95\xe3\x144\xac/\x10\\]R.\xb5\x93+D\xa0\x9cX\x04Q\xc0\xe6:\xda\xb1Z\xa0\x91\xc5~\xc7\xf7\xac\x83\xa89\xa4\xd0\xc7\x04\xa9\x9a\xb6U/\xc5\xf3\x1e\x1c\x0f\xdb\xa87\xec\x1f\xc0OmJ\xe7\x91~Mr-\x80\xa7\xe7\x19Ev\xdf\xd5\x1a\\\x19\x8cq\xc2\xe5\xfc\x1c\xd6b\xdc\x10\xca?\x95\xfe\xd1S!\xb7\xb6\xa6\xf38\xfd\xbd\x9fT\xf5\v1\xb2\xc7ME\xa1\xe1\xa5\xc42\xd2\xb1\xc9\xc2e\x8f~\xbar;o\xd2\x80[\xcaqh\x92\xc3\x8e\xb3 \xa3I\x96\x8d\xd3^Q\x15\x95K\x81\xab\xa3\x8b\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xac\xfeqo\xf5\xdb\x9fk\xda\xd5d~\xb4;n\xde\x17\"SA,~\x94e}\xa2\xae?\xde\x11\xe0\x8a\xd4\xf2uZ\x90\xe2\x16\xbb\x01\xe2QI\x80\xc1\xab\x01\x8f\xa2k\xe5\x90\xd4\x85=\x13\xd3\xc3\xc7\x7fb6\xef\x17}x\xe0\xe2\xc2\x92_\x85\xc0\xa8Da\xc1\xaf\xa1\xa9\x80m', 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msync(&(0x7f00000a6000/0x3000)=nil, 0x3000, 0x4)
fcntl$addseals(r1, 0x409, 0x8)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x3a)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
r5 = eventfd(0x228)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_mount_image$btrfs(&(0x7f00000002c0), &(0x7f0000005600)='./file0\x00', 0x114009, &(0x7f0000001400)={[{@fragment_data}], [{@flag='async'}, {@pcr={'pcr', 0x3d, 0xe}}, {@smackfsdef={'smackfsdef', 0x3d, '\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6ID\x93\xe0\x86a,4\xb3<\xfb\xca\xf1Pj\xbf\x12\xac\xcd\xcd\xde{\x14N\xd9\xe1Wz\xe3\xe9\x1f\xc7\xdd\x192\x9a,\bcHn\xbb\xfa\x8f\xef\xaco\xcb\xdcgN\xc3\x1f%\x9f\xf7@\xd0\xa2\x8b\xc93f\xec~\xc9\xc6T\x8b\x84D\xa7Aj0\n\x89\x1d9a\x19\x10N\xe4C\x1cl\xe0cL\xb4A\xc4P7\xe2)$\xe1\xb8\xf1V\xa0`\xec\xd5\x02\xc9\xda^\x8f\xc8\x0e\x85\xcc\x02\xdb\xec\x137\x87nr\xa6\xeck\xa5 \xe9.`\xc3\xb8\xf1\xe9V\xfek^\xfcP\xfd\x05\x03i\xd1\a^\xc7\\}F\xd6\xa1\xf7\xe0\\\xa4\xf6+\xf3\x95\xe3\x144\xac/\x10\\]R.\xb5\x93+D\xa0\x9cX\x04Q\xc0\xe6:\xda\xb1Z\xa0\x91\xc5~\xc7\xf7\xac\x83\xa89\xa4\xd0\xc7\x04\xa9\x9a\xb6U/\xc5\xf3\x1e\x1c\x0f\xdb\xa87\xec\x1f\xc0OmJ\xe7\x91~Mr-\x80\xa7\xe7\x19Ev\xdf\xd5\x1a\\\x19\x8cq\xc2\xe5\xfc\x1c\xd6b\xdc\x10\xca?\x95\xfe\xd1S!\xb7\xb6\xa6\xf38\xfd\xbd\x9fT\xf5\v1\xb2\xc7ME\xa1\xe1\xa5\xc42\xd2\xb1\xc9\xc2e\x8f~\xbar;o\xd2\x80[\xcaqh\x92\xc3\x8e\xb3 \xa3I\x96\x8d\xd3^Q\x15\x95K\x81\xab\xa3\x8b\xcf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdd\xac\xfeqo\xf5\xdb\x9fk\xda\xd5d~\xb4;n\xde\x17\"SA,~\x94e}\xa2\xae?\xde\x11\xe0\x8a\xd4\xf2uZ\x90\xe2\x16\xbb\x01\xe2QI\x80\xc1\xab\x01\x8f\xa2k\xe5\x90\xd4\x85=\x13\xd3\xc3\xc7\x7fb6\xef\x17}x\xe0\xe2\xc2\x92_\x85\xc0\xa8Da\xc1\xaf\xa1\xa9\x80m'}}]}, 0x1, 0x55a1, &(0x7f000000ac40)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff)
write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {0x7, 0x5, 0x0, 0xfffa}, 0x1d, [0x2, 0xc95a, 0x6, 0x9, 0x7f, 0x401, 0x1, 0x7f, 0x6, 0xfffffff5, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d3b, 0x1dd2, 0x1000, 0x7, 0xffffffff, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x0, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x9, 0x5, 0x7fff, 0x4c74, 0x23, 0x4, 0x7, 0xa, 0x6, 0x71, 0x7, 0x1, 0x3, 0x0, 0x5, 0x9, 0x91, 0x6, 0xfffffffa, 0x3, 0xb, 0x4, 0x8, 0xfffffffe, 0x80, 0x0, 0xa, 0x6, 0x8, 0xfffffff9, 0x1, 0x40], [0x10000007, 0xc, 0x12f, 0x8000, 0x10, 0x1, 0x129432e2, 0xf, 0xf11, 0x3, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x7691, 0xe4, 0x5, 0x80, 0x1000000e, 0x312, 0xbb3e, 0xea4, 0xa, 0x4, 0x3fff, 0x8000, 0xb, 0x401, 0x39f, 0x6, 0xfffffffd, 0x100, 0x1005, 0x2, 0x5f31, 0x3, 0x0, 0x6, 0x8, 0x9, 0x4, 0x9, 0x7fff, 0xe5c8, 0x3ff, 0x5, 0x0, 0x1, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x8, 0x8, 0x1, 0x7, 0xb, 0x9, 0x48c92690, 0x3, 0xff], [0x7, 0x6, 0x4, 0x64e, 0xfffffdfe, 0x80010002, 0x8d2, 0x9, 0x100, 0x7eff, 0x0, 0x5, 0xc, 0x0, 0x5, 0x5, 0x9, 0x1ef, 0x5, 0x7f, 0x6, 0x3, 0xffff893e, 0x5, 0x80000b, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x2, 0x3b, 0x210, 0x200, 0x82, 0x3, 0x0, 0x14, 0x0, 0x60000000, 0x7, 0x4007, 0x5, 0xffff, 0x54fe12d2, 0x0, 0x200, 0xffffffff, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0x3e, 0x120000, 0x3, 0x5, 0x9, 0x4, 0x800], [0xffffffff, 0xbb2f, 0x0, 0x7, 0x5, 0x938, 0x6, 0x10006, 0x20000000, 0x5, 0x3, 0x1ff, 0x6, 0x401, 0x7, 0x3, 0x800, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7fff7ffe, 0x5, 0x80000001, 0xc8, 0x3, 0x3, 0x10000, 0x0, 0x8, 0x100, 0x80004, 0x7fff, 0x2, 0x4, 0x6, 0x100, 0x0, 0x5, 0x184d99e8, 0x2b91, 0xa1f, 0x7f, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x28, 0xb1c, 0x4c400000, 0xfffffffa, 0xffff3441, 0xfff]}, 0x45c)
ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x0, 0x0, 0x100000})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r5})
r7 = eventfd2(0x7, 0x0)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0xa, 0x4000011, r6, 0x0)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000041400000a000000000800000e9e71de9ac3fcb42abd904a8e58934e45f1bf3980062d5e7830542db29ecacf67bc2f8fa54d6c29c99700b54f8cfe1dac2a6173d5de3babbbe47dfb646c77b9176d143b4faf48a6d8deb95ae50782c5000000000000", @ANYRES32=r6, @ANYBLOB="b100"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="02000000ffffffff00"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000200), &(0x7f0000000280)=r6}, 0x20)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000617000/0x3000)=nil, 0x3000, 0x2000009, 0x100010, r6, 0x10000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0xa, 0x1f, r4, 0x0, &(0x7f00000012c0)={&(0x7f0000000b40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/132, 0x84}, {&(0x7f0000000380)}, {&(0x7f0000000dc0)=""/209, 0xd1}, {&(0x7f0000000bc0)=""/56, 0x38}, {&(0x7f0000000ec0)=""/83, 0x53}, {&(0x7f0000000f40)=""/170, 0xaa}, {&(0x7f0000001000)=""/246, 0xf6}, {&(0x7f0000001100)=""/64, 0x40}, {&(0x7f0000000c00)=""/1, 0x1}, {&(0x7f0000001300)=""/219, 0xdb}], 0xa, &(0x7f0000001240)=""/126, 0x7e}, 0x0, 0x0, 0x1, {0x1}})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r7})

0s ago: executing program 34 (id=3652):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e54452447400400f50400000014bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000"], 0x78)

kernel console output (not intermixed with test programs):

75.778297][T18132] team0: Device gtp1 failed to enter team mode
[ 1175.786878][T18132] team0: Device gtp1 failed to enter team mode
[ 1175.838110][T18137] kthread_run failed with err -4
[ 1175.932948][ T5895] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1176.021602][ T1039] tipc: Left network mode
[ 1176.170417][T18070] hsr_slave_0: entered promiscuous mode
[ 1176.189064][T18070] hsr_slave_1: entered promiscuous mode
[ 1176.207011][T18070] debugfs: 'hsr0' already exists in 'hsr'
[ 1176.216413][T18070] Cannot create hsr debugfs directory
[ 1176.255322][ T5144] Bluetooth: hci3: command tx timeout
[ 1176.370811][T18146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1176.392756][T18146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1176.526508][ T5895] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.5-1/input0
[ 1176.760110][ T5909] usb 6-1: USB disconnect, device number 23
[ 1176.818391][T18160] fido_id[18160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1177.098977][ T5827] usb 4-1: USB disconnect, device number 99
[ 1177.146999][ T1039] hsr_slave_0: left promiscuous mode
[ 1177.156325][ T1039] hsr_slave_1: left promiscuous mode
[ 1177.209962][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1177.246996][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1177.320359][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1177.340006][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1177.374222][ T1039] veth1_vlan: left promiscuous mode
[ 1177.391637][ T1039] veth0_vlan: left promiscuous mode
[ 1177.453904][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.462917][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.100262][ T1039] pimreg (unregistering): left allmulticast mode
[ 1178.327311][ T5144] Bluetooth: hci3: command tx timeout
[ 1178.892174][ T1039] team0 (unregistering): Port device team_slave_1 removed
[ 1179.027734][ T1039] team0 (unregistering): Port device team_slave_0 removed
[ 1179.383592][T18209] loop5: detected capacity change from 0 to 1764
[ 1179.407949][T18209] iso9660: Unknown parameter 'defcontext'
[ 1179.821797][T18213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3145'.
[ 1179.909252][T18213] netlink: 'syz.5.3145': attribute type 10 has an invalid length.
[ 1180.021672][T18213] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1180.029238][T18213] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1180.051378][T18213] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1180.058692][T18213] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1180.066131][T18213] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1180.073356][T18213] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1180.177666][T18213] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1180.818429][T18228] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3149'.
[ 1180.926683][T18228] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3149'.
[ 1181.560808][ T1039] IPVS: stop unused estimator thread 0...
[ 1182.968063][T18070] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1183.049144][T18070] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1183.150890][T18070] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1183.213740][T18070] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1183.549373][T18271] FAULT_INJECTION: forcing a failure.
[ 1183.549373][T18271] name failslab, interval 1, probability 0, space 0, times 0
[ 1183.592895][T18271] CPU: 1 UID: 0 PID: 18271 Comm: syz.5.3155 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1183.592929][T18271] Tainted: [L]=SOFTLOCKUP
[ 1183.592937][T18271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1183.592947][T18271] Call Trace:
[ 1183.592956][T18271]  <TASK>
[ 1183.592964][T18271]  dump_stack_lvl+0xe8/0x150
[ 1183.592996][T18271]  should_fail_ex+0x412/0x560
[ 1183.593025][T18271]  should_failslab+0xa8/0x100
[ 1183.593050][T18271]  __kmalloc_cache_noprof+0x88/0x660
[ 1183.593072][T18271]  ? tcp_sendmsg_fastopen+0x1de/0x5e0
[ 1183.593110][T18271]  tcp_sendmsg_fastopen+0x1de/0x5e0
[ 1183.593136][T18271]  mptcp_sendmsg_fastopen+0x17d/0x580
[ 1183.593166][T18271]  mptcp_sendmsg+0x17af/0x19d0
[ 1183.593187][T18271]  ? unwind_next_frame+0xa5/0x23c0
[ 1183.593229][T18271]  ? aa_sk_perm+0x6d5/0x900
[ 1183.593255][T18271]  ? __pfx_mptcp_sendmsg+0x10/0x10
[ 1183.593278][T18271]  ? inet_send_prepare+0x5c/0x270
[ 1183.593302][T18271]  ? inet6_sendmsg+0x101/0x120
[ 1183.593339][T18271]  sock_sendmsg_nosec+0x8e/0x1d0
[ 1183.593367][T18271]  ____sys_sendmsg+0x589/0x8c0
[ 1183.593403][T18271]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1183.593443][T18271]  ? import_iovec+0x73/0xa0
[ 1183.593482][T18271]  ___sys_sendmsg+0x2a5/0x360
[ 1183.593515][T18271]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1183.593580][T18271]  ? __fget_files+0x2a/0x420
[ 1183.593606][T18271]  ? __fget_files+0x3a0/0x420
[ 1183.593644][T18271]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1183.593676][T18271]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1183.593715][T18271]  ? __pfx_ksys_write+0x10/0x10
[ 1183.593745][T18271]  do_syscall_64+0x14d/0xf80
[ 1183.593762][T18271]  ? trace_irq_disable+0x3b/0x150
[ 1183.593787][T18271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.593807][T18271]  ? clear_bhb_loop+0x40/0x90
[ 1183.593831][T18271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1183.593851][T18271] RIP: 0033:0x7f43e819bf79
[ 1183.593871][T18271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1183.593887][T18271] RSP: 002b:00007f43e906d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1183.593909][T18271] RAX: ffffffffffffffda RBX: 00007f43e8416090 RCX: 00007f43e819bf79
[ 1183.593923][T18271] RDX: 0000000020008001 RSI: 0000200000000140 RDI: 0000000000000003
[ 1183.593935][T18271] RBP: 00007f43e906d090 R08: 0000000000000000 R09: 0000000000000000
[ 1183.593947][T18271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1183.593959][T18271] R13: 00007f43e8416128 R14: 00007f43e8416090 R15: 00007ffe359bf308
[ 1183.593994][T18271]  </TASK>
[ 1183.881269][T18070] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1183.901588][T18070] 8021q: adding VLAN 0 to HW filter on device team0
[ 1183.945702][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1183.953011][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1184.113232][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.120618][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1185.343786][T18300] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1185.351504][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1185.475134][ T5918] IPVS: starting estimator thread 0...
[ 1185.632293][T18301] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1186.690355][T18315] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3162'.
[ 1186.794302][T18315] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3162'.
[ 1187.177226][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1189.651172][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 180 seconds
[ 1189.662103][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 180 seconds
[ 1189.673751][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 180 seconds
[ 1189.687798][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 180 seconds
[ 1190.013089][T18070] veth0_vlan: entered promiscuous mode
[ 1190.175676][T18070] veth1_vlan: entered promiscuous mode
[ 1190.328387][T18070] veth0_macvtap: entered promiscuous mode
[ 1190.362325][T18070] veth1_macvtap: entered promiscuous mode
[ 1190.446150][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1190.540602][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1190.793408][ T6078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.826899][ T6078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.879692][ T6078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1190.942346][ T6078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1192.078747][ T6079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.132888][ T6079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.259672][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1192.276757][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1192.927078][  T797] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1193.088834][  T797] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[ 1193.111069][  T797] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.160368][  T797] usb 1-1: config 0 has no interface number 0
[ 1193.187407][  T797] usb 1-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1193.239037][  T797] usb 1-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1193.252562][ T5909] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[ 1193.276132][  T797] usb 1-1: config 0 interface 106 has no altsetting 0
[ 1193.287242][  T797] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1193.296977][  T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.350783][  T797] usb 1-1: config 0 descriptor??
[ 1193.400886][  T797] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1193.427008][ T5909] usb 2-1: Using ep0 maxpacket: 8
[ 1193.438608][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.456700][ T5909] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1193.484935][ T5909] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1193.494712][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.504104][ T5909] usb 2-1: Product: syz
[ 1193.508797][ T5909] usb 2-1: Manufacturer: syz
[ 1193.513476][ T5909] usb 2-1: SerialNumber: syz
[ 1193.611855][ T5909] cdc_ether 2-1:1.0: skipping garbage
[ 1193.630265][ T5909] usb 2-1: bad CDC descriptors
[ 1193.661076][ T5909] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1193.669431][ T5909] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1193.771921][T18410] autofs4:pid:18410:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[ 1194.016291][T18411] team0: Device gtp0 is of different type
[ 1194.052049][  T797] usb 2-1: USB disconnect, device number 82
[ 1194.573529][   T95] usb 1-1: Failed to submit usb control message: -110
[ 1194.583056][   T95] usb 1-1: unable to send the bmi data to the device: -110
[ 1194.604841][   T95] usb 1-1: unable to get target info from device
[ 1194.631872][   T95] usb 1-1: could not get target info (-110)
[ 1194.654469][   T95] usb 1-1: could not probe fw (-110)
[ 1196.897950][   T30] audit: type=1326 audit(1771083164.375:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1196.930236][T18435] loop5: detected capacity change from 0 to 64
[ 1196.937322][T18435] hfs: Unknown parameter ''
[ 1196.957961][ T5895] usb 1-1: USB disconnect, device number 73
[ 1197.025610][   T30] audit: type=1326 audit(1771083164.375:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1197.144497][   T30] audit: type=1326 audit(1771083164.375:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.027751][   T30] audit: type=1326 audit(1771083164.375:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43e815c84e code=0x7ffc0000
[ 1198.068696][   T30] audit: type=1326 audit(1771083164.375:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.306144][   T30] audit: type=1326 audit(1771083164.375:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.436885][   T30] audit: type=1326 audit(1771083164.375:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.556727][   T30] audit: type=1326 audit(1771083164.375:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.706790][   T30] audit: type=1326 audit(1771083164.375:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.748698][   T30] audit: type=1326 audit(1771083164.375:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18430 comm="syz.5.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f43e819bf79 code=0x7ffc0000
[ 1198.867850][T18458] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3186'.
[ 1198.918383][T18458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3186'.
[ 1198.967367][T18458] GUP no longer grows the stack in syz.1.3186 (18458): 200000006000-200000008000 (200000004000)
[ 1198.978020][T18458] CPU: 0 UID: 0 PID: 18458 Comm: syz.1.3186 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1198.978053][T18458] Tainted: [L]=SOFTLOCKUP
[ 1198.978060][T18458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1198.978071][T18458] Call Trace:
[ 1198.978080][T18458]  <TASK>
[ 1198.978090][T18458]  dump_stack_lvl+0xe8/0x150
[ 1198.978125][T18458]  fixup_user_fault+0x637/0x6f0
[ 1198.978161][T18458]  fault_in_user_writeable+0x71/0xd0
[ 1198.978188][T18458]  futex_lock_pi+0x800/0xb00
[ 1198.978231][T18458]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1198.978291][T18458]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1198.978342][T18458]  ? irqentry_exit+0x59e/0x620
[ 1198.978367][T18458]  do_futex+0x292/0x420
[ 1198.978399][T18458]  ? __pfx_do_futex+0x10/0x10
[ 1198.978445][T18458]  __se_sys_futex+0x3a8/0x450
[ 1198.978469][T18458]  ? irqentry_exit+0x59e/0x620
[ 1198.978495][T18458]  ? __pfx___se_sys_futex+0x10/0x10
[ 1198.978521][T18458]  ? rcu_is_watching+0x15/0xb0
[ 1198.978557][T18458]  ? __x64_sys_futex+0x21/0xf0
[ 1198.978586][T18458]  do_syscall_64+0x14d/0xf80
[ 1198.978607][T18458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1198.978628][T18458]  ? clear_bhb_loop+0x40/0x90
[ 1198.978654][T18458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1198.978674][T18458] RIP: 0033:0x7f8d5519bf79
[ 1198.978694][T18458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1198.978711][T18458] RSP: 002b:00007f8d55faf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1198.978733][T18458] RAX: ffffffffffffffda RBX: 00007f8d55416090 RCX: 00007f8d5519bf79
[ 1198.978748][T18458] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000
[ 1198.978761][T18458] RBP: 00007f8d552327e0 R08: 0000000000000000 R09: 0000000000000000
[ 1198.978774][T18458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1198.978786][T18458] R13: 00007f8d55416128 R14: 00007f8d55416090 R15: 00007ffee11ce978
[ 1198.978821][T18458]  </TASK>
[ 1199.526938][T18459] 9p: Bad value for 'rfdno'
[ 1199.572616][T18459] netlink: 'syz.5.3187': attribute type 9 has an invalid length.
[ 1199.601461][T18459] netlink: 'syz.5.3187': attribute type 11 has an invalid length.
[ 1199.687068][T18459] netlink: 'syz.5.3187': attribute type 12 has an invalid length.
[ 1199.698642][T18459] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.3187'.
[ 1199.747018][T18459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'.
[ 1199.857220][ T1211] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1200.036931][ T1211] usb 4-1: Using ep0 maxpacket: 32
[ 1200.054643][ T1211] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1200.131218][ T1211] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1200.168988][T18468] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1200.215844][ T1211] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1200.281071][ T1211] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1200.320875][ T1211] usb 4-1: Product: syz
[ 1200.339688][ T1211] usb 4-1: Manufacturer: syz
[ 1200.367366][ T1211] hub 4-1:4.0: USB hub found
[ 1200.446739][ T5909] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 1200.566543][ T1211] hub 4-1:4.0: 2 ports detected
[ 1200.609736][ T5909] usb 2-1: device descriptor read/64, error -71
[ 1200.832593][T18451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3182'.
[ 1200.846705][ T5909] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 1200.935753][ T1211] hub 4-1:4.0: hub_hub_status failed (err = -71)
[ 1200.947025][ T1211] hub 4-1:4.0: config failed, can't get hub status (err -71)
[ 1200.986846][ T5909] usb 2-1: device descriptor read/64, error -71
[ 1200.990337][ T1211] usb 4-1: USB disconnect, device number 100
[ 1201.061684][T18476] loop5: detected capacity change from 0 to 32768
[ 1201.101851][T18476] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1201.117195][ T5909] usb usb2-port1: attempt power cycle
[ 1201.148171][T18476] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1201.181016][T18476] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[ 1201.204926][T18476] XFS (loop5): Ending clean mount
[ 1201.263345][T18476] XFS (loop5): Quotacheck needed: Please wait.
[ 1201.292725][  T146] XFS (loop5): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x1803 dinode
[ 1201.306177][  T146] XFS (loop5): Unmount and run xfs_repair
[ 1201.314095][  T146] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1201.323234][  T146] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1201.333042][  T146] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1201.345163][  T146] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[ 1201.361022][  T146] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[ 1201.374165][T18473] overlayfs: statfs failed on './file0'
[ 1201.383185][  T146] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1201.396842][  T146] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[ 1201.416407][  T146] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[ 1201.427452][  T146] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[ 1201.439151][  T146] loop5: lost file I/O error report for ino 0 type 5 pos 0x0 len 0x0 error -117
[ 1201.496805][ T5909] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 1201.539164][T18476] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 1201.568853][T18476] loop5: lost filesystem error report for type 5 error -117
[ 1201.583738][ T5909] usb 2-1: device descriptor read/8, error -71
[ 1202.356738][T14533] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1202.385242][T14533] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[ 1202.466830][ T5909] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 1202.507449][ T5909] usb 2-1: device descriptor read/8, error -71
[ 1202.638992][ T5909] usb usb2-port1: unable to enumerate USB device
[ 1203.000046][T18513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1203.181223][T18515] loop5: detected capacity change from 0 to 4096
[ 1203.230055][T18515] EXT4-fs (loop5): Test dummy encryption mode enabled
[ 1203.347773][T18515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1204.774502][T14533] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1205.763661][T18548] 9p: Could not find request transport: þ
[ 1205.981403][T18561] FAULT_INJECTION: forcing a failure.
[ 1205.981403][T18561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1205.994958][T18561] CPU: 0 UID: 0 PID: 18561 Comm: syz.1.3213 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1205.994991][T18561] Tainted: [L]=SOFTLOCKUP
[ 1205.994999][T18561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1205.995010][T18561] Call Trace:
[ 1205.995019][T18561]  <TASK>
[ 1205.995028][T18561]  dump_stack_lvl+0xe8/0x150
[ 1205.995061][T18561]  should_fail_ex+0x412/0x560
[ 1205.995089][T18561]  _copy_from_user+0x2d/0xb0
[ 1205.995117][T18561]  ___sys_sendmsg+0x1c6/0x360
[ 1205.995152][T18561]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1205.995214][T18561]  ? __fget_files+0x2a/0x420
[ 1205.995239][T18561]  ? __fget_files+0x3a0/0x420
[ 1205.995274][T18561]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1205.995313][T18561]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1205.995350][T18561]  ? __pfx_ksys_write+0x10/0x10
[ 1205.995381][T18561]  do_syscall_64+0x14d/0xf80
[ 1205.995400][T18561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.995419][T18561]  ? clear_bhb_loop+0x40/0x90
[ 1205.995441][T18561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1205.995459][T18561] RIP: 0033:0x7f8d5519bf79
[ 1205.995479][T18561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1205.995494][T18561] RSP: 002b:00007f8d55faf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1205.995515][T18561] RAX: ffffffffffffffda RBX: 00007f8d55416090 RCX: 00007f8d5519bf79
[ 1205.995529][T18561] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[ 1205.995541][T18561] RBP: 00007f8d55faf090 R08: 0000000000000000 R09: 0000000000000000
[ 1205.995551][T18561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1205.995562][T18561] R13: 00007f8d55416128 R14: 00007f8d55416090 R15: 00007ffee11ce978
[ 1205.995593][T18561]  </TASK>
[ 1206.701066][T18564] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1206.709123][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1207.095493][  T797] IPVS: starting estimator thread 0...
[ 1207.196910][T18565] IPVS: using max 24 ests per chain, 57600 per kthread
[ 1207.375946][T18571] netlink: 'syz.0.3218': attribute type 11 has an invalid length.
[ 1207.866999][ T5895] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1207.892973][T18573] loop5: detected capacity change from 0 to 32768
[ 1207.940434][T18573] __jfs_setxattr: xattr_size = 76, new_size = 12822
[ 1208.062892][ T5895] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1208.087893][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.132448][ T5895] usb 1-1: config 0 descriptor??
[ 1208.146732][ T1211] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1208.165216][ T5895] cp210x 1-1:0.0: cp210x converter detected
[ 1208.416846][ T1211] usb 4-1: Using ep0 maxpacket: 32
[ 1208.874543][ T1211] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[ 1208.946287][ T1211] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1208.956506][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.027057][T18592] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3224'.
[ 1209.032723][ T1211] usb 4-1: Product: syz
[ 1209.096764][ T1211] usb 4-1: Manufacturer: syz
[ 1209.108752][ T1211] usb 4-1: SerialNumber: syz
[ 1209.624229][ T1211] usb 4-1: config 0 descriptor??
[ 1209.631088][ T5895] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1209.655969][T18582] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1209.687023][ T5895] usb 1-1: USB disconnect, device number 74
[ 1209.702930][ T1211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1209.728300][ T5895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1209.743253][ T5895] cp210x 1-1:0.0: device disconnected
[ 1209.977102][T18584] Bluetooth: MGMT ver 1.23
[ 1210.308642][T18605] netlink: 'syz.0.3229': attribute type 21 has an invalid length.
[ 1210.336409][ T1211] usb 4-1: USB disconnect, device number 101
[ 1210.342662][T18605] netlink: 'syz.0.3229': attribute type 20 has an invalid length.
[ 1210.630247][T18597] loop5: detected capacity change from 0 to 32768
[ 1211.072963][T18618] input: syz0 as /devices/virtual/input/input25
[ 1211.270482][T18625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1211.277157][T18625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1211.407028][ T9794] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1211.433605][T18625] vhci_hcd vhci_hcd.0: Device attached
[ 1211.476861][ T1211] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1211.556728][ T9794] usb 4-1: Using ep0 maxpacket: 32
[ 1211.571205][ T9794] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1211.598893][ T9794] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1211.608359][ T5895] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1211.618625][ T9794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1211.627869][ T1211] usb 2-1: Using ep0 maxpacket: 16
[ 1211.639594][ T9794] usb 4-1: config 1 has no interface number 0
[ 1211.647048][ T1211] usb 2-1: config 166 has an invalid interface number: 177 but max is 1
[ 1211.655608][ T1211] usb 2-1: config 166 has an invalid interface number: 34 but max is 1
[ 1211.673053][ T5895] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[ 1211.728741][ T1211] usb 2-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.411867][ T9794] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1212.432870][ T1211] usb 2-1: config 166 has no interface number 0
[ 1212.442629][ T9794] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1212.456875][ T1211] usb 2-1: config 166 has no interface number 1
[ 1212.463428][ T1211] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1212.485826][ T9794] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1212.495466][ T1211] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1212.510615][ T9794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1212.521560][ T1211] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1212.532896][ T1211] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1212.582292][ T9794] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[ 1212.594577][ T1211] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1212.605421][ T1211] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0
[ 1212.616037][ T1211] usb 2-1: config 166 interface 177 has no altsetting 0
[ 1212.629434][ T1211] usb 2-1: config 166 interface 34 has no altsetting 0
[ 1212.667943][T18626] vhci_hcd: connection reset by peer
[ 1212.676527][ T1103] vhci_hcd vhci_hcd.0: stop threads
[ 1212.695146][ T1103] vhci_hcd vhci_hcd.0: release socket
[ 1212.709357][ T1211] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 1212.722811][ T1103] vhci_hcd vhci_hcd.0: disconnect device
[ 1212.748440][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1212.763996][ T1211] usb 2-1: Product: syz
[ 1212.771546][ T1211] usb 2-1: Manufacturer: syz
[ 1212.776473][ T1211] usb 2-1: SerialNumber: syz
[ 1212.783758][ T9794] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[ 1214.034666][ T9794] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[ 1214.215529][ T1211] ums-realtek 2-1:166.177: USB Mass Storage device detected
[ 1214.302986][T14975] usb 4-1: USB disconnect, device number 102
[ 1214.311114][T14975] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[ 1214.394073][ T1211] ums-realtek 2-1:166.34: USB Mass Storage device detected
[ 1214.465931][T18662] netlink: 'syz.5.3243': attribute type 1 has an invalid length.
[ 1214.502111][ T1211] uvcvideo 2-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 1214.514581][ T1211] uvcvideo 2-1:166.34: No valid video chain found.
[ 1214.538621][T18662] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1214.561862][ T1211] usb 2-1: USB disconnect, device number 87
[ 1215.587263][T18684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3249'.
[ 1215.634262][T18684] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3249'.
[ 1216.554858][ T5144] Bluetooth: Unexpected continuation frame (len 10)
[ 1216.926769][ T5895] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1218.716790][ T5895] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1218.994068][T18718] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3259'.
[ 1219.188544][ T5895] usb 6-1: config 0 has an invalid interface number: 106 but max is 0
[ 1219.199774][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1219.296748][ T5895] usb 6-1: config 0 has no interface number 0
[ 1219.380547][ T5895] usb 6-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1219.406416][ T5895] usb 6-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1219.420318][ T5895] usb 6-1: config 0 interface 106 has no altsetting 0
[ 1219.428756][ T5895] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1219.439181][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.475936][ T5895] usb 6-1: config 0 descriptor??
[ 1219.544415][ T5895] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1219.686971][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 210 seconds
[ 1219.706025][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 210 seconds
[ 1219.717917][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 210 seconds
[ 1219.741151][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 210 seconds
[ 1220.650950][   T48] usb 6-1: Failed to submit usb control message: -110
[ 1220.686859][   T48] usb 6-1: unable to send the bmi data to the device: -110
[ 1220.699488][T18732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1220.710218][   T48] usb 6-1: unable to get target info from device
[ 1220.747872][   T48] usb 6-1: could not get target info (-110)
[ 1220.778523][T18732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1220.786421][   T48] usb 6-1: could not probe fw (-110)
[ 1220.959398][T18738] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3264'.
[ 1221.443236][T18732] team0: Device gtp0 is of different type
[ 1221.461792][T18742] netlink: 'syz.3.3263': attribute type 1 has an invalid length.
[ 1221.469732][T18742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3263'.
[ 1221.757798][T18743] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1223.211840][T18762] comedi comedi0: pcl726: I/O port conflict (0x7,16)
[ 1223.644788][ T5895] usb 6-1: USB disconnect, device number 24
[ 1224.888037][T14975] usb 5-1: new low-speed USB device number 86 using dummy_hcd
[ 1224.939885][T18789] netlink: 'syz.3.3278': attribute type 4 has an invalid length.
[ 1224.956988][T18789] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3278'.
[ 1225.088630][T14975] usb 5-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[ 1225.120283][T14975] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1225.156657][T14975] usb 5-1: config 0 interface 0 altsetting 250 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1225.176639][T14975] usb 5-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1225.201258][T14975] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1225.215555][T14975] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[ 1225.241842][T14975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1225.259687][T14975] usb 5-1: config 0 descriptor??
[ 1225.608969][T18773] Bluetooth: hci6: command 0x0406 tx timeout
[ 1225.621466][T18779] loop5: detected capacity change from 0 to 32768
[ 1225.833174][T14975] koneplus 0003:1E7D:2E22.0017: hidraw0: USB HID vf4.f6 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0
[ 1226.286512][T14975] usb 5-1: USB disconnect, device number 86
[ 1226.358342][T18779] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1226.410600][T18779] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1226.425287][T18812] fido_id[18812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1226.549110][T18779] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[ 1226.756518][T18816] comedi comedi3: comedi_config --init_data is deprecated
[ 1226.786802][T18779] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 1226.831110][T18821] FAULT_INJECTION: forcing a failure.
[ 1226.831110][T18821] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1226.897212][T18821] CPU: 0 UID: 0 PID: 18821 Comm: syz.4.3283 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1226.897247][T18821] Tainted: [L]=SOFTLOCKUP
[ 1226.897256][T18821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1226.897268][T18821] Call Trace:
[ 1226.897277][T18821]  <TASK>
[ 1226.897287][T18821]  dump_stack_lvl+0xe8/0x150
[ 1226.897321][T18821]  should_fail_ex+0x412/0x560
[ 1226.897351][T18821]  _copy_from_iter+0x1d3/0x1670
[ 1226.897379][T18821]  ? rep_movs_alternative+0x4a/0x90
[ 1226.897413][T18821]  ? __pfx__copy_from_iter+0x10/0x10
[ 1226.897435][T18821]  ? sock_alloc_send_pskb+0x896/0x990
[ 1226.897460][T18821]  ? __pfx__copy_from_iter+0x10/0x10
[ 1226.897485][T18821]  ? page_copy_sane+0x16a/0x270
[ 1226.897512][T18821]  copy_page_from_iter+0xdd/0x170
[ 1226.897543][T18821]  skb_copy_datagram_from_iter+0x306/0x710
[ 1226.897577][T18821]  packet_sendmsg+0x37f1/0x5110
[ 1226.897618][T18821]  ? __pfx_aa_label_sk_perm+0x10/0x10
[ 1226.897646][T18821]  ? __lock_acquire+0x6b5/0x2cf0
[ 1226.897683][T18821]  ? __lock_acquire+0x6b5/0x2cf0
[ 1226.897723][T18821]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1226.897764][T18821]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1226.897783][T18821]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1226.897819][T18821]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1226.897845][T18821]  sock_sendmsg_nosec+0x18f/0x1d0
[ 1226.897873][T18821]  __sys_sendto+0x3ff/0x590
[ 1226.897902][T18821]  ? __pfx___sys_sendto+0x10/0x10
[ 1226.897926][T18821]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1226.897960][T18821]  ? __fget_files+0x3a0/0x420
[ 1226.897999][T18821]  ? ksys_write+0x242/0x270
[ 1226.898022][T18821]  ? __pfx_ksys_write+0x10/0x10
[ 1226.898048][T18821]  __x64_sys_sendto+0xde/0x100
[ 1226.898080][T18821]  do_syscall_64+0x14d/0xf80
[ 1226.898099][T18821]  ? trace_irq_disable+0x3b/0x150
[ 1226.898125][T18821]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.898146][T18821]  ? clear_bhb_loop+0x40/0x90
[ 1226.898170][T18821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1226.898190][T18821] RIP: 0033:0x7f7c6d99bf79
[ 1226.898217][T18821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1226.898234][T18821] RSP: 002b:00007f7c6e910028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1226.898255][T18821] RAX: ffffffffffffffda RBX: 00007f7c6dc15fa0 RCX: 00007f7c6d99bf79
[ 1226.898270][T18821] RDX: 000000000000ff88 RSI: 0000200000000180 RDI: 0000000000000003
[ 1226.898283][T18821] RBP: 00007f7c6e910090 R08: 0000200000000140 R09: 0000000000000014
[ 1226.898295][T18821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1226.898306][T18821] R13: 00007f7c6dc16038 R14: 00007f7c6dc15fa0 R15: 00007ffe30c711e8
[ 1226.898333][T18821]  </TASK>
[ 1227.728730][T18830] overlayfs: overlapping lowerdir path
[ 1228.444171][T18841] loop5: detected capacity change from 0 to 4096
[ 1228.495275][T18841] ntfs3(loop5): ino=3, Correct links count -> 2.
[ 1228.671930][T18841] ptrace attach of "./syz-executor exec"[14533] was attempted by ""[18841]
[ 1229.114272][T18850] FAULT_INJECTION: forcing a failure.
[ 1229.114272][T18850] name failslab, interval 1, probability 0, space 0, times 0
[ 1229.146746][T18850] CPU: 1 UID: 0 PID: 18850 Comm: syz.5.3292 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1229.146782][T18850] Tainted: [L]=SOFTLOCKUP
[ 1229.146789][T18850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1229.146801][T18850] Call Trace:
[ 1229.146810][T18850]  <TASK>
[ 1229.146818][T18850]  dump_stack_lvl+0xe8/0x150
[ 1229.146853][T18850]  should_fail_ex+0x412/0x560
[ 1229.146883][T18850]  should_failslab+0xa8/0x100
[ 1229.146910][T18850]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1229.146943][T18850]  ? __alloc_skb+0x1d0/0x7d0
[ 1229.146968][T18850]  ? __local_bh_enable_ip+0xd0/0x130
[ 1229.147006][T18850]  __alloc_skb+0x1d0/0x7d0
[ 1229.147032][T18850]  ? netlink_ack_tlv_len+0x6c/0x210
[ 1229.147060][T18850]  netlink_ack+0x146/0xa50
[ 1229.147082][T18850]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1229.147114][T18850]  ? __lock_acquire+0x6b5/0x2cf0
[ 1229.147160][T18850]  netlink_rcv_skb+0x2b6/0x4b0
[ 1229.147186][T18850]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1229.147217][T18850]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1229.147261][T18850]  ? down_read+0x272/0x2e0
[ 1229.147282][T18850]  ? genl_rcv+0xd/0x40
[ 1229.147313][T18850]  genl_rcv+0x28/0x40
[ 1229.147340][T18850]  netlink_unicast+0x80f/0x9b0
[ 1229.147372][T18850]  ? __pfx_netlink_unicast+0x10/0x10
[ 1229.147397][T18850]  ? netlink_sendmsg+0x650/0xb40
[ 1229.147419][T18850]  ? skb_put+0x11b/0x210
[ 1229.147449][T18850]  netlink_sendmsg+0x813/0xb40
[ 1229.147483][T18850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1229.147508][T18850]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1229.147545][T18850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1229.147569][T18850]  sock_sendmsg_nosec+0x18f/0x1d0
[ 1229.147596][T18850]  ____sys_sendmsg+0x589/0x8c0
[ 1229.147635][T18850]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1229.147675][T18850]  ? import_iovec+0x73/0xa0
[ 1229.147707][T18850]  ___sys_sendmsg+0x2a5/0x360
[ 1229.147743][T18850]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1229.147810][T18850]  ? __fget_files+0x2a/0x420
[ 1229.147837][T18850]  ? __fget_files+0x3a0/0x420
[ 1229.147875][T18850]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1229.147914][T18850]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1229.147954][T18850]  ? __pfx_ksys_write+0x10/0x10
[ 1229.147989][T18850]  do_syscall_64+0x14d/0xf80
[ 1229.148008][T18850]  ? trace_irq_disable+0x3b/0x150
[ 1229.148035][T18850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.148055][T18850]  ? clear_bhb_loop+0x40/0x90
[ 1229.148079][T18850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1229.148100][T18850] RIP: 0033:0x7f43e819bf79
[ 1229.148120][T18850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1229.148137][T18850] RSP: 002b:00007f43e908e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1229.148167][T18850] RAX: ffffffffffffffda RBX: 00007f43e8415fa0 RCX: 00007f43e819bf79
[ 1229.148181][T18850] RDX: 0000000004004014 RSI: 00002000000014c0 RDI: 0000000000000003
[ 1229.148195][T18850] RBP: 00007f43e908e090 R08: 0000000000000000 R09: 0000000000000000
[ 1229.148207][T18850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1229.148219][T18850] R13: 00007f43e8416038 R14: 00007f43e8415fa0 R15: 00007ffe359bf308
[ 1229.148253][T18850]  </TASK>
[ 1229.658064][T18853] syzkaller1: entered promiscuous mode
[ 1229.663593][T18853] syzkaller1: entered allmulticast mode
[ 1229.802952][ T5918] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 1229.949772][ T5918] usb 4-1: device descriptor read/64, error -71
[ 1230.250984][ T5918] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 1230.490028][ T5918] usb 4-1: device descriptor read/64, error -71
[ 1230.613221][ T5918] usb usb4-port1: attempt power cycle
[ 1231.029238][ T5918] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 1231.107395][ T5918] usb 4-1: device descriptor read/8, error -71
[ 1231.427049][ T5918] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1231.467596][ T5918] usb 4-1: device descriptor read/8, error -71
[ 1231.524827][T18874] loop5: detected capacity change from 0 to 2048
[ 1231.555896][T18874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1231.589046][ T5918] usb usb4-port1: unable to enumerate USB device
[ 1232.851451][T18773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1232.896214][T18773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1232.959530][T18773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1233.019002][ T5909] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1233.056155][T18773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1233.113200][T18773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1233.252001][ T5909] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1233.283631][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1233.336922][ T5909] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1233.356086][ T5909] usb 6-1: config 1 has no interface number 0
[ 1233.373716][ T5909] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1233.396121][ T5909] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1233.421172][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1233.431175][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1233.450104][ T5909] usb 6-1: Product: syz
[ 1233.459437][ T5909] usb 6-1: Manufacturer: syz
[ 1233.469480][ T5909] usb 6-1: SerialNumber: syz
[ 1233.501389][ T5909] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1233.531023][ T5909] cdc_ncm 6-1:1.1: bind() failure
[ 1233.622335][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3303'.
[ 1233.687384][T18880] chnl_net:caif_netlink_parms(): no params data found
[ 1233.855022][T18880] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1233.862613][T18880] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1233.864366][T18827] Set syz1 is full, maxelem 65536 reached
[ 1233.870493][T18880] bridge_slave_0: entered allmulticast mode
[ 1233.884667][T18880] bridge_slave_0: entered promiscuous mode
[ 1233.894584][T18880] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1233.902474][T18880] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1233.909873][T18880] bridge_slave_1: entered allmulticast mode
[ 1233.920830][T18880] bridge_slave_1: entered promiscuous mode
[ 1233.972705][T18880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1233.988205][T18880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1234.044748][T18880] team0: Port device team_slave_0 added
[ 1234.055558][T18880] team0: Port device team_slave_1 added
[ 1234.110373][T18880] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1234.117880][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1234.145582][T18880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1234.296854][T18872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1234.325185][ T5895] usb 6-1: USB disconnect, device number 25
[ 1234.359903][T18880] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1234.366964][T18880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1234.393044][T18880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1234.600715][T18902] tipc: Started in network mode
[ 1234.605781][T18902] tipc: Node identity ac14140f, cluster identity 4711
[ 1234.613647][T18902] tipc: New replicast peer: 255.255.255.255
[ 1234.620833][T18902] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1234.629949][T18903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'.
[ 1234.641171][T18903] tipc: Disabling bearer <udp:syz2>
[ 1234.873907][T18880] hsr_slave_0: entered promiscuous mode
[ 1234.897813][T18880] hsr_slave_1: entered promiscuous mode
[ 1234.905450][T18880] debugfs: 'hsr0' already exists in 'hsr'
[ 1234.911803][T18880] Cannot create hsr debugfs directory
[ 1234.939940][T18906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3306'.
[ 1234.989032][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3306'.
[ 1235.025146][T18906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3306'.
[ 1235.049182][T18908] loop5: detected capacity change from 0 to 8
[ 1235.088578][T18908] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1235.124171][T14777] udevd[14777]: incorrect cramfs checksum on /dev/loop5
[ 1235.214445][T14777] udevd[14777]: incorrect cramfs checksum on /dev/loop5
[ 1235.287092][ T5144] Bluetooth: hci1: command tx timeout
[ 1235.310228][T18908] cramfs: Error -3 while decompressing!
[ 1235.316192][T18908] cramfs: ffffffff9a3acc48(18)->ffff888047a25000(4096)
[ 1235.329454][T18908] cramfs: Error -3 while decompressing!
[ 1235.350348][T18908] cramfs: ffffffff9a3acc48(18)->ffff888047a25000(4096)
[ 1235.394025][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1235.394044][   T30] audit: type=1800 audit(1771083202.895:310): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3307" name="file1" dev="loop5" ino=324 res=0 errno=0
[ 1235.696323][T18923] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1235.778883][T18880] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1235.827555][T18880] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1235.837161][T18926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1235.876521][T18926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1235.922105][T18880] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1235.980853][T18880] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1236.073945][T18929] loop5: detected capacity change from 0 to 128
[ 1236.176927][T18929] ADFS-fs (loop5): error: can't find an ADFS filesystem on dev loop5.
[ 1236.326665][T14975] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1236.392054][T18938] loop5: detected capacity change from 0 to 22
[ 1236.429955][T18938] romfs: Unknown parameter '`'
[ 1236.467631][T14777] udevd[14777]: incorrect romfs checksum on /dev/loop5
[ 1236.523539][T14975] usb 5-1: Using ep0 maxpacket: 8
[ 1236.557615][T14975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1236.603154][T18880] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1236.614776][T14975] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1236.656275][T14975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.699538][T18880] 8021q: adding VLAN 0 to HW filter on device team0
[ 1236.707627][T14975] usb 5-1: config 0 descriptor??
[ 1236.745333][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1236.752599][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1236.799825][   T95] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1236.807108][   T95] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1236.985089][T14975] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1237.198057][T18942] loop5: detected capacity change from 0 to 40427
[ 1237.211424][T18942] F2FS-fs (loop5): invalid crc value
[ 1237.309322][T18942] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1237.335434][T18942] F2FS-fs (loop5): Start checkpoint disabled!
[ 1237.368301][ T5144] Bluetooth: hci1: command tx timeout
[ 1237.376697][T18942] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[ 1237.429599][T18943] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3314'.
[ 1237.472757][T18942] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1237.701158][   T30] audit: type=1800 audit(1771083204.985:311): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3315" name="file1" dev="loop5" ino=10 res=0 errno=0
[ 1237.883278][T18942] FAULT_INJECTION: forcing a failure.
[ 1237.883278][T18942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1237.896549][T18942] CPU: 0 UID: 0 PID: 18942 Comm: syz.5.3315 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1237.896571][T18942] Tainted: [L]=SOFTLOCKUP
[ 1237.896578][T18942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1237.896589][T18942] Call Trace:
[ 1237.896598][T18942]  <TASK>
[ 1237.896608][T18942]  dump_stack_lvl+0xe8/0x150
[ 1237.896640][T18942]  should_fail_ex+0x412/0x560
[ 1237.896668][T18942]  _copy_from_user+0x2d/0xb0
[ 1237.896686][T18942]  __se_sys_sendfile64+0xac/0x1a0
[ 1237.896702][T18942]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 1237.896723][T18942]  do_syscall_64+0x14d/0xf80
[ 1237.896735][T18942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.896747][T18942]  ? clear_bhb_loop+0x40/0x90
[ 1237.896761][T18942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1237.896772][T18942] RIP: 0033:0x7f43e819bf79
[ 1237.896785][T18942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1237.896795][T18942] RSP: 002b:00007f43e908e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 1237.896808][T18942] RAX: ffffffffffffffda RBX: 00007f43e8415fa0 RCX: 00007f43e819bf79
[ 1237.896817][T18942] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005
[ 1237.896824][T18942] RBP: 00007f43e908e090 R08: 0000000000000000 R09: 0000000000000000
[ 1237.896831][T18942] R10: 0000000000007f03 R11: 0000000000000246 R12: 0000000000000001
[ 1237.896838][T18942] R13: 00007f43e8416038 R14: 00007f43e8415fa0 R15: 00007ffe359bf308
[ 1237.896856][T18942]  </TASK>
[ 1238.160649][ T5895] usb 5-1: USB disconnect, device number 87
[ 1238.310946][ T6077] kworker/u8:11: attempt to access beyond end of device
[ 1238.310946][ T6077] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1238.407328][ T6077] CPU: 1 UID: 0 PID: 6077 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1238.407371][ T6077] Tainted: [L]=SOFTLOCKUP
[ 1238.407379][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1238.407392][ T6077] Workqueue: writeback wb_workfn (flush-7:5)
[ 1238.407420][ T6077] Call Trace:
[ 1238.407427][ T6077]  <TASK>
[ 1238.407436][ T6077]  dump_stack_lvl+0xe8/0x150
[ 1238.407465][ T6077]  f2fs_handle_critical_error+0x37c/0x540
[ 1238.407503][ T6077]  f2fs_write_end_io+0xcdb/0xff0
[ 1238.407548][ T6077]  __submit_merged_bio+0x256/0x700
[ 1238.407577][ T6077]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1238.407617][ T6077]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1238.407672][ T6077]  f2fs_write_data_pages+0x2975/0x35e0
[ 1238.407733][ T6077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1238.407771][ T6077]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1238.407834][ T6077]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1238.407902][ T6077]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1238.407927][ T6077]  do_writepages+0x32e/0x550
[ 1238.407962][ T6077]  ? reacquire_held_locks+0x104/0x190
[ 1238.407986][ T6077]  ? writeback_sb_inodes+0x43d/0x19a0
[ 1238.408017][ T6077]  __writeback_single_inode+0x133/0x11a0
[ 1238.408043][ T6077]  ? do_raw_spin_unlock+0xf5/0x210
[ 1238.408070][ T6077]  writeback_sb_inodes+0x944/0x19a0
[ 1238.408112][ T6077]  ? do_raw_spin_unlock+0xf5/0x210
[ 1238.408139][ T6077]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1238.408162][ T6077]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1238.408225][ T6077]  ? rcu_is_watching+0x15/0xb0
[ 1238.408263][ T6077]  wb_writeback+0x456/0xb70
[ 1238.408291][ T6077]  ? queue_io+0x271/0x4a0
[ 1238.408325][ T6077]  ? __pfx_wb_writeback+0x10/0x10
[ 1238.408346][ T6077]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1238.408392][ T6077]  wb_workfn+0x414/0xf50
[ 1238.408412][ T6077]  ? look_up_lock_class+0x57/0x110
[ 1238.408441][ T6077]  ? __pfx_wb_workfn+0x10/0x10
[ 1238.408459][ T6077]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1238.408476][ T6077]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1238.408511][ T6077]  ? process_one_work+0x87c/0x1650
[ 1238.408534][ T6077]  process_one_work+0x949/0x1650
[ 1238.408582][ T6077]  ? __pfx_process_one_work+0x10/0x10
[ 1238.408604][ T6077]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1238.408642][ T6077]  worker_thread+0xb46/0x1140
[ 1238.408697][ T6077]  kthread+0x388/0x470
[ 1238.408717][ T6077]  ? __pfx_worker_thread+0x10/0x10
[ 1238.408740][ T6077]  ? __pfx_kthread+0x10/0x10
[ 1238.408759][ T6077]  ret_from_fork+0x51e/0xb90
[ 1238.408786][ T6077]  ? __pfx_ret_from_fork+0x10/0x10
[ 1238.408807][ T6077]  ? __switch_to+0xc7d/0x1450
[ 1238.408833][ T6077]  ? __pfx_kthread+0x10/0x10
[ 1238.408853][ T6077]  ret_from_fork_asm+0x1a/0x30
[ 1238.408900][ T6077]  </TASK>
[ 1238.408908][ T6077] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1238.564172][T18880] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1238.907904][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.914446][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.061419][T18975] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3320'.
[ 1239.174244][T18975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3320'.
[ 1239.447051][ T5144] Bluetooth: hci1: command tx timeout
[ 1240.499539][T18880] veth0_vlan: entered promiscuous mode
[ 1240.570223][T18880] veth1_vlan: entered promiscuous mode
[ 1240.664467][T18880] veth0_macvtap: entered promiscuous mode
[ 1240.705863][T18880] veth1_macvtap: entered promiscuous mode
[ 1240.763500][T18880] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1240.777111][ T1211] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1240.801304][T18880] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1240.827732][  T146] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.861570][  T146] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.876793][  T146] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.906785][  T146] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1240.948329][ T1211] usb 6-1: Using ep0 maxpacket: 32
[ 1240.958428][ T1211] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1240.966556][ T1211] usb 6-1: config 0 has no interface number 0
[ 1240.986773][ T5895] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1241.009916][ T1211] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1241.026736][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1241.035058][ T1211] usb 6-1: Product: syz
[ 1241.052335][ T6077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1241.060470][ T1211] usb 6-1: Manufacturer: syz
[ 1241.066666][ T1211] usb 6-1: SerialNumber: syz
[ 1241.071926][ T6077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.090661][ T1211] usb 6-1: config 0 descriptor??
[ 1241.138571][ T1211] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1241.160967][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1241.169178][ T5895] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[ 1241.169209][ T5895] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1241.169258][ T5895] usb 5-1: config 0 has no interface number 0
[ 1241.169289][ T5895] usb 5-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1241.206286][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1241.257137][ T5895] usb 5-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1241.274203][ T5895] usb 5-1: config 0 interface 106 has no altsetting 0
[ 1241.281592][ T5895] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1241.294588][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.342582][ T1211] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1241.355162][T19005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3327'.
[ 1241.377568][ T5895] usb 5-1: config 0 descriptor??
[ 1241.418373][ T5895] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1241.444051][ T1211] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1241.527242][ T5144] Bluetooth: hci1: command tx timeout
[ 1241.640134][T19010] syzkaller0: entered promiscuous mode
[ 1241.645904][T19010] syzkaller0: entered allmulticast mode
[ 1242.547906][  T137] usb 5-1: Failed to submit usb control message: -110
[ 1242.556251][  T137] usb 5-1: unable to send the bmi data to the device: -110
[ 1242.563867][  T137] usb 5-1: unable to get target info from device
[ 1242.572199][  T137] usb 5-1: could not get target info (-110)
[ 1242.643249][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1242.643755][ T5918] usb 6-1: USB disconnect, device number 26
[ 1242.671352][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1242.679969][  T137] usb 5-1: could not probe fw (-110)
[ 1242.689359][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1242.705552][T19012] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3316'.
[ 1242.736822][T19012] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3316'.
[ 1242.774550][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1242.811919][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1242.846775][ T5918] quatech2 6-1:0.51: device disconnected
[ 1243.198452][ T5918] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 1243.706846][ T5918] usb 6-1: device descriptor read/64, error -71
[ 1244.071819][T19039] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3333'.
[ 1244.200480][T19039] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3333'.
[ 1244.658406][T19045] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3335'.
[ 1245.477829][ T5918] usb 5-1: USB disconnect, device number 88
[ 1245.720961][T19057] tmpfs: Bad value for 'mpol'
[ 1245.801518][T19050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1245.916765][ T5827] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[ 1246.557287][ T5144] Bluetooth: hci4: command 0x0406 tx timeout
[ 1246.609855][T19052] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3338'.
[ 1246.626683][ T5827] usb 7-1: device descriptor read/64, error -71
[ 1246.725922][T19052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3338'.
[ 1246.872699][ T5827] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[ 1247.066793][ T5827] usb 7-1: device descriptor read/64, error -71
[ 1247.068816][T19071] FAULT_INJECTION: forcing a failure.
[ 1247.068816][T19071] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1247.126826][T19071] CPU: 0 UID: 0 PID: 19071 Comm: syz.1.3342 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1247.126850][T19071] Tainted: [L]=SOFTLOCKUP
[ 1247.126854][T19071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1247.126861][T19071] Call Trace:
[ 1247.126867][T19071]  <TASK>
[ 1247.126872][T19071]  dump_stack_lvl+0xe8/0x150
[ 1247.126894][T19071]  should_fail_ex+0x412/0x560
[ 1247.126912][T19071]  _copy_to_user+0x31/0xb0
[ 1247.126930][T19071]  simple_read_from_buffer+0xe1/0x170
[ 1247.126949][T19071]  proc_fail_nth_read+0x1bb/0x230
[ 1247.126967][T19071]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1247.126993][T19071]  ? rw_verify_area+0x2a6/0x4d0
[ 1247.127005][T19071]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1247.127021][T19071]  vfs_read+0x20c/0xa70
[ 1247.127032][T19071]  ? fdget_pos+0x246/0x320
[ 1247.127050][T19071]  ? __pfx___mutex_lock+0x10/0x10
[ 1247.127063][T19071]  ? __pfx_vfs_read+0x10/0x10
[ 1247.127076][T19071]  ? __fget_files+0x2a/0x420
[ 1247.127093][T19071]  ? __fget_files+0x3a0/0x420
[ 1247.127107][T19071]  ? __fget_files+0x2a/0x420
[ 1247.127127][T19071]  ksys_read+0x150/0x270
[ 1247.127140][T19071]  ? __pfx_ksys_read+0x10/0x10
[ 1247.127151][T19071]  ? __pfx_evdev_ioctl+0x10/0x10
[ 1247.127172][T19071]  do_syscall_64+0x14d/0xf80
[ 1247.127183][T19071]  ? trace_irq_disable+0x3b/0x150
[ 1247.127199][T19071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.127211][T19071]  ? clear_bhb_loop+0x40/0x90
[ 1247.127228][T19071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1247.127239][T19071] RIP: 0033:0x7f8d5515c84e
[ 1247.127252][T19071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1247.127262][T19071] RSP: 002b:00007f8d55faefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1247.127276][T19071] RAX: ffffffffffffffda RBX: 00007f8d55faf6c0 RCX: 00007f8d5515c84e
[ 1247.127290][T19071] RDX: 000000000000000f RSI: 00007f8d55faf0a0 RDI: 0000000000000004
[ 1247.127301][T19071] RBP: 00007f8d55faf090 R08: 0000000000000000 R09: 0000000000000000
[ 1247.127312][T19071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1247.127323][T19071] R13: 00007f8d55416128 R14: 00007f8d55416090 R15: 00007ffee11ce978
[ 1247.127355][T19071]  </TASK>
[ 1247.370631][ T5827] usb usb7-port1: attempt power cycle
[ 1247.716875][ T5827] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[ 1247.740351][ T5827] usb 7-1: device descriptor read/8, error -71
[ 1248.257302][ T5827] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[ 1248.278883][ T5827] usb 7-1: device descriptor read/8, error -71
[ 1248.387123][ T5827] usb usb7-port1: unable to enumerate USB device
[ 1249.001160][T19102] netlink: 'syz.6.3351': attribute type 9 has an invalid length.
[ 1249.009136][T19102] netlink: 'syz.6.3351': attribute type 11 has an invalid length.
[ 1249.017118][T19102] netlink: 'syz.6.3351': attribute type 12 has an invalid length.
[ 1249.025089][T19102] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.3351'.
[ 1249.035226][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3351'.
[ 1249.049655][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3351'.
[ 1249.058953][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3351'.
[ 1249.067992][T19102] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3351'.
[ 1249.796870][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 240 seconds
[ 1249.807740][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 240 seconds
[ 1249.820122][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 240 seconds
[ 1249.831476][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 240 seconds
[ 1250.160691][T19104] binder: BINDER_SET_CONTEXT_MGR already set
[ 1250.221264][T19104] binder: 19103:19104 ioctl 4018620d 2000000002c0 returned -16
[ 1250.672430][T19110] loop6: detected capacity change from 0 to 4096
[ 1251.266674][ T5909] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1251.620503][T19110] loop6: detected capacity change from 0 to 4096
[ 1251.678474][ T5909] usb 7-1: Using ep0 maxpacket: 32
[ 1251.704697][ T5909] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1251.749212][ T5909] usb 7-1: config 0 has no interface number 0
[ 1251.755346][ T5909] usb 7-1: config 0 interface 89 has no altsetting 0
[ 1251.784918][T19110] loop6: detected capacity change from 0 to 4096
[ 1251.836139][ T5909] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10be, bcdDevice=38.4e
[ 1251.896702][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1251.926773][ T5909] usb 7-1: Product: syz
[ 1251.937129][ T5909] usb 7-1: Manufacturer: syz
[ 1251.947794][ T5909] usb 7-1: SerialNumber: syz
[ 1251.969141][ T5909] usb 7-1: config 0 descriptor??
[ 1252.032078][T19110] loop6: detected capacity change from 0 to 4096
[ 1252.226894][T14975] usb 7-1: USB disconnect, device number 6
[ 1252.268189][ T5827] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1252.406681][ T5827] usb 2-1: device descriptor read/64, error -71
[ 1252.688766][ T5827] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[ 1252.977026][ T5827] usb 2-1: device descriptor read/64, error -71
[ 1253.297254][ T5827] usb usb2-port1: attempt power cycle
[ 1253.446777][T19155] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3366'.
[ 1253.973725][ T5827] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1254.009660][ T5827] usb 2-1: device descriptor read/8, error -71
[ 1254.095170][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3367'.
[ 1254.252979][ T5827] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1254.277569][ T5827] usb 2-1: device descriptor read/8, error -71
[ 1254.366833][T19163] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3369'.
[ 1254.427323][ T5827] usb usb2-port1: unable to enumerate USB device
[ 1254.986113][T19166] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3370'.
[ 1256.468164][T19185] netlink: 244 bytes leftover after parsing attributes in process `syz.5.3374'.
[ 1256.507157][T19185] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3374'.
[ 1256.987774][T14975] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[ 1257.262529][T14975] usb 6-1: device descriptor read/64, error -71
[ 1257.686783][T14975] usb 6-1: new low-speed USB device number 30 using dummy_hcd
[ 1257.748931][T19198] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check.
[ 1258.403332][T19199] loop6: detected capacity change from 0 to 131072
[ 1258.412332][T14975] usb 6-1: device descriptor read/64, error -71
[ 1258.432363][T19199] F2FS-fs (loop6): invalid crc value
[ 1258.532584][T19199] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1258.545141][T14975] usb usb6-port1: attempt power cycle
[ 1258.552298][T19199] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1259.099247][T14975] usb 6-1: new low-speed USB device number 31 using dummy_hcd
[ 1259.132036][T14975] usb 6-1: device descriptor read/8, error -71
[ 1259.306059][T19218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3383'.
[ 1259.341268][T19221] FAULT_INJECTION: forcing a failure.
[ 1259.341268][T19221] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1259.376735][T14975] usb 6-1: new low-speed USB device number 32 using dummy_hcd
[ 1259.506875][T19221] CPU: 1 UID: 0 PID: 19221 Comm: syz.6.3380 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1259.506913][T19221] Tainted: [L]=SOFTLOCKUP
[ 1259.506920][T19221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1259.506931][T19221] Call Trace:
[ 1259.506939][T19221]  <TASK>
[ 1259.506949][T19221]  dump_stack_lvl+0xe8/0x150
[ 1259.506982][T19221]  should_fail_ex+0x412/0x560
[ 1259.507007][T19221]  _copy_from_user+0x2d/0xb0
[ 1259.507033][T19221]  ___sys_sendmsg+0x1c6/0x360
[ 1259.507066][T19221]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1259.507097][T19221]  ? kstrtouint+0x6e/0xe0
[ 1259.507146][T19221]  ? __fget_files+0x2a/0x420
[ 1259.507171][T19221]  ? __fget_files+0x3a0/0x420
[ 1259.507208][T19221]  __sys_sendmmsg+0x27c/0x4e0
[ 1259.507235][T19221]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1259.507254][T19221]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1259.507291][T19221]  ? ksys_write+0x242/0x270
[ 1259.507308][T19221]  ? __pfx_ksys_write+0x10/0x10
[ 1259.507336][T19221]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1259.507360][T19221]  do_syscall_64+0x14d/0xf80
[ 1259.507375][T19221]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.507390][T19221]  ? clear_bhb_loop+0x40/0x90
[ 1259.507408][T19221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.507422][T19221] RIP: 0033:0x7fd3def9bf79
[ 1259.507438][T19221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1259.507451][T19221] RSP: 002b:00007fd3dfd93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1259.507468][T19221] RAX: ffffffffffffffda RBX: 00007fd3df216090 RCX: 00007fd3def9bf79
[ 1259.507479][T19221] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007
[ 1259.507488][T19221] RBP: 00007fd3dfd93090 R08: 0000000000000000 R09: 0000000000000000
[ 1259.507497][T19221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1259.507506][T19221] R13: 00007fd3df216128 R14: 00007fd3df216090 R15: 00007ffceeb91728
[ 1259.507531][T19221]  </TASK>
[ 1259.709657][T14975] usb 6-1: device not accepting address 32, error -71
[ 1259.716934][T14975] usb usb6-port1: unable to enumerate USB device
[ 1260.054227][T19223] loop5: detected capacity change from 0 to 512
[ 1260.137911][T19223] ext2: Unknown parameter 'defcontext'
[ 1260.364351][T19223] loop5: detected capacity change from 0 to 128
[ 1260.428680][T19223] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1260.569746][T19223] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1260.820075][T19231] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3386'.
[ 1260.938150][T19231] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3386'.
[ 1261.611825][T14533] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1261.957383][T19242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3387'.
[ 1262.844353][T19246] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1262.854890][T19246] bond0: (slave rose0): Enslaving as an active interface with an up link
[ 1264.140270][T19257] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3391'.
[ 1264.278373][T19261] loop6: detected capacity change from 0 to 1024
[ 1264.334531][T19261] EXT4-fs: Ignoring removed i_version option
[ 1264.490701][T19261] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1264.541991][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3394'.
[ 1264.597928][T19274] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3394'.
[ 1264.644834][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3395'.
[ 1264.993257][T18880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1265.207657][T18649] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1265.246701][ T5827] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1266.537399][T19295] netlink: 'syz.5.3400': attribute type 10 has an invalid length.
[ 1266.545279][T19295] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3400'.
[ 1266.569618][T18773] Bluetooth: hci2: command 0x0406 tx timeout
[ 1266.586690][T18649] usb 5-1: device descriptor read/64, error -71
[ 1266.620647][ T5827] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[ 1266.652933][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1266.669371][ T5827] usb 2-1: config 0 has no interface number 0
[ 1266.675552][ T5827] usb 2-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30
[ 1266.681071][T19295] team0: Failed to send options change via netlink (err -105)
[ 1266.695175][ T5827] usb 2-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216
[ 1266.712622][ T5827] usb 2-1: config 0 interface 106 has no altsetting 0
[ 1267.508394][ T5827] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1267.520344][T19295] team0: Port device geneve0 added
[ 1267.579371][T18649] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1267.629864][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.672629][ T5827] usb 2-1: config 0 descriptor??
[ 1267.750054][ T5827] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1267.767185][T18649] usb 5-1: device descriptor read/64, error -71
[ 1267.896986][T18649] usb usb5-port1: attempt power cycle
[ 1268.300869][T19315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1268.310202][T19315] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1269.406628][T19292] usb 2-1: Failed to submit usb control message: -110
[ 1269.413931][T19292] usb 2-1: unable to send the bmi data to the device: -110
[ 1269.644353][T19292] usb 2-1: unable to get target info from device
[ 1269.698111][T19292] usb 2-1: could not get target info (-110)
[ 1269.720666][T19292] usb 2-1: could not probe fw (-110)
[ 1269.913074][T19330] tipc: Started in network mode
[ 1269.936827][T19330] tipc: Node identity 4, cluster identity 4711
[ 1269.950946][T19330] tipc: Node number set to 4
[ 1270.026837][ T1211] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1270.114880][T14975] usb 2-1: USB disconnect, device number 92
[ 1270.246874][ T1211] usb 5-1: Using ep0 maxpacket: 8
[ 1270.293318][ T1211] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11
[ 1270.318945][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.413737][ T1211] usb 5-1: Product: syz
[ 1270.427812][ T1211] usb 5-1: Manufacturer: syz
[ 1270.548976][T19338] tipc: New replicast peer: 255.255.255.255
[ 1270.555722][T19338] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1270.563533][T19338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3406'.
[ 1270.572603][T19338] tipc: Disabling bearer <udp:syz2>
[ 1271.147735][ T1211] usb 5-1: SerialNumber: syz
[ 1271.187838][ T1211] usb 5-1: config 0 descriptor??
[ 1271.208881][ T1211] gspca_main: vc032x-2.14.0 probing 046d:0896
[ 1271.551982][T19348] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan1, syncid = 1, id = 0
[ 1272.009174][T19352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3409'.
[ 1272.490223][T19347] netlink: 'syz.5.3408': attribute type 1 has an invalid length.
[ 1272.514004][T19347] netlink: 'syz.5.3408': attribute type 2 has an invalid length.
[ 1272.582310][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'.
[ 1272.624633][ T1211] gspca_vc032x: reg_w err -71
[ 1272.633266][ T1211] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[ 1272.665854][T19367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3408'.
[ 1272.675813][ T1211] usb 5-1: USB disconnect, device number 92
[ 1272.689522][T19366] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3410'.
[ 1274.270336][T19384] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1274.278094][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1275.951281][ T5144] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[ 1276.575467][T19410] erspan0: entered promiscuous mode
[ 1276.637521][T19412] sctp: [Deprecated]: syz.4.3421 (pid 19412) Use of int in max_burst socket option.
[ 1276.637521][T19412] Use struct sctp_assoc_value instead
[ 1276.663072][T19412] dummy0: entered promiscuous mode
[ 1276.670275][T19412] dummy0: entered allmulticast mode
[ 1276.896982][T19422] Cannot find add_set index 0 as target
[ 1276.904429][T19422] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1276.946790][ T1211] IPVS: starting estimator thread 0...
[ 1277.036710][T19425] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1278.418536][T19435] syzkaller0: entered promiscuous mode
[ 1278.440909][T19435] syzkaller0: entered allmulticast mode
[ 1279.852374][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 270 seconds
[ 1279.868601][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 270 seconds
[ 1279.880902][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 270 seconds
[ 1279.892277][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 270 seconds
[ 1280.083522][T19476] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3431'.
[ 1281.703737][T19489] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3433'.
[ 1282.315578][T19493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1282.405436][T19493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1282.458172][ T9794] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1282.618796][ T9794] usb 2-1: Using ep0 maxpacket: 8
[ 1282.625581][ T9794] usb 2-1: config 255 has an invalid interface number: 43 but max is 0
[ 1282.646887][ T9794] usb 2-1: config 255 has no interface number 0
[ 1282.655553][ T9794] usb 2-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice= 4.27
[ 1282.666893][ T9794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.674962][ T9794] usb 2-1: Product: syz
[ 1282.691594][ T9794] usb 2-1: Manufacturer: syz
[ 1282.700668][ T9794] usb 2-1: SerialNumber: syz
[ 1282.782229][T19495] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1282.789497][    C1] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1282.932114][ T9794] int51x1 2-1:255.43: probe with driver int51x1 failed with error -71
[ 1282.953905][ T9794] usb 2-1: USB disconnect, device number 93
[ 1283.216764][T18649] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1283.346784][T18649] usb 4-1: device descriptor read/64, error -71
[ 1283.586794][T18649] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1283.703876][T19501] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3437'.
[ 1283.743640][T19501] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3437'.
[ 1283.784696][T18649] usb 4-1: device descriptor read/64, error -71
[ 1283.908058][T18649] usb usb4-port1: attempt power cycle
[ 1284.257300][T18649] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1284.280964][T18649] usb 4-1: device descriptor read/8, error -71
[ 1284.526930][T18649] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1284.571112][T18649] usb 4-1: device descriptor read/8, error -71
[ 1284.697941][T18649] usb usb4-port1: unable to enumerate USB device
[ 1285.022042][T19506] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3438'.
[ 1285.959771][T19515] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3440'.
[ 1286.006375][T19515] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3440'.
[ 1286.057029][ T5909] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1286.286897][ T5909] usb 6-1: Using ep0 maxpacket: 8
[ 1286.358063][ T5909] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1286.369385][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1286.380864][ T5909] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1286.425516][ T5909] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1286.440042][ T5909] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1286.455551][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1286.755907][T19522] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1286.767249][    C0] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1287.290034][T19524] FAULT_INJECTION: forcing a failure.
[ 1287.290034][T19524] name failslab, interval 1, probability 0, space 0, times 0
[ 1287.309732][T19524] CPU: 1 UID: 0 PID: 19524 Comm: syz.6.3443 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1287.309765][T19524] Tainted: [L]=SOFTLOCKUP
[ 1287.309773][T19524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1287.309784][T19524] Call Trace:
[ 1287.309792][T19524]  <TASK>
[ 1287.309799][T19524]  dump_stack_lvl+0xe8/0x150
[ 1287.309831][T19524]  should_fail_ex+0x412/0x560
[ 1287.309859][T19524]  should_failslab+0xa8/0x100
[ 1287.309883][T19524]  __kmalloc_noprof+0xe8/0x760
[ 1287.309904][T19524]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1287.309934][T19524]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1287.309967][T19524]  ? tomoyo_path_number_perm+0x219/0x630
[ 1287.309987][T19524]  tomoyo_path_number_perm+0x246/0x630
[ 1287.310021][T19524]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1287.310045][T19524]  ? __lock_acquire+0x6b5/0x2cf0
[ 1287.310082][T19524]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1287.310124][T19524]  ? __fget_files+0x2a/0x420
[ 1287.310153][T19524]  ? __fget_files+0x2a/0x420
[ 1287.310176][T19524]  ? __fget_files+0x3a0/0x420
[ 1287.310198][T19524]  ? __fget_files+0x2a/0x420
[ 1287.310225][T19524]  security_file_ioctl+0xc3/0x2a0
[ 1287.310246][T19524]  __se_sys_ioctl+0x47/0x170
[ 1287.310269][T19524]  do_syscall_64+0x14d/0xf80
[ 1287.310287][T19524]  ? trace_irq_disable+0x3b/0x150
[ 1287.310312][T19524]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.310331][T19524]  ? clear_bhb_loop+0x40/0x90
[ 1287.310355][T19524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1287.310373][T19524] RIP: 0033:0x7fd3def9bf79
[ 1287.310392][T19524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1287.310408][T19524] RSP: 002b:00007fd3dfdb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1287.310430][T19524] RAX: ffffffffffffffda RBX: 00007fd3df215fa0 RCX: 00007fd3def9bf79
[ 1287.310443][T19524] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[ 1287.310456][T19524] RBP: 00007fd3dfdb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1287.310468][T19524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1287.310479][T19524] R13: 00007fd3df216038 R14: 00007fd3df215fa0 R15: 00007ffceeb91728
[ 1287.310510][T19524]  </TASK>
[ 1287.310517][T19524] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1287.315188][ T5909] usb 6-1: GET_CAPABILITIES returned 0
[ 1287.390869][T19528] netlink: 'syz.3.3445': attribute type 12 has an invalid length.
[ 1287.440248][ T5909] usbtmc 6-1:16.0: can't read capabilities
[ 1287.790602][T19533] openvswitch: netlink: Message has 8 unknown bytes.
[ 1287.804263][ T5909] usb 6-1: USB disconnect, device number 33
[ 1288.017660][T19536] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3448'.
[ 1288.215117][T19536] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3448'.
[ 1288.427776][T19538] Cannot find add_set index 0 as target
[ 1288.444395][T19538] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1289.385001][T19566] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3453'.
[ 1289.417767][T19566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3453'.
[ 1290.346897][  T797] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1290.546647][  T797] usb 2-1: Using ep0 maxpacket: 16
[ 1290.578681][  T797] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1290.595992][  T797] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1290.683235][  T797] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1290.737193][  T797] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1290.760042][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.768874][  T797] usb 2-1: Product: syz
[ 1290.799598][  T797] usb 2-1: Manufacturer: syz
[ 1290.804303][  T797] usb 2-1: SerialNumber: syz
[ 1291.080197][ T9794] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[ 1291.287474][ T9794] usb 7-1: Using ep0 maxpacket: 16
[ 1291.829595][ T9794] usb 7-1: config 166 has an invalid interface number: 177 but max is 1
[ 1291.884746][ T9794] usb 7-1: config 166 has an invalid interface number: 34 but max is 1
[ 1291.911136][ T9794] usb 7-1: config 166 has an invalid descriptor of length 0, skipping remainder of the config
[ 1291.912600][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1291.930460][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.007548][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1292.016467][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.039277][T19603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1292.047521][ T9794] usb 7-1: config 166 has no interface number 0
[ 1292.048940][T19603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1292.054220][ T9794] usb 7-1: config 166 has no interface number 1
[ 1292.084501][T19607] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3464'.
[ 1292.123811][T19607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3464'.
[ 1292.130993][ T9794] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1292.175833][ T5144] Bluetooth: hci3: command 0x0406 tx timeout
[ 1292.226699][ T9794] usb 7-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1292.238019][ T9794] usb 7-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1292.261788][ T9794] usb 7-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1292.273982][ T9794] usb 7-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1292.284243][ T9794] usb 7-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0
[ 1292.296035][ T9794] usb 7-1: config 166 interface 177 has no altsetting 0
[ 1292.303199][ T9794] usb 7-1: config 166 interface 34 has no altsetting 0
[ 1292.322608][  T797] usb 2-1: 0:2 : does not exist
[ 1292.341930][ T9794] usb 7-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 1292.359505][ T9794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.377527][ T9794] usb 7-1: Product: syz
[ 1292.382173][ T9794] usb 7-1: Manufacturer: syz
[ 1292.409802][ T9794] usb 7-1: SerialNumber: syz
[ 1292.460618][T19605] random: crng reseeded on system resumption
[ 1292.626742][ T5895] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1292.828223][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.843699][ T5895] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1292.863919][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.905800][ T5895] usb 4-1: config 0 descriptor??
[ 1293.066361][T19621] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[ 1293.918486][ T5895] usb 4-1: can't set config #0, error -71
[ 1293.957555][ T5895] usb 4-1: USB disconnect, device number 111
[ 1294.030959][  T797] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[ 1294.471446][T19632] netlink: 'syz.3.3469': attribute type 11 has an invalid length.
[ 1294.479522][T19632] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.3469'.
[ 1295.483711][T19635] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3471'.
[ 1295.504539][T19635] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3471'.
[ 1295.776707][  T797] usb 2-1: USB disconnect, device number 94
[ 1295.920438][ T9794] ums-realtek 7-1:166.177: USB Mass Storage device detected
[ 1296.148744][ T9794] ums-realtek 7-1:166.34: USB Mass Storage device detected
[ 1296.262312][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3473'.
[ 1296.384760][ T9794] uvcvideo 7-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[ 1296.427678][T19647] Cannot find add_set index 0 as target
[ 1296.465259][T19648] trusted_key: syz.6.3474 sent an empty control message without MSG_MORE.
[ 1296.515940][ T9794] uvcvideo 7-1:166.34: No valid video chain found.
[ 1296.616931][ T5948] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1296.876848][ T9794] usb 7-1: USB disconnect, device number 7
[ 1296.980889][ T5948] usb 2-1: Using ep0 maxpacket: 32
[ 1297.190635][ T5948] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1297.276691][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.296711][ T5948] usb 2-1: Product: syz
[ 1297.434342][ T5948] usb 2-1: Manufacturer: syz
[ 1297.451462][ T5948] usb 2-1: SerialNumber: syz
[ 1297.483352][ T5948] usb 2-1: config 0 descriptor??
[ 1297.521839][ T5948] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1297.570394][ T5948] dvb-usb: bulk message failed: -22 (4/0)
[ 1298.000090][ T5948] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1298.130638][ T5948] dvb-usb: bulk message failed: -22 (5/0)
[ 1298.161412][ T5948] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1298.189702][ T5948] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1298.210080][ T5948] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1298.219945][T19675] loop5: detected capacity change from 0 to 512
[ 1298.234547][ T5948] usb 2-1: media controller created
[ 1298.261115][T19675] EXT4-fs: Ignoring removed orlov option
[ 1298.300439][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1298.310603][T19675] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1298.786362][T19675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002]
[ 1298.830374][T19675] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1298.830761][ T5948] usb 2-1: selecting invalid altsetting 3
[ 1298.845236][ T5948] ttusb2: set interface to alts=3 failed
[ 1298.883667][T19675] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3480: bad orphan inode 267
[ 1299.018242][T19675] loop5: lost filesystem error report for type 5 error -117
[ 1299.026605][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1299.041013][    C0] EXT4-fs (loop5): initial error at time 1771083266: ext4_orphan_get:1417
[ 1299.049616][    C0] EXT4-fs (loop5): last error at time 1771083266: ext4_orphan_get:1417
[ 1299.068319][T19675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1299.104030][ T5948] DVB: Unable to find symbol tda10086_attach()
[ 1299.159644][ T5948] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1299.176187][T19675] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1299.187257][ T5948] dvb-usb: bulk message failed: -22 (4/0)
[ 1299.193030][ T5948] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1299.239900][ T5948] dvb-usb: bulk message failed: -22 (5/0)
[ 1299.292351][ T5948] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1299.408266][ T5948] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1299.698413][ T5948] usb 2-1: USB disconnect, device number 95
[ 1300.334705][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.341237][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1302.034327][ T5948] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1302.244167][T19689] loop6: detected capacity change from 0 to 262144
[ 1302.268830][T19689] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3484 (19689)
[ 1302.287563][T19695] overlayfs: failed lookup in lower (newroot/216, name='file0', err=-40): overlapping layers
[ 1302.319162][T19689] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[ 1302.331048][T19689] BTRFS info (device loop6): using xxhash64 checksum algorithm
[ 1302.458232][T19705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3486'.
[ 1302.537024][T19705] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3486'.
[ 1302.683524][T19696] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3487'.
[ 1302.696060][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1302.696311][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1302.705807][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1302.714691][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1302.724263][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1302.735339][T19689] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1302.790409][T19689] BTRFS error (device loop6): open_ctree failed: -12
[ 1303.107655][T19696] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3487'.
[ 1303.147181][T19707] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1303.154412][    C1] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1303.288960][T19718] binder: 19717:19718 ioctl c0306201 200000000640 returned -22
[ 1305.462834][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3493'.
[ 1305.532172][T19731] 9p: Bad value for 'wfdno'
[ 1306.336817][  T797] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 1306.586665][  T797] usb 6-1: Using ep0 maxpacket: 16
[ 1306.670605][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1307.280178][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1307.290402][  T797] usb 6-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[ 1307.299668][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.348141][  T797] usb 6-1: config 0 descriptor??
[ 1307.788046][T19760] binder: 19752:19760 ioctl c0306201 200000000540 returned -14
[ 1308.412411][  T797] wacom 0003:056A:0084.0018: unbalanced delimiter at end of report description
[ 1308.440729][  T797] wacom 0003:056A:0084.0018: parse failed
[ 1308.448380][  T797] wacom 0003:056A:0084.0018: probe with driver wacom failed with error -22
[ 1308.766842][T18649] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1309.269797][T19765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1309.388208][T19765] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1309.930339][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 300 seconds
[ 1309.941169][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 300 seconds
[ 1309.952204][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 300 seconds
[ 1309.963297][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 300 seconds
[ 1310.397017][T19778] tipc: Started in network mode
[ 1310.402027][T19778] tipc: Node identity ac14140f, cluster identity 4711
[ 1310.416095][T19778] tipc: New replicast peer: 255.255.255.255
[ 1310.423695][T19778] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1310.449227][T19778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3504'.
[ 1310.458299][T19778] tipc: Disabling bearer <udp:syz2>
[ 1311.657168][T19784] comedi comedi2: comedi_config --init_data is deprecated
[ 1312.409822][   T30] audit: type=1800 audit(1771083279.905:312): pid=19790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3507" name="file1" dev="tmpfs" ino=458 res=0 errno=0
[ 1312.890772][T19810] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3514'.
[ 1312.922230][T19810] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3514'.
[ 1313.604277][T19803] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3511'.
[ 1314.015073][T18773] Bluetooth: hci1: command tx timeout
[ 1315.299244][T19833] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3518'.
[ 1315.689934][T19834] input: syz0 as /devices/virtual/input/input28
[ 1316.129647][ T5937] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[ 1316.437612][T19837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1316.468633][ T5937] usb 4-1: config 54 has an invalid interface number: 154 but max is 0
[ 1316.506912][ T5937] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[ 1316.542215][ T5937] usb 4-1: config 54 has no interface number 0
[ 1316.576927][T19837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1316.592965][ T5937] usb 4-1: config 54 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1316.685036][ T5937] usb 4-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1316.899104][ T5937] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[ 1317.004496][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1317.137067][ T5937] usb 4-1: Product: syz
[ 1317.198058][ T5937] usb 4-1: Manufacturer: syz
[ 1317.259265][ T5937] usb 4-1: SerialNumber: syz
[ 1317.391097][T19837] gretap1: entered promiscuous mode
[ 1317.670262][ T5937] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1317.727857][T19852] Cannot find add_set index 0 as target
[ 1317.858515][ T5948] usb 4-1: USB disconnect, device number 112
[ 1317.869142][T19292] usb 4-1: Failed to submit usb control message: -71
[ 1317.876196][T19292] usb 4-1: unable to send the bmi data to the device: -71
[ 1317.956829][T19292] usb 4-1: unable to get target info from device
[ 1317.986607][T19292] usb 4-1: could not get target info (-71)
[ 1318.002780][T19292] usb 4-1: could not probe fw (-71)
[ 1318.658194][T19859] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3527'.
[ 1318.682031][T19859] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3527'.
[ 1319.235880][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3529'.
[ 1320.326118][T19876] netlink: 'syz.4.3521': attribute type 29 has an invalid length.
[ 1320.350794][T19876] netlink: 'syz.4.3521': attribute type 29 has an invalid length.
[ 1320.455403][T19880] loop6: detected capacity change from 0 to 256
[ 1320.606742][ T5948] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1320.758787][T19883] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3532'.
[ 1321.136429][ T5948] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1321.292002][ T5948] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1321.342210][ T5948] usb 5-1: config 2 interface 0 has no altsetting 0
[ 1321.383865][ T5948] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1321.411658][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1321.427039][ T5948] usb 5-1: Product: syz
[ 1321.435805][ T5948] usb 5-1: Manufacturer: syz
[ 1321.444065][ T5948] usb 5-1: SerialNumber: syz
[ 1322.059225][ T5948] ims_pcu 5-1:2.0: Missing CDC union descriptor
[ 1322.067140][ T5948] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22
[ 1322.107617][ T5948] usb 5-1: USB disconnect, device number 94
[ 1322.223189][ T5909] usb 6-1: USB disconnect, device number 34
[ 1322.887967][T19909] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3541'.
[ 1322.905718][T19909] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3541'.
[ 1323.784537][T18773] Bluetooth: hci6: unexpected event for opcode 0x2040
[ 1323.791654][T18773] Bluetooth: hci6: ACL packet for unknown connection handle 200
[ 1323.892792][T19899] loop6: detected capacity change from 0 to 40427
[ 1323.901687][T19899] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9)
[ 1323.910361][T19899] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[ 1323.920258][T19899] F2FS-fs (loop6): invalid crc value
[ 1324.248752][T19899] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1324.276765][ T5895] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1324.371283][T19899] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[ 1324.471822][ T5895] usb 5-1: Using ep0 maxpacket: 32
[ 1324.875539][T19899] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[ 1325.006756][ T5895] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[ 1325.023216][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1325.044527][T19946] xt_connbytes: Forcing CT accounting to be enabled
[ 1325.057132][ T5895] usb 5-1: Product: syz
[ 1325.062218][ T5895] usb 5-1: Manufacturer: syz
[ 1325.067016][ T5895] usb 5-1: SerialNumber: syz
[ 1325.074875][ T5895] usb 5-1: config 0 descriptor??
[ 1325.102258][ T5895] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[ 1325.115432][T19946] set match dimension is over the limit!
[ 1325.224711][T18880] syz-executor: attempt to access beyond end of device
[ 1325.224711][T18880] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1325.278087][T18880] CPU: 0 UID: 0 PID: 18880 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1325.278120][T18880] Tainted: [L]=SOFTLOCKUP
[ 1325.278127][T18880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1325.278138][T18880] Call Trace:
[ 1325.278147][T18880]  <TASK>
[ 1325.278155][T18880]  dump_stack_lvl+0xe8/0x150
[ 1325.278187][T18880]  f2fs_handle_critical_error+0x37c/0x540
[ 1325.278225][T18880]  f2fs_write_end_io+0xcdb/0xff0
[ 1325.278268][T18880]  __submit_merged_bio+0x256/0x700
[ 1325.278294][T18880]  __submit_merged_write_cond+0x3c9/0x4e0
[ 1325.278333][T18880]  ? __pfx___submit_merged_write_cond+0x10/0x10
[ 1325.278388][T18880]  f2fs_write_data_pages+0x2975/0x35e0
[ 1325.278457][T18880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1325.278494][T18880]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1325.278541][T18880]  ? do_raw_spin_unlock+0xf5/0x210
[ 1325.278563][T18880]  ? free_unref_folios+0x15ad/0x16d0
[ 1325.278604][T18880]  ? __lock_acquire+0x6b5/0x2cf0
[ 1325.278651][T18880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1325.278675][T18880]  do_writepages+0x32e/0x550
[ 1325.278709][T18880]  ? do_raw_spin_unlock+0xf5/0x210
[ 1325.278733][T18880]  filemap_fdatawrite+0x1e9/0x2f0
[ 1325.278760][T18880]  ? look_up_lock_class+0x57/0x110
[ 1325.278780][T18880]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1325.278851][T18880]  ? do_raw_spin_unlock+0xf5/0x210
[ 1325.278874][T18880]  f2fs_sync_dirty_inodes+0x30e/0x860
[ 1325.278914][T18880]  f2fs_write_checkpoint+0x9df/0x26a0
[ 1325.278971][T18880]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1325.279047][T18880]  kill_f2fs_super+0x314/0x720
[ 1325.279077][T18880]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1325.279111][T18880]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1325.279143][T18880]  deactivate_locked_super+0xbc/0x130
[ 1325.279173][T18880]  cleanup_mnt+0x437/0x4d0
[ 1325.279191][T18880]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1325.279221][T18880]  task_work_run+0x1d9/0x270
[ 1325.279246][T18880]  ? __pfx_task_work_run+0x10/0x10
[ 1325.279277][T18880]  exit_to_user_mode_loop+0xed/0x480
[ 1325.279296][T18880]  ? rcu_is_watching+0x15/0xb0
[ 1325.279326][T18880]  do_syscall_64+0x32d/0xf80
[ 1325.279344][T18880]  ? trace_irq_disable+0x3b/0x150
[ 1325.279370][T18880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.279389][T18880]  ? clear_bhb_loop+0x40/0x90
[ 1325.279412][T18880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.279429][T18880] RIP: 0033:0x7fd3def9d1d7
[ 1325.279457][T18880] Code: a2 c7 05 bc e3 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 1325.279473][T18880] RSP: 002b:00007ffceeb90998 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 1325.279494][T18880] RAX: 0000000000000000 RBX: 00007fd3df031c3b RCX: 00007fd3def9d1d7
[ 1325.279507][T18880] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceeb90a50
[ 1325.279518][T18880] RBP: 00007ffceeb90a50 R08: 00007ffceeb91a50 R09: 00000000ffffffff
[ 1325.279531][T18880] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffceeb91ae0
[ 1325.279543][T18880] R13: 00007fd3df031c3b R14: 0000000000143828 R15: 00007ffceeb91b20
[ 1325.279574][T18880]  </TASK>
[ 1325.279583][T18880] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[ 1325.906133][ T5895] gspca_topro: reg_w err -71
[ 1325.936717][ T5895] gspca_topro: Sensor soi763a
[ 1325.994416][ T5895] usb 5-1: USB disconnect, device number 95
[ 1326.615592][T19965] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 1326.821140][T19968] loop6: detected capacity change from 0 to 256
[ 1327.042091][T19974] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3558'.
[ 1328.077942][T19994] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3563'.
[ 1328.120666][ T5827] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1328.120841][T19994] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3563'.
[ 1328.537053][ T5827] usb 7-1: Using ep0 maxpacket: 8
[ 1328.593437][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1328.611249][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1328.627078][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1328.641460][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1328.653427][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1328.678266][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1328.696670][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1328.762377][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1328.854690][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1328.886633][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1328.927742][ T5827] usb 7-1: config 168 descriptor has 1 excess byte, ignoring
[ 1328.935193][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1328.966837][ T5827] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1328.986745][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1329.017158][ T5827] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1329.059444][ T5827] usb 7-1: string descriptor 0 read error: -22
[ 1329.065835][ T5827] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1329.076636][ T9794] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1329.097231][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1329.137123][ T5827] adutux 7-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1329.296660][ T9794] usb 5-1: Using ep0 maxpacket: 8
[ 1329.308305][ T9794] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1329.518715][T20008] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3567'.
[ 1329.688672][   T30] audit: type=1800 audit(1771083296.885:313): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3567" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 1329.992291][ T9794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1330.113771][ T9794] usb 5-1: config 0 has no interface number 0
[ 1330.131092][ T9794] usb 5-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[ 1330.163078][ T9794] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 1330.186384][ T9794] usb 5-1: config 0 interface 1 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[ 1330.213824][ T9794] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1330.217933][T19989] loop6: detected capacity change from 0 to 2048
[ 1330.246782][ T9794] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 1330.274820][ T9794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.315640][T20011] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[ 1330.322049][T20012] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1330.332380][ T9794] usb 5-1: config 0 descriptor??
[ 1330.340841][T20010] netlink: 'syz.1.3569': attribute type 10 has an invalid length.
[ 1330.390063][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.394758][ T9794] hso 5-1:0.1: Failed to find BULK OUT ep
[ 1330.429329][T20010] hsr_slave_0: left promiscuous mode
[ 1330.447577][T19989] Remounting filesystem read-only
[ 1330.453163][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.469331][T20010] hsr_slave_1: left promiscuous mode
[ 1330.517854][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.544308][T20015] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3562'.
[ 1330.615299][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.618312][ T5909] usb 7-1: USB disconnect, device number 8
[ 1330.633368][ T9794] usb 5-1: USB disconnect, device number 96
[ 1330.668954][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.682778][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.708312][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.723749][T19989] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[ 1330.735516][   T30] audit: type=1800 audit(1771083298.245:314): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3562" name="file2" dev="loop6" ino=16 res=0 errno=0
[ 1330.820779][T19989] adutux: No device or device unplugged -19
[ 1331.124763][ T5909] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1331.706806][ T5909] usb 2-1: Using ep0 maxpacket: 32
[ 1331.816697][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1331.937554][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1332.091195][ T5909] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1332.310679][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1332.396864][ T5909] usb 2-1: config 0 descriptor??
[ 1332.568078][T20039] openvswitch: netlink: Message has 1 unknown bytes.
[ 1332.575203][T20039] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1332.642615][ T5909] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[ 1332.676624][ T5909] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[ 1332.690319][ T5909] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[ 1332.716758][ T5909] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[ 1332.741774][ T5909] koneplus 0003:1E7D:2D51.0019: unknown main item tag 0x0
[ 1332.777335][ T5909] koneplus 0003:1E7D:2D51.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[ 1332.959772][T20051] loop6: detected capacity change from 0 to 64
[ 1333.018227][T20051] hfs: get root inode failed
[ 1333.168128][ T5909] usb 2-1: USB disconnect, device number 96
[ 1333.470689][T20059] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3579'.
[ 1334.228198][T20063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3582'.
[ 1334.383123][T20067] loop6: detected capacity change from 0 to 256
[ 1334.499884][T20067] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1334.576212][T20070] binder: 20062:20070 unknown command 1077961719
[ 1334.583676][T20070] binder: 20062:20070 ioctl c0306201 200000000240 returned -22
[ 1334.836873][ T5827] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1335.104327][   T30] audit: type=1800 audit(1771083302.585:315): pid=20067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3581" name="file2" dev="loop6" ino=1048655 res=0 errno=0
[ 1335.128905][T20067] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff)
[ 1335.326663][ T5827] usb 5-1: Using ep0 maxpacket: 32
[ 1335.369453][ T5827] usb 5-1: device descriptor read/all, error -71
[ 1337.042549][T20090] loop5: detected capacity change from 0 to 256
[ 1337.083229][T20090] vfat: Unknown parameter 'ÌÅw‰ÚÀÏ+ëVOãpseã�Jߤ­¼q�B…Tþgå'
[ 1337.153969][T20092] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3592'.
[ 1337.312508][T20092] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3592'.
[ 1338.202111][T20105] dummy0: left promiscuous mode
[ 1338.207215][T20105] dummy0: left allmulticast mode
[ 1338.690568][T20105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1338.848879][T20111] loop5: detected capacity change from 0 to 512
[ 1338.978999][T20085] loop6: detected capacity change from 0 to 32768
[ 1339.033028][T20085] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3589 (20085)
[ 1339.834463][T20085] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1339.844906][T20085] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1339.853786][T20085] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1339.871624][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[ 1339.871998][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1339.881523][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1339.891236][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1339.945405][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[ 1339.973764][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1340.085489][ T1933] block nbd0: Possible stuck request ffff888027610000: control (read@0,1024B). Runtime 330 seconds
[ 1340.109335][ T1933] block nbd0: Possible stuck request ffff888027610200: control (read@1024,1024B). Runtime 330 seconds
[ 1340.120884][ T1933] block nbd0: Possible stuck request ffff888027610400: control (read@2048,1024B). Runtime 330 seconds
[ 1340.132366][ T1933] block nbd0: Possible stuck request ffff888027610600: control (read@3072,1024B). Runtime 330 seconds
[ 1340.176163][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[ 1340.176507][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1340.212677][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1340.324017][T20139] loop5: detected capacity change from 0 to 512
[ 1340.345431][T20139] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1340.352411][T20139] EXT4-fs: Conflicting test_dummy_encryption options
[ 1340.874873][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1340.875192][T20085] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1340.938969][T20085] BTRFS error (device loop6): open_ctree failed: -12
[ 1341.800114][T20155] No such timeout policy "syz1"
[ 1341.837341][T20156] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3588'.
[ 1341.888563][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'.
[ 1341.910452][T20155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3588'.
[ 1343.638383][ T5895] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[ 1343.802609][ T5895] usb 6-1: config 0 has an invalid interface number: 66 but max is 0
[ 1343.826650][ T5895] usb 6-1: config 0 has no interface number 0
[ 1344.058036][ T5895] usb 6-1: config 0 interface 66 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1344.116108][ T5895] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=6d.c5
[ 1344.132867][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.179380][ T5895] usb 6-1: Product: syz
[ 1344.195429][ T5895] usb 6-1: Manufacturer: syz
[ 1344.221040][ T5895] usb 6-1: SerialNumber: syz
[ 1344.275263][ T5895] usb 6-1: config 0 descriptor??
[ 1344.331014][ T5895] imon_raw 6-1:0.66: IR endpoint missing
[ 1344.343136][T20159] loop6: detected capacity change from 0 to 40427
[ 1344.531067][T20175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.557417][T20175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.679603][T20185] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3607'.
[ 1344.708371][T20185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.718307][T20185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.757291][T20159] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1344.894710][T20188] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3609'.
[ 1345.710019][ T5895] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1345.886999][ T5895] usb 2-1: Using ep0 maxpacket: 32
[ 1345.898740][ T5895] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[ 1345.926768][ T5895] usb 2-1: config 2 has no interface number 0
[ 1345.960144][ T5895] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[ 1345.984487][ T5895] usb 2-1: config 2 interface 88 has no altsetting 0
[ 1346.020530][ T5895] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[ 1346.048682][T20202] loop6: detected capacity change from 0 to 64
[ 1346.091364][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.114684][ T5895] usb 2-1: Product: syz
[ 1346.125003][ T5895] usb 2-1: Manufacturer: syz
[ 1346.144254][   T30] audit: type=1800 audit(1771083313.635:316): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3615" name="file1" dev="loop6" ino=22 res=0 errno=0
[ 1346.144361][ T5895] usb 2-1: SerialNumber: syz
[ 1346.274595][T20202] syz.6.3615: attempt to access beyond end of device
[ 1346.274595][T20202] loop6: rw=8423425, sector=57, nr_sectors = 8 limit=64
[ 1346.301349][T20193] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1346.448476][ T5827] usb 6-1: USB disconnect, device number 35
[ 1347.655781][T20193] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1348.525774][T20212] tipc: Started in network mode
[ 1348.531251][T20212] tipc: Node identity ac14140f, cluster identity 4711
[ 1348.538526][T20212] tipc: New replicast peer: 255.255.255.255
[ 1348.545580][T20212] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1348.554798][T20212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3614'.
[ 1348.563992][T20212] tipc: Disabling bearer <udp:syz2>
[ 1349.460013][ T5895] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1349.553533][ T5895] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9
[ 1349.609244][ T5895] asix 2-1:2.88: probe with driver asix failed with error -71
[ 1349.744391][ T5895] usb 2-1: USB disconnect, device number 97
[ 1350.434877][T20232] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3620'.
[ 1351.571125][T20242] binder: BINDER_SET_CONTEXT_MGR already set
[ 1351.598816][T20242] binder: 20240:20242 ioctl 4018620d 200000000280 returned -16
[ 1352.231740][T20259] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3628'.
[ 1352.954038][T20246] loop6: detected capacity change from 0 to 32768
[ 1352.981285][T20246] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3624 (20246)
[ 1353.021851][T20246] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1353.067074][T20246] BTRFS info (device loop6): using sha256 checksum algorithm
[ 1353.249421][T20246] BTRFS info (device loop6): enabling ssd optimizations
[ 1353.294232][T20246] BTRFS info (device loop6): turning on async discard
[ 1353.337203][T20246] BTRFS info (device loop6): enabling free space tree
[ 1353.581318][T18880] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1355.780634][T20309] syzkaller0: entered promiscuous mode
[ 1355.786210][T20309] syzkaller0: entered allmulticast mode
[ 1355.988792][T20306] loop5: detected capacity change from 0 to 4096
[ 1356.236756][T20306] NILFS (loop5): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[ 1356.246310][T20312] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1356.301993][T20306] NILFS (loop5): error -5 getting root inode
[ 1356.567561][T20306] netlink: 'syz.5.3637': attribute type 3 has an invalid length.
[ 1356.791370][T20320] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3640'.
[ 1356.917045][T20320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3640'.
[ 1358.188895][T20328] syzkaller0: entered promiscuous mode
[ 1358.223111][T20328] syzkaller0: entered allmulticast mode
[ 1358.554340][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'.
[ 1358.601848][T20339] hsr_slave_0: left promiscuous mode
[ 1358.633337][T20339] hsr_slave_1: left promiscuous mode
[ 1358.760371][T20343] loop6: detected capacity change from 0 to 1024
[ 1358.798104][T20343] EXT4-fs: Ignoring removed oldalloc option
[ 1358.804139][T20343] EXT4-fs: Ignoring removed bh option
[ 1358.836814][T20343] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1358.904744][T20343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1359.078333][T20343] netlink: 'syz.6.3647': attribute type 4 has an invalid length.
[ 1359.161189][T20350] fuse: Bad value for 'group_id'
[ 1359.166190][T20350] fuse: Bad value for 'group_id'
[ 1359.317146][T18880] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[ 1359.370522][T18880] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256)
[ 1359.777307][T20358] kvm: pic: non byte write
[ 1359.908434][T18880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1360.393995][T19291] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1360.496812][   T31] INFO: task syz.0.3254:18695 blocked for more than 143 seconds.
[ 1360.515211][   T31]       Tainted: G             L      syzkaller #0
[ 1360.533379][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1360.552740][   T31] task:syz.0.3254      state:D stack:28160 pid:18695 tgid:18694 ppid:17442  task_flags:0x400140 flags:0x00080002
[ 1360.565658][   T31] Call Trace:
[ 1360.569450][   T31]  <TASK>
[ 1360.572497][   T31]  __schedule+0x1585/0x5340
[ 1360.593990][   T31]  ? __pfx___schedule+0x10/0x10
[ 1360.610941][   T31]  ? schedule+0x90/0x360
[ 1360.628997][   T31]  schedule+0x164/0x360
[ 1360.642887][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1360.749735][   T31]  __mutex_lock+0x7fe/0x1300
[ 1360.754424][   T31]  ? __mutex_lock+0x5ac/0x1300
[ 1360.817395][   T31]  ? bdev_open+0xe0/0xd30
[ 1360.821828][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1360.859537][   T31]  ? disk_block_events+0xab/0x120
[ 1360.864635][   T31]  ? bdev_open+0xaf/0xd30
[ 1360.908028][   T31]  bdev_open+0xe0/0xd30
[ 1360.912279][   T31]  blkdev_open+0x470/0x610
[ 1360.933571][   T31]  ? __pfx_blkdev_open+0x10/0x10
[ 1360.940780][   T31]  do_dentry_open+0x785/0x14e0
[ 1360.945632][   T31]  vfs_open+0x3b/0x340
[ 1360.950354][   T31]  ? path_openat+0x2df0/0x3860
[ 1360.955173][   T31]  path_openat+0x2e08/0x3860
[ 1360.970794][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[ 1360.976247][   T31]  ? stack_depot_save_flags+0x33/0x810
[ 1360.982193][   T31]  ? __pfx_path_openat+0x10/0x10
[ 1361.007049][   T31]  ? __x64_sys_openat+0x138/0x170
[ 1361.012162][   T31]  ? do_syscall_64+0x14d/0xf80
[ 1361.020252][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.026461][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1361.047893][   T31]  do_file_open+0x23e/0x4a0
[ 1361.052478][   T31]  ? __pfx_do_file_open+0x10/0x10
[ 1361.058058][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1361.062955][   T31]  ? alloc_fd+0x64b/0x6c0
[ 1361.070382][   T31]  do_sys_openat2+0x113/0x200
[ 1361.075119][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1361.083829][   T31]  ? exc_page_fault+0x6a/0xc0
[ 1361.089026][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[ 1361.094364][   T31]  __x64_sys_openat+0x138/0x170
[ 1361.107054][   T31]  do_syscall_64+0x14d/0xf80
[ 1361.146674][   T31]  ? trace_irq_disable+0x3b/0x150
[ 1361.151783][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.159773][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1361.176231][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.183496][   T31] RIP: 0033:0x7f577415c84e
[ 1361.188478][   T31] RSP: 002b:00007f5775081b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1361.199312][   T31] RAX: ffffffffffffffda RBX: 00007f57750826c0 RCX: 00007f577415c84e
[ 1361.208621][   T31] RDX: 0000000000040000 RSI: 00007f5775081c00 RDI: ffffffffffffff9c
[ 1361.216683][   T31] RBP: 00007f5775081c00 R08: 0000000000000000 R09: 0000000000000000
[ 1361.224954][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1361.233081][   T31] R13: 00007f5774416038 R14: 00007f5774415fa0 R15: 00007ffc96014618
[ 1361.241267][   T31]  </TASK>
[ 1361.244622][   T31] 
[ 1361.244622][   T31] Showing all locks held in the system:
[ 1361.254406][   T31] 1 lock held by khungtaskd/31:
[ 1361.259524][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1361.282015][   T31] 2 locks held by getty/5579:
[ 1361.286922][   T31]  #0: ffff8880365e30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1361.296790][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1361.308496][   T31] 1 lock held by udevd/15333:
[ 1361.313195][   T31]  #0: ffff88802756d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1361.322984][   T31] 1 lock held by syz-executor/18070:
[ 1361.328675][   T31]  #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1361.339655][   T31] 1 lock held by syz.0.3254/18695:
[ 1361.344789][   T31]  #0: ffff88802756d358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[ 1361.354097][   T31] 8 locks held by kworker/u8:0/19291:
[ 1361.359566][   T31]  #0: ffff88801c2ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[ 1361.370958][   T31]  #1: ffffc90003707c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[ 1361.381020][   T31]  #2: ffffffff8fbbe770 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1361.390541][   T31]  #3: ffff8880213ee0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x117/0x3f0
[ 1361.400884][   T31]  #4: ffff8880213ef250 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x3f0
[ 1361.413098][   T31]  #5: ffffffff8fbcd588 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680
[ 1361.422095][   T31]  #6: ffff888035178d50 (&dev_instance_lock_key#24){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x583/0x2380
[ 1361.434477][   T31]  #7: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1361.445582][   T31] 1 lock held by syz.5.3632/20295:
[ 1361.457569][   T31]  #0: ffffffff8e766440 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[ 1361.467639][   T31] 4 locks held by syz.1.3653/20361:
[ 1361.473020][   T31]  #0: ffff88802b678ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5a0
[ 1361.483051][   T31]  #1: ffff88802b6780c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x10e0
[ 1361.492926][   T31]  #2: ffffffff8fd59be8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260
[ 1361.502991][   T31]  #3: ffff88804b2cbaf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5c0
[ 1361.513456][   T31] 
[ 1361.524934][   T31] =============================================
[ 1361.524934][   T31] 
[ 1361.533502][   T31] NMI backtrace for cpu 1
[ 1361.533525][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1361.533552][   T31] Tainted: [L]=SOFTLOCKUP
[ 1361.533560][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1361.533571][   T31] Call Trace:
[ 1361.533580][   T31]  <TASK>
[ 1361.533589][   T31]  dump_stack_lvl+0xe8/0x150
[ 1361.533623][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1361.533649][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1361.533677][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1361.533706][   T31]  sys_info+0x135/0x170
[ 1361.533728][   T31]  watchdog+0xfd9/0x1030
[ 1361.533762][   T31]  ? watchdog+0x21a/0x1030
[ 1361.533797][   T31]  kthread+0x388/0x470
[ 1361.533818][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1361.533843][   T31]  ? __pfx_kthread+0x10/0x10
[ 1361.533865][   T31]  ret_from_fork+0x51e/0xb90
[ 1361.533895][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1361.533918][   T31]  ? __switch_to+0xc7d/0x1450
[ 1361.533945][   T31]  ? __pfx_kthread+0x10/0x10
[ 1361.533966][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1361.534010][   T31]  </TASK>
[ 1361.534018][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1361.652356][    C0] NMI backtrace for cpu 0
[ 1361.652378][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1361.652408][    C0] Tainted: [L]=SOFTLOCKUP
[ 1361.652414][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1361.652423][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1361.652452][    C0] Code: ce 6c 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 6d 1b 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1361.652465][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[ 1361.652481][    C0] RAX: 00000000032e7fdb RBX: ffffffff819a924d RCX: 0000000080000001
[ 1361.652493][    C0] RDX: 0000000000000001 RSI: ffffffff8def38f2 RDI: ffffffff8c27ab00
[ 1361.652504][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[ 1361.652516][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901195b0
[ 1361.652527][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[ 1361.652538][    C0] FS:  0000000000000000(0000) GS:ffff888125460000(0000) knlGS:0000000000000000
[ 1361.652551][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1361.652562][    C0] CR2: 0000200000404030 CR3: 000000005989c000 CR4: 00000000003526f0
[ 1361.652579][    C0] Call Trace:
[ 1361.652587][    C0]  <TASK>
[ 1361.652594][    C0]  default_idle+0x9/0x20
[ 1361.652611][    C0]  default_idle_call+0x72/0xb0
[ 1361.652630][    C0]  do_idle+0x1bd/0x500
[ 1361.652650][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1361.652668][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1361.652691][    C0]  cpu_startup_entry+0x43/0x60
[ 1361.652711][    C0]  rest_init+0x2de/0x300
[ 1361.652730][    C0]  start_kernel+0x385/0x3d0
[ 1361.652749][    C0]  x86_64_start_reservations+0x24/0x30
[ 1361.652770][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1361.652791][    C0]  common_startup_64+0x13e/0x147
[ 1361.652813][    C0]  </TASK>
[ 1361.886168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.892840][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.098957][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1362.105882][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1362.116606][   T31] Tainted: [L]=SOFTLOCKUP
[ 1362.120960][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[ 1362.131362][   T31] Call Trace:
[ 1362.134657][   T31]  <TASK>
[ 1362.137606][   T31]  vpanic+0x56c/0xa60
[ 1362.141608][   T31]  ? __pfx___schedule+0x10/0x10
[ 1362.146452][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1362.150945][   T31]  ? __pfx_console_unlock+0x10/0x10
[ 1362.156144][   T31]  panic+0xc5/0xd0
[ 1362.159875][   T31]  ? __pfx_panic+0x10/0x10
[ 1362.164303][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1362.169668][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1362.175815][   T31]  watchdog+0x1023/0x1030
[ 1362.180144][   T31]  ? watchdog+0x21a/0x1030
[ 1362.184556][   T31]  kthread+0x388/0x470
[ 1362.188614][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1362.193290][   T31]  ? __pfx_kthread+0x10/0x10
[ 1362.197956][   T31]  ret_from_fork+0x51e/0xb90
[ 1362.202628][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1362.207736][   T31]  ? __switch_to+0xc7d/0x1450
[ 1362.212410][   T31]  ? __pfx_kthread+0x10/0x10
[ 1362.216990][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1362.221760][   T31]  </TASK>
[ 1362.225014][   T31] Kernel Offset: disabled
[ 1362.229349][   T31] Rebooting in 86400 seconds..