last executing test programs:

7m45.146592412s ago: executing program 2 (id=3184):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x48a5, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x40}, &(0x7f0000000000)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4)

7m44.810521238s ago: executing program 2 (id=3185):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'nicvf0\x00'}, 0x18)

7m44.351193607s ago: executing program 2 (id=3187):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6cd, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

7m44.086410812s ago: executing program 2 (id=3188):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

7m43.885712244s ago: executing program 2 (id=3189):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x204000000000075f, 0x10b042)
ioctl$LOOP_SET_STATUS(r0, 0x1277, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x5, 0x12, 0xd, 0xc, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6caadd6d126cfbc0c92fc800", [0xfffffffffffffff8, 0x9]})

7m36.178269863s ago: executing program 2 (id=3206):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000"], 0x92fc}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc0dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x123}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

7m34.366817098s ago: executing program 32 (id=3206):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
socket$tipc(0x1e, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2}, 0x18)
bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a0103000000"], 0x92fc}}, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc0dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x123}], 0x1}}], 0x3, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

7m28.591959659s ago: executing program 3 (id=3218):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x58, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
write(r0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

7m26.349240372s ago: executing program 3 (id=3224):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

7m26.295272352s ago: executing program 3 (id=3225):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r4, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0)

7m25.240751672s ago: executing program 3 (id=3228):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

7m25.056907735s ago: executing program 3 (id=3231):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000080)=@assoc_value={<r1=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000003c0)={r1}, &(0x7f0000000180)=0x8)

7m24.722300053s ago: executing program 3 (id=3232):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x58, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
write(r0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

7m24.389339482s ago: executing program 33 (id=3232):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x58, &(0x7f00000001c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
write(r0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

6m44.418145181s ago: executing program 4 (id=3341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40404, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000013c0)={0x1, 0x0, [{0x2, 0x1, 0x0, 0x0, @sint={0xe26, 0x7}}]})

6m42.610416227s ago: executing program 4 (id=3349):
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e04e040"], 0x7)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040))

6m42.330347157s ago: executing program 4 (id=3352):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x516, &(0x7f0000000dc0)="$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")
socket(0x10, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x81)

6m39.858868668s ago: executing program 4 (id=3355):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1)
r1 = syz_open_procfs(0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8400, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}})
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000f00)={[], [{@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@smackfsdef={'smackfsdef', 0x3d, 'group_id'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_lt}, {@dont_hash}, {@euid_lt}, {@uid_gt}]}, 0xfe, 0x244, &(0x7f0000000400)="$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")
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000005c0))
openat(0xffffffffffffff9c, 0x0, 0x80042, 0x19)
ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x8000000000000001, 0x0, 0x0, 0x1, 0x10, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]})
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)

6m36.822905674s ago: executing program 4 (id=3369):
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000080)="96", 0x1}, {0x0}], 0x3, 0x2)
close(0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r0}, 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x158, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}]}, 0x158}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f0000000240)={0x1, 0xd6f2, 0xb, 0x9, 0x1, 0x662c, 0xf, 0xaf}, &(0x7f00000002c0)={0x4, 0x80000000, 0x3, 0x1000, 0x7, 0x7, 0x7fffffff, 0x1}, &(0x7f0000000300)={0xfffffffffffffff3, 0x2, 0xffff, 0x0, 0x7, 0x5, 0x3640, 0x9}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0)
ioctl$TCFLSH(r2, 0x4b63, 0x3)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49)
mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x0, 0x0, 0x28, @loopback, @remote, 0x7, 0x40, 0x6, 0x1}})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2)

6m29.557889282s ago: executing program 4 (id=3389):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = eventfd2(0x3ff, 0x80000)
write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x8)
read$eventfd(r0, &(0x7f0000000040), 0x8)

6m28.339184034s ago: executing program 34 (id=3389):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
r0 = eventfd2(0x3ff, 0x80000)
write$eventfd(r0, &(0x7f0000000080)=0xfffffffffffffffe, 0x8)
read$eventfd(r0, &(0x7f0000000040), 0x8)

5m24.852253835s ago: executing program 1 (id=3570):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r3, 0x0, 0x0)
close(r3)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="e71a6f2b7e459f587fd64b45345d93796e850342f59c401b99df9a6d1330b6538cd07a15aced199937f93e6e22e71f8e8bced6f622dd0734af40ff83b625cf00891ed6045acabebcd9a0f00a878ac753dacd03de345e6c090643452593c8e1c978a24f2dd19c5e1f1d4c15137307e08a14d4b91e837ef3f1d5", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
io_setup(0x5, &(0x7f0000000000)=<r7=>0x0)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", <r9=>0xffffffffffffffff})
io_submit(r7, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}])
ioctl$SW_SYNC_IOC_INC(r8, 0x40045701, &(0x7f0000000080)=0x10)
ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080))

5m23.712095249s ago: executing program 1 (id=3572):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003540)=""/4104, 0x1008}, {&(0x7f0000000840)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000140)=""/181, 0xb5}], 0x6}, 0x0)

5m23.544560454s ago: executing program 1 (id=3574):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x98, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0xc811}, 0x40000)

5m23.314857005s ago: executing program 1 (id=3576):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000180)={[{@barrier}, {@autodefrag}, {@ref_verify}, {@enospc_debug}, {@noflushoncommit}, {@usebackuproot}, {@max_inline={'max_inline', 0x3d, [0x37, 0x37, 0x6b, 0x37]}}, {@thread_pool={'thread_pool', 0x3d, 0x6}}, {@ssd_spread}]}, 0x1, 0x55ae, &(0x7f0000005600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1d9)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1)
write$P9_RSTATu(r0, &(0x7f00000001c0)=ANY=[], 0x75)
write$cgroup_subtree(r0, 0x0, 0x0)

5m19.760119832s ago: executing program 1 (id=3589):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

5m19.394447643s ago: executing program 1 (id=3590):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x10, 0x6}, 'port1\x00', 0x3, 0x140014, 0x7e, 0x6, 0xfffffffe, 0x8001, 0x5, 0x0, 0x0, 0x3})

5m4.200410843s ago: executing program 35 (id=3590):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x10, 0x6}, 'port1\x00', 0x3, 0x140014, 0x7e, 0x6, 0xfffffffe, 0x8001, 0x5, 0x0, 0x0, 0x3})

4m17.374516086s ago: executing program 6 (id=3739):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32, @ANYBLOB="04008e"], 0x398}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0)

4m16.843459077s ago: executing program 6 (id=3740):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbb8, &(0x7f00000017c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x400)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2)
renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)

4m15.198228401s ago: executing program 6 (id=3745):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0)

4m14.334364004s ago: executing program 6 (id=3747):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0)

4m14.23709216s ago: executing program 6 (id=3751):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r5 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0x1000}}, './file0\x00'})

4m12.977441751s ago: executing program 6 (id=3756):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
msgget(0x3, 0x710)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

4m12.285905901s ago: executing program 36 (id=3756):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0))
msgget(0x3, 0x710)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)

11.781587253s ago: executing program 5 (id=4514):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
rename(0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x2)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000300))

9.541986647s ago: executing program 5 (id=4520):
r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "9f72278027c1d28d4c03376c9ea125e7126c04d01d93ad3b87c89d5c0b0c4de6f93f4dbd6912ed5a27fae9675080ce819d29385c8508f326e65821cefa9aa70b", 0x31}, 0x48, 0xfffffffffffffffc)
request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='#%', r0)

9.378771307s ago: executing program 5 (id=4523):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

9.270164448s ago: executing program 5 (id=4525):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0f00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}]}}, 0x0}, 0x0)

8.178879197s ago: executing program 9 (id=4534):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1)

6.971274717s ago: executing program 5 (id=4537):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x8)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000580)={'syz1\x00', {0x6ec9, 0x0, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x6, 0x2, 0x5334, 0x2400, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0xf47d5a13, 0x8, 0xffffdb9a, 0xfffffffc, 0x5, 0xfffffffb, 0x4, 0x3, 0x2004, 0xf252, 0x4, 0x800, 0xfffffd80, 0x7, 0x1, 0x4623b, 0x7, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0x11, 0x4, 0xffffffc0, 0x8da8, 0x2, 0x1fd, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x6, 0x9, 0x1, 0x1, 0x80000001, 0x4, 0x200, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0xa, 0x1e, 0x2, 0x18000, 0x10001, 0x400003, 0x0, 0x5, 0x8, 0xfffffffc, 0x4, 0x4, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x8000, 0x8001, 0x3, 0x1, 0x8, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x2, 0xfffffffe, 0x0, 0x5, 0x10, 0x1, 0x0, 0x5, 0x4, 0x4, 0x6, 0x5, 0x1ff, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x0, 0x401, 0xc, 0x3, 0x379, 0x400, 0xe, 0x5, 0xcb49, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x89, 0xfffffffb], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x2007, 0x1002, 0x7, 0x10, 0x7, 0x200009, 0x2, 0x5, 0x7fffffff, 0x7, 0xffffffff, 0x1000, 0x3, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000401, 0x4, 0x4, 0x5, 0xffffffff, 0xfffffffe, 0x5, 0x80, 0xb, 0x28e3, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x1008001, 0xbf23, 0x6, 0x7, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x6, 0x7, 0x4, 0xea, 0x2, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x40002], [0x108e, 0x800, 0x3, 0x3, 0x1, 0x2, 0x6, 0x1, 0x50, 0x2, 0x763, 0xb, 0x402, 0x2, 0x4, 0x1000, 0x7f, 0x25, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x4, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x803, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0xffffffff, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x6, 0x200, 0x7, 0x4ee1, 0x8, 0x7, 0xe, 0x4, 0x4000000e, 0x2000b, 0x1ff, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
readv(r1, &(0x7f0000001900)=[{0x0, 0xea}], 0x1)

6.701955223s ago: executing program 8 (id=4538):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

6.425526496s ago: executing program 8 (id=4539):
socket$inet(0x2, 0x1, 0x100)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0)
syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c006100ff010000000000758241d0e87b07bc00", @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
close(0x3)
r3 = socket(0x2, 0x80805, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000000)={0x1, 0x10}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]})
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d45844baa1a015454e0e42683ef64bfcf97c7409f30a35ea7ca84ae48f37a6e1ed5405ab1320184511303caea28753a4963006c60f8290702d5409"], 0x30}], 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
syz_open_dev$radio(0x0, 0x3, 0x2)

5.677474412s ago: executing program 8 (id=4540):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = inotify_init()
inotify_rm_watch(r5, 0x0)

4.66213296s ago: executing program 8 (id=4541):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f0000000980)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x907}}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @empty, @empty}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r0, 0x0, 0x0, 0xc2a)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000002c0)="96bc1480bb58", 0x6}], 0x2}, 0x40010)
stat(&(0x7f0000000380)='./bus\x00', &(0x7f0000000440))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000940)="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", 0x2000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x10000}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f00000007c0)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x808c8, &(0x7f0000000300)={[{@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x4}}, {@stats}]})
name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)

4.109626389s ago: executing program 0 (id=4543):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040), 0xc)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8)
setuid(0xee01)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000002480)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, 0x0, 0x0)
r4 = semget$private(0x0, 0x6, 0x3b1)
semop(r4, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2)
semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000440)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffb})
semctl$IPC_RMID(r4, 0x0, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9a85, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}})
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.896137244s ago: executing program 9 (id=4544):
mkdir(0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}]}]}, 0x5c}}, 0x0)
socket$inet6(0xa, 0x3, 0x6)

3.73685304s ago: executing program 9 (id=4546):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x0)
recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000001880)=""/236, 0xec}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001700)=""/179, 0xb3}], 0x5}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

3.693658121s ago: executing program 7 (id=4547):
syz_io_uring_setup(0x88f, &(0x7f0000000380)={0x0, 0x9439, 0x0, 0x1, 0xbfdffff8}, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r3, 0x8b1b, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x6, 0x0, 0x0, 0x4, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x1, 0x1000, 0x10000}, 0x28)
fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
io_uring_setup(0x2c49, &(0x7f0000002240))
socket$nl_generic(0x10, 0x3, 0x10)

2.912089376s ago: executing program 9 (id=4548):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)

2.886601754s ago: executing program 0 (id=4549):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

2.737404993s ago: executing program 7 (id=4550):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x8080000})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x4}}, 0x20)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x17})

2.589178202s ago: executing program 8 (id=4551):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = inotify_init()
inotify_rm_watch(r5, 0x0)

2.534030076s ago: executing program 5 (id=4552):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}, 0x70}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

2.533347631s ago: executing program 7 (id=4553):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
futex(&(0x7f0000000dc0)=0x2, 0xc, 0x1, 0x0, &(0x7f0000000e40)=0x2, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00')
syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x149c01, 0xa7)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0), 0x82000, &(0x7f0000000280)=ANY=[])
chmod(&(0x7f0000000140)='./file0\x00', 0x0)

2.531983074s ago: executing program 0 (id=4554):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337dfe5af64aaf38a0a2a57d54450e144eb17d7c96fccc09969631792fa5b33a39166c3df873d88513ae92b949075fa3162cb340980192f8f8b280fad677470571cfb012f48cf62cee3ede300e7c32309a4bc895bca066caa478f206421e348ef789acb21995c5abad1b4b3591bb1bd3f7036eec7d4e89b37487d64960cc4404fef", 0xe8}, {&(0x7f0000000800)="104b0b7073fbd7f77a847bdbfdf6da474f700bf113b18d16d8380f42e296b49f1326c7d0d97be798e205654b8a885df6ee57ec7b690491c55ca484b54170549c7a72b8a579005ffcb0b309dae34571b17126534a763ca881f12d750072abc05a7cb8f0e32fc3ec3ed14c3322630ae8e710fb68299cbb5accee8813185c77248ddec7b5688599f1bfccbec448bc6ce5c139c2095da22c9d7edf7bfa1392c76ab0dddf4db130420df295ea16aa3e841d50dc813025315eea3990c2de68e835c4fec57e2dd70f47b584", 0xc8}, {&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96", 0xf}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d", 0xad}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="d5469d85d0d60f65e265272f992fe2e89a07538f38a0fca39564f00ace54ac08601c7d122f4eb22252869c607e8fafafae5f5fbfc3d6eb9600484b034b64d1780e02cb48bc689b9e9d9581b7fb99e318317678aa62dc3cc568ad6294df27073f69f7e6e543d41f6fbbfaa503111264f93bda1afcc022fb31232de84428a0ae89a0135760d4af60526ec2ebd9a956fed5a0", 0x91}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000005c0)='3d[', 0x3}, {&(0x7f0000000e80)="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", 0x224}], 0x2}}], 0x4, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.823937123s ago: executing program 0 (id=4555):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)

1.583892209s ago: executing program 7 (id=4556):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f00000003c0)=ANY=[@ANYBLOB="d96b4f"])

1.124917355s ago: executing program 9 (id=4557):
r0 = socket$inet(0x2b, 0x801, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3087, 0x10, 0x100004, 0x219}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.038002935s ago: executing program 7 (id=4558):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000)
mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)

617.080759ms ago: executing program 8 (id=4559):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0)

614.390673ms ago: executing program 7 (id=4560):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
llistxattr(0x0, 0x0, 0x0)

426.054912ms ago: executing program 0 (id=4561):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @remote}, &(0x7f0000000100)=0xc)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket(0x10, 0x803, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18)
connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0x2}, 0x18)
sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5)

113.514739ms ago: executing program 0 (id=4562):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0xffffffff}, 0x1c)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000800)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)

0s ago: executing program 9 (id=4563):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001a300)=""/102400, 0x19000)
syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCGETA(0xffffffffffffffff, 0x5405, &(0x7f0000000080))
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000000000000000850000000700000085000000110000009500000000000000c4adcb2d5c1f2b484f35b4f33c6f8d3f42ed805a6ba7a3d5e3522b91e8d585638a762cb7af2c2642d97d03afb3f2ac24da57d156704e199518f4cab636aa723c7eb2b07ca274b5807afff01d75504219ef69a9a2a57c2fb2315a42965ed714431005a49fb77b1a73a72ce2f9f2ccb1e5da2e8212c76d33cad737e187d1debc0acad2683bb4e0b8bbb5b63496fcdbaa0984e1b91701d0886346fe7a3a4e3bc9d7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
r3 = socket$key(0xf, 0x3, 0x2)
pipe2(&(0x7f0000000180)={<r4=>0xffffffffffffffff}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000300)=@assoc_value, &(0x7f0000000340)=0x8)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8982, &(0x7f0000000480)={0x8, 'ip6erspan0\x00', {'ip6gretap0\x00'}})
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000000000000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)=0x3fe)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x12, r6, 0x0)
write$dsp(r6, 0x0, 0x0)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x200c00, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0]})
read$FUSE(r7, &(0x7f0000001bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x3, &(0x7f00000004c0))
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
eventfd(0x1008c66)

kernel console output (not intermixed with test programs):

or=2c42, idProduct=1709, bcdDevice=ca.b7
[  930.082152][ T5969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.084423][T17815] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3631 (17815)
[  930.090403][ T5969] usb 7-1: Product: syz
[  930.090428][ T5969] usb 7-1: Manufacturer: syz
[  930.090442][ T5969] usb 7-1: SerialNumber: syz
[  930.093347][ T5969] usb 7-1: config 0 descriptor??
[  930.131489][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.162925][T17815] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  930.183816][T17815] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  930.197696][T17815] BTRFS info (device loop5): using free-space-tree
[  930.378985][T17815] BTRFS info (device loop5): rebuilding free space tree
[  930.454482][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  930.589685][   T30] audit: type=1800 audit(1755019561.841:305): pid=17815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3631" name="file1" dev="loop5" ino=260 res=0 errno=0
[  930.610580][    C1] vkms_vblank_simulate: vblank timer overrun
[  931.187485][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  931.284057][ T5869] Bluetooth: hci4: command tx timeout
[  931.899531][T16873] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  932.024204][ T5969] usb 7-1: f81604_read: reg: 200f failed: -EPROTO
[  932.054063][ T5969] usb 7-1: USB disconnect, device number 4
[  932.107945][T16388] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  932.164548][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  932.255875][ T5969] usb 7-1: f81604_read: reg: 100f failed: -ENODEV
[  932.274373][T16388] usb 1-1: Using ep0 maxpacket: 8
[  932.291405][T16388] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  932.327710][T16388] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.335802][T16388] usb 1-1: Product: syz
[  932.343404][T16388] usb 1-1: Manufacturer: syz
[  932.360488][T16388] usb 1-1: SerialNumber: syz
[  932.374766][T16388] usb 1-1: config 0 descriptor??
[  932.442563][ T5969] usb 7-1: f81604_read: reg: 200f failed: -ENODEV
[  932.583892][T16388] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  932.660606][T17816] chnl_net:caif_netlink_parms(): no params data found
[  932.706764][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  932.715782][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  932.722390][ T5958] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  933.100828][ T5958] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  933.127782][ T5958] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  933.147061][ T5958] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  933.168038][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.348355][ T5869] Bluetooth: hci4: command tx timeout
[  934.139483][   T12] bridge_slave_1: left allmulticast mode
[  934.176014][   T12] bridge_slave_1: left promiscuous mode
[  934.183318][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  934.216984][   T12] bridge_slave_0: left allmulticast mode
[  934.222795][   T12] bridge_slave_0: left promiscuous mode
[  934.234891][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  934.301601][T16388] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  934.314107][T16388] usb 1-1: USB disconnect, device number 12
[  934.370620][T17869] kAFS: unable to lookup cell '.,'
[  934.507887][T16253] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  934.659572][T16253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  934.671533][T16253] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  934.687909][T16253] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  934.722890][T16253] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  934.757337][T16253] usb 6-1: config 0 descriptor??
[  935.093830][T17886] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  935.102191][T17886] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  935.112175][T17886] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  935.127699][T17886] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  935.136801][T17886] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  935.146327][T17886] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  935.155334][T17886] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  935.163841][T17886] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  935.174081][T17886] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  935.183362][T17886] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  935.193654][T17886] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  935.204537][T17886] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  935.214736][T17886] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  935.227717][T17886] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  935.480823][ T5869] Bluetooth: hci4: command tx timeout
[  935.517225][T16253] usb 6-1: language id specifier not provided by device, defaulting to English
[  935.696884][T17881] loop6: detected capacity change from 0 to 32768
[  935.697826][T16253] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71
[  935.704576][T17881] btrfs: Deprecated parameter 'usebackuproot'
[  935.722839][T17881] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  935.757927][T16253] uclogic 0003:256C:006D.0009: failed probing parameters: -71
[  935.762723][T17881] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3648 (17881)
[  935.779896][T16253] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71
[  935.804666][ T5945] usb 8-1: USB disconnect, device number 4
[  935.841376][T17881] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  935.844065][T16253] usb 6-1: USB disconnect, device number 4
[  935.870693][T17881] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  936.847868][T17881] BTRFS info (device loop6): using free-space-tree
[  937.285520][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  937.285835][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  937.312784][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  937.342625][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  937.353013][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  937.386489][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  937.411219][T17881] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  937.504227][ T5869] Bluetooth: hci4: command tx timeout
[  937.535338][T17881] BTRFS error (device loop6): open_ctree failed: -12
[  938.115497][T17911] loop5: detected capacity change from 0 to 1024
[  938.127860][T17911] EXT4-fs: Ignoring removed orlov option
[  938.133940][T17911] EXT4-fs: Ignoring removed i_version option
[  938.162315][T17911] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  938.237456][T17911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  938.651163][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  938.662398][T16873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  938.679438][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  938.760232][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  938.801753][   T12] bond0 (unregistering): Released all slaves
[  939.685793][   T12] tipc: Disabling bearer <udp:syz2>
[  939.877822][   T12] tipc: Left network mode
[  939.944622][T17928] loop7: detected capacity change from 0 to 32768
[  939.953257][T17928] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 128, max 512)
[  939.953257][T17928] members_v2 (size 152):
[  939.953257][T17928] Device:                        0
[  939.953257][T17928]   Label:                       (none)
[  939.953257][T17928]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  939.953257][T17928]   Size:                        16777216
[  939.953257][T17928]   read errors:                 0
[  939.953257][T17928]   write errors:                0
[  939.953257][T17928]   checksum errors:             0
[  939.953257][T17928]   seqread iops:                0
[  939.953257][T17928]   seqwrite iops:               0
[  939.953257][T17928]   randread iops:               0
[  939.953257][T17928]   randwrite iops:              0
[  939.953257][T17928]   Bucket size:                 131072
[  939.953257][T17928]   First bucket:                0
[  939.953257][T17928]   Buckets:                     128
[  939.953257][T17928]   Last mount:                  1714681267
[  939.953257][T17928]   Last superblock write:       42
[  939.953257][T17928]   State:                       rw
[  939.953257][T17928]   Data allowed:                journal,btree,user
[  939.953257][T17928]   Has data:                    (none)
[  939.953257][T17928]   Btree allocated bitmap blocksize:256
[  939.953257][T17928]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  939.953257][T17928]   Durabili
[  939.953468][T17928] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  940.247017][T17816] bridge0: port 1(bridge_slave_0) entered blocking state
[  940.291933][T17816] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.293895][T17935] program syz.0.3660 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  940.308941][T17816] bridge_slave_0: entered allmulticast mode
[  940.328622][T17816] bridge_slave_0: entered promiscuous mode
[  940.346095][T17816] bridge0: port 2(bridge_slave_1) entered blocking state
[  940.362842][T17816] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.397055][T17816] bridge_slave_1: entered allmulticast mode
[  940.492512][T17816] bridge_slave_1: entered promiscuous mode
[  940.498791][T17940] loop7: detected capacity change from 0 to 512
[  940.519450][T17940] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  940.648554][T17940] EXT4-fs (loop7): 1 truncate cleaned up
[  940.655967][T17940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  940.767987][ T5945] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  940.836460][T17950] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3664'.
[  941.408690][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  941.421803][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  941.583203][ T5945] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  941.760470][ T5945] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  941.999586][ T5945] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  942.012550][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.024443][T17816] team0: Port device team_slave_0 added
[  942.342207][T16802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  943.086526][T17816] team0: Port device team_slave_1 added
[  943.242997][T17941] kAFS: unable to lookup cell '.,'
[  943.349679][   T12] hsr_slave_0: left promiscuous mode
[  943.482795][   T12] hsr_slave_1: left promiscuous mode
[  943.495454][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  943.507289][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  944.075346][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  944.093069][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  944.323692][   T12] veth1_macvtap: left promiscuous mode
[  944.351798][   T12] veth0_macvtap: left promiscuous mode
[  944.374363][   T12] veth1_vlan: left promiscuous mode
[  944.383606][   T12] veth0_vlan: left promiscuous mode
[  944.664167][ T5958] usb 6-1: USB disconnect, device number 5
[  946.407777][T17988] comedi comedi2: reset error (fatal)
[  946.751913][   T12] team0 (unregistering): Port device team_slave_1 removed
[  947.507811][   T12] team0 (unregistering): Port device team_slave_0 removed
[  948.275842][T18010] loop7: detected capacity change from 0 to 1024
[  948.288130][T18010] EXT4-fs: Ignoring removed orlov option
[  948.294522][T18010] EXT4-fs: Ignoring removed i_version option
[  948.792375][T18010] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  948.873292][T18010] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  949.123490][T16802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.402228][ T5958] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  949.546379][T18021] bio_check_eod: 4 callbacks suppressed
[  949.546421][T18021] syz.7.3686: attempt to access beyond end of device
[  949.546421][T18021] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0
[  949.566065][T18021] befs: (nbd7): unable to read superblock
[  949.613913][T18022] openvswitch: netlink: Message has 24 unknown bytes.
[  950.205137][ T5958] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  950.215551][ T5958] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  950.228667][ T5958] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  950.307472][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  951.345965][T18016] kAFS: unable to lookup cell '.,'
[  952.341563][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  952.417709][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  952.508054][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  952.568818][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  952.615622][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  952.650668][T18037] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3692'.
[  953.258839][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  953.287182][T18037] hsr_slave_0: left promiscuous mode
[  953.302210][T18037] hsr_slave_1: left promiscuous mode
[  953.414665][T18042] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  955.016245][ T5958] usb 6-1: USB disconnect, device number 6
[  957.996940][T17816] hsr_slave_0: entered promiscuous mode
[  958.006217][T17816] hsr_slave_1: entered promiscuous mode
[  958.903482][T18075] loop7: detected capacity change from 0 to 4096
[  958.999055][T18075] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[  959.399162][ T5979] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  959.638226][ T5979] usb 1-1: Using ep0 maxpacket: 16
[  960.356961][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  960.376492][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  960.427698][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  960.440906][ T5979] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  960.450780][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.464725][ T5979] usb 1-1: config 0 descriptor??
[  960.741311][T17816] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  960.753758][T17816] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  960.773402][T17816] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  961.136008][T17816] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  961.268700][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.305548][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.348180][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.355544][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.381415][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.393976][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.415079][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.449703][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.457489][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.479659][ T5979] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  961.613769][T17816] 8021q: adding VLAN 0 to HW filter on device bond0
[  961.623623][ T5979] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input23
[  961.786780][T17816] 8021q: adding VLAN 0 to HW filter on device team0
[  961.803808][ T5979] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  962.193810][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state
[  962.201271][ T8475] bridge0: port 1(bridge_slave_0) entered forwarding state
[  962.282296][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state
[  962.289624][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state
[  962.323314][T18105] random: crng reseeded on system resumption
[  962.464129][T17816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  962.978467][  T980] usb 1-1: reset high-speed USB device number 13 using dummy_hcd
[  963.387555][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'.
[  963.469798][T18118] netlink: 39 bytes leftover after parsing attributes in process `syz.0.3711'.
[  963.883358][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  963.949154][ T5945] usb 1-1: USB disconnect, device number 13
[  967.233884][T18154] loop7: detected capacity change from 0 to 2048
[  967.288791][T18154] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  967.852292][   T30] audit: type=1800 audit(1755019599.041:306): pid=18164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3720" name="bus" dev="loop7" ino=1367 res=0 errno=0
[  967.948180][T17816] veth0_vlan: entered promiscuous mode
[  968.033135][T17816] veth1_vlan: entered promiscuous mode
[  968.382282][T17816] veth0_macvtap: entered promiscuous mode
[  969.013813][T16253] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  969.175405][T17816] veth1_macvtap: entered promiscuous mode
[  969.242938][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  969.265035][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  969.307821][T16253] usb 7-1: Using ep0 maxpacket: 16
[  969.329934][T16253] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  969.346638][T16253] usb 7-1: config 0 has no interface number 0
[  969.361201][ T8475] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  969.370149][T16253] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  970.380044][T16253] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  970.846699][T16253] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  970.856965][T16253] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  970.866233][ T8475] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  970.875611][T16253] usb 7-1: Product: syz
[  970.883873][T16253] usb 7-1: Manufacturer: syz
[  970.904065][T16253] usb 7-1: SerialNumber: syz
[  970.931246][ T8475] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  970.945123][T16253] usb 7-1: config 0 descriptor??
[  970.955369][T18170] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  970.958117][ T8475] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  970.968806][T18170] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  971.069066][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.071239][T18186] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  971.076968][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.099103][T14475] Bluetooth: hci3: command 0x0406 tx timeout
[  971.138485][ T8475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  971.152030][ T8475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  971.181110][T18186] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  971.333619][T16253] asix 7-1:0.251: probe with driver asix failed with error -71
[  971.676151][T16253] usb 7-1: USB disconnect, device number 5
[  972.000503][T18199] netlink: 'syz.0.3734': attribute type 6 has an invalid length.
[  972.249153][T18197] loop8: detected capacity change from 0 to 512
[  972.277150][T18197] EXT4-fs (loop8): Test dummy encryption mode enabled
[  972.541575][T18197] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  972.635071][T18206] syz.6.3735: attempt to access beyond end of device
[  972.635071][T18206] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0
[  972.648301][T18206] befs: (nbd6): unable to read superblock
[  973.316597][T18197] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.3630: bad orphan inode 131083
[  973.452216][T18197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  974.268043][T18197] EXT4-fs error (device loop8): ext4_lookup:1779: inode #2: comm syz.8.3630: bad inode number: 12
[  974.409416][ T5969] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  974.410808][T18224] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  974.518663][T18224] EXT4-fs error (device loop8): __ext4_new_inode:1073: comm syz.8.3630: reserved inode found cleared - inode=18
[  975.057814][ T5969] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81
[  975.097714][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.106908][T18227] loop6: detected capacity change from 0 to 4096
[  975.135351][T18227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  975.161324][ T5969] usb 1-1: config 0 descriptor??
[  975.202599][ T5969] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[  975.228418][ T5969] dvb-usb: bulk message failed: -22 (3/0)
[  975.256647][ T5969] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  975.272522][T17816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  975.276290][ T5969] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[  975.308079][T18227] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.3740: corrupted inode contents
[  975.355614][T18227] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #15: comm syz.6.3740: mark_inode_dirty error
[  975.387976][ T5969] usb 1-1: media controller created
[  975.393386][T18227] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.3740: corrupted inode contents
[  975.393438][ T5969] dvb-usb: bulk message failed: -22 (5/0)
[  975.415724][ T5969] dvb-usb: MAC address reading failed.
[  975.538247][ T5969] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  975.572153][ T5969] dvb-usb: bulk message failed: -22 (6/0)
[  975.594519][T18227] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.3740: mark_inode_dirty error
[  975.646702][ T5969] dvb-usb: bulk message failed: -22 (6/0)
[  975.696624][T18236] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  975.815195][ T5969] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[  975.826270][T14475] Bluetooth: hci1: command 0x0406 tx timeout
[  976.016582][T18236] bond1: entered promiscuous mode
[  976.021771][T18236] bond1: entered allmulticast mode
[  976.029812][T18236] 8021q: adding VLAN 0 to HW filter on device bond1
[  976.093842][T15681] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  976.144066][ T5969] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24
[  976.160695][ T5969] dvb-usb: schedule remote query interval to 100 msecs.
[  976.167777][ T5969] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[  976.194415][ T5969] usb 1-1: USB disconnect, device number 14
[  976.204648][T18227] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.3740: corrupted inode contents
[  976.234842][T18227] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #15: comm syz.6.3740: mark_inode_dirty error
[  976.259772][T18227] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #15: comm syz.6.3740: corrupted inode contents
[  976.283025][T18227] EXT4-fs error (device loop6): ext4_truncate:4666: inode #15: comm syz.6.3740: mark_inode_dirty error
[  976.294986][T18227] EXT4-fs error (device loop6) in ext4_setattr:6071: Corrupt filesystem
[  976.512580][T16053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  977.070083][ T5969] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[  977.144333][T18244] loop5: detected capacity change from 0 to 16
[  977.199836][T18244] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  978.536241][   T30] audit: type=1804 audit(1755019609.761:307): pid=18266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3753" name="/newroot/52/file1" dev="fuse" ino=1 res=1 errno=0
[  978.784463][   T30] audit: type=1804 audit(1755019609.911:308): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3753" name="/newroot/52/file1" dev="fuse" ino=1 res=1 errno=0
[  978.813482][ T8480] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.117934][ T5969] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  979.218776][   T30] audit: type=1800 audit(1755019610.481:309): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3753" name="/" dev="fuse" ino=1 res=0 errno=0
[  979.286115][ T8480] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.367271][ T5969] usb 1-1: Using ep0 maxpacket: 8
[  979.390799][ T8480] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.408187][ T5969] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  979.416717][ T5969] usb 1-1: config 179 has no interface number 0
[  979.435168][ T5969] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  979.462617][ T5969] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  979.475286][ T5969] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  979.493098][ T5969] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  979.502502][T18282] loop7: detected capacity change from 0 to 512
[  979.504898][ T5969] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  979.535978][ T5969] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  979.546037][ T5969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.567923][T18274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  979.653039][T18282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  979.697443][T18282] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  979.739697][ T8480] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  979.754771][T18282] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3761: corrupted inode contents
[  979.853548][T18282] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3761: mark_inode_dirty error
[  979.859730][ T5969] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input25
[  979.910546][T18282] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3761: corrupted inode contents
[  979.960799][T18292] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3761: corrupted inode contents
[  980.003168][T18292] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3761: mark_inode_dirty error
[  980.024130][T16253] usb 1-1: USB disconnect, device number 15
[  980.024142][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  980.024183][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  980.049003][ T8480] bridge_slave_1: left allmulticast mode
[  980.070707][T18292] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3761: corrupted inode contents
[  980.084579][ T8480] bridge_slave_1: left promiscuous mode
[  980.092277][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state
[  980.110151][T18292] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.3761: mark_inode_dirty error
[  980.125124][T18292] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3761: corrupted inode contents
[  980.139251][ T8480] bridge_slave_0: left allmulticast mode
[  980.141096][T18292] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3761: mark_inode_dirty error
[  980.147250][ T8480] bridge_slave_0: left promiscuous mode
[  980.164270][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state
[  980.198093][ T5880] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  980.225190][T16802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  980.305151][T14475] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  980.374157][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  980.382571][ T5880] usb 6-1: config 0 has an invalid interface number: 54 but max is 0
[  980.394430][T14475] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  980.405495][T14475] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  980.415732][T14475] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  980.423610][T14475] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  980.434221][ T5880] usb 6-1: config 0 has no interface number 0
[  980.443847][ T5880] usb 6-1: config 0 interface 54 has no altsetting 0
[  980.488318][ T5880] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[  980.529501][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.551364][ T5880] usb 6-1: Product: syz
[  980.555605][ T5880] usb 6-1: Manufacturer: syz
[  980.967965][ T5969] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  981.111088][ T5880] usb 6-1: SerialNumber: syz
[  981.123384][ T5880] usb 6-1: config 0 descriptor??
[  981.352345][ T5880] ums_eneub6250 6-1:0.54: USB Mass Storage device detected
[  982.179432][ T5880] usb 6-1: USB disconnect, device number 7
[  982.540146][T14475] Bluetooth: hci0: command tx timeout
[  982.810833][T18321] loop8: detected capacity change from 0 to 256
[  984.203647][T18334] netlink: 'syz.5.3775': attribute type 3 has an invalid length.
[  984.690916][T14475] Bluetooth: hci0: command tx timeout
[  985.031699][ T8480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  985.144129][ T8480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  985.221116][ T8480] bond0 (unregistering): Released all slaves
[  985.244060][T18302] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  985.254491][T18302] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  985.411335][T18345] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3777'.
[  985.775574][T18341] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3777'.
[  986.782807][T14475] Bluetooth: hci0: command tx timeout
[  987.115050][T18356] netlink: 'syz.8.3780': attribute type 10 has an invalid length.
[  988.545148][ T8480] hsr_slave_0: left promiscuous mode
[  989.297975][  T980] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  989.307565][T14475] Bluetooth: hci0: command tx timeout
[  989.307605][ T8480] hsr_slave_1: left promiscuous mode
[  989.329786][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  989.367111][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_0
[  989.406357][ T8480] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  989.467858][  T980] usb 8-1: Using ep0 maxpacket: 16
[  989.539188][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_1
[  989.566202][ T8480] veth1_macvtap: left promiscuous mode
[  989.566485][T18085] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  989.572195][ T8480] veth0_macvtap: left promiscuous mode
[  989.588530][ T8480] veth1_vlan: left promiscuous mode
[  989.598114][  T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  989.610564][ T8480] veth0_vlan: left promiscuous mode
[  989.614177][  T980] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  989.625948][  T980] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  990.198969][  T980] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  990.210367][  T980] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.386580][  T980] usb 8-1: config 0 descriptor??
[  990.675817][T18389] loop5: detected capacity change from 0 to 256
[  990.701417][T18389] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  991.254029][  T980] usbhid 8-1:0.0: can't add hid device: -71
[  991.272613][  T980] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  991.283536][  T980] usb 8-1: USB disconnect, device number 7
[  991.654036][T18395] loop5: detected capacity change from 0 to 64
[  992.961773][ T8480] team0 (unregistering): Port device team_slave_1 removed
[  993.751584][ T8480] team0 (unregistering): Port device team_slave_0 removed
[  994.144281][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  994.150853][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  994.831575][T18085] usb 9-1: device descriptor read/64, error -110
[  995.817822][T18085] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  996.145551][T18085] usb 9-1: device descriptor read/64, error -32
[  996.302242][T18085] usb usb9-port1: attempt power cycle
[  996.326262][T18422] random: crng reseeded on system resumption
[  996.735595][T18085] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  996.790207][T18085] usb 9-1: device descriptor read/8, error -32
[  996.846321][T18379] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  996.857004][T18379] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  996.896010][T18379] raw-gadget.1 gadget.8: failed to queue suspend event
[  996.912036][T18379] raw-gadget.1 gadget.8: failed to queue disconnect event
[  997.146827][T18428] hugetlbfs: syz.8.3802 (18428): Using mlock ulimits for SHM_HUGETLB is obsolete
[  998.179058][T18296] chnl_net:caif_netlink_parms(): no params data found
[  999.118918][T18296] bridge0: port 1(bridge_slave_0) entered blocking state
[  999.132243][T18296] bridge0: port 1(bridge_slave_0) entered disabled state
[  999.140613][T18296] bridge_slave_0: entered allmulticast mode
[  999.154884][T18296] bridge_slave_0: entered promiscuous mode
[  999.164301][T18296] bridge0: port 2(bridge_slave_1) entered blocking state
[  999.172147][T18296] bridge0: port 2(bridge_slave_1) entered disabled state
[  999.179853][T18296] bridge_slave_1: entered allmulticast mode
[  999.244973][T18296] bridge_slave_1: entered promiscuous mode
[  999.305039][T18296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  999.340441][T18296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  999.410315][T18450] loop7: detected capacity change from 0 to 128
[  999.437108][T18296] team0: Port device team_slave_0 added
[  999.467584][T18296] team0: Port device team_slave_1 added
[  999.514777][T18450] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  999.646633][T18296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  999.653951][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  999.682318][T18296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  999.696085][T18450] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  999.715694][T18296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1000.297927][T18296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1000.325407][T18296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1000.532032][T18296] hsr_slave_0: entered promiscuous mode
[ 1000.578669][T18296] hsr_slave_1: entered promiscuous mode
[ 1000.975097][T18296] debugfs: 'hsr0' already exists in 'hsr'
[ 1000.976579][T18450] fscrypt: Adiantum using implementation "adiantum(xchacha12-x86_64,aes-aesni,nhpoly1305-avx2)"
[ 1000.998008][T18296] Cannot create hsr debugfs directory
[ 1001.105821][T16802] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1001.581365][T18471] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1001.818709][T18471] bond2: entered promiscuous mode
[ 1001.823867][T18471] bond2: entered allmulticast mode
[ 1001.831887][T18471] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1002.227976][ T5945] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1002.280716][T18296] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1002.302616][T18296] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1002.324582][T18296] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1002.337470][T18296] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1002.662714][T18296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1002.764017][T18493] random: crng reseeded on system resumption
[ 1002.802297][T18296] 8021q: adding VLAN 0 to HW filter on device team0
[ 1002.824832][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1002.832137][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1002.982929][T18492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3817'.
[ 1003.674250][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1003.681535][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1004.870403][T18509] netlink: 'syz.5.3820': attribute type 10 has an invalid length.
[ 1005.020212][ T5958] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1005.149825][T18513] netlink: 182 bytes leftover after parsing attributes in process `syz.7.3821'.
[ 1005.778530][ T5958] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1005.844114][ T5958] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1005.869417][ T5958] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1005.883268][ T5958] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1005.895733][ T5958] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1005.915679][ T5958] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1005.927371][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1005.941813][ T5958] usb 1-1: Product: syz
[ 1005.946078][ T5958] usb 1-1: Manufacturer: syz
[ 1005.956132][ T5958] cdc_wdm 1-1:1.0: skipping garbage
[ 1005.965349][ T5958] cdc_wdm 1-1:1.0: skipping garbage
[ 1005.973417][ T5958] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1005.984485][ T5958] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1005.995139][T18515] loop7: detected capacity change from 0 to 2048
[ 1006.036041][T18515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1006.814821][T18296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1006.832450][T18524] loop8: detected capacity change from 0 to 16
[ 1006.887587][T18524] erofs (device loop8): mounted with root inode @ nid 36.
[ 1006.903951][T18527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'.
[ 1006.938992][T18524] erofs (device loop8): readahead error at folio 340 @ nid 36
[ 1006.954362][T18524] erofs (device loop8): readahead error at folio 339 @ nid 36
[ 1006.963224][T18524] erofs (device loop8): readahead error at folio 338 @ nid 36
[ 1007.017140][T18524] erofs (device loop8): readahead error at folio 337 @ nid 36
[ 1007.027549][T18524] erofs (device loop8): readahead error at folio 336 @ nid 36
[ 1007.046605][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.046605][T18524] loop8: rw=524288, sector=22873858832, nr_sectors = 16 limit=16
[ 1007.066148][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.066148][T18524] loop8: rw=524288, sector=14519143264, nr_sectors = 16 limit=16
[ 1007.085463][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.085463][T18524] loop8: rw=524288, sector=63675288, nr_sectors = 16 limit=16
[ 1007.111153][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.111153][T18524] loop8: rw=524288, sector=16438238104, nr_sectors = 16 limit=16
[ 1007.130234][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.130234][T18524] loop8: rw=524288, sector=16377420696, nr_sectors = 16 limit=16
[ 1007.147441][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.147441][T18524] loop8: rw=524288, sector=15495015272, nr_sectors = 16 limit=16
[ 1007.166434][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.166434][T18524] loop8: rw=524288, sector=15353996136, nr_sectors = 16 limit=16
[ 1007.184589][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.184589][T18524] loop8: rw=524288, sector=13612835600, nr_sectors = 16 limit=16
[ 1007.206877][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.206877][T18524] loop8: rw=524288, sector=14552337248, nr_sectors = 16 limit=16
[ 1007.228218][T18524] syz.8.3824: attempt to access beyond end of device
[ 1007.228218][T18524] loop8: rw=524288, sector=14546590680, nr_sectors = 16 limit=16
[ 1007.751832][  T928] usb 1-1: USB disconnect, device number 16
[ 1008.009454][T18532] loop7: detected capacity change from 0 to 40427
[ 1008.039849][T18532] F2FS-fs (loop7): invalid crc value
[ 1008.111371][T18532] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1008.123167][T18532] F2FS-fs (loop7): Start checkpoint disabled!
[ 1008.133268][T18532] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[ 1008.666442][   T30] audit: type=1800 audit(1755019639.491:310): pid=18540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3826" name="file1" dev="loop7" ino=10 res=0 errno=0
[ 1008.769433][ T8480] CPU: 1 UID: 0 PID: 8480 Comm: kworker/u8:15 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[ 1008.769463][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1008.769477][ T8480] Workqueue: writeback wb_workfn (flush-7:7)
[ 1008.769509][ T8480] Call Trace:
[ 1008.769516][ T8480]  <TASK>
[ 1008.769525][ T8480]  dump_stack_lvl+0x189/0x250
[ 1008.769556][ T8480]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1008.769580][ T8480]  ? __pfx_queue_work_on+0x10/0x10
[ 1008.769599][ T8480]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1008.769628][ T8480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1008.769671][ T8480]  f2fs_handle_critical_error+0x37c/0x540
[ 1008.769707][ T8480]  f2fs_write_end_io+0x886/0xb60
[ 1008.769749][ T8480]  __submit_merged_bio+0x27a/0x6a0
[ 1008.769785][ T8480]  __submit_merged_write_cond+0x255/0x530
[ 1008.769821][ T8480]  f2fs_write_data_pages+0x261d/0x3000
[ 1008.769893][ T8480]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1008.769918][ T8480]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1008.769952][ T8480]  ? rcu_is_watching+0x15/0xb0
[ 1008.770068][ T8480]  ? unwind_next_frame+0xa5/0x2390
[ 1008.770087][ T8480]  ? unwind_next_frame+0x19ae/0x2390
[ 1008.770111][ T8480]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1008.770150][ T8480]  do_writepages+0x32b/0x550
[ 1008.770183][ T8480]  ? reacquire_held_locks+0x127/0x1d0
[ 1008.770202][ T8480]  ? writeback_sb_inodes+0x384/0x1010
[ 1008.770239][ T8480]  __writeback_single_inode+0x145/0xff0
[ 1008.770265][ T8480]  ? do_raw_spin_unlock+0x122/0x240
[ 1008.770296][ T8480]  writeback_sb_inodes+0x6c7/0x1010
[ 1008.770323][ T8480]  ? __lock_acquire+0xab9/0xd20
[ 1008.770379][ T8480]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1008.770457][ T8480]  ? rcu_is_watching+0x15/0xb0
[ 1008.770489][ T8480]  wb_writeback+0x43b/0xaf0
[ 1008.770525][ T8480]  ? queue_io+0x3d1/0x590
[ 1008.770553][ T8480]  ? __pfx_wb_writeback+0x10/0x10
[ 1008.770589][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.770623][ T8480]  wb_workfn+0x409/0xef0
[ 1008.770664][ T8480]  ? __pfx_wb_workfn+0x10/0x10
[ 1008.770691][ T8480]  ? __lock_acquire+0xab9/0xd20
[ 1008.770733][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1008.770761][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.770786][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1008.770805][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1008.770827][ T8480]  process_scheduled_works+0xade/0x17b0
[ 1008.770885][ T8480]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1008.770928][ T8480]  worker_thread+0x8a0/0xda0
[ 1008.770952][ T8480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1008.770991][ T8480]  ? __kthread_parkme+0x7b/0x200
[ 1008.771027][ T8480]  kthread+0x70e/0x8a0
[ 1008.771056][ T8480]  ? __pfx_worker_thread+0x10/0x10
[ 1008.771075][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1008.771102][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1008.771128][ T8480]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1008.771164][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1008.771186][ T8480]  ret_from_fork+0x3f9/0x770
[ 1008.771207][ T8480]  ? __pfx_ret_from_fork+0x10/0x10
[ 1008.771232][ T8480]  ? __switch_to_asm+0x39/0x70
[ 1008.771252][ T8480]  ? __switch_to_asm+0x33/0x70
[ 1008.771271][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1008.771293][ T8480]  ret_from_fork_asm+0x1a/0x30
[ 1008.771332][ T8480]  </TASK>
[ 1008.774119][ T8480] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[ 1009.184899][T18296] veth0_vlan: entered promiscuous mode
[ 1009.220966][T18296] veth1_vlan: entered promiscuous mode
[ 1009.239136][ T5958] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[ 1009.277182][T18296] veth0_macvtap: entered promiscuous mode
[ 1009.343607][T18556] random: crng reseeded on system resumption
[ 1009.545669][ T5958] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[ 1009.563726][ T5958] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.576247][T18296] veth1_macvtap: entered promiscuous mode
[ 1009.590572][ T5958] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[ 1009.612737][T18296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1009.626137][ T5958] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[ 1009.670883][T18296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1009.687789][ T5958] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.710487][ T5958] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[ 1009.725409][ T8480] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1009.796171][ T5958] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[ 1009.881455][ T5958] usb 6-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.897124][ T5958] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42
[ 1009.913852][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1009.924355][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1009.987586][ T5958] usb 6-1: string descriptor 0 read error: -22
[ 1010.005033][ T5958] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1010.015513][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1010.027028][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.084015][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1010.096707][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1010.143043][ T5958] adutux 6-1:246.0: interrupt endpoints not found
[ 1010.303601][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1010.313181][ T5958] usb 6-1: USB disconnect, device number 8
[ 1010.897007][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1011.515440][T18567] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3836'.
[ 1013.380132][T18573] loop9: detected capacity change from 0 to 256
[ 1013.473070][T18573] exfat: Deprecated parameter 'namecase'
[ 1013.548299][T18573] exfat: Deprecated parameter 'namecase'
[ 1013.628155][T18573] exfat: Deprecated parameter 'namecase'
[ 1013.689652][T18570] loop8: detected capacity change from 0 to 4096
[ 1014.059291][T18573] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1014.258166][T18573] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[ 1014.278791][T18570] ntfs3(loop8): Failed to read $UpCase (-4).
[ 1014.367325][T18576] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3839'.
[ 1016.715199][T18566] syz.7.3831 (18566): drop_caches: 2
[ 1017.465486][T18605] netlink: 'syz.9.3847': attribute type 16 has an invalid length.
[ 1017.473542][T18605] netlink: 'syz.9.3847': attribute type 17 has an invalid length.
[ 1017.565410][T18605] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1018.989587][T18633] evm: overlay not supported
[ 1019.623614][T18638] loop9: detected capacity change from 0 to 40427
[ 1019.636800][T18638] F2FS-fs (loop9): invalid crc value
[ 1019.715846][T18638] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1019.727453][T18638] F2FS-fs (loop9): Start checkpoint disabled!
[ 1019.768811][T18638] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1019.922871][T18643] bio_check_eod: 6 callbacks suppressed
[ 1019.922890][T18643] syz.9.3858: attempt to access beyond end of device
[ 1019.922890][T18643] loop9: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[ 1020.225507][   T30] audit: type=1800 audit(1755019651.121:311): pid=18643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3858" name="file1" dev="loop9" ino=10 res=0 errno=0
[ 1020.784494][ T1154] kworker/u8:6: attempt to access beyond end of device
[ 1020.784494][ T1154] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1020.816491][ T1154] CPU: 0 UID: 0 PID: 1154 Comm: kworker/u8:6 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[ 1020.816520][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1020.816533][ T1154] Workqueue: writeback wb_workfn (flush-7:9)
[ 1020.816562][ T1154] Call Trace:
[ 1020.816571][ T1154]  <TASK>
[ 1020.816579][ T1154]  dump_stack_lvl+0x189/0x250
[ 1020.816610][ T1154]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1020.816635][ T1154]  ? __pfx_queue_work_on+0x10/0x10
[ 1020.816654][ T1154]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1020.816682][ T1154]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1020.816725][ T1154]  f2fs_handle_critical_error+0x37c/0x540
[ 1020.816762][ T1154]  f2fs_write_end_io+0x886/0xb60
[ 1020.816804][ T1154]  __submit_merged_bio+0x27a/0x6a0
[ 1020.816841][ T1154]  __submit_merged_write_cond+0x255/0x530
[ 1020.816877][ T1154]  f2fs_write_data_pages+0x261d/0x3000
[ 1020.816949][ T1154]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1020.817004][ T1154]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1020.817069][ T1154]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1020.817107][ T1154]  ? trace_f2fs_writepages+0x7f/0x200
[ 1020.817130][ T1154]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1020.817161][ T1154]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1020.817204][ T1154]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1020.817231][ T1154]  do_writepages+0x32b/0x550
[ 1020.817262][ T1154]  ? reacquire_held_locks+0x127/0x1d0
[ 1020.817282][ T1154]  ? writeback_sb_inodes+0x384/0x1010
[ 1020.817316][ T1154]  __writeback_single_inode+0x145/0xff0
[ 1020.817339][ T1154]  ? do_raw_spin_unlock+0x122/0x240
[ 1020.817366][ T1154]  writeback_sb_inodes+0x6c7/0x1010
[ 1020.817397][ T1154]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1020.817446][ T1154]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1020.817526][ T1154]  ? rcu_is_watching+0x15/0xb0
[ 1020.817558][ T1154]  wb_writeback+0x43b/0xaf0
[ 1020.817594][ T1154]  ? queue_io+0x3d1/0x590
[ 1020.817624][ T1154]  ? __pfx_wb_writeback+0x10/0x10
[ 1020.817658][ T1154]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1020.817689][ T1154]  wb_workfn+0x409/0xef0
[ 1020.817724][ T1154]  ? __pfx_wb_workfn+0x10/0x10
[ 1020.817749][ T1154]  ? __lock_acquire+0xab9/0xd20
[ 1020.817789][ T1154]  ? process_scheduled_works+0x9ef/0x17b0
[ 1020.817817][ T1154]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1020.817842][ T1154]  ? process_scheduled_works+0x9ef/0x17b0
[ 1020.817860][ T1154]  ? process_scheduled_works+0x9ef/0x17b0
[ 1020.817882][ T1154]  process_scheduled_works+0xade/0x17b0
[ 1020.817941][ T1154]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1020.817992][ T1154]  worker_thread+0x8a0/0xda0
[ 1020.818049][ T1154]  kthread+0x70e/0x8a0
[ 1020.818079][ T1154]  ? __pfx_worker_thread+0x10/0x10
[ 1020.818099][ T1154]  ? __pfx_kthread+0x10/0x10
[ 1020.818126][ T1154]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1020.818151][ T1154]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1020.818177][ T1154]  ? __pfx_kthread+0x10/0x10
[ 1020.818203][ T1154]  ret_from_fork+0x3f9/0x770
[ 1020.818227][ T1154]  ? __pfx_ret_from_fork+0x10/0x10
[ 1020.818256][ T1154]  ? __switch_to_asm+0x39/0x70
[ 1020.818280][ T1154]  ? __switch_to_asm+0x33/0x70
[ 1020.818302][ T1154]  ? __pfx_kthread+0x10/0x10
[ 1020.818326][ T1154]  ret_from_fork_asm+0x1a/0x30
[ 1020.818373][ T1154]  </TASK>
[ 1021.141657][ T1154] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1022.330240][T18674] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[ 1024.362984][T18687] 9pnet: Could not find request transport: 0xffffffffffffffff
[ 1024.426241][T18664] loop8: detected capacity change from 0 to 40427
[ 1027.714484][T18715] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3883'.
[ 1028.068557][  T980] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1028.207948][  T980] usb 8-1: device descriptor read/64, error -71
[ 1028.397727][  T928] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1028.623211][  T928] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1028.639068][  T928] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1028.753911][  T928] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1028.775409][  T980] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1028.846811][  T928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1028.937854][  T980] usb 8-1: device descriptor read/64, error -71
[ 1029.074173][  T980] usb usb8-port1: attempt power cycle
[ 1029.120499][T18726] kAFS: unable to lookup cell '.,'
[ 1029.169147][T18730] loop8: detected capacity change from 0 to 32768
[ 1029.183083][T18730] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3888 (18730)
[ 1029.216743][T18730] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1029.239208][T18730] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[ 1029.272106][T18730] BTRFS info (device loop8): using free-space-tree
[ 1029.530715][  T980] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1029.594628][  T980] usb 8-1: device descriptor read/8, error -71
[ 1029.758519][T17816] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1029.868302][  T980] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1029.910352][  T980] usb 8-1: device descriptor read/8, error -71
[ 1030.031098][  T980] usb usb8-port1: unable to enumerate USB device
[ 1035.335496][  T980] usb 6-1: USB disconnect, device number 9
[ 1035.658229][T18820] netlink: 65536 bytes leftover after parsing attributes in process `syz.0.3911'.
[ 1035.961911][  T980] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1035.976700][T18829] loop9: detected capacity change from 0 to 8
[ 1036.635786][T18829] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1036.643805][T18829] SQUASHFS error: Failed to read block 0x9b: -5
[ 1036.650202][T18829] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1036.657387][T18829] SQUASHFS error: Unable to read inode 0x127
[ 1036.692674][T18828] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3914'.
[ 1036.988148][  T980] usb 6-1: device descriptor read/64, error -71
[ 1037.197882][  T928] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1037.327804][  T980] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1037.367895][  T928] usb 9-1: device descriptor read/64, error -71
[ 1037.488100][  T980] usb 6-1: device descriptor read/64, error -71
[ 1037.625272][  T980] usb usb6-port1: attempt power cycle
[ 1037.717899][  T928] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1038.147987][  T980] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1038.157849][  T928] usb 9-1: device descriptor read/64, error -71
[ 1038.178453][  T980] usb 6-1: device descriptor read/8, error -71
[ 1038.289676][ T5958] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1038.300219][  T928] usb usb9-port1: attempt power cycle
[ 1038.467181][ T5958] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.478575][ T5958] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1038.494337][ T5958] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1038.504903][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.687739][  T928] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1038.718293][  T928] usb 9-1: device descriptor read/8, error -71
[ 1038.786831][T18846] kAFS: unable to lookup cell '.,'
[ 1038.967741][  T928] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1039.477145][  T928] usb 9-1: device not accepting address 9, error -71
[ 1039.485791][  T928] usb usb9-port1: unable to enumerate USB device
[ 1040.909725][T18884] netlink: 182 bytes leftover after parsing attributes in process `syz.7.3932'.
[ 1041.288441][T18886] Bluetooth: MGMT ver 1.23
[ 1042.825183][  T980] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1043.394120][ T5958] usb 10-1: USB disconnect, device number 2
[ 1043.448117][  T980] usb 8-1: device descriptor read/64, error -71
[ 1043.614294][T18898] loop5: detected capacity change from 0 to 2048
[ 1043.940933][  T980] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[ 1043.950217][T18898] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1044.003707][T18896] syz.8.3936 (18896): drop_caches: 2
[ 1044.007507][T18898] NILFS (loop5): mounting unchecked fs
[ 1044.077211][T18898] NILFS (loop5): recovery complete
[ 1044.132638][T18907] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1044.212578][  T980] usb 8-1: device descriptor read/64, error -71
[ 1044.247844][   T30] audit: type=1800 audit(1755019675.501:312): pid=18898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3937" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1044.423588][  T980] usb usb8-port1: attempt power cycle
[ 1045.667222][T18921] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3945'.
[ 1046.287758][T18085] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1046.498297][T18085] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1046.512777][T18085] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1046.522521][T18085] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1046.550794][T18085] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1047.557876][T18948] Device name cannot be null; rc = [-22]
[ 1048.015897][T18950] kAFS: unable to lookup cell '.,'
[ 1049.216002][T18969] input: syz1 as /devices/virtual/input/input26
[ 1050.578256][T18977] netlink: 'syz.9.3960': attribute type 10 has an invalid length.
[ 1050.604004][T18977] team0: Port device dummy0 added
[ 1050.634605][T18978] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1050.641312][T18978] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1050.649098][T18978] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1050.657812][T18978] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1050.665011][T18978] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1050.675384][T18978] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1050.684556][T18978] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1050.692019][T18978] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1050.699298][   T30] audit: type=1326 audit(1755019681.771:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18965 comm="syz.9.3960" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bf718ebe9 code=0x0
[ 1050.737941][T18978] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1050.821553][T18978] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1050.846343][T18980] netlink: 'syz.9.3960': attribute type 10 has an invalid length.
[ 1051.084526][T18980] team0: Port device dummy0 removed
[ 1051.087788][T18978] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1051.107845][T18978] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1051.157598][T18978] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1051.211712][T18980] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1051.262225][T18978] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1051.294141][T14475] Bluetooth: hci4: unexpected event for opcode 0x2019
[ 1051.314595][T18981] loop8: detected capacity change from 0 to 2048
[ 1051.555280][ T5945] usb 6-1: USB disconnect, device number 14
[ 1051.585478][T18981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1051.948887][   T30] audit: type=1800 audit(1755019683.101:314): pid=18985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3962" name="bus" dev="loop8" ino=1367 res=0 errno=0
[ 1052.284319][T18989] tipc: Started in network mode
[ 1052.297304][T18989] tipc: Node identity 7f000001, cluster identity 4711
[ 1052.305803][T18989] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1052.320856][T18989] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1052.364738][T18989] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1052.575600][T18995] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3967'.
[ 1053.492097][T16253] tipc: Node number set to 2130706433
[ 1053.700742][T19007] loop7: detected capacity change from 0 to 256
[ 1054.473456][   T30] audit: type=1800 audit(1755019685.731:315): pid=19014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3972" name="file1" dev="loop7" ino=1048716 res=0 errno=0
[ 1055.027888][ T5869] Bluetooth: hci5: unexpected event for opcode 0x2019
[ 1055.601580][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1055.845812][  T980] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[ 1055.927201][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1058.276773][  T980] usb 9-1: device descriptor read/all, error -71
[ 1058.463862][T19048] loop8: detected capacity change from 0 to 2048
[ 1058.579311][T19048] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1058.606885][T19048] NILFS (loop8): mounting unchecked fs
[ 1059.366339][T19052] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1059.377137][T19048] NILFS (loop8): recovery complete
[ 1059.385690][T19054] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1059.409358][T19052] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1059.415972][T19052] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1059.444177][T19052] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1059.454679][T19052] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1059.471312][T19052] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1059.479546][T19052] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1059.486097][T19052] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1059.492837][T19052] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1059.518263][T19052] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1059.761287][T19062] netlink: 'syz.0.3987': attribute type 16 has an invalid length.
[ 1059.769357][T19062] netlink: 'syz.0.3987': attribute type 17 has an invalid length.
[ 1059.845407][T19062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1060.213555][T19052] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1060.223456][T19052] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1060.233632][T19052] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1060.244650][T19052] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1061.971999][T19061] loop8: detected capacity change from 0 to 32768
[ 1061.995312][T19061] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3988 (19061)
[ 1062.022489][T19079] loop9: detected capacity change from 0 to 256
[ 1062.201332][T19061] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1062.213585][T19061] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[ 1062.489546][T19061] BTRFS info (device loop8): using free-space-tree
[ 1062.548661][   T30] audit: type=1800 audit(1755019693.811:316): pid=19079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3995" name="file1" dev="loop9" ino=1048732 res=0 errno=0
[ 1062.548681][T18085] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1062.768599][T19061] BTRFS error (device loop8): open_ctree failed: -4
[ 1062.815780][T18085] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1062.889752][T18085] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1062.907033][T18085] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1063.043793][T18085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.206810][T19100] loop7: detected capacity change from 0 to 2048
[ 1063.379862][T19100] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1063.391889][T19100] NILFS (loop7): mounting unchecked fs
[ 1063.402159][T19076] kAFS: unable to lookup cell '.,'
[ 1063.549065][T19104] loop9: detected capacity change from 0 to 1024
[ 1064.093393][T19100] NILFS (loop7): recovery complete
[ 1064.224344][T19109] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1065.662890][T16253] usb 1-1: USB disconnect, device number 17
[ 1067.318780][T19126] loop9: detected capacity change from 0 to 32768
[ 1067.379376][T19126] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1067.387580][T19126] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1067.592193][T19126] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[ 1067.602460][  T980] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1067.609303][  T980] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1067.790393][  T980] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 181ms
[ 1067.805383][  T980] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1067.811720][T19126] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1067.938038][T16253] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1067.986046][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4009'.
[ 1068.207828][T16253] usb 8-1: config 255 has too many interfaces: 255, using maximum allowed: 32
[ 1068.230883][T16253] usb 8-1: config 255 has 1 interface, different from the descriptor's value: 255
[ 1068.247494][T16253] usb 8-1: config 255 has no interface number 0
[ 1068.261612][T16253] usb 8-1: config 255 interface 101 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 1068.284530][T16253] usb 8-1: config 255 interface 101 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1068.313443][T19150] loop8: detected capacity change from 0 to 2048
[ 1068.408521][T19150] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1068.548094][T16253] usb 8-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 1070.031661][T16253] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.040173][T16253] usb 8-1: Product: syz
[ 1070.044366][T16253] usb 8-1: Manufacturer: syz
[ 1070.049169][T16253] usb 8-1: SerialNumber: syz
[ 1070.057306][T19138] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1070.084511][T16253] cyberjack 8-1:255.101: Reiner SCT Cyberjack USB card reader converter detected
[ 1070.163915][T19150] NILFS (loop8): mounting unchecked fs
[ 1070.175813][   T30] audit: type=1804 audit(1755019700.041:317): pid=19153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4012" name="/newroot/277/file0" dev="tmpfs" ino=1483 res=1 errno=0
[ 1070.185129][T16253] usb 8-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 1070.324468][T19150] NILFS (loop8): recovery complete
[ 1070.499092][T19158] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1070.716284][ T5945] usb 8-1: USB disconnect, device number 16
[ 1071.235007][ T5945] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 1071.277355][ T5945] cyberjack 8-1:255.101: device disconnected
[ 1074.907873][T19176] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1075.151490][T19195] overlayfs: missing 'lowerdir'
[ 1077.905618][T19217] input: syz1 as /devices/virtual/input/input27
[ 1079.437309][T19234] loop5: detected capacity change from 0 to 512
[ 1079.512327][   T30] audit: type=1326 audit(1755019710.751:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19227 comm="syz.9.4032" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bf718ebe9 code=0x0
[ 1079.681608][T19234] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[ 1079.690798][T19234] System zones: 1-12
[ 1079.695904][T19234] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.4033: Directory hole found for htree index block 0
[ 1079.708166][T19248] netlink: 'syz.9.4032': attribute type 10 has an invalid length.
[ 1080.420682][T19234] EXT4-fs (loop5): Remounting filesystem read-only
[ 1080.427267][T19234] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[ 1080.449408][T19253] netlink: 'syz.9.4032': attribute type 10 has an invalid length.
[ 1080.467911][T19234] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[ 1080.478678][T19234] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1080.507912][T19252] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4038'.
[ 1080.713358][T19248] bond0: (slave dummy0): Releasing backup interface
[ 1081.021621][T19248] team0: Port device dummy0 added
[ 1081.151644][T19263] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1081.419054][T19263] bond3: entered promiscuous mode
[ 1081.424236][T19263] bond3: entered allmulticast mode
[ 1081.432215][T19263] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1081.645659][T19266] input: syz0 as /devices/virtual/input/input28
[ 1081.697913][T18085] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[ 1082.567142][T16873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1082.835504][T19277] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4045'.
[ 1085.600079][ T5958] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[ 1085.760641][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4050'.
[ 1085.917775][ T5958] usb 6-1: device descriptor read/64, error -71
[ 1086.766025][ T5958] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1087.348074][ T5958] usb 6-1: device descriptor read/64, error -71
[ 1087.468565][ T5958] usb usb6-port1: attempt power cycle
[ 1087.937722][ T5958] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[ 1087.944563][T19325] tipc: Started in network mode
[ 1087.950667][T19325] tipc: Node identity 7f000001, cluster identity 4711
[ 1088.010923][ T5958] usb 6-1: device descriptor read/8, error -71
[ 1088.017456][T19325] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1088.030013][T19325] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1088.038946][T19325] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1088.418770][T19333] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1088.921825][T19333] bond1: entered promiscuous mode
[ 1088.926911][T19333] bond1: entered allmulticast mode
[ 1088.932530][T19333] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1089.052691][ T5869] Bluetooth: hci1: unexpected event for opcode 0x2019
[ 1089.112908][T19340] loop5: detected capacity change from 0 to 2048
[ 1089.137878][T18085] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[ 1089.179599][T19340] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1089.243797][T16253] tipc: Node number set to 2130706433
[ 1089.625212][   T30] audit: type=1800 audit(1755019720.881:319): pid=19351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4060" name="bus" dev="loop5" ino=1367 res=0 errno=0
[ 1090.548739][T19354] loop9: detected capacity change from 0 to 40427
[ 1090.578147][T19354] F2FS-fs (loop9): invalid crc value
[ 1090.652001][T19354] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1090.663132][T19354] F2FS-fs (loop9): Start checkpoint disabled!
[ 1090.678209][T19354] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1090.966305][T19361] syz.9.4065: attempt to access beyond end of device
[ 1090.966305][T19361] loop9: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[ 1091.004507][   T30] audit: type=1800 audit(1755019722.101:320): pid=19361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4065" name="file1" dev="loop9" ino=10 res=0 errno=0
[ 1092.053137][ T8480] kworker/u8:15: attempt to access beyond end of device
[ 1092.053137][ T8480] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1092.108019][ T5979] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[ 1092.258071][ T5979] usb 8-1: device descriptor read/64, error -71
[ 1092.558060][ T5979] usb 8-1: new full-speed USB device number 19 using dummy_hcd
[ 1092.588691][ T8480] CPU: 0 UID: 0 PID: 8480 Comm: kworker/u8:15 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[ 1092.588723][ T8480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1092.588737][ T8480] Workqueue: writeback wb_workfn (flush-7:9)
[ 1092.588767][ T8480] Call Trace:
[ 1092.588775][ T8480]  <TASK>
[ 1092.588784][ T8480]  dump_stack_lvl+0x189/0x250
[ 1092.588813][ T8480]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1092.588836][ T8480]  ? __pfx_queue_work_on+0x10/0x10
[ 1092.588859][ T8480]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1092.588888][ T8480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1092.588928][ T8480]  f2fs_handle_critical_error+0x37c/0x540
[ 1092.588961][ T8480]  f2fs_write_end_io+0x886/0xb60
[ 1092.588999][ T8480]  __submit_merged_bio+0x27a/0x6a0
[ 1092.589033][ T8480]  __submit_merged_write_cond+0x255/0x530
[ 1092.589066][ T8480]  f2fs_write_data_pages+0x261d/0x3000
[ 1092.589132][ T8480]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1092.589173][ T8480]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1092.589229][ T8480]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1092.589270][ T8480]  ? trace_f2fs_writepages+0x7f/0x200
[ 1092.589298][ T8480]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1092.589327][ T8480]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1092.589367][ T8480]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1092.589395][ T8480]  do_writepages+0x32b/0x550
[ 1092.589424][ T8480]  ? reacquire_held_locks+0x127/0x1d0
[ 1092.589443][ T8480]  ? writeback_sb_inodes+0x384/0x1010
[ 1092.589476][ T8480]  __writeback_single_inode+0x145/0xff0
[ 1092.589502][ T8480]  ? do_raw_spin_unlock+0x122/0x240
[ 1092.589530][ T8480]  writeback_sb_inodes+0x6c7/0x1010
[ 1092.589581][ T8480]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1092.589648][ T8480]  ? rcu_is_watching+0x15/0xb0
[ 1092.589677][ T8480]  wb_writeback+0x43b/0xaf0
[ 1092.589709][ T8480]  ? queue_io+0x3d1/0x590
[ 1092.589736][ T8480]  ? __pfx_wb_writeback+0x10/0x10
[ 1092.589769][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1092.589801][ T8480]  wb_workfn+0x409/0xef0
[ 1092.589837][ T8480]  ? __pfx_wb_workfn+0x10/0x10
[ 1092.589860][ T8480]  ? __lock_acquire+0xab9/0xd20
[ 1092.589899][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1092.589925][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1092.589949][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1092.589967][ T8480]  ? process_scheduled_works+0x9ef/0x17b0
[ 1092.589988][ T8480]  process_scheduled_works+0xade/0x17b0
[ 1092.590037][ T8480]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1092.590074][ T8480]  worker_thread+0x8a0/0xda0
[ 1092.590107][ T8480]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1092.590143][ T8480]  ? __kthread_parkme+0x7b/0x200
[ 1092.590174][ T8480]  kthread+0x70e/0x8a0
[ 1092.590201][ T8480]  ? __pfx_worker_thread+0x10/0x10
[ 1092.590220][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1092.590246][ T8480]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1092.590272][ T8480]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1092.590298][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1092.590323][ T8480]  ret_from_fork+0x3f9/0x770
[ 1092.590346][ T8480]  ? __pfx_ret_from_fork+0x10/0x10
[ 1092.590373][ T8480]  ? __switch_to_asm+0x39/0x70
[ 1092.590397][ T8480]  ? __switch_to_asm+0x33/0x70
[ 1092.590419][ T8480]  ? __pfx_kthread+0x10/0x10
[ 1092.590444][ T8480]  ret_from_fork_asm+0x1a/0x30
[ 1092.590485][ T8480]  </TASK>
[ 1092.590495][ T8480] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1092.758071][ T5979] usb 8-1: device descriptor read/64, error -71
[ 1093.092398][T19377] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[ 1093.097696][   T30] audit: type=1326 audit(1755019724.321:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19368 comm="syz.8.4070" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1727b8ebe9 code=0x0
[ 1093.123030][ T5979] usb usb8-port1: attempt power cycle
[ 1093.143537][T19375] netlink: 'syz.8.4070': attribute type 10 has an invalid length.
[ 1093.347583][T19381] netlink: 'syz.8.4070': attribute type 10 has an invalid length.
[ 1093.358419][T19375] team0: Port device dummy0 added
[ 1094.007808][ T5979] usb 8-1: new full-speed USB device number 20 using dummy_hcd
[ 1094.028373][ T5979] usb 8-1: device descriptor read/8, error -71
[ 1094.049983][T19381] team0: Port device dummy0 removed
[ 1094.109761][T19381] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1094.647843][ T5979] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[ 1094.678584][ T5979] usb 8-1: device descriptor read/8, error -71
[ 1094.788349][ T5979] usb usb8-port1: unable to enumerate USB device
[ 1094.884060][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4077'.
[ 1094.918691][T19395] No control pipe specified
[ 1095.019127][ T5958] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1095.099119][T18085] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1095.283922][T19399] loop7: detected capacity change from 0 to 4096
[ 1095.296592][ T5958] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1095.307539][ T5958] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1095.327860][T18085] usb 6-1: Using ep0 maxpacket: 16
[ 1095.347498][T18085] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1095.357841][T18085] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.603550][T19399] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512).
[ 1095.916352][T18085] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1095.925421][ T5958] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1095.934693][ T5958] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1096.029858][T18085] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1096.043533][T19399] ntfs3(loop7): ino=1a, mi_enum_attr
[ 1096.050417][ T5958] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1096.062684][T18085] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.072965][T18085] usb 6-1: Product: syz
[ 1096.073057][T19399] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1096.077149][T18085] usb 6-1: Manufacturer: syz
[ 1096.077168][T18085] usb 6-1: SerialNumber: syz
[ 1096.135425][ T5958] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1096.160804][ T5958] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1096.177796][ T5958] usb 10-1: Product: syz
[ 1096.184288][ T5958] usb 10-1: Manufacturer: syz
[ 1096.200024][ T5958] cdc_wdm 10-1:1.0: skipping garbage
[ 1096.210291][ T5958] cdc_wdm 10-1:1.0: skipping garbage
[ 1096.287193][ T5958] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1096.304204][ T5958] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1096.522532][T18085] usb 6-1: 0:2 : does not exist
[ 1096.617727][ T5958] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[ 1096.797717][ T5958] usb 8-1: Using ep0 maxpacket: 16
[ 1096.818321][ T5958] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 11
[ 1096.836175][ T5958] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[ 1096.856046][ T5958] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[ 1096.881812][ T5958] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1097.052587][  T928] usb 10-1: USB disconnect, device number 3
[ 1097.082143][ T5958] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[ 1097.113017][ T5958] usb 8-1: config 1 interface 0 has no altsetting 0
[ 1097.122740][ T5958] usb 8-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[ 1097.137416][ T5958] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1097.312889][ T5958] ums-sddr09 8-1:1.0: USB Mass Storage device detected
[ 1097.393406][T18085] usb 6-1: USB disconnect, device number 19
[ 1098.049974][ T5958] scsi host1: usb-storage 8-1:1.0
[ 1098.200486][T19416] loop8: detected capacity change from 0 to 32768
[ 1098.225309][   T30] audit: type=1800 audit(1755019729.481:322): pid=19416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4087" name="file1" dev="loop8" ino=4 res=0 errno=0
[ 1098.276806][ T5958] usb 8-1: USB disconnect, device number 22
[ 1098.714891][T19433] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1100.116081][T19453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4098'.
[ 1100.155681][T19455] No control pipe specified
[ 1104.064190][ T5869] Bluetooth: hci4: unexpected event 0x32 length: 11 > 9
[ 1104.625334][T19503] netlink: 'syz.8.4115': attribute type 10 has an invalid length.
[ 1105.607814][ T5958] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[ 1105.835282][T19514] loop5: detected capacity change from 0 to 512
[ 1105.973099][ T5958] usb 9-1: no configurations
[ 1106.909947][ T5958] usb 9-1: can't read configurations, error -22
[ 1107.116802][T19514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1107.167752][ T5958] usb 9-1: new full-speed USB device number 14 using dummy_hcd
[ 1107.199268][T19501] loop9: detected capacity change from 0 to 32768
[ 1107.209618][T19501] bcachefs (/dev/loop9): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 128, max 512)
[ 1107.209618][T19501] members_v2 (size 152):
[ 1107.209618][T19501] Device:                        0
[ 1107.209618][T19501]   Label:                       (none)
[ 1107.209618][T19501]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[ 1107.209618][T19501]   Size:                        16777216
[ 1107.209618][T19501]   read errors:                 0
[ 1107.209618][T19501]   write errors:                0
[ 1107.209618][T19501]   checksum errors:             0
[ 1107.209618][T19501]   seqread iops:                0
[ 1107.209618][T19501]   seqwrite iops:               0
[ 1107.209618][T19501]   randread iops:               0
[ 1107.209618][T19501]   randwrite iops:              0
[ 1107.209618][T19501]   Bucket size:                 131072
[ 1107.209618][T19501]   First bucket:                0
[ 1107.209618][T19501]   Buckets:                     128
[ 1107.209618][T19501]   Last mount:                  1714681267
[ 1107.209618][T19501]   Last superblock write:       42
[ 1107.209618][T19501]   State:                       rw
[ 1107.209618][T19501]   Data allowed:                journal,btree,user
[ 1107.209618][T19501]   Has data:                    journal,btree,user
[ 1107.209618][T19501]   Btree allocated bitmap blocksize:256
[ 1107.209618][T19501]   Btree allocated bitmap:      000000000000000000000100001000001001100000000000000000000000000
[ 1107.209829][T19501] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[ 1107.213376][T19514] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1107.467902][ T5958] usb 9-1: no configurations
[ 1107.472560][ T5958] usb 9-1: can't read configurations, error -22
[ 1107.498898][ T5958] usb usb9-port1: attempt power cycle
[ 1108.569593][ T5958] usb 9-1: new full-speed USB device number 15 using dummy_hcd
[ 1109.054385][ T5958] usb 9-1: device descriptor read/8, error -71
[ 1109.101835][T16873] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1109.183624][T19544] netlink: 'syz.8.4128': attribute type 10 has an invalid length.
[ 1111.016115][T19564] loop9: detected capacity change from 0 to 32768
[ 1111.044748][T19564] XFS (loop9): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1111.117102][T19564] XFS (loop9): Starting recovery (logdev: internal)
[ 1111.138003][T19564] XFS (loop9): Ending recovery (logdev: internal)
[ 1111.175831][T19564] XFS (loop9): Corruption warning: Metadata has LSN (8192:64) ahead of current LSN (1:192). Please unmount and run xfs_repair (>= v4.3) to resolve.
[ 1111.191470][T19564] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[ 1111.202895][T19564] XFS (loop9): Unmount and run xfs_repair
[ 1111.209787][T19564] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[ 1111.217190][T19564] 00000000: 53 55 4d 59 00 00 00 02 ff ff ff ff ff ff ff ff  SUMY............
[ 1111.226355][T19564] 00000010: 00 00 00 00 00 00 00 04 00 00 20 00 00 00 00 40  .......... ....@
[ 1111.235437][T19564] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[ 1111.245452][T19564] 00000030: 00 00 00 00 25 47 cc 81 00 00 00 0d 00 00 00 03  ....%G..........
[ 1111.254369][T19564] 00000040: 00 00 0e a8 00 00 11 58 00 00 00 00 00 00 00 00  .......X........
[ 1111.263467][T19564] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1111.272470][T19564] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1111.281346][T19564] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1111.290475][T19564] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x4 len 4 error 74
[ 1111.349753][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4136'.
[ 1111.373583][T19564] XFS (loop9): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[ 1111.388438][T19564] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[ 1111.487293][T18296] XFS (loop9): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1111.567560][T19583] loop8: detected capacity change from 0 to 2048
[ 1111.698008][ T5969] usb 8-1: new full-speed USB device number 23 using dummy_hcd
[ 1112.046304][ T5969] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.111429][T19586] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1112.230513][ T5969] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1112.441897][ T5969] usb 8-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29
[ 1112.517081][ T5969] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.545944][ T5969] usb 8-1: Product: syz
[ 1112.558449][ T5969] usb 8-1: Manufacturer: syz
[ 1112.563090][ T5969] usb 8-1: SerialNumber: syz
[ 1112.611270][   T30] audit: type=1800 audit(1755019743.871:323): pid=19587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4139" name="file2" dev="loop8" ino=16 res=0 errno=0
[ 1112.630455][ T5969] usb 8-1: config 0 descriptor??
[ 1112.670660][T19583] NILFS (loop8): error -2 truncating bmap (ino=16)
[ 1112.771443][T19592] loop9: detected capacity change from 0 to 2048
[ 1112.802331][T19592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1112.912218][ T5969] usb 8-1: USB disconnect, device number 23
[ 1115.357007][T19590] loop5: detected capacity change from 0 to 32768
[ 1116.390039][T19626] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4152'.
[ 1117.040309][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1117.059996][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.266422][T19639] Invalid option length (65058) for dns_resolver key
[ 1118.043389][T19652] netlink: 'syz.5.4158': attribute type 1 has an invalid length.
[ 1118.051340][T19652] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4158'.
[ 1119.607984][T19657] loop9: detected capacity change from 0 to 32768
[ 1119.614989][T19657] XFS: ikeep mount option is deprecated.
[ 1119.674515][T19657] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1119.812831][T19657] XFS (loop9): Ending clean mount
[ 1119.873783][T19657] XFS (loop9): Quotacheck needed: Please wait.
[ 1120.095423][T19657] XFS (loop9): Quotacheck: Done.
[ 1120.791976][T18296] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1121.779564][T19687] syz_tun: entered allmulticast mode
[ 1121.824202][T19686] syz_tun: left allmulticast mode
[ 1121.832062][T19689] input: syz1 as /devices/virtual/input/input29
[ 1123.558303][T19715] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1124.548454][T19715] bridge_slave_1: left allmulticast mode
[ 1124.637811][T19715] bridge_slave_1: left promiscuous mode
[ 1124.684248][T19715] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1125.342215][T19715] team0: Port device bridge_slave_1 added
[ 1128.278077][  T980] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1128.571481][T19778] syz.9.4190: attempt to access beyond end of device
[ 1128.571481][T19778] nbd9: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1128.600860][T19781] openvswitch: netlink: Message has 24 unknown bytes.
[ 1128.607880][  T980] usb 6-1: Using ep0 maxpacket: 16
[ 1128.620336][  T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[ 1128.636696][T19778] befs: (nbd9): unable to read superblock
[ 1128.639924][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1128.660386][  T980] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1128.677901][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1128.749641][  T980] usb 6-1: Product: syz
[ 1128.764337][  T980] usb 6-1: Manufacturer: syz
[ 1128.774944][  T980] usb 6-1: SerialNumber: syz
[ 1128.868450][  T980] usb 6-1: config 0 descriptor??
[ 1129.322938][  T980] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[ 1129.423930][    C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -1
[ 1129.489132][  T980] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110
[ 1129.539376][  T980] usb 6-1: USB disconnect, device number 20
[ 1130.622580][T19790] input: syz1 as /devices/virtual/input/input30
[ 1131.488184][T16388] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[ 1131.653595][T16388] usb 9-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[ 1131.727188][T19810] syzkaller0: entered promiscuous mode
[ 1131.907679][T16388] usb 9-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[ 1131.938758][T19812] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[ 1131.945773][T19810] syzkaller0: entered allmulticast mode
[ 1132.001709][T16388] usb 9-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29
[ 1132.981764][T16388] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.016883][T16388] usb 9-1: Product: syz
[ 1133.995180][T16388] usb 9-1: Manufacturer: syz
[ 1134.021871][T16388] usb 9-1: SerialNumber: syz
[ 1134.446164][T16388] usb 9-1: can't set config #252, error -71
[ 1134.453700][T16388] usb 9-1: USB disconnect, device number 17
[ 1135.045560][T19826] overlayfs: failed to clone upperpath
[ 1136.855348][T19837] loop8: detected capacity change from 0 to 256
[ 1137.735543][T19850] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4216'.
[ 1138.170198][T19854] trusted_key: encrypted_key: insufficient parameters specified
[ 1138.721134][T19857] loop9: detected capacity change from 0 to 128
[ 1138.891471][T19857] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1138.911965][T19857] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1139.158614][T18296] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1141.378701][  T980] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1141.443241][T19886] netlink: 'syz.9.4224': attribute type 3 has an invalid length.
[ 1141.548289][  T980] usb 6-1: Using ep0 maxpacket: 16
[ 1141.645427][  T980] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[ 1141.988019][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1142.020264][  T980] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 1142.109570][  T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1142.157133][  T980] usb 6-1: Product: syz
[ 1142.170423][  T980] usb 6-1: Manufacturer: syz
[ 1142.175069][  T980] usb 6-1: SerialNumber: syz
[ 1142.210427][  T980] usb 6-1: config 0 descriptor??
[ 1142.256318][T19895] loop7: detected capacity change from 0 to 256
[ 1142.484219][  T980] appledisplay 6-1:0.0: Error while getting initial brightness: -71
[ 1142.589684][    C1] usb 6-1: appledisplay_complete - usb_submit_urb failed with result -1
[ 1142.678216][  T980] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71
[ 1142.771743][  T980] usb 6-1: USB disconnect, device number 21
[ 1145.687746][T16388] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1145.924180][T16388] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1145.947692][T16388] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1145.981186][T16388] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1146.007954][T16388] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1146.027668][T16388] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1146.091830][T16388] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1146.137591][T16388] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1146.165876][T16388] usb 10-1: Product: syz
[ 1146.217053][T16388] usb 10-1: Manufacturer: syz
[ 1146.250004][T16388] cdc_wdm 10-1:1.0: skipping garbage
[ 1146.255354][T16388] cdc_wdm 10-1:1.0: skipping garbage
[ 1146.862648][T16388] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1146.871224][T19935] loop7: detected capacity change from 0 to 256
[ 1147.000534][T16388] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1148.087210][   T30] audit: type=1800 audit(1755019779.331:324): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4245" name="file1" dev="loop7" ino=1048780 res=0 errno=0
[ 1148.481860][T18085] usb 10-1: USB disconnect, device number 4
[ 1149.343488][T19962] input: syz1 as /devices/virtual/input/input31
[ 1150.083070][T19968] netlink: 'syz.0.4253': attribute type 10 has an invalid length.
[ 1150.172603][T19972] loop7: detected capacity change from 0 to 256
[ 1151.268880][   T30] audit: type=1800 audit(1755019782.481:325): pid=19976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4255" name="file1" dev="loop7" ino=1048796 res=0 errno=0
[ 1152.231081][T19991] loop5: detected capacity change from 0 to 128
[ 1152.982135][T19991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1153.094904][T19991] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1153.366252][T16873] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1155.185471][T16253] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1155.767733][T16253] usb 6-1: Using ep0 maxpacket: 16
[ 1155.800528][T16253] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1155.822763][T16253] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1155.840041][T20031] netlink: 'syz.0.4273': attribute type 10 has an invalid length.
[ 1155.859371][T16253] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1155.883235][T16253] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1155.914032][T16253] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1155.931526][T16253] usb 6-1: Product: syz
[ 1155.937718][T16253] usb 6-1: Manufacturer: syz
[ 1155.965015][T16253] usb 6-1: SerialNumber: syz
[ 1156.338402][   T30] audit: type=1326 audit(1755019787.601:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20028 comm="syz.9.4272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf718ebe9 code=0x0
[ 1156.560572][T20048] syz.7.4270: attempt to access beyond end of device
[ 1156.560572][T20048] nbd7: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1156.573520][T20048] befs: (nbd7): unable to read superblock
[ 1156.689388][T20050] openvswitch: netlink: Message has 24 unknown bytes.
[ 1157.311571][T16253] usb 6-1: 0:2 : does not exist
[ 1157.709281][T16253] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1)
[ 1158.218371][T16253] usb 6-1: USB disconnect, device number 22
[ 1158.495010][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4283'.
[ 1158.765893][T20078] netlink: 'syz.5.4286': attribute type 10 has an invalid length.
[ 1158.862790][T20080] netlink: 'syz.0.4285': attribute type 16 has an invalid length.
[ 1158.870801][T20080] netlink: 'syz.0.4285': attribute type 17 has an invalid length.
[ 1159.373319][T20079] input: syz0 as /devices/virtual/input/input32
[ 1159.400377][T20080] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1161.175404][T20107] syz.5.4290: attempt to access beyond end of device
[ 1161.175404][T20107] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1161.188552][T20107] befs: (nbd5): unable to read superblock
[ 1161.225436][T20106] /dev/nullb0: Can't open blockdev
[ 1161.231616][T20109] openvswitch: netlink: Message has 24 unknown bytes.
[ 1163.751209][T20128] netlink: 'syz.9.4299': attribute type 16 has an invalid length.
[ 1163.759204][T20128] netlink: 'syz.9.4299': attribute type 17 has an invalid length.
[ 1163.880413][T20128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1167.860527][T20167] netlink: 'syz.7.4314': attribute type 16 has an invalid length.
[ 1167.868584][T20167] netlink: 'syz.7.4314': attribute type 17 has an invalid length.
[ 1168.188037][T20167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1173.421337][T20210] netlink: 'syz.7.4326': attribute type 16 has an invalid length.
[ 1173.429413][T20210] netlink: 'syz.7.4326': attribute type 17 has an invalid length.
[ 1173.456411][T20210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1173.736958][T20216] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4328'.
[ 1174.640600][T20224] netlink: 'syz.0.4332': attribute type 10 has an invalid length.
[ 1175.878609][T20244] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1175.885380][T20244] comedi comedi3: 8255: I/O port conflict (0x2,4)
[ 1175.894006][T20244] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1175.902579][T20244] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[ 1175.910610][T20244] comedi comedi3: 8255: I/O port conflict (0x5,4)
[ 1175.917245][T20244] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[ 1175.926006][T20244] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1175.940506][T20244] comedi comedi3: 8255: I/O port conflict (0x1,4)
[ 1175.947380][T20244] comedi comedi3: 8255: I/O port conflict (0x9,4)
[ 1175.955833][T20244] comedi comedi3: 8255: I/O port conflict (0x6,4)
[ 1175.967126][T20244] comedi comedi3: 8255: I/O port conflict (0x4,4)
[ 1175.974680][T20244] comedi comedi3: 8255: I/O port conflict (0x3,4)
[ 1175.982399][T20244] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[ 1175.991063][T20244] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[ 1177.349215][T20259] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1177.419587][T20262] netlink: 'syz.0.4346': attribute type 10 has an invalid length.
[ 1177.628003][T16253] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1177.810212][T20272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4348'.
[ 1177.877843][T16253] usb 10-1: Using ep0 maxpacket: 16
[ 1178.462878][T16253] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1178.478433][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1178.484790][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.535783][T16253] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.577143][T16253] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1178.663150][T16253] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1178.715100][T16253] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.790188][T16253] usb 10-1: Product: syz
[ 1178.794495][T16253] usb 10-1: Manufacturer: syz
[ 1178.835907][T16253] usb 10-1: SerialNumber: syz
[ 1179.293822][T16253] usb 10-1: 0:2 : does not exist
[ 1180.412247][T16253] usb 10-1: 1:0: cannot get min/max values for control 4 (id 1)
[ 1181.450613][T16253] usb 10-1: USB disconnect, device number 5
[ 1181.690228][T20310] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4362'.
[ 1182.699565][  T980] kernel write not supported for file /bluetooth/6lowpan_control (pid: 980 comm: kworker/1:2)
[ 1183.440293][T20331] lo speed is unknown, defaulting to 1000
[ 1183.446604][T20331] lo speed is unknown, defaulting to 1000
[ 1183.456271][T20331] lo speed is unknown, defaulting to 1000
[ 1183.470274][T20331] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[ 1183.490244][T20331] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[ 1183.532121][T20331] lo speed is unknown, defaulting to 1000
[ 1183.541948][T20331] lo speed is unknown, defaulting to 1000
[ 1183.549654][T20331] lo speed is unknown, defaulting to 1000
[ 1183.557423][T20331] lo speed is unknown, defaulting to 1000
[ 1183.565132][T20331] lo speed is unknown, defaulting to 1000
[ 1185.600312][T20363] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1185.885746][T20363] bond1: entered promiscuous mode
[ 1185.891202][T20363] bond1: entered allmulticast mode
[ 1185.899932][T20363] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1186.177781][  T980] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[ 1188.197508][T20384] loop5: detected capacity change from 0 to 2048
[ 1188.378981][T20388] syz_tun: entered allmulticast mode
[ 1188.396446][T20384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1188.422113][T20387] syz_tun: left allmulticast mode
[ 1189.029183][   T30] audit: type=1800 audit(1755019820.261:327): pid=20398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4387" name="bus" dev="loop5" ino=1367 res=0 errno=0
[ 1194.478520][T20448] netlink: 'syz.8.4401': attribute type 10 has an invalid length.
[ 1194.487800][   T30] audit: type=1326 audit(1755019825.621:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20430 comm="syz.8.4401" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1727b8ebe9 code=0x0
[ 1194.608345][T20449] netlink: 'syz.8.4401': attribute type 10 has an invalid length.
[ 1195.296909][T20448] bond0: (slave dummy0): Releasing backup interface
[ 1195.682525][T20448] team0: Port device dummy0 added
[ 1195.682828][T20442] syz.8.4401: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1195.866934][T20442] CPU: 1 UID: 0 PID: 20442 Comm: syz.8.4401 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[ 1195.866966][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1195.866979][T20442] Call Trace:
[ 1195.866987][T20442]  <TASK>
[ 1195.866998][T20442]  dump_stack_lvl+0x189/0x250
[ 1195.867037][T20442]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1195.867061][T20442]  ? __pfx__printk+0x10/0x10
[ 1195.867086][T20442]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1195.867100][T20442]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1195.867113][T20442]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1195.867126][T20442]  warn_alloc+0x214/0x310
[ 1195.867146][T20442]  ? __pfx_warn_alloc+0x10/0x10
[ 1195.867171][T20442]  ? __get_vm_area_node+0x28f/0x300
[ 1195.867186][T20442]  ? packet_set_ring+0x6f4/0x2350
[ 1195.867203][T20442]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1195.867234][T20442]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1195.867250][T20442]  ? alloc_pages_mpol+0x3c4/0x4a0
[ 1195.867267][T20442]  ? packet_set_ring+0x6f4/0x2350
[ 1195.867280][T20442]  vzalloc_noprof+0xb2/0xf0
[ 1195.867296][T20442]  ? packet_set_ring+0x6f4/0x2350
[ 1195.867310][T20442]  packet_set_ring+0x6f4/0x2350
[ 1195.867335][T20442]  ? __pfx_packet_set_ring+0x10/0x10
[ 1195.867359][T20442]  ? _copy_from_user+0x94/0xb0
[ 1195.867374][T20442]  packet_setsockopt+0xc5a/0x12c0
[ 1195.867388][T20442]  ? mpol_set_nodemask+0x30e/0x3f0
[ 1195.867404][T20442]  ? __pfx_packet_setsockopt+0x10/0x10
[ 1195.867420][T20442]  ? __lock_acquire+0xab9/0xd20
[ 1195.867439][T20442]  ? aa_sk_perm+0x81e/0x950
[ 1195.867457][T20442]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1195.867473][T20442]  ? __fget_files+0x2a/0x420
[ 1195.867489][T20442]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1195.867500][T20442]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1195.867512][T20442]  ? __pfx_packet_setsockopt+0x10/0x10
[ 1195.867526][T20442]  do_sock_setsockopt+0x17c/0x1b0
[ 1195.867606][T20442]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1195.867629][T20442]  do_syscall_64+0xfa/0x3b0
[ 1195.867645][T20442]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1195.867671][T20442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.867685][T20442]  ? clear_bhb_loop+0x60/0xb0
[ 1195.867698][T20442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1195.867720][T20442] RIP: 0033:0x7f1727b8ebe9
[ 1195.867735][T20442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1195.867744][T20442] RSP: 002b:00007f1728a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1195.867757][T20442] RAX: ffffffffffffffda RBX: 00007f1727db6090 RCX: 00007f1727b8ebe9
[ 1195.867766][T20442] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000007
[ 1195.867772][T20442] RBP: 00007f1727c11e19 R08: 000000000000001c R09: 0000000000000000
[ 1195.867778][T20442] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000
[ 1195.867784][T20442] R13: 00007f1727db6128 R14: 00007f1727db6090 R15: 00007ffcc782c928
[ 1195.867801][T20442]  </TASK>
[ 1196.192171][T20442] Mem-Info:
[ 1196.195488][T20442] active_anon:12019 inactive_anon:0 isolated_anon:0
[ 1196.195488][T20442]  active_file:21896 inactive_file:40327 isolated_file:0
[ 1196.195488][T20442]  unevictable:17122 dirty:207 writeback:0
[ 1196.195488][T20442]  slab_reclaimable:8472 slab_unreclaimable:99279
[ 1196.195488][T20442]  mapped:33626 shmem:4343 pagetables:1519
[ 1196.195488][T20442]  sec_pagetables:0 bounce:0
[ 1196.195488][T20442]  kernel_misc_reclaimable:0
[ 1196.195488][T20442]  free:1275463 free_pcp:18022 free_cma:0
[ 1196.241121][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1196.383814][T20442] Node 0 active_anon:59576kB inactive_anon:0kB active_file:87584kB inactive_file:161104kB unevictable:66952kB isolated(anon):0kB isolated(file):0kB mapped:145904kB dirty:828kB writeback:0kB shmem:27236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12612kB pagetables:5984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1196.415861][T20442] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1196.828683][T20442] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1196.895868][T20442] lowmem_reserve[]: 0 2497 2499 2499 2499
[ 1196.896932][T20449] team0: Port device dummy0 removed
[ 1197.067577][T20442] Node 0 DMA32 free:1196032kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36600kB inactive_anon:0kB active_file:87584kB inactive_file:159540kB unevictable:66952kB writepending:852kB present:3129332kB managed:2557360kB mlocked:0kB bounce:0kB free_pcp:70868kB local_pcp:26744kB free_cma:0kB
[ 1197.072421][T20449] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1197.100393][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1197.495593][T20442] lowmem_reserve[]: 0 0 1 1 1
[ 1197.504201][T20442] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 1197.593888][T20442] lowmem_reserve[]: 0 0 0 0 0
[ 1197.631624][T20442] Node 1 Normal free:3873880kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:31732kB local_pcp:22824kB free_cma:0kB
[ 1197.693810][T20442] lowmem_reserve[]: 0 0 0 0 0
[ 1197.712289][T20442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1197.734527][T20442] Node 0 DMA32: 1*4kB (E) 21*8kB (UME) 107*16kB (UME) 635*32kB (ME) 605*64kB (UME) 401*128kB (UME) 221*256kB (UME) 113*512kB (UME) 49*1024kB (UM) 29*2048kB (ME) 208*4096kB (UM) = 1188220kB
[ 1197.753837][T20442] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[ 1197.775187][T20442] Node 1 Normal: 102*4kB (UE) 30*8kB (UME) 35*16kB (UME) 37*32kB (UME) 40*64kB (UME) 26*128kB (UM) 14*256kB (UM) 19*512kB (UME) 8*1024kB (UM) 3*2048kB (UE) 937*4096kB (UM) = 3873880kB
[ 1197.780794][T20488] netlink: 'syz.9.4417': attribute type 1 has an invalid length.
[ 1197.804283][T20442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1197.814439][T20488] netlink: 216 bytes leftover after parsing attributes in process `syz.9.4417'.
[ 1197.816641][T20442] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1197.834525][T20442] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1197.846599][T20442] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1197.856249][T20442] 82882 total pagecache pages
[ 1197.861435][T20442] 0 pages in swap cache
[ 1197.865781][T20442] Free swap  = 124996kB
[ 1197.870952][T20442] Total swap = 124996kB
[ 1198.795199][T20442] 2097051 pages RAM
[ 1198.803289][T20442] 0 pages HighMem/MovableOnly
[ 1198.812660][T20442] 425685 pages reserved
[ 1198.816823][T20442] 0 pages cma reserved
[ 1198.978763][T20494] loop7: detected capacity change from 0 to 2048
[ 1198.998636][T20494] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1199.942804][   T30] audit: type=1800 audit(1755019830.851:329): pid=20504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4419" name="bus" dev="loop7" ino=1367 res=0 errno=0
[ 1201.911195][T20512] tipc: Started in network mode
[ 1201.916073][T20512] tipc: Node identity 168bd5211e26, cluster identity 4711
[ 1201.945318][T20512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1202.018416][T20523] syzkaller0: entered promiscuous mode
[ 1202.023966][T20523] syzkaller0: entered allmulticast mode
[ 1202.153514][T20512] tipc: Resetting bearer <eth:syzkaller0>
[ 1202.168843][T20510] tipc: Resetting bearer <eth:syzkaller0>
[ 1202.206168][T20510] tipc: Disabling bearer <eth:syzkaller0>
[ 1202.571706][   T30] audit: type=1326 audit(1755019833.791:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20527 comm="syz.9.4430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bf718ebe9 code=0x0
[ 1202.598066][T20538] netlink: 'syz.9.4430': attribute type 10 has an invalid length.
[ 1202.626088][T20538] netlink: 'syz.9.4430': attribute type 10 has an invalid length.
[ 1202.717799][T20538] team0: Port device dummy0 removed
[ 1202.752314][T20538] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1205.584294][T20564] loop7: detected capacity change from 0 to 1024
[ 1205.727578][T20564] EXT4-fs: Ignoring removed orlov option
[ 1205.746870][T20564] EXT4-fs: Ignoring removed i_version option
[ 1205.754938][T20565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1205.834490][T20571] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4442'.
[ 1206.330837][T20564] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1206.400580][T20564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1208.402772][T16802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1208.516200][T20607] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4453'.
[ 1209.041836][T20610] loop7: detected capacity change from 0 to 256
[ 1211.926907][T20648] loop5: detected capacity change from 0 to 2048
[ 1211.983162][T20648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1212.950563][   T30] audit: type=1800 audit(1755019844.201:331): pid=20648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4467" name="bus" dev="loop5" ino=1367 res=0 errno=0
[ 1213.007272][T20656] netlink: 'syz.8.4468': attribute type 10 has an invalid length.
[ 1213.270431][T20665] input: syz0 as /devices/virtual/input/input34
[ 1213.460410][T20676] loop7: detected capacity change from 0 to 1024
[ 1213.619246][T20676] EXT4-fs: Ignoring removed orlov option
[ 1213.631727][T20676] EXT4-fs: Ignoring removed i_version option
[ 1213.845194][T20676] EXT4-fs (loop7): stripe (7) is not aligned with cluster size (16), stripe is disabled
[ 1214.772728][T20676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1215.530051][T20694] overlayfs: failed to clone upperpath
[ 1215.593954][T20699] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1215.671471][T20699] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[ 1215.683091][T20700] netlink: 182 bytes leftover after parsing attributes in process `syz.9.4478'.
[ 1215.720229][T20699] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[ 1215.774516][T16802] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1216.017015][T20714] fuse: Bad value for 'fd'
[ 1216.039968][T20712] input: syz0 as /devices/virtual/input/input35
[ 1217.064726][  T980] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1217.188092][T20736] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1217.403535][T20745] fuse: Bad value for 'fd'
[ 1217.407837][  T980] usb 6-1: Using ep0 maxpacket: 16
[ 1217.432563][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1217.500362][  T980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1217.543859][  T980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1217.597147][  T980] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1217.633165][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1217.745723][  T980] usb 6-1: config 0 descriptor??
[ 1218.544996][T20755] input: syz0 as /devices/virtual/input/input36
[ 1218.609322][  T980] usbhid 6-1:0.0: can't add hid device: -71
[ 1218.615493][  T980] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1218.632412][  T980] usb 6-1: USB disconnect, device number 23
[ 1222.096300][T20783] input: syz1 as /devices/virtual/input/input37
[ 1222.169712][T20798] overlayfs: failed to clone upperpath
[ 1222.193216][T20796] input: syz0 as /devices/virtual/input/input38
[ 1222.408053][T20808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4522'.
[ 1222.908513][ T5958] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1223.228424][ T5958] usb 6-1: Using ep0 maxpacket: 16
[ 1223.243863][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1223.262220][ T5958] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.293820][ T5958] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1223.323188][T20830] tipc: Started in network mode
[ 1223.328471][T20830] tipc: Node identity 7f000001, cluster identity 4711
[ 1223.343343][ T5958] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1223.343939][T20830] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1223.360615][ T5958] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1223.483419][ T5958] usb 6-1: config 0 descriptor??
[ 1224.115041][ T5958] usbhid 6-1:0.0: can't add hid device: -71
[ 1224.131154][ T5958] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1224.176171][ T5958] usb 6-1: USB disconnect, device number 24
[ 1224.205660][T20841] random: crng reseeded on system resumption
[ 1224.467821][  T980] tipc: Node number set to 2130706433
[ 1224.900473][T20847] input: syz1 as /devices/virtual/input/input39
[ 1225.131487][T20850] netlink: 'syz.8.4538': attribute type 10 has an invalid length.
[ 1227.132251][T20859] loop8: detected capacity change from 0 to 2048
[ 1227.203671][T20859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1227.839977][T20865] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1228.989109][T20883] netlink: 'syz.0.4549': attribute type 10 has an invalid length.
[ 1229.845046][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4552'.
[ 1230.958080][T20897] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804f3c4000 pfn:0x4f3c4
[ 1230.996196][T20897] memcg:ffff888027674100
[ 1231.001032][T20897] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[ 1231.011811][T20897] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[ 1231.021544][T20897] raw: ffff88804f3c4000 0000000000000000 00000001ffffffff ffff888027674100
[ 1231.039804][T20897] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[ 1231.052204][T20897] page_owner tracks the page as allocated
[ 1231.061625][T20897] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 20897, tgid 20888 (syz.5.4552), ts 1230958041109, free_ts 1230912189716
[ 1231.154968][T20897]  post_alloc_hook+0x240/0x2a0
[ 1231.167331][T20897]  get_page_from_freelist+0x21e4/0x22c0
[ 1231.192509][T20897]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1231.200985][T20897]  alloc_pages_mpol+0x232/0x4a0
[ 1231.206810][T20897]  alloc_pages_noprof+0xa9/0x190
[ 1231.212018][T20897]  folio_alloc_noprof+0x1e/0x30
[ 1231.219033][T20897]  filemap_alloc_folio_noprof+0xdf/0x470
[ 1231.224937][T20897]  page_cache_ra_order+0x4de/0xd40
[ 1231.233415][T20897]  do_sync_mmap_readahead+0x25e/0x7a0
[ 1231.238907][T20897]  filemap_fault+0x62c/0x1200
[ 1231.250326][T20897]  __do_fault+0x138/0x390
[ 1231.256240][T20897]  __handle_mm_fault+0x1847/0x5440
[ 1231.261834][T20897]  handle_mm_fault+0x40a/0x8e0
[ 1231.267284][T20897]  do_user_addr_fault+0x764/0x1390
[ 1231.475447][T20897]  exc_page_fault+0x76/0xf0
[ 1231.550852][T20897]  asm_exc_page_fault+0x26/0x30
[ 1231.563667][T20897] page last free pid 20923 tgid 20923 stack trace:
[ 1231.575940][T20897]  __free_frozen_pages+0xbc4/0xd30
[ 1231.594545][T20897]  tlb_finish_mmu+0x112/0x1d0
[ 1231.601617][T20897]  exit_mmap+0x44c/0xb50
[ 1231.606078][T20897]  __mmput+0x118/0x420
[ 1231.611460][T20897]  exit_mm+0x1da/0x2c0
[ 1231.615647][T20897]  do_exit+0x648/0x2300
[ 1231.623213][T20897]  do_group_exit+0x21c/0x2d0
[ 1231.654314][T20897]  __x64_sys_exit_group+0x3f/0x40
[ 1231.662779][T20897]  x64_sys_call+0x21f7/0x2200
[ 1231.669799][T20897]  do_syscall_64+0xfa/0x3b0
[ 1231.674437][T20897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1231.689143][T20897] ------------[ cut here ]------------
[ 1231.694700][T20897] kernel BUG at mm/filemap.c:868!
[ 1231.712514][T20897] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[ 1231.718799][T20897] CPU: 1 UID: 0 PID: 20897 Comm: syz.5.4552 Not tainted 6.17.0-rc1-next-20250812-syzkaller #0 PREEMPT(full) 
[ 1231.730371][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1231.740515][T20897] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0
[ 1231.746590][T20897] Code: 50 c9 ff 4c 89 e7 48 c7 c6 20 3c 94 8b e8 6b a0 31 ff 90 0f 0b e8 13 50 c9 ff 4c 89 e7 48 c7 c6 00 33 94 8b e8 54 a0 31 ff 90 <0f> 0b e8 fc 4f c9 ff 4c 89 e7 48 c7 c6 20 3c 94 8b e8 3d a0 31 ff
[ 1231.766194][T20897] RSP: 0018:ffffc900044472c0 EFLAGS: 00010246
[ 1231.772445][T20897] RAX: f3238ee1b1f43800 RBX: 0000000000000000 RCX: 0000000000000000
[ 1231.780446][T20897] RDX: 0000000000000007 RSI: ffffffff8d9b97b0 RDI: 00000000ffffffff
[ 1231.788773][T20897] RBP: ffffc90004447430 R08: ffffffff8fa3a137 R09: 1ffffffff1f47426
[ 1231.796744][T20897] R10: dffffc0000000000 R11: fffffbfff1f47427 R12: ffffea00013cf100
[ 1231.804794][T20897] R13: dffffc0000000000 R14: ffffea00013cf108 R15: 0000000000000002
[ 1231.812753][T20897] FS:  00007ff1805cd6c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000
[ 1231.821671][T20897] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1231.828326][T20897] CR2: 00007efc07bfed58 CR3: 000000005c006000 CR4: 00000000003526f0
[ 1231.836314][T20897] Call Trace:
[ 1231.839589][T20897]  <TASK>
[ 1231.842512][T20897]  ? percpu_ref_put+0x19/0x180
[ 1231.847363][T20897]  ? __pfx___filemap_add_folio+0x10/0x10
[ 1231.852994][T20897]  filemap_add_folio+0xd5/0x270
[ 1231.857841][T20897]  page_cache_ra_order+0x643/0xd40
[ 1231.863094][T20897]  do_sync_mmap_readahead+0x25e/0x7a0
[ 1231.868462][T20897]  ? __pfx_do_sync_mmap_readahead+0x10/0x10
[ 1231.874353][T20897]  ? count_memcg_event_mm+0x1d/0x250
[ 1231.879632][T20897]  ? count_memcg_event_mm+0x1d/0x250
[ 1231.884915][T20897]  filemap_fault+0x62c/0x1200
[ 1231.889587][T20897]  ? __pfx_filemap_fault+0x10/0x10
[ 1231.894785][T20897]  __do_fault+0x138/0x390
[ 1231.899105][T20897]  __handle_mm_fault+0x1847/0x5440
[ 1231.904225][T20897]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1231.909683][T20897]  ? find_vma+0xe7/0x160
[ 1231.913919][T20897]  ? __pfx_find_vma+0x10/0x10
[ 1231.918625][T20897]  handle_mm_fault+0x40a/0x8e0
[ 1231.923503][T20897]  do_user_addr_fault+0x764/0x1390
[ 1231.928711][T20897]  exc_page_fault+0x76/0xf0
[ 1231.933217][T20897]  asm_exc_page_fault+0x26/0x30
[ 1231.938067][T20897] RIP: 0010:__put_user_4+0xd/0x20
[ 1231.943082][T20897] Code: 66 89 01 31 c9 0f 01 ca e9 50 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90
[ 1231.962852][T20897] RSP: 0018:ffffc90004447c38 EFLAGS: 00050202
[ 1231.968926][T20897] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000065bf8
[ 1231.976903][T20897] RDX: 0000000000000000 RSI: ffffffff8dbaa3d4 RDI: ffffffff8be34b80
[ 1231.984977][T20897] RBP: ffffc90004447e10 R08: 0000000000000000 R09: ffffffff820b7a40
[ 1231.992953][T20897] R10: dffffc0000000000 R11: fffff52000888ecd R12: 0000200000065bc0
[ 1232.000921][T20897] R13: dffffc0000000000 R14: 0000000000000002 R15: 000000000000196c
[ 1232.008901][T20897]  ? __might_fault+0xb0/0x130
[ 1232.013585][T20897]  do_recvmmsg+0x33c/0x770
[ 1232.017998][T20897]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1232.022938][T20897]  ? count_memcg_event_mm+0x21/0x260
[ 1232.028212][T20897]  ? count_memcg_event_mm+0x21/0x260
[ 1232.033491][T20897]  __x64_sys_recvmmsg+0x190/0x240
[ 1232.038512][T20897]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1232.044395][T20897]  ? do_syscall_64+0xbe/0x3b0
[ 1232.049068][T20897]  do_syscall_64+0xfa/0x3b0
[ 1232.053573][T20897]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1232.058786][T20897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.065019][T20897]  ? clear_bhb_loop+0x60/0xb0
[ 1232.069689][T20897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.075571][T20897] RIP: 0033:0x7ff18238ebe9
[ 1232.079982][T20897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1232.099584][T20897] RSP: 002b:00007ff1805cd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1232.107993][T20897] RAX: ffffffffffffffda RBX: 00007ff1825b6090 RCX: 00007ff18238ebe9
[ 1232.115973][T20897] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1232.124119][T20897] RBP: 00007ff182411e19 R08: 0000000000000000 R09: 0000000000000000
[ 1232.132175][T20897] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1232.140136][T20897] R13: 00007ff1825b6128 R14: 00007ff1825b6090 R15: 00007fffbccfd238
[ 1232.148111][T20897]  </TASK>
[ 1232.151135][T20897] Modules linked in:
[ 1232.156158][T20897] ---[ end trace 0000000000000000 ]---
[ 1232.166942][T20897] RIP: 0010:__filemap_add_folio+0x11ad/0x12f0
[ 1232.178616][T20897] Code: 50 c9 ff 4c 89 e7 48 c7 c6 20 3c 94 8b e8 6b a0 31 ff 90 0f 0b e8 13 50 c9 ff 4c 89 e7 48 c7 c6 00 33 94 8b e8 54 a0 31 ff 90 <0f> 0b e8 fc 4f c9 ff 4c 89 e7 48 c7 c6 20 3c 94 8b e8 3d a0 31 ff
[ 1232.198944][T20897] RSP: 0018:ffffc900044472c0 EFLAGS: 00010246
[ 1232.205307][T20897] RAX: f3238ee1b1f43800 RBX: 0000000000000000 RCX: 0000000000000000
[ 1232.213645][T20897] RDX: 0000000000000007 RSI: ffffffff8d9b97b0 RDI: 00000000ffffffff
[ 1232.224464][T20897] RBP: ffffc90004447430 R08: ffffffff8fa3a137 R09: 1ffffffff1f47426
[ 1232.247788][T20897] R10: dffffc0000000000 R11: fffffbfff1f47427 R12: ffffea00013cf100
[ 1232.255861][T20897] R13: dffffc0000000000 R14: ffffea00013cf108 R15: 0000000000000002
[ 1232.265727][T20897] FS:  00007ff1805cd6c0(0000) GS:ffff888125d13000(0000) knlGS:0000000000000000
[ 1232.283640][T20897] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1232.294711][T20897] CR2: 00007efc07bfed58 CR3: 000000005c006000 CR4: 00000000003526f0
[ 1232.310315][T20897] Kernel panic - not syncing: Fatal exception
[ 1232.316700][T20897] Kernel Offset: disabled
[ 1232.321028][T20897] Rebooting in 86400 seconds..