last executing test programs:

21.005152532s ago: executing program 4 (id=148):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={<r4=>0x0, 0x0, 0x4, 0x4, 0x2, 0x5}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x2, 0x4, 0x9, 0x62, 0x2}, 0x14)

20.309866649s ago: executing program 1 (id=149):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x200000100000011, 0x3, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8902, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, 0x0}, 0x0)
sendfile(r3, r2, 0x0, 0x100000002)

19.531976814s ago: executing program 1 (id=152):
r0 = socket$inet6(0xa, 0x6, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000200)=""/152, &(0x7f00000002c0)=0x98)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = dup2(r0, r2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff18", 0x20}], 0x1}, 0x4040850)
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
setsockopt(r2, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x1)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r3, 0xebca)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRES32=r7], 0x20)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r6, 0x80047437, &(0x7f0000000040)={0x1000, 0x10, 0x76, 0x9, 0x0, "23f555d9ad9506000000000000beaa82dc1ecf", 0xa4, 0xfffffffe})
r8 = socket$netlink(0x10, 0x3, 0x4)
socket$inet6(0xa, 0x3, 0x7)
writev(r8, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8)
connect$inet(r5, &(0x7f0000000340)={0x2, 0x4e23, @empty=0x1700000000000000}, 0x10)
syz_usb_connect(0x3, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201400063721c40b8010000003f01020b01011d10000019040d000000fbd9f8dd03bf"], 0x0)
fsopen(&(0x7f0000000380)='fusectl\x00', 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r9, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002bbd7000ffdbdf258000000008009f000300bb8f24442194d6ccd9a935608000080027000300000005e7c9f77e000000080027000300000005011901"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x881)

17.75369451s ago: executing program 0 (id=154):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=@newtfilter={0x158, 0x2c, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x128, 0x2, [@TCA_TCINDEX_ACT={0x124, 0x7, [@m_skbmod={0xf0, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0xb9, 0x6, "11757d56543393ac84bc90477ae4c15f837880d7a83903a1283373e6e82d8f512eb34c57f93ef50d2fdcccffe1fcaec1547000f70aa05a432f45de77f22b39c39832c7705f3b349b1d7ce2e37484fc74f94f8f8f8328a19fe3637c1d9036a78941c53c4951e60bf37be7d0f1494fb0848e964f71593fb19c50d17ef65f4e3690d87a2c68aee6f08dd225a039eb22f89b8129c1d1575cbca61f0fc13ea7c79c4c7efdc4275ac72236630d349b655b847ac145fc307b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_gact={0x30, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)

15.471975572s ago: executing program 3 (id=158):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) (fail_nth: 1)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040), 0x4)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000000100)="d58392a4aee761df2f1b4ff220c26ebb6e9f131e2df2f8a0b76ab588a311a0cb3266b87f20a552f5296a336441813a1d", 0x30, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x200004, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x60)

14.562266908s ago: executing program 0 (id=159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket(0x1d, 0x80805, 0xb000)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
close(0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
userfaultfd(0x400)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={<r4=>0x0}, &(0x7f0000000380)=0xc)
ptrace$setregs(0xd, r4, 0x8, &(0x7f00000003c0)="37d31ba0becb217d2e061e01566ac605db5b28017f406a8858f4befc49747e57db1c711420932bc278ff76eb4eb3fcf71c580362a80878fdbfdb04e24930b9a461641ec40ddaa5f888d3ccdf11c26fea61329a99490da00a53005e17704438daace611ac21286a99ebcb3c96b10f7c25d46b0d46026b7ae28f68a8e306f2cb")
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x40}}, 0x0)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x101202, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x40, 0x9, @loopback, 0x680}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000300)=0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r8)
syz_io_uring_setup(0x1df8, &(0x7f0000000480)={0x0, 0x542, 0x2, 0x0, 0x244}, &(0x7f0000000500), &(0x7f0000000540))
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x5032c0, 0x0)

13.869750806s ago: executing program 1 (id=160):
socket$kcm(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000005880)='zonefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00')
preadv(r0, 0x0, 0x0, 0x37, 0x7)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x4000054)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4)
r5 = syz_open_procfs(0x0, &(0x7f0000001040)='net/udp\x00')
preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

12.982145082s ago: executing program 4 (id=161):
r0 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10)
chmod(0x0, 0x1c0)
socket$inet(0x2, 0x1, 0x2)
mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60002, 0x0, 0x13, 0xffffffffffffffff, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x1000817, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x1, 0x176, &(0x7f0000000200)="$eJzs299K+mAcx/HP/P/zV2JZJ9HBoIM6SVPpj2d1D92A6BJplmQnShBdRBfQ/SXUDWQ43MIpBIZO5/t19Hz2MPd9hGd+B04A1pYpU4YMxYdhP5V9zhlBlwRgQQaSvgYA1lP0Y+rR4b0BQKj1r6S2pPfPp5qicX978JqRdOnORxIT/UP/RdqLjeaNpFL+/uJNOnTPN/5NNiBZKe3Np6d+/tGBe/3/2tCmMho+o2xpezRf987f/WM3BKwXQ3l/HjsQ0U3Ttk68HHdy0csJJ5d8uezlpJPztXu7Pq8lAJhR5Jf9H/Xt/5hv/wNYXZ1u77Zq29bD8g6MmLQEZYRyYC7yoqaCWan71LkMX/jqDAK+MQGYu8Jjq13odHvHzVa1YTWsu9JFqXJWPi2eVwpO55/UWP8PIDx+fvSDrgQAAAAAAAAAAAAAAMwqp52gSwAAAACwIM7/f6/n+zpR0GsEAAAAAAAAAAAAAAAAAAAAwuI7AAD//yEAGGc=")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
open(&(0x7f0000000280)='.\x00', 0xa0000, 0x154)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00')
preadv(r5, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r6, 0x1)

12.377662812s ago: executing program 3 (id=163):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, 0x0, 0x531bab42a75165d1)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0)
r2 = timerfd_create(0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000400)='./cgroup/../file0\x00', 0x4080, &(0x7f0000000540)=ANY=[], 0x1, 0xc61, &(0x7f0000007200)="$eJzs3U9sHNd9B/DfGy3FpdxUTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUg1tpAXdSw8tEKAoesiJQGsUSNHAaICghx6YNgWSiw9FTj0RLWwEbQ9sESCngMXMviVXFOnIIiVR1udjk9/Z2fdm35sZzVAC37wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACJ+95WLp06nh90KAOBBujz2lVNn3P8B4LFyxd//AQAAAAAAAAAAAADgoEtRxJORYu7yepqoXnfUL7X7bi2ND4/sXG0gVTUPVeXLr/rpM2fPffGFofPdvNSe+YD6++0z8drYlYuNl2dvzs1PLSxMTTbGZ9rXZien7noLe62/3YlqBzRuvn5r8vr1hcaZ58/e9vbS4Pv9TxwbvDD07MlnumXHh0dGxraK1HvL1+65IR27jfA4HEWcjBTPfecnqRURRex9X9Qf7LHfbqDqxImqE+PDI1VHptutmcXyzdHujigiGj2Vmt19tPOxiFrfA+3D7poRy2XzywafKLs3Nteab12dnmqMtuYX24vt2ZnR1Glt2Z9GFHE+RaxExFr/nZvriyJqkeJbR9fT1Yg41N0PX6gGBu/ejuI+9vEOd579ZTsbfRErxSNwzA6w/iji1Ujx0x8cj2t5T1d7+/MRr5b5vYi3y3wpIpUnxrmI93Y4j3g01aKIPyuP/4X1NFldD7rXlUtfbXx55vpsT9nRVBuoFj7c/eGOK8VDuj8MbMsH44Bfm+pRRKu64q+ne/9hBwAAAAAAAAAAAAAAAID9NhBFfDpSvPJvf1iNK45qXPrRC0O/N/ix3jHjT2+v+NbtL8uyz0fEcnF3Y3IP54GBo2k0pQc6lphe9Sjij/L4v7cedmMAAAAAAAAAAAAAAAAAAAAea0X8OFK8+O7xtBK9c4q3Z240rrSuTm/OCls9DqA7Z/rGxsZGI3WymXMi53LOlZyrOddyRpHr52zmnMi5nHMl52rOtZxxKNfP2cw5kXM550rO1ZxrOaOW6+ds5pzIuVxmfaujq3n9Ws44IHP3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8lBRRxM8jxTe/vp4iRUQzYiI6udr/sFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJT6UxHfjRSN329urqtFRKr+7zhefjsXzcNlfiKaQ2W+FM2LOVtV1ppvPYT2szd9qYgfRYr++jubBzwf/77Oq83TIN7+xtarz9Q6eaj75uD7/U8cO3phaORXn95tOe3UgBOX2jO3lhrjwyMjYz2ra/nTP9GzbjB/brE/XSciFt548/XW9PTU/L0vlKfAHqo/Qgup9rj09GEtLO/HCbl/C1E7EM14OH3nMVDe/9+LFL/17r93b/id+389fqnzavMOHz/74637/4vbN3SX9//a9nr/HRG3lhrlPX2n+/+TPetezD+N9NUi6os35/qORdQX3njzZPtm68bUjamZc6dOfWlo6EtnT/Udjqhfb09P9Szty+4CAAAAAAAAAAAAAAAAeHBSEb8TKVo/Wk+NiFiqxmsNXhh69uQzh+JQNd6qO+brY+W318auXGy8PHtzbn5qYWFqsjE+0742Ozl1tx9Xr4Z7jw+P3LcOfaCB+9z+gfrLs3NvzLdv/MHiju8fqV+8urA437q289sxEEVEs3fNiarB48MjVaOn262ZqurojoPpP7y+VMR/RIpr5xrpc3ldHv+/fYT/beP/l7dvqDvO73Ds6/j/j/esKz8zpSJ+Fil+8y+ejs9V7TwSd+yzXO5vIsWJ85/N5eJwWa7bhs5zBTojA8uy/xsp/uHnt5ftjod8cqvs6bvesY+I8vgfjRTf/dNvx6/ldbc//2Hn439k+4bu0/MfnupZd+S25xVUq/78n/bY/8ddefxPRoqXnnwnfj2v+6Dnf3SfvXE8F958Psd9Ov6f7Fk3mD/3N/an6wAAAAAAAAAAAI+0vlTE30aK74/U0gt53d38/t/k9g3t7fe/Du/2+1+f6lk3uT/zFf3ChT3vVAAAAAA4IPpSET+OFDcW39kcQ337+O+e8Z+/vTX+czhte7f6d75frp4bsJ/jP3sN5s+d2Hu3AQAAAAAAAAAAAAAAAAAA4EBJqYgX8nzqE9V4/sld51NfjRSv/NdzuVw6VpbrzgM/WH2vX56dOXlxenr2WmuxdXV6qjE217o2VdZ9KlKs//Vnc92iml+9O998Z473rbnY5yPFyN91y3bmYu/OTf7UVtnTZdmPR4r//Pvby3bnsf7kVtkzZdm/ihRf+8edyx7bKnu2LPvtSPHDrzW6ZY+UZbvPR/3UVtnnr812nohQ3/cjAwAAAAAAAAAAAAAAAAAAwOOkLxXxJ5Hif26ubI7lz/P/9/W8rLz9jZ75/rdZGny/Px0brOb/X6rm/L9z+V7m/6+eK7C826cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBHU4oi3owUc5fX02p/+bqjfqk9c2tpfHhk52oDqap5qCpfftVPnzl77osvDJ3v5gfX32+fjtfGrlxsvDx7c25+amFharIxPtO+Njs5dddb2Gv97U5UO6Bx8/Vbk9evLzTOPH82Ig5tvr00+H7/E8cGLww9e/KZbtnx4ZGRsZ5N1Pru+dPvkHZZfziK+MtI8dx3fpK+3x9RxN73xS84d+63gaoTJ6pOjA+PVB2ZbrdmFss3R7s7ooho9FRqdvfRAzgWe9KMWC6bXzb4RNm9sbnWfOvq9FRjtDW/2F5sz86Mpk5ry/40oojzKWIlItb679xcXxTxeqT41tH19M/9nTO02g9fuDz2lVNndm9HcR/7eBfKdjb6IlaKR+CYHWD9UWweyn/pj6hF5ys+H/Fqmd+LeDs6xzuVJ8a5iPd2OI94NNWiiP+LFD+9sJ5+0F9eD7rXlUtfbXx55vpsT9nudSXfH+qP7P3hQTrg16Z6FPHD6oq/nv7Vn2sAAAAAAAAAAAAAAACAA6SIX4kUL757PFXjgzfHFLdnbjSutK5Od4b1dcf+dcdMb2xsbDRSJ5s5J3Iu51zJuZpzLWcUuX7OZpn1jY2J/Ho550rO1ZxrOeNQrp+zmXMi53LOlZyrOddyRi3Xz9nMOZFzOedKztWcaznjgIzdAwAAAAAAAAAAAAAAAAAAPlqK6r8U3/z6etro78wvPRGdXDUf6Efe/wcAAP//cL3xbg==")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44402, 0x34)
unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
timerfd_settime(r2, 0x3, &(0x7f0000000240)={{0x0, 0x989680}}, 0x0)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x400})
ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f00000000c0))
socket(0x26, 0x6, 0x81)
r4 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
recvmmsg(r4, &(0x7f0000002400)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000480)=""/111, 0x6f}, {&(0x7f0000000400)}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/96, 0x60}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/173, 0xad}], 0x6, &(0x7f0000000980)=""/153, 0x99}, 0x8}, {{&(0x7f0000000a40)=@alg, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000ac0)=""/43, 0x2b}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000000bc0)=""/79, 0x4f}, {&(0x7f0000001c80)=""/243, 0xf3}, {&(0x7f0000001d80)=""/118, 0x76}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/156, 0x9c}], 0x8, &(0x7f0000007180)=""/69, 0x45}, 0x5}, {{&(0x7f0000001fc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002140)=[{&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000002040)=""/217, 0xd9}], 0x2}, 0x8001}, {{&(0x7f0000002180)=@generic, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002200)=""/76, 0x4c}, {&(0x7f0000002280)=""/94, 0x5e}, {&(0x7f0000006180)=""/4096, 0x1000}, {&(0x7f0000002300)=""/132, 0x84}], 0x4}}], 0x4, 0x10040, &(0x7f0000002500)={0x0, 0x3938700})
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r7, &(0x7f0000000140)='tasks\x00', 0x2, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)="d6", 0x1}], 0x1, 0x2000, 0x0, 0x3)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)

11.601264514s ago: executing program 1 (id=164):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000cc0)='./bus\x00', 0x400000, &(0x7f0000000100)=ANY=[], 0x1, 0xaaa, &(0x7f00000020c0)="$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")
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
shutdown(r0, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x179d, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0xa1}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000000))
ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000100)={"10001f00", 0x5, 0x1, 0x0, 0x2, 0xfff, "c6100540f81210081bdc601425a82c", "f38e08ab", "0100", "5b0d5cdb", ["f2eac802849c38f821ce4b9b", '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', "e1fcf1e2247d00", "e3200dd64a68d9fa035f03c7"]})
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)

11.26851279s ago: executing program 2 (id=165):
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40})
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x80003, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
r6 = msgget$private(0x0, 0x442)
msgsnd(r6, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800)

10.984231664s ago: executing program 0 (id=166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f00000002c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '-]'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@appraise}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
pipe2(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r6, 0x0, r5, 0x0, 0x6, 0x0)
fcntl$setpipe(r5, 0x407, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c3c5d3112ecb1d386de8afdff00"])
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
readv(r7, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)

10.76722296s ago: executing program 3 (id=167):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.205350095s ago: executing program 1 (id=168):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000cc0)='./bus\x00', 0x400000, &(0x7f0000000100)=ANY=[], 0x1, 0xaaa, &(0x7f00000020c0)="$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")
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
shutdown(r0, 0x1)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x179d, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0xa1}, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000100)={"10001f00", 0x5, 0x1, 0x0, 0x2, 0xfff, "c6100540f81210081bdc601425a82c", "f38e08ab", "0100", "5b0d5cdb", ["f2eac802849c38f821ce4b9b", '\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', "e1fcf1e2247d00", "e3200dd64a68d9fa035f03c7"]})
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d)

8.101185931s ago: executing program 0 (id=169):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001e40)=@newtfilter={0x158, 0x2c, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2}, {0x4, 0xf}}, [@f_tcindex={{0xc}, {0x128, 0x2, [@TCA_TCINDEX_ACT={0x124, 0x7, [@m_skbmod={0xf0, 0xc, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}]}, {0xb9, 0x6, "11757d56543393ac84bc90477ae4c15f837880d7a83903a1283373e6e82d8f512eb34c57f93ef50d2fdcccffe1fcaec1547000f70aa05a432f45de77f22b39c39832c7705f3b349b1d7ce2e37484fc74f94f8f8f8328a19fe3637c1d9036a78941c53c4951e60bf37be7d0f1494fb0848e964f71593fb19c50d17ef65f4e3690d87a2c68aee6f08dd225a039eb22f89b8129c1d1575cbca61f0fc13ea7c79c4c7efdc4275ac72236630d349b655b847ac145fc307b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x1}}}}, @m_gact={0x30, 0x7, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x4000080)

8.067737727s ago: executing program 4 (id=170):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x6, @rose}, [@bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}}], 0x2, 0x4008440)

8.000546569s ago: executing program 2 (id=171):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={<r4=>0x0, 0x0, 0x4, 0x4, 0x2, 0x5}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x2, 0x4, 0x9, 0x62, 0x2}, 0x14)

7.270708955s ago: executing program 3 (id=172):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r6 = dup(r3)
read$FUSE(r6, &(0x7f0000003080)={0x2020}, 0xfffffda3)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))

6.247415806s ago: executing program 2 (id=173):
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40})
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)

5.957818694s ago: executing program 4 (id=174):
socket$kcm(0x10, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000005880)='zonefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_mr_vif\x00')
preadv(r0, 0x0, 0x0, 0x37, 0x7)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f041})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x4000054)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4)
r5 = syz_open_procfs(0x0, &(0x7f0000001040)='net/udp\x00')
preadv(r5, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0)

4.489377251s ago: executing program 0 (id=175):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x200000100000011, 0x3, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8902, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={0x0, 0x4}}, 0x0)
sendfile(r3, r2, 0x0, 0x100000002)

3.929216167s ago: executing program 3 (id=176):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000002c0)=0x2, 0x4)
r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F', 0x1)
execveat(r1, 0x0, 0x0, 0x0, 0x1000)
fanotify_mark(0xffffffffffffffff, 0x1, 0x8001036, 0xffffffffffffffff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x56, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x8000000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0)
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000040), 0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/356], 0x164}}, 0x0)
connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10)
sendto$inet6(r7, &(0x7f0000000100)="d58392a4aee761df2f1b4ff220c26ebb6e9f131e2df2f8a0b76ab588a311a0cb3266b87f20a552f5296a336441813a1d", 0x30, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x200004, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c)
recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x60)

3.44588986s ago: executing program 1 (id=177):
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4)
connect$unix(r0, &(0x7f0000000140)=@abs={0x1}, 0x6e)
connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0xe)
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0x75edcdeade53b07d}, {0x2, 0xb}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x40000)
syz_usb_connect(0x4, 0x210, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000003"], 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000500060000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000a800800400000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$MSR(0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00')

3.428639891s ago: executing program 0 (id=178):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000002, 0x8010, r0, 0x38b91000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000040)=0x4, 0x4)
readv(r1, &(0x7f0000000440)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f00000000c0)=""/142, 0x8e}, {&(0x7f0000002200)=""/108, 0x67}, {&(0x7f0000000200)=""/249, 0xd3}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)=""/86, 0xb1}], 0x6)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000002280)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1424046, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
open$dir(&(0x7f0000000840)='./file0\x00', 0x4374362a64d36bbe, 0xa)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002480)="ee", 0x1}], 0x1}}], 0x2, 0x8800)

3.38893781s ago: executing program 2 (id=179):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x800)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f00000002c0)={[], [{@context={'context', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, '-]'}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@appraise}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
pipe2(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r6, 0x0, r5, 0x0, 0x6, 0x0)
fcntl$setpipe(r5, 0x407, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c3c5d3112ecb1d386de8afdff00"])
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
readv(r7, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1)

2.581037611s ago: executing program 4 (id=180):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="b702000000000080bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.430204969s ago: executing program 2 (id=181):
mkdir(&(0x7f00000003c0)='./bus\x00', 0x0)
mmap(&(0x7f00000d5000/0x1000)=nil, 0x1000, 0x100000d, 0x3032, 0xffffffffffffffff, 0xffffe000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000002280)={0x0, 0x1, 0x40})
readv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x80003, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
r6 = msgget$private(0x0, 0x442)
msgsnd(r6, &(0x7f0000003540)=ANY=[@ANYBLOB="0100"], 0xe8, 0x800)

577.712306ms ago: executing program 4 (id=182):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0)
syz_io_uring_setup(0x6c7f, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f00000001c0))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16.919382ms ago: executing program 3 (id=183):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000040)={<r4=>0x0, 0x0, 0x4, 0x4, 0x2, 0x5}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x40000000000000fb, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r4, 0x2, 0x4, 0x9, 0x62, 0x2}, 0x14)

0s ago: executing program 2 (id=184):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'user:', 'new ', 0x20, 0xffffffff}, 0x2e, 0x0)
ptrace$cont(0x3f, r0, 0x5, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x2) (fail_nth: 3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts.
[   91.969257][ T5823] cgroup: Unknown subsys name 'net'
[   92.111712][ T5823] cgroup: Unknown subsys name 'cpuset'
[   92.121842][ T5823] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   94.136577][ T5823] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   97.232601][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   97.242342][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.251914][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   97.260070][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   97.268341][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.276777][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   97.284498][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   97.293190][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.302737][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   97.310445][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   97.319743][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   97.327313][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   97.356186][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   97.356574][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.364494][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   97.380525][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   97.410434][    T8] cfg80211: failed to load regulatory.db
[   97.411225][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.419408][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.431425][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   97.441149][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   97.448680][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.457847][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   97.458389][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.472316][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   97.477136][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.496531][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   97.504547][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.517508][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.526217][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   97.534075][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   98.347048][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   98.382345][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   98.459498][ T5834] chnl_net:caif_netlink_parms(): no params data found
[   98.628740][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   98.833460][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   98.867547][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.874987][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.884746][ T5842] bridge_slave_0: entered allmulticast mode
[   98.892522][ T5842] bridge_slave_0: entered promiscuous mode
[   98.974327][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.981737][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.989466][ T5842] bridge_slave_1: entered allmulticast mode
[   98.997940][ T5842] bridge_slave_1: entered promiscuous mode
[   99.024673][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.031928][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.039546][ T5833] bridge_slave_0: entered allmulticast mode
[   99.047995][ T5833] bridge_slave_0: entered promiscuous mode
[   99.159568][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.167268][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.174459][ T5833] bridge_slave_1: entered allmulticast mode
[   99.182421][ T5833] bridge_slave_1: entered promiscuous mode
[   99.216404][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.223685][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.232027][ T5834] bridge_slave_0: entered allmulticast mode
[   99.240494][ T5834] bridge_slave_0: entered promiscuous mode
[   99.248269][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.255743][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.263768][ T5843] bridge_slave_0: entered allmulticast mode
[   99.271618][ T5843] bridge_slave_0: entered promiscuous mode
[   99.281084][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.288687][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.296992][ T5843] bridge_slave_1: entered allmulticast mode
[   99.305105][ T5843] bridge_slave_1: entered promiscuous mode
[   99.335827][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.387152][ T5846] Bluetooth: hci0: command tx timeout
[   99.403507][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.411257][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.418799][ T5834] bridge_slave_1: entered allmulticast mode
[   99.427504][ T5834] bridge_slave_1: entered promiscuous mode
[   99.455505][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.466741][ T5846] Bluetooth: hci4: command tx timeout
[   99.469975][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.543706][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.553102][ T5846] Bluetooth: hci1: command tx timeout
[   99.603307][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.633372][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.641044][ T5841] Bluetooth: hci3: command tx timeout
[   99.647031][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.647215][ T5846] Bluetooth: hci2: command tx timeout
[   99.654296][ T5840] bridge_slave_0: entered allmulticast mode
[   99.670312][ T5840] bridge_slave_0: entered promiscuous mode
[   99.699877][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.712978][ T5842] team0: Port device team_slave_0 added
[   99.740779][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.748299][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.755530][ T5840] bridge_slave_1: entered allmulticast mode
[   99.763515][ T5840] bridge_slave_1: entered promiscuous mode
[   99.774609][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.805102][ T5842] team0: Port device team_slave_1 added
[   99.836798][ T5833] team0: Port device team_slave_0 added
[   99.864495][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.934627][ T5833] team0: Port device team_slave_1 added
[   99.987510][ T5834] team0: Port device team_slave_0 added
[   99.997883][ T5843] team0: Port device team_slave_0 added
[  100.005181][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.012412][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.039051][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.071751][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.087110][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.099215][ T5834] team0: Port device team_slave_1 added
[  100.130033][ T5843] team0: Port device team_slave_1 added
[  100.157139][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.164134][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.191147][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.291174][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.298530][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.325090][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.339342][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.346511][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.372716][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.406016][ T5840] team0: Port device team_slave_0 added
[  100.413033][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.420355][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.446641][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.490163][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.497263][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.523365][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.538737][ T5840] team0: Port device team_slave_1 added
[  100.546674][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.553651][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.580277][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.604115][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.611282][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.637842][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.774350][ T5842] hsr_slave_0: entered promiscuous mode
[  100.781217][ T5842] hsr_slave_1: entered promiscuous mode
[  100.819311][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.828235][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.854383][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.913964][ T5833] hsr_slave_0: entered promiscuous mode
[  100.921510][ T5833] hsr_slave_1: entered promiscuous mode
[  100.928276][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.936441][ T5833] Cannot create hsr debugfs directory
[  100.945376][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.954390][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.987078][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.117069][ T5843] hsr_slave_0: entered promiscuous mode
[  101.124128][ T5843] hsr_slave_1: entered promiscuous mode
[  101.131880][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.140124][ T5843] Cannot create hsr debugfs directory
[  101.322940][ T5834] hsr_slave_0: entered promiscuous mode
[  101.330166][ T5834] hsr_slave_1: entered promiscuous mode
[  101.336804][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.344390][ T5834] Cannot create hsr debugfs directory
[  101.358229][ T5840] hsr_slave_0: entered promiscuous mode
[  101.364934][ T5840] hsr_slave_1: entered promiscuous mode
[  101.371386][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.379030][ T5840] Cannot create hsr debugfs directory
[  101.466735][ T5846] Bluetooth: hci0: command tx timeout
[  101.546476][ T5846] Bluetooth: hci4: command tx timeout
[  101.626576][ T5846] Bluetooth: hci1: command tx timeout
[  101.714962][ T5841] Bluetooth: hci3: command tx timeout
[  101.721037][ T5846] Bluetooth: hci2: command tx timeout
[  101.967625][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.032008][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.092138][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.144658][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.239662][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  102.258627][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  102.285081][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  102.301782][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  102.429562][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  102.441591][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  102.455129][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  102.483936][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  102.641460][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  102.655201][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  102.691409][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  102.704037][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  102.773005][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.848050][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.861539][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.911112][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[  102.918163][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.933733][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.983919][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.991352][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.061952][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.082599][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.089843][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.205194][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  103.229790][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.283937][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.291184][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.319403][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.326687][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.364889][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.411410][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[  103.451739][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.458989][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.500645][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.546535][ T5846] Bluetooth: hci0: command tx timeout
[  103.585659][ T5834] 8021q: adding VLAN 0 to HW filter on device team0
[  103.611354][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.618731][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.626492][ T5846] Bluetooth: hci4: command tx timeout
[  103.659319][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.690066][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.697355][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.716474][ T5846] Bluetooth: hci1: command tx timeout
[  103.733684][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.740991][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.786603][ T5846] Bluetooth: hci2: command tx timeout
[  103.788096][ T5841] Bluetooth: hci3: command tx timeout
[  103.813724][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[  103.884301][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.891545][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.951577][  T967] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.958798][  T967] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.003157][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.791421][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.811828][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.873371][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.947887][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.051829][ T5833] veth0_vlan: entered promiscuous mode
[  105.075892][ T5842] veth0_vlan: entered promiscuous mode
[  105.124968][ T5833] veth1_vlan: entered promiscuous mode
[  105.148156][ T5843] veth0_vlan: entered promiscuous mode
[  105.168119][ T5834] veth0_vlan: entered promiscuous mode
[  105.202221][ T5842] veth1_vlan: entered promiscuous mode
[  105.220745][ T5843] veth1_vlan: entered promiscuous mode
[  105.273209][ T5834] veth1_vlan: entered promiscuous mode
[  105.282594][ T5840] veth0_vlan: entered promiscuous mode
[  105.351017][ T5840] veth1_vlan: entered promiscuous mode
[  105.359407][ T5843] veth0_macvtap: entered promiscuous mode
[  105.383721][ T5843] veth1_macvtap: entered promiscuous mode
[  105.393896][ T5833] veth0_macvtap: entered promiscuous mode
[  105.428966][ T5833] veth1_macvtap: entered promiscuous mode
[  105.440863][ T5842] veth0_macvtap: entered promiscuous mode
[  105.484178][ T5842] veth1_macvtap: entered promiscuous mode
[  105.503837][ T5834] veth0_macvtap: entered promiscuous mode
[  105.544322][ T5840] veth0_macvtap: entered promiscuous mode
[  105.559973][ T5840] veth1_macvtap: entered promiscuous mode
[  105.578930][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.587367][ T5834] veth1_macvtap: entered promiscuous mode
[  105.605435][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.617022][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.628754][ T5841] Bluetooth: hci0: command tx timeout
[  105.632028][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.655299][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.666311][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.676843][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.687426][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.699295][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.707643][ T5841] Bluetooth: hci4: command tx timeout
[  105.731513][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.744765][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.755677][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.769234][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.781906][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.791262][ T5841] Bluetooth: hci1: command tx timeout
[  105.792278][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.806793][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.815550][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.852755][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.863758][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.877461][ T5846] Bluetooth: hci3: command tx timeout
[  105.881824][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.882942][ T5841] Bluetooth: hci2: command tx timeout
[  105.895952][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.910977][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.921570][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.932556][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.942685][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.953934][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.964071][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.974565][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.986405][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.994691][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.003586][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.012539][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.021564][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.054239][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.064904][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.074327][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.083582][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.105391][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.118392][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.128708][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.139653][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.149599][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.160136][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.170069][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.180590][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.192718][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.229923][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.243071][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.253557][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.264233][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.274841][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.285408][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.298437][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.315817][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.328119][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.337200][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.346012][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.393899][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.404667][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.414727][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.425678][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.438326][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.449041][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.458926][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.469441][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.481019][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.560899][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.575234][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.594269][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.603092][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.668157][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.686517][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.756583][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.765076][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.826858][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.834828][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.881839][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.895554][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.961312][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.972085][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.041212][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.066575][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.212133][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.224517][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.234684][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  107.304631][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.330522][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.567111][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.611452][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.619377][ T5928] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET)
[  108.127801][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.137128][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.197750][ T5941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'.
[  109.257031][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'.
[  109.304942][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  109.336880][ T5945] FAULT_INJECTION: forcing a failure.
[  109.336880][ T5945] name failslab, interval 1, probability 0, space 0, times 0
[  109.369221][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.0.8 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  109.369254][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  109.369271][ T5945] Call Trace:
[  109.369279][ T5945]  <TASK>
[  109.369288][ T5945]  dump_stack_lvl+0x241/0x360
[  109.369330][ T5945]  ? __pfx_dump_stack_lvl+0x10/0x10
[  109.369373][ T5945]  ? __pfx__printk+0x10/0x10
[  109.369399][ T5945]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  109.369435][ T5945]  ? __pfx___might_resched+0x10/0x10
[  109.369474][ T5945]  should_fail_ex+0x40a/0x550
[  109.369506][ T5945]  should_failslab+0xac/0x100
[  109.369542][ T5945]  kmem_cache_alloc_node_noprof+0x77/0x380
[  109.369586][ T5945]  ? __alloc_skb+0x1c3/0x440
[  109.369623][ T5945]  __alloc_skb+0x1c3/0x440
[  109.369661][ T5945]  ? __pfx___alloc_skb+0x10/0x10
[  109.369700][ T5945]  ? __pfx___might_resched+0x10/0x10
[  109.369732][ T5945]  alloc_skb_with_frags+0xc3/0x820
[  109.369787][ T5945]  sock_alloc_send_pskb+0x91a/0xa60
[  109.369839][ T5945]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  109.369872][ T5945]  ? __pfx_lock_acquire+0x10/0x10
[  109.369907][ T5945]  ? iov_iter_advance+0x8f/0x1e0
[  109.369942][ T5945]  tun_get_user+0xbf3/0x45f0
[  109.370009][ T5945]  ? __pfx_tun_get_user+0x10/0x10
[  109.370067][ T5945]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  109.370093][ T5945]  ? tun_get+0x1e/0x2f0
[  109.370114][ T5945]  ? __pfx_lock_release+0x10/0x10
[  109.370170][ T5945]  ? tun_get+0x1e/0x2f0
[  109.370191][ T5945]  ? tun_get+0x27d/0x2f0
[  109.370216][ T5945]  tun_chr_write_iter+0x10d/0x1f0
[  109.370244][ T5945]  vfs_write+0xacf/0xd10
[  109.370278][ T5945]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  109.370302][ T5945]  ? __pfx_vfs_write+0x10/0x10
[  109.370324][ T5945]  ? do_sys_openat2+0x179/0x1c0
[  109.370351][ T5945]  ? __fget_files+0x2a/0x410
[  109.370377][ T5945]  ? __fget_files+0x2a/0x410
[  109.370413][ T5945]  ksys_write+0x18f/0x2b0
[  109.370443][ T5945]  ? __pfx_ksys_write+0x10/0x10
[  109.370471][ T5945]  ? do_syscall_64+0x100/0x230
[  109.370506][ T5945]  ? do_syscall_64+0xb6/0x230
[  109.370541][ T5945]  do_syscall_64+0xf3/0x230
[  109.370572][ T5945]  ? clear_bhb_loop+0x45/0xa0
[  109.370606][ T5945]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.370634][ T5945] RIP: 0033:0x7fd945f8cde9
[  109.370657][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  109.370673][ T5945] RSP: 002b:00007fd946ece038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  109.370694][ T5945] RAX: ffffffffffffffda RBX: 00007fd9461a5fa0 RCX: 00007fd945f8cde9
[  109.370709][ T5945] RDX: 000000000000007a RSI: 0000400000000280 RDI: 0000000000000004
[  109.370721][ T5945] RBP: 00007fd946ece090 R08: 0000000000000000 R09: 0000000000000000
[  109.370733][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  109.370745][ T5945] R13: 0000000000000000 R14: 00007fd9461a5fa0 R15: 00007fff95b6e528
[  109.370783][ T5945]  </TASK>
[  109.991025][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'.
[  110.063502][ T5954] loop3: detected capacity change from 0 to 512
[  110.081940][ T5954] =======================================================
[  110.081940][ T5954] WARNING: The mand mount option has been deprecated and
[  110.081940][ T5954]          and is ignored by this kernel. Remove the mand
[  110.081940][ T5954]          option from the mount to silence this warning.
[  110.081940][ T5954] =======================================================
[  110.107885][ T5844] IPVS: starting estimator thread 0...
[  110.230497][ T5950] loop1: detected capacity change from 0 to 4096
[  110.269048][ T5955] IPVS: using max 19 ests per chain, 45600 per kthread
[  110.284281][ T5954] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4: Invalid inode bitmap blk 4 in block_group 0
[  110.312350][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.412716][   T29] audit: type=1800 audit(1740033499.810:2): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="bus" dev="loop1" ino=33 res=0 errno=0
[  111.091235][ T5963] Zero length message leads to an empty skb
[  111.209805][ T5889] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  111.256178][ T5958] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  111.470062][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.571455][ T5889] usb 2-1: string descriptor 0 read error: -22
[  111.593867][ T5889] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  111.629205][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.714438][ T5889] usb 2-1: config 0 descriptor??
[  111.745741][ T5889] usbtest 2-1:0.0: FX2 device
[  111.775720][ T5889] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  111.804209][ T5971] can0: slcan on ttyS3.
[  111.955778][ T5892] usb 2-1: USB disconnect, device number 2
[  112.289893][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.596952][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  112.803265][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  113.008239][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  113.110489][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  113.214626][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  113.317210][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  113.554396][ T5982] loop3: detected capacity change from 0 to 512
[  113.568454][ T5982] ext4: Unknown parameter 'context'
[  113.639916][ T5972] can0 (unregistered): slcan off ttyS3.
[  113.724796][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  113.823664][ T5972] Falling back ldisc for ttyS3.
[  113.929815][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  114.671051][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  114.836684][ T5892] usb 3-1: Using ep0 maxpacket: 8
[  115.062326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  115.086067][ T5902] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  115.099320][ T5892] usb 3-1: config 1 has an invalid interface number: 165 but max is 3
[  115.121763][ T5892] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  116.167559][ T5892] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config
[  117.196424][ T5892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 4
[  117.227339][ T5892] usb 3-1: config 1 has no interface number 0
[  117.233634][ T5892] usb 3-1: config 1 interface 165 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  117.692427][ T5892] usb 3-1: config 1 interface 165 has no altsetting 0
[  117.938843][ T5902] usb 2-1: unable to read config index 0 descriptor/all
[  117.945895][ T5902] usb 2-1: can't read configurations, error -71
[  118.124033][ T5892] usb 3-1: string descriptor 0 read error: -71
[  118.242822][ T5892] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=98.88
[  118.299365][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.388829][ T5892] usb 3-1: can't set config #1, error -71
[  118.522830][ T6021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'.
[  118.574079][ T6021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.23'.
[  118.712168][ T5892] usb 3-1: USB disconnect, device number 2
[  118.736265][ T5902] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  118.982162][ T6028] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  119.586894][ T6025] loop0: detected capacity change from 0 to 1024
[  119.879810][ T6027] loop2: detected capacity change from 0 to 32768
[  119.908347][ T6027] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.25 (6027)
[  119.922623][ T5902] usb 2-1: Invalid ep0 maxpacket: 32
[  119.980839][ T5902] usb usb2-port1: attempt power cycle
[  120.050401][ T6027] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.061741][ T6027] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  120.070602][ T6027] BTRFS info (device loop2): using free-space-tree
[  120.157306][ T6025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.355024][ T6027] BTRFS info (device loop2): rebuilding free space tree
[  120.387716][ T5902] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  120.667250][ T5902] usb 2-1: Invalid ep0 maxpacket: 32
[  120.687198][ T6056] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  121.160278][ T5902] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[  121.197384][ T5902] usb 2-1: Invalid ep0 maxpacket: 32
[  121.213737][ T5902] usb usb2-port1: unable to enumerate USB device
[  121.367731][ T5844] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  121.576154][ T5844] usb 5-1: Using ep0 maxpacket: 8
[  121.617631][ T5844] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  121.665451][ T5844] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  121.764304][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.788389][ T5844] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  121.800769][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.596140][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.604303][ T5844] usb 5-1: Product: syz
[  122.682326][ T6074] loop1: detected capacity change from 0 to 64
[  122.781677][ T5844] usb 5-1: Manufacturer: syz
[  122.786528][ T5844] usb 5-1: SerialNumber: syz
[  123.037053][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.109846][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.26'.
[  123.487878][ T6080] loop3: detected capacity change from 0 to 32768
[  123.511111][ T6080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.31 (6080)
[  123.512772][ T5844] usb 5-1: 0:2 : does not exist
[  123.568061][ T6080] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.578314][ T6080] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  123.612915][ T6084] loop1: detected capacity change from 0 to 128
[  123.735169][ T6084] omfs: sysblock size (-58445445) is out of range
[  123.830937][ T5844] usb 5-1: USB disconnect, device number 2
[  123.923583][ T6080] BTRFS info (device loop3): rebuilding free space tree
[  123.973743][ T6080] BTRFS info (device loop3): disabling free space tree
[  123.981029][ T6080] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.991104][ T6080] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  124.127763][   T29] audit: type=1804 audit(1740033513.520:3): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.31" name=2F6E6577726F6F742F372F6275732FE91F7189591E9233614B dev="loop3" ino=264 res=1 errno=0
[  124.494338][ T5964] udevd[5964]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.832977][ T6080] Process accounting resumed
[  125.208649][ T5834] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  126.160766][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.38'.
[  126.221622][ T6123] netem: invalid attributes len -12
[  126.243706][ T6123] netem: change failed
[  126.552059][ T6126] vivid-007: disconnect
[  126.561158][ T6125] vivid-007: reconnect
[  126.917861][ T6103] loop2: detected capacity change from 0 to 32768
[  126.940294][ T6103] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section errors: entry with count 0 (id clean_but_journal_not_empty)
[  126.940294][ T6103] errors (size 640):
[  126.940294][ T6103] clean_but_journal_not_empty     0               56
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] clean_but_journal_not_empty     0               35
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] bset_blacklisted_journal_seq    0               0
[  126.940294][ T6103] bset_blacklisted_journal_seq    0               27
[  126.940294][ T6103] btree_node_topology_bad_max_key 0               11
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] clean_but_journal_not_empty     0               11
[  126.940294][ T6103] btree_node_unsupported_version  0               11
[  126.940294][ T6103] dirty_but_no_journal_entries_post_drop_nonflushes00
[  126.940294][ T6103] dirty_but_no_journal_entries_post_drop_nonflushes00
[  126.940294][ T6103] clean_but_journal_not_empty     0               5
[  126.940294][ T6103] sb_clean_missing                0               10
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] clean_but_journal_not_empty     0               0
[  126.940294][ T6103] cl
[  126.940633][ T6103] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors
[  127.071479][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.685849][ T6131] loop1: detected capacity change from 0 to 2048
[  127.947124][ T6132] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.298597][ T6137] FAULT_INJECTION: forcing a failure.
[  128.298597][ T6137] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  128.946271][ T6137] CPU: 1 UID: 0 PID: 6137 Comm: syz.4.44 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  128.946307][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  128.946320][ T6137] Call Trace:
[  128.946329][ T6137]  <TASK>
[  128.946339][ T6137]  dump_stack_lvl+0x241/0x360
[  128.946378][ T6137]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.946402][ T6137]  ? __pfx__printk+0x10/0x10
[  128.946426][ T6137]  ? __pfx_lock_release+0x10/0x10
[  128.946469][ T6137]  should_fail_ex+0x40a/0x550
[  128.946498][ T6137]  _copy_from_user+0x2d/0xb0
[  128.946532][ T6137]  kvm_arch_vm_ioctl+0xabc/0x17c0
[  128.946569][ T6137]  ? __pfx_kvm_arch_vm_ioctl+0x10/0x10
[  128.946601][ T6137]  ? __lock_acquire+0x1397/0x2100
[  128.946679][ T6137]  ? __pfx_lock_acquire+0x10/0x10
[  128.946713][ T6137]  ? is_bpf_text_address+0x26/0x2a0
[  128.946735][ T6137]  ? __pfx_lock_release+0x10/0x10
[  128.946772][ T6137]  ? deref_stack_reg+0x17c/0x210
[  128.946823][ T6137]  ? is_bpf_text_address+0x285/0x2a0
[  128.946843][ T6137]  ? is_bpf_text_address+0x26/0x2a0
[  128.946867][ T6137]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  128.946898][ T6137]  ? kernel_text_address+0xa7/0xe0
[  128.946925][ T6137]  ? __kernel_text_address+0xd/0x40
[  128.946948][ T6137]  ? unwind_get_return_address+0x4d/0x90
[  128.946982][ T6137]  ? arch_stack_walk+0xfd/0x150
[  128.947022][ T6137]  ? stack_trace_save+0x118/0x1d0
[  128.947055][ T6137]  ? __pfx_stack_trace_save+0x10/0x10
[  128.947089][ T6137]  ? stack_depot_save_flags+0x37/0x940
[  128.947127][ T6137]  ? kasan_save_track+0x51/0x80
[  128.947152][ T6137]  ? kasan_save_track+0x3f/0x80
[  128.947176][ T6137]  ? kasan_save_free_info+0x40/0x50
[  128.947197][ T6137]  ? __kasan_slab_free+0x59/0x70
[  128.947225][ T6137]  ? kfree+0x196/0x430
[  128.947266][ T6137]  ? tomoyo_path_number_perm+0x5dd/0x770
[  128.947292][ T6137]  ? security_file_ioctl+0xc6/0x2a0
[  128.947316][ T6137]  ? __se_sys_ioctl+0x46/0x160
[  128.947338][ T6137]  ? do_syscall_64+0xf3/0x230
[  128.947368][ T6137]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.947401][ T6137]  ? do_vfs_ioctl+0xef6/0x2750
[  128.947439][ T6137]  kvm_vm_ioctl+0x876/0xd70
[  128.947472][ T6137]  ? mark_lock+0x9a/0x360
[  128.947501][ T6137]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  128.947552][ T6137]  ? tomoyo_path_number_perm+0x209/0x770
[  128.947582][ T6137]  ? __pfx_lock_release+0x10/0x10
[  128.947623][ T6137]  ? tomoyo_path_number_perm+0x5dd/0x770
[  128.947657][ T6137]  ? tomoyo_path_number_perm+0x5dd/0x770
[  128.947694][ T6137]  ? tomoyo_path_number_perm+0x65d/0x770
[  128.947723][ T6137]  ? __lock_acquire+0x1397/0x2100
[  128.947762][ T6137]  ? tomoyo_path_number_perm+0x209/0x770
[  128.947796][ T6137]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  128.947891][ T6137]  ? __fget_files+0x2a/0x410
[  128.947919][ T6137]  ? __fget_files+0x2a/0x410
[  128.947950][ T6137]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  128.947986][ T6137]  __se_sys_ioctl+0xf1/0x160
[  128.948020][ T6137]  do_syscall_64+0xf3/0x230
[  128.948053][ T6137]  ? clear_bhb_loop+0x45/0xa0
[  128.948089][ T6137]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.948119][ T6137] RIP: 0033:0x7fe1bf18cde9
[  128.948141][ T6137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.948158][ T6137] RSP: 002b:00007fe1c0022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.948182][ T6137] RAX: ffffffffffffffda RBX: 00007fe1bf3a5fa0 RCX: 00007fe1bf18cde9
[  128.948198][ T6137] RDX: 0000400000000000 RSI: 00000000c048aec8 RDI: 0000000000000004
[  128.948212][ T6137] RBP: 00007fe1c0022090 R08: 0000000000000000 R09: 0000000000000000
[  128.948225][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.948255][ T6137] R13: 0000000000000000 R14: 00007fe1bf3a5fa0 R15: 00007ffcd89ff748
[  128.948296][ T6137]  </TASK>
[  129.040169][ T5922] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  129.643264][ T6138] loop3: detected capacity change from 0 to 2048
[  129.698361][ T5922] usb 3-1: Using ep0 maxpacket: 16
[  130.006134][ T6138] udf: Unknown parameter '˙˙˙˙˙˙˙˙0xffffffffffffffff'
[  130.031316][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.082697][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.150492][ T5922] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.216123][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.300482][ T5922] usb 3-1: config 0 descriptor??
[  130.373630][ T6149] loop0: detected capacity change from 0 to 2048
[  130.570821][ T6153] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  130.784766][   T29] audit: type=1326 audit(1740033520.130:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6151 comm="syz.4.48" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1bf18cde9 code=0x0
[  131.327844][ T6158] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.347648][ T5922] HID 045e:07da: Invalid code 65791 type 1
[  131.429941][ T5922] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5
[  131.458848][ T5922] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  131.545005][ T5922] usb 3-1: USB disconnect, device number 3
[  131.691869][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'.
[  132.332864][ T6174] vivid-007: disconnect
[  132.619550][ T6164] vivid-007: reconnect
[  132.690306][ T6177] process 'syz.4.52' launched './file0' with NULL argv: empty string added
[  134.995988][ T5922] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  135.077120][ T6200] capability: warning: `syz.2.58' uses 32-bit capabilities (legacy support in use)
[  135.097346][ T6200] FAULT_INJECTION: forcing a failure.
[  135.097346][ T6200] name failslab, interval 1, probability 0, space 0, times 0
[  135.120655][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.2.58 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  135.120695][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  135.120713][ T6200] Call Trace:
[  135.120721][ T6200]  <TASK>
[  135.120730][ T6200]  dump_stack_lvl+0x241/0x360
[  135.120763][ T6200]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.120786][ T6200]  ? __pfx__printk+0x10/0x10
[  135.120810][ T6200]  ? fs_reclaim_acquire+0x93/0x130
[  135.120835][ T6200]  ? __pfx___might_resched+0x10/0x10
[  135.120869][ T6200]  should_fail_ex+0x40a/0x550
[  135.120898][ T6200]  should_failslab+0xac/0x100
[  135.120931][ T6200]  __kmalloc_noprof+0xdd/0x4c0
[  135.120960][ T6200]  ? device_write+0x18b/0xf20
[  135.120990][ T6200]  device_write+0x18b/0xf20
[  135.121017][ T6200]  ? __pfx_device_write+0x10/0x10
[  135.121043][ T6200]  vfs_write+0x29f/0xd10
[  135.121076][ T6200]  ? __mutex_unlock_slowpath+0x227/0x800
[  135.121110][ T6200]  ? __pfx_vfs_write+0x10/0x10
[  135.121131][ T6200]  ? do_sys_openat2+0x179/0x1c0
[  135.121156][ T6200]  ? __fget_files+0x2a/0x410
[  135.121179][ T6200]  ? __fget_files+0x395/0x410
[  135.121196][ T6200]  ? __fget_files+0x2a/0x410
[  135.121229][ T6200]  ksys_write+0x18f/0x2b0
[  135.121259][ T6200]  ? __pfx_ksys_write+0x10/0x10
[  135.121285][ T6200]  ? do_syscall_64+0x100/0x230
[  135.121318][ T6200]  ? do_syscall_64+0xb6/0x230
[  135.121349][ T6200]  do_syscall_64+0xf3/0x230
[  135.121378][ T6200]  ? clear_bhb_loop+0x45/0xa0
[  135.121410][ T6200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.121436][ T6200] RIP: 0033:0x7f9fbe38cde9
[  135.121453][ T6200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.121469][ T6200] RSP: 002b:00007f9fbf26f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  135.121489][ T6200] RAX: ffffffffffffffda RBX: 00007f9fbe5a5fa0 RCX: 00007f9fbe38cde9
[  135.121503][ T6200] RDX: 0000000000000070 RSI: 0000400000001380 RDI: 0000000000000003
[  135.121514][ T6200] RBP: 00007f9fbf26f090 R08: 0000000000000000 R09: 0000000000000000
[  135.121525][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.121536][ T6200] R13: 0000000000000000 R14: 00007f9fbe5a5fa0 R15: 00007ffc911ebd18
[  135.121572][ T6200]  </TASK>
[  136.096104][ T5922] usb 2-1: Using ep0 maxpacket: 16
[  136.107748][ T5922] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  136.119787][ T5922] usb 2-1: config 0 has no interface number 0
[  136.126883][ T5922] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  136.442825][ T5844] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  136.592673][ T5922] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  136.743339][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  136.772170][ T5922] usb 2-1: Product: syz
[  136.807057][ T5922] usb 2-1: SerialNumber: syz
[  136.838640][ T5922] usb 2-1: config 0 descriptor??
[  136.860071][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  136.874724][ T5922] cm109 2-1:0.8: invalid payload size 208, expected 4
[  136.882322][ T5844] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  136.896032][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  136.910088][ T5922] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6
[  136.931315][ T5844] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  136.941673][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.960069][ T5844] usb 5-1: Product: syz
[  136.974731][ T5844] usb 5-1: Manufacturer: syz
[  136.996322][ T5844] usb 5-1: SerialNumber: syz
[  137.032136][ T5844] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  137.056379][ T5844] cdc_ncm 5-1:1.0: bind() failure
[  137.071716][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  137.076590][ T5892] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  137.081081][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  137.096109][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  137.103605][  T978] usb 2-1: USB disconnect, device number 7
[  137.109532][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  137.109560][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  137.208157][  T978] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  137.246266][ T5892] usb 1-1: Using ep0 maxpacket: 16
[  137.290097][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.318286][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.357001][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.62'.
[  137.371707][ T5892] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.389548][ T6196] FAULT_INJECTION: forcing a failure.
[  137.389548][ T6196] name failslab, interval 1, probability 0, space 0, times 0
[  137.416552][ T6196] CPU: 1 UID: 0 PID: 6196 Comm: syz.3.57 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  137.416579][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  137.416591][ T6196] Call Trace:
[  137.416599][ T6196]  <TASK>
[  137.416607][ T6196]  dump_stack_lvl+0x241/0x360
[  137.416640][ T6196]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.416664][ T6196]  ? __pfx__printk+0x10/0x10
[  137.416689][ T6196]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  137.416723][ T6196]  ? __pfx___might_resched+0x10/0x10
[  137.416758][ T6196]  should_fail_ex+0x40a/0x550
[  137.416788][ T6196]  should_failslab+0xac/0x100
[  137.416824][ T6196]  kmem_cache_alloc_node_noprof+0x77/0x380
[  137.416855][ T6196]  ? __alloc_skb+0x1c3/0x440
[  137.416891][ T6196]  __alloc_skb+0x1c3/0x440
[  137.416930][ T6196]  ? __pfx___alloc_skb+0x10/0x10
[  137.416980][ T6196]  ? netlink_autobind+0xd6/0x2f0
[  137.417003][ T6196]  ? netlink_autobind+0x2b0/0x2f0
[  137.417035][ T6196]  netlink_sendmsg+0x623/0xca0
[  137.417079][ T6196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.417110][ T6196]  ? aa_sock_msg_perm+0xf3/0x1d0
[  137.417153][ T6196]  ? __pfx_netlink_sendmsg+0x10/0x10
[  137.417174][ T6196]  __sock_sendmsg+0x221/0x270
[  137.417207][ T6196]  __sys_sendto+0x363/0x4c0
[  137.417248][ T6196]  ? __pfx___sys_sendto+0x10/0x10
[  137.417320][ T6196]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  137.417360][ T6196]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  137.417394][ T6196]  ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0
[  137.417432][ T6196]  __x64_sys_sendto+0xde/0x100
[  137.417469][ T6196]  do_syscall_64+0xf3/0x230
[  137.417501][ T6196]  ? clear_bhb_loop+0x45/0xa0
[  137.417544][ T6196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  137.417572][ T6196] RIP: 0033:0x7f6e4eb8ec7c
[  137.417591][ T6196] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  137.417612][ T6196] RSP: 002b:00007f6e4f986ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  137.417632][ T6196] RAX: ffffffffffffffda RBX: 00007f6e4f986fc0 RCX: 00007f6e4eb8ec7c
[  137.417645][ T6196] RDX: 0000000000000020 RSI: 00007f6e4f987010 RDI: 0000000000000003
[  137.417656][ T6196] RBP: 0000000000000000 R08: 00007f6e4f986f14 R09: 000000000000000c
[  137.417667][ T6196] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  137.417678][ T6196] R13: 00007f6e4f986f68 R14: 00007f6e4f987010 R15: 0000000000000000
[  137.417715][ T6196]  </TASK>
[  137.417843][ T5892] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  137.747439][ T6214] bond_slave_1: entered promiscuous mode
[  137.755093][ T6214] bond_slave_1: left promiscuous mode
[  137.915998][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.943384][ T5892] usb 1-1: config 0 descriptor??
[  138.051378][ T6218] vivid-007: disconnect
[  138.059729][ T6217] vivid-007: reconnect
[  138.247000][ T6222] netlink: 'syz.3.66': attribute type 1 has an invalid length.
[  138.358672][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  138.365453][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  138.554791][ T6212] loop1: detected capacity change from 0 to 32768
[  138.597818][ T6208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.636696][ T6208] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.716964][ T5892] usbhid 1-1:0.0: can't add hid device: -71
[  138.728992][ T5892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  138.840587][ T5892] usb 1-1: USB disconnect, device number 2
[  139.040881][ T6212] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  139.121646][ T5844] usb 5-1: USB disconnect, device number 3
[  139.132487][ T6212] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  139.166623][ T6212] bcachefs (loop1): Version upgrade required:
[  139.166623][ T6212] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  139.166623][ T6212] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.23: stripe_lru
[  139.166623][ T6212]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  139.274343][ T6212] bcachefs (loop1): dropping and reconstructing all alloc info
[  139.900726][ T6212] bcachefs (loop1): accounting_read... done
[  139.973398][ T6212] bcachefs (loop1): alloc_read... done
[  140.016001][ T6212] bcachefs (loop1): stripes_read... done
[  140.096069][ T6212] bcachefs (loop1): snapshots_read... done
[  140.195876][ T6212] bcachefs (loop1): done starting filesystem
[  140.346509][ T5840] bcachefs (loop1): shutting down
[  141.015836][ T6250] loop2: detected capacity change from 0 to 2048
[  141.194563][ T5840] bcachefs (loop1): shutdown complete
[  141.202773][ T6253] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.344179][ T6255] loop0: detected capacity change from 0 to 8
[  141.526847][ T6257] loop4: detected capacity change from 0 to 2048
[  142.007430][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'.
[  142.395809][ T6260] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.644003][ T6262] loop2: detected capacity change from 0 to 512
[  143.561859][ T6268] vivid-007: disconnect
[  143.911070][ T6262] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.75: casefold flag without casefold feature
[  143.933499][ T6263] vivid-007: reconnect
[  144.138918][ T6262] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.75: couldn't read orphan inode 15 (err -117)
[  144.260929][ T6262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.406306][ T6273] loop3: detected capacity change from 0 to 256
[  144.933619][   T29] audit: type=1800 audit(1740033534.330:5): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.75" name="file1" dev="loop2" ino=18 res=0 errno=0
[  145.143394][ T6282] FAULT_INJECTION: forcing a failure.
[  145.143394][ T6282] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  145.215774][ T6282] CPU: 1 UID: 0 PID: 6282 Comm: syz.4.79 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  145.215805][ T6282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  145.215816][ T6282] Call Trace:
[  145.215824][ T6282]  <TASK>
[  145.215856][ T6282]  dump_stack_lvl+0x241/0x360
[  145.215892][ T6282]  ? __pfx_dump_stack_lvl+0x10/0x10
[  145.215914][ T6282]  ? __pfx__printk+0x10/0x10
[  145.215943][ T6282]  ? __pfx_lock_release+0x10/0x10
[  145.215976][ T6282]  ? __lock_acquire+0x1397/0x2100
[  145.216018][ T6282]  should_fail_ex+0x40a/0x550
[  145.216048][ T6282]  _copy_from_user+0x2d/0xb0
[  145.216083][ T6282]  kstrtouint_from_user+0xd4/0x190
[  145.216116][ T6282]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  145.216151][ T6282]  ? __pfx_lock_acquire+0x10/0x10
[  145.216201][ T6282]  proc_fail_nth_write+0xaa/0x2d0
[  145.216225][ T6282]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  145.216254][ T6282]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  145.216287][ T6282]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  145.216312][ T6282]  vfs_write+0x29f/0xd10
[  145.216342][ T6282]  ? fdget_pos+0x254/0x320
[  145.216372][ T6282]  ? __pfx_vfs_write+0x10/0x10
[  145.216409][ T6282]  ? fdget_pos+0x254/0x320
[  145.216427][ T6282]  ? fdget_pos+0x1fb/0x320
[  145.216452][ T6282]  ? __mutex_lock+0xa/0x1010
[  145.216496][ T6282]  ksys_write+0x18f/0x2b0
[  145.216528][ T6282]  ? __pfx_ksys_write+0x10/0x10
[  145.216556][ T6282]  ? do_syscall_64+0x100/0x230
[  145.216600][ T6282]  ? do_syscall_64+0xb6/0x230
[  145.216636][ T6282]  do_syscall_64+0xf3/0x230
[  145.216667][ T6282]  ? clear_bhb_loop+0x45/0xa0
[  145.216702][ T6282]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  145.216731][ T6282] RIP: 0033:0x7fe1bf18b89f
[  145.216751][ T6282] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  145.216767][ T6282] RSP: 002b:00007fe1c0001030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  145.216788][ T6282] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe1bf18b89f
[  145.216803][ T6282] RDX: 0000000000000001 RSI: 00007fe1c00010a0 RDI: 0000000000000004
[  145.216815][ T6282] RBP: 00007fe1c0001090 R08: 0000000000000000 R09: 0000000000000000
[  145.216827][ T6282] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  145.216839][ T6282] R13: 0000000000000001 R14: 00007fe1bf3a6080 R15: 00007ffcd89ff748
[  145.216881][ T6282]  </TASK>
[  145.739629][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.588421][ T6283] dccp_close: ABORT with 180 bytes unread
[  148.553688][ T6301] loop0: detected capacity change from 0 to 2048
[  148.566452][ T5970] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  148.758420][ T6302] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.896225][ T5970] usb 3-1: Using ep0 maxpacket: 8
[  149.204767][ T6304] loop3: detected capacity change from 0 to 32768
[  149.346543][ T6304] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.86 (6304)
[  149.382031][ T6304] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.392421][ T6304] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  150.274555][ T5970] usb 3-1: unable to read config index 0 descriptor/start: -71
[  150.295982][ T5970] usb 3-1: can't read configurations, error -71
[  150.361925][ T6304] BTRFS info (device loop3): rebuilding free space tree
[  150.417317][ T6304] BTRFS info (device loop3): disabling free space tree
[  150.424319][ T6304] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  150.434222][ T6304] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  150.619882][ T6328] vivid-007: disconnect
[  150.655544][   T29] audit: type=1804 audit(1740033540.050:6): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.86" name=2F6E6577726F6F742F31382F6275732FE91F7189591E9233614B dev="loop3" ino=264 res=1 errno=0
[  150.681865][ T6323] vivid-007: reconnect
[  150.843789][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.992536][ T6331] Process accounting resumed
[  153.148911][ T5834] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.338689][ T6344] 9pnet_fd: Insufficient options for proto=fd
[  153.496375][ T5844] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  153.538601][ T6349] loop1: detected capacity change from 0 to 256
[  153.677173][ T5844] usb 5-1: Using ep0 maxpacket: 32
[  153.744290][ T5844] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  153.764019][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.93'.
[  153.842479][ T5844] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  154.491027][ T6349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'.
[  154.692745][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.703682][ T5844] usb 5-1: Product: syz
[  154.708015][ T5844] usb 5-1: Manufacturer: syz
[  154.712653][ T5844] usb 5-1: SerialNumber: syz
[  154.737324][ T5844] usb 5-1: config 0 descriptor??
[  154.746830][ T6342] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  154.798035][ T5844] hub 5-1:0.0: bad descriptor, ignoring hub
[  154.804026][ T5844] hub 5-1:0.0: probe with driver hub failed with error -5
[  154.854973][ T5844] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[  154.896200][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  154.979860][ T6358] loop2: detected capacity change from 0 to 2048
[  155.211586][ T5844] usb 5-1: USB disconnect, device number 4
[  155.211665][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  155.286299][ T6363] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.393457][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  156.103414][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  156.128240][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  156.146048][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.915049][ T5889] usb 2-1: config 0 descriptor??
[  156.951362][    C1] raw-gadget.1 gadget.1: ignoring, device is not running
[  156.953302][ T6373] FAULT_INJECTION: forcing a failure.
[  156.953302][ T6373] name failslab, interval 1, probability 0, space 0, times 0
[  156.969425][ T5889] usb 2-1: can't set config #0, error -32
[  156.978704][ T6373] CPU: 0 UID: 0 PID: 6373 Comm: syz.0.99 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  156.978744][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  156.978757][ T6373] Call Trace:
[  156.978765][ T6373]  <TASK>
[  156.978774][ T6373]  dump_stack_lvl+0x241/0x360
[  156.978815][ T6373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.978840][ T6373]  ? __pfx__printk+0x10/0x10
[  156.978866][ T6373]  ? kmem_cache_alloc_noprof+0x48/0x380
[  156.978899][ T6373]  ? __pfx___might_resched+0x10/0x10
[  156.978938][ T6373]  should_fail_ex+0x40a/0x550
[  156.978969][ T6373]  should_failslab+0xac/0x100
[  156.979003][ T6373]  ? __rds_conn_create+0x7ee/0x1f10
[  156.979028][ T6373]  kmem_cache_alloc_noprof+0x70/0x380
[  156.979069][ T6373]  __rds_conn_create+0x7ee/0x1f10
[  156.979101][ T6373]  ? __rds_conn_create+0x2d1/0x1f10
[  156.979143][ T6373]  ? __pfx___rds_conn_create+0x10/0x10
[  156.979193][ T6373]  rds_conn_create_outgoing+0x43/0x60
[  156.979226][ T6373]  rds_sendmsg+0x129d/0x2340
[  156.979272][ T6373]  ? __pfx_rds_sendmsg+0x10/0x10
[  156.979294][ T6373]  ? aa_sk_perm+0x96d/0xab0
[  156.979335][ T6373]  ? __pfx_aa_sk_perm+0x10/0x10
[  156.979363][ T6373]  ? __import_iovec+0x3bf/0x830
[  156.979396][ T6373]  ? aa_sock_msg_perm+0xf3/0x1d0
[  156.979438][ T6373]  ? __pfx_rds_sendmsg+0x10/0x10
[  156.979454][ T6373]  __sock_sendmsg+0x221/0x270
[  156.979485][ T6373]  ____sys_sendmsg+0x524/0x860
[  156.979532][ T6373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  156.979562][ T6373]  ? __fget_files+0x2a/0x410
[  156.979587][ T6373]  ? __fget_files+0x2a/0x410
[  156.979622][ T6373]  __sys_sendmsg+0x269/0x350
[  156.979663][ T6373]  ? __pfx___sys_sendmsg+0x10/0x10
[  156.979717][ T6373]  ? do_sys_openat2+0x179/0x1c0
[  156.979778][ T6373]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  156.979821][ T6373]  ? do_syscall_64+0x100/0x230
[  156.979856][ T6373]  ? do_syscall_64+0xb6/0x230
[  156.979889][ T6373]  do_syscall_64+0xf3/0x230
[  156.979919][ T6373]  ? clear_bhb_loop+0x45/0xa0
[  156.979953][ T6373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  156.979981][ T6373] RIP: 0033:0x7fd945f8cde9
[  156.980000][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  156.980016][ T6373] RSP: 002b:00007fd946ead038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  156.980036][ T6373] RAX: ffffffffffffffda RBX: 00007fd9461a6080 RCX: 00007fd945f8cde9
[  156.980051][ T6373] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000005
[  156.980063][ T6373] RBP: 00007fd946ead090 R08: 0000000000000000 R09: 0000000000000000
[  156.980076][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  156.980087][ T6373] R13: 0000000000000000 R14: 00007fd9461a6080 R15: 00007fff95b6e528
[  156.980125][ T6373]  </TASK>
[  157.246786][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  158.875473][ T6375] loop4: detected capacity change from 0 to 512
[  158.883465][ T6375] ext4: Unknown parameter 'context'
[  158.888038][ T5970] usb 2-1: USB disconnect, device number 8
[  159.556309][ T5892] usb 4-1: Using ep0 maxpacket: 32
[  159.794119][ T5892] usb 4-1: device descriptor read/all, error -71
[  159.974469][ T6385] loop2: detected capacity change from 0 to 256
[  160.015618][ T6385] vfat: Unknown parameter 'utTá'
[  160.315676][ T6386] vivid-007: disconnect
[  160.377978][ T6384] vivid-007: reconnect
[  161.085012][ T6399] loop4: detected capacity change from 0 to 512
[  161.094367][ T6399] ext4: Unknown parameter 'context'
[  162.015298][ T6408] FAULT_INJECTION: forcing a failure.
[  162.015298][ T6408] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  162.086771][ T6408] CPU: 0 UID: 0 PID: 6408 Comm: syz.1.106 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  162.086802][ T6408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  162.086813][ T6408] Call Trace:
[  162.086821][ T6408]  <TASK>
[  162.086829][ T6408]  dump_stack_lvl+0x241/0x360
[  162.086864][ T6408]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.086889][ T6408]  ? __pfx__printk+0x10/0x10
[  162.086931][ T6408]  should_fail_ex+0x40a/0x550
[  162.086963][ T6408]  prepare_alloc_pages+0x1da/0x5b0
[  162.087006][ T6408]  __alloc_frozen_pages_noprof+0x16f/0x710
[  162.087040][ T6408]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  162.087089][ T6408]  ? __pfx_lock_acquire+0x10/0x10
[  162.087119][ T6408]  ? validate_chain+0x11e/0x5920
[  162.087149][ T6408]  alloc_pages_mpol+0x311/0x660
[  162.087193][ T6408]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  162.087243][ T6408]  vma_alloc_folio_noprof+0x12b/0x260
[  162.087279][ T6408]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  162.087339][ T6408]  folio_prealloc+0x2e/0x170
[  162.087366][ T6408]  handle_pte_fault+0x2e40/0x61c0
[  162.087408][ T6408]  ? __lock_acquire+0x1397/0x2100
[  162.087458][ T6408]  ? __pfx_handle_pte_fault+0x10/0x10
[  162.087490][ T6408]  ? __lock_acquire+0x1397/0x2100
[  162.087588][ T6408]  ? __pfx_lock_acquire+0x10/0x10
[  162.087627][ T6408]  ? do_raw_spin_lock+0x14f/0x370
[  162.087673][ T6408]  handle_mm_fault+0x11ae/0x1cd0
[  162.087746][ T6408]  ? __pfx_handle_mm_fault+0x10/0x10
[  162.087771][ T6408]  ? follow_page_pte+0x93d/0x1450
[  162.087823][ T6408]  ? __pfx_find_vma+0x10/0x10
[  162.087848][ T6408]  ? vma_is_secretmem+0xd/0x50
[  162.087878][ T6408]  ? check_vma_flags+0x51b/0x590
[  162.087912][ T6408]  __get_user_pages+0x1a8f/0x4140
[  162.087956][ T6408]  ? mark_lock+0x9a/0x360
[  162.088021][ T6408]  ? __pfx___get_user_pages+0x10/0x10
[  162.088051][ T6408]  ? __pfx_down_read_killable+0x10/0x10
[  162.088092][ T6408]  ? __pfx_lock_acquire+0x10/0x10
[  162.088134][ T6408]  ? try_get_folio+0xfd/0x720
[  162.088161][ T6408]  ? __pfx_lock_release+0x10/0x10
[  162.088206][ T6408]  __gup_longterm_locked+0xe64/0x17f0
[  162.088265][ T6408]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  162.088299][ T6408]  ? __pfx___gup_longterm_locked+0x10/0x10
[  162.088328][ T6408]  ? sanity_check_pinned_pages+0x11b2/0x12a0
[  162.088375][ T6408]  gup_fast_fallback+0x2222/0x2970
[  162.088454][ T6408]  ? __pfx_gup_fast_fallback+0x10/0x10
[  162.088474][ T6408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.088570][ T6408]  ? is_valid_gup_args+0x124/0x200
[  162.088600][ T6408]  pin_user_pages_fast+0xcc/0x160
[  162.088629][ T6408]  ? __pfx_pin_user_pages_fast+0x10/0x10
[  162.088650][ T6408]  ? rcu_is_watching+0x15/0xb0
[  162.088689][ T6408]  ? trace_kmalloc+0x1f/0xd0
[  162.088720][ T6408]  ? rds_info_getsockopt+0x20c/0x600
[  162.088767][ T6408]  rds_info_getsockopt+0x22e/0x600
[  162.088795][ T6408]  ? __might_fault+0xaa/0x120
[  162.088817][ T6408]  ? __pfx_lock_release+0x10/0x10
[  162.088854][ T6408]  ? __pfx_rds_info_getsockopt+0x10/0x10
[  162.088888][ T6408]  ? __might_fault+0xc6/0x120
[  162.088914][ T6408]  ? rds_getsockopt+0x2e8/0x530
[  162.088935][ T6408]  ? __pfx_rds_getsockopt+0x10/0x10
[  162.088961][ T6408]  do_sock_getsockopt+0x38e/0x740
[  162.089003][ T6408]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  162.089030][ T6408]  ? __fget_files+0x2a/0x410
[  162.089053][ T6408]  ? __fget_files+0x395/0x410
[  162.089070][ T6408]  ? __fget_files+0x2a/0x410
[  162.089103][ T6408]  __x64_sys_getsockopt+0x2a1/0x370
[  162.089145][ T6408]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  162.089179][ T6408]  ? do_syscall_64+0x100/0x230
[  162.089212][ T6408]  ? do_syscall_64+0xb6/0x230
[  162.089245][ T6408]  do_syscall_64+0xf3/0x230
[  162.089273][ T6408]  ? clear_bhb_loop+0x45/0xa0
[  162.089304][ T6408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.089336][ T6408] RIP: 0033:0x7f28abf8cde9
[  162.089354][ T6408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.089369][ T6408] RSP: 002b:00007f28ace3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  162.089390][ T6408] RAX: ffffffffffffffda RBX: 00007f28ac1a6080 RCX: 00007f28abf8cde9
[  162.089403][ T6408] RDX: 000000000000271f RSI: 0000200000000114 RDI: 0000000000000006
[  162.089415][ T6408] RBP: 00007f28ace3f090 R08: 0000400000000100 R09: 0000000000000000
[  162.089427][ T6408] R10: 0000400000000580 R11: 0000000000000246 R12: 0000000000000001
[  162.089439][ T6408] R13: 0000000000000000 R14: 00007f28ac1a6080 R15: 00007fffae80ac48
[  162.089492][ T6408]  </TASK>
[  162.840371][ T6406] sctp: failed to load transform for md5: -4
[  163.028356][ T6419] loop1: detected capacity change from 0 to 2048
[  163.144651][ T6421] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.458630][ T6429] loop0: detected capacity change from 0 to 128
[  165.575830][ T6435] loop2: detected capacity change from 0 to 128
[  165.613326][ T6435] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  168.437767][ T6435] FAT-fs (loop2): FAT read failed (blocknr 128)
[  168.752596][   T11] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  168.917326][ T6449] vivid-007: disconnect
[  169.426264][ T6443] vivid-007: reconnect
[  169.580276][ T6452] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  169.589577][ T6452] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  169.598461][ T6452] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  169.607234][ T6452] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  169.657467][ T6458] FAULT_INJECTION: forcing a failure.
[  169.657467][ T6458] name failslab, interval 1, probability 0, space 0, times 0
[  169.695187][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.4.120 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  169.695217][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  169.695229][ T6458] Call Trace:
[  169.695238][ T6458]  <TASK>
[  169.695246][ T6458]  dump_stack_lvl+0x241/0x360
[  169.695281][ T6458]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.695306][ T6458]  ? __pfx__printk+0x10/0x10
[  169.695332][ T6458]  ? fs_reclaim_acquire+0x93/0x130
[  169.695358][ T6458]  ? __pfx___might_resched+0x10/0x10
[  169.695394][ T6458]  should_fail_ex+0x40a/0x550
[  169.695426][ T6458]  should_failslab+0xac/0x100
[  169.695462][ T6458]  __kmalloc_noprof+0xdd/0x4c0
[  169.695493][ T6458]  ? tomoyo_encode+0x26f/0x540
[  169.695533][ T6458]  tomoyo_encode+0x26f/0x540
[  169.695576][ T6458]  tomoyo_realpath_from_path+0x59e/0x5e0
[  169.695636][ T6458]  tomoyo_path_number_perm+0x239/0x770
[  169.695663][ T6458]  ? __lock_acquire+0x1397/0x2100
[  169.695701][ T6458]  ? tomoyo_path_number_perm+0x209/0x770
[  169.695733][ T6458]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  169.695831][ T6458]  ? __fget_files+0x2a/0x410
[  169.695859][ T6458]  ? __fget_files+0x2a/0x410
[  169.695893][ T6458]  security_file_ioctl+0xc6/0x2a0
[  169.695921][ T6458]  __se_sys_ioctl+0x46/0x160
[  169.695950][ T6458]  do_syscall_64+0xf3/0x230
[  169.695981][ T6458]  ? clear_bhb_loop+0x45/0xa0
[  169.696014][ T6458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.696042][ T6458] RIP: 0033:0x7fe1bf18cde9
[  169.696060][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.696075][ T6458] RSP: 002b:00007fe1c0022038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  169.696096][ T6458] RAX: ffffffffffffffda RBX: 00007fe1bf3a5fa0 RCX: 00007fe1bf18cde9
[  169.696109][ T6458] RDX: 0000000000000000 RSI: 0000000040045568 RDI: 0000000000000003
[  169.696121][ T6458] RBP: 00007fe1c0022090 R08: 0000000000000000 R09: 0000000000000000
[  169.696133][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  169.696145][ T6458] R13: 0000000000000000 R14: 00007fe1bf3a5fa0 R15: 00007ffcd89ff748
[  169.696186][ T6458]  </TASK>
[  169.702741][ T6452] vxlan0: entered promiscuous mode
[  169.934757][ T6458] ERROR: Out of memory at tomoyo_realpath_from_path.
[  170.177977][ T6452] vxlan0: entered allmulticast mode
[  170.677025][ T6452] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.686058][ T6452] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.694994][ T6452] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  170.703962][ T6452] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  171.313523][ T6472] loop4: detected capacity change from 0 to 512
[  171.323237][ T6472] ext4: Unknown parameter 'context'
[  173.194453][ T6484] loop3: detected capacity change from 0 to 2048
[  173.284073][ T6489] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.017361][ T6499] vivid-007: disconnect
[  175.025960][ T6498] vivid-007: reconnect
[  176.286222][ T6505] input: syz1 as /devices/virtual/input/input10
[  178.944869][ T6523] loop4: detected capacity change from 0 to 40427
[  178.966912][ T6523] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  178.974081][ T6523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  179.057682][ T6523] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff
[  179.066783][ T6523] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8
[  179.365946][ T6523] F2FS-fs (loop4): invalid crc value
[  179.803792][ T6523] F2FS-fs (loop4): Found nat_bits in checkpoint
[  179.916651][ T6536] loop3: detected capacity change from 0 to 2048
[  179.953703][ T6523] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  179.961078][ T6523] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  180.052538][ T6540] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.634086][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  180.889671][ T5892] usb 5-1: device descriptor read/64, error -71
[  181.286004][ T5892] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  181.500269][ T5892] usb 5-1: device descriptor read/64, error -71
[  181.689035][ T5892] usb usb5-port1: attempt power cycle
[  181.817148][ T6560] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  181.833282][ T6561] vivid-007: disconnect
[  181.880329][ T5842] syz-executor: attempt to access beyond end of device
[  181.880329][ T5842] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  181.964438][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  181.964467][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  181.964480][ T5842] Call Trace:
[  181.964489][ T5842]  <TASK>
[  181.964498][ T5842]  dump_stack_lvl+0x241/0x360
[  181.964545][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.964571][ T5842]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  181.964607][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  181.964639][ T5842]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  181.964681][ T5842]  f2fs_handle_critical_error+0x38f/0x5a0
[  181.964730][ T5842]  f2fs_write_end_io+0x674/0x9a0
[  181.964773][ T5842]  __submit_merged_bio+0x2a9/0x710
[  181.964815][ T5842]  f2fs_submit_merged_write_cond+0x28a/0x360
[  181.964868][ T5842]  f2fs_write_data_pages+0x2c5e/0x3670
[  181.964949][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.965105][ T5842]  ? __pfx_lock_release+0x10/0x10
[  181.965135][ T5842]  ? do_raw_spin_lock+0x14f/0x370
[  181.965177][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  181.965211][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  181.965237][ T5842]  do_writepages+0x35f/0x880
[  181.965283][ T5842]  ? __pfx_do_writepages+0x10/0x10
[  181.965322][ T5842]  ? filemap_fdatawrite+0x1e8/0x2a0
[  181.965348][ T5842]  ? do_raw_spin_lock+0x14f/0x370
[  181.965375][ T5842]  ? __pfx_lock_release+0x10/0x10
[  181.965425][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  181.965454][ T5842]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  181.965487][ T5842]  filemap_fdatawrite+0x1f3/0x2a0
[  181.965522][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  181.965637][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  181.965678][ T5842]  f2fs_sync_dirty_inodes+0x348/0x860
[  181.965727][ T5842]  f2fs_write_checkpoint+0x8af/0x1de0
[  181.965789][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  181.965913][ T5842]  ? kill_f2fs_super+0x28e/0x6d0
[  181.965949][ T5842]  kill_f2fs_super+0x2b6/0x6d0
[  181.965986][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  181.966026][ T5842]  ? shrinker_free+0x2ca/0x3d0
[  181.966053][ T5842]  deactivate_locked_super+0xc4/0x130
[  181.966083][ T5842]  cleanup_mnt+0x41f/0x4b0
[  181.966110][ T5842]  ? lockdep_hardirqs_on+0x99/0x150
[  181.966144][ T5842]  task_work_run+0x24f/0x310
[  181.966181][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  181.966201][ T5842]  ? __x64_sys_umount+0x120/0x170
[  181.966238][ T5842]  ? syscall_exit_to_user_mode+0xa3/0x340
[  181.966274][ T5842]  syscall_exit_to_user_mode+0x13f/0x340
[  181.966310][ T5842]  do_syscall_64+0x100/0x230
[  181.966342][ T5842]  ? clear_bhb_loop+0x45/0xa0
[  181.966376][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.966404][ T5842] RIP: 0033:0x7fe1bf18e117
[  181.966429][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  181.966446][ T5842] RSP: 002b:00007ffcd89fe9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.966471][ T5842] RAX: 0000000000000000 RBX: 00007fe1bf20e08c RCX: 00007fe1bf18e117
[  181.966485][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd89fea90
[  181.966498][ T5842] RBP: 00007ffcd89fea90 R08: 0000000000000000 R09: 0000000000000000
[  181.966510][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd89ffb20
[  181.966540][ T5842] R13: 00007fe1bf20e08c R14: 000000000002bfc9 R15: 00007ffcd89ffb60
[  181.966596][ T5842]  </TASK>
[  182.333206][ T6564] loop0: detected capacity change from 0 to 256
[  182.340844][ T6564] exfat: Bad value for 'uid'
[  182.345484][ T6564] exfat: Bad value for 'uid'
[  182.375088][ T5930] hid-generic 0000:0003:0000.0002: unknown main item tag 0x0
[  182.408128][ T5930] hid-generic 0000:0003:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  182.473939][ T6558] vivid-007: reconnect
[  182.527555][ T5842] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  182.538330][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  182.538353][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  182.538362][ T5842] Call Trace:
[  182.538368][ T5842]  <TASK>
[  182.538375][ T5842]  dump_stack_lvl+0x241/0x360
[  182.538402][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  182.538420][ T5842]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  182.538441][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  182.538465][ T5842]  ? f2fs_hw_is_readonly+0x3a3/0x470
[  182.538496][ T5842]  f2fs_handle_critical_error+0x38f/0x5a0
[  182.538536][ T5842]  f2fs_write_end_io+0x674/0x9a0
[  182.538567][ T5842]  __submit_merged_bio+0x2a9/0x710
[  182.538599][ T5842]  f2fs_submit_merged_write_cond+0x28a/0x360
[  182.538635][ T5842]  f2fs_write_data_pages+0x2c5e/0x3670
[  182.538690][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.538803][ T5842]  ? __pfx_lock_release+0x10/0x10
[  182.538825][ T5842]  ? do_raw_spin_lock+0x14f/0x370
[  182.538854][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  182.538878][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.538897][ T5842]  do_writepages+0x35f/0x880
[  182.538928][ T5842]  ? __pfx_do_writepages+0x10/0x10
[  182.538954][ T5842]  ? filemap_fdatawrite+0x1e8/0x2a0
[  182.538973][ T5842]  ? do_raw_spin_lock+0x14f/0x370
[  182.538992][ T5842]  ? __pfx_lock_release+0x10/0x10
[  182.539025][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  182.539046][ T5842]  ? wbc_attach_and_unlock_inode+0x561/0x580
[  182.539068][ T5842]  filemap_fdatawrite+0x1f3/0x2a0
[  182.539092][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  182.539159][ T5842]  ? do_raw_spin_unlock+0x13c/0x8b0
[  182.539208][ T5842]  f2fs_sync_dirty_inodes+0x348/0x860
[  182.539243][ T5842]  f2fs_write_checkpoint+0x8af/0x1de0
[  182.539288][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  182.539362][ T5842]  ? kill_f2fs_super+0x28e/0x6d0
[  182.539386][ T5842]  kill_f2fs_super+0x2b6/0x6d0
[  182.539412][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  182.539439][ T5842]  ? shrinker_free+0x2ca/0x3d0
[  182.539458][ T5842]  deactivate_locked_super+0xc4/0x130
[  182.539479][ T5842]  cleanup_mnt+0x41f/0x4b0
[  182.539498][ T5842]  ? lockdep_hardirqs_on+0x99/0x150
[  182.539523][ T5842]  task_work_run+0x24f/0x310
[  182.539553][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  182.539568][ T5842]  ? __x64_sys_umount+0x120/0x170
[  182.539594][ T5842]  ? syscall_exit_to_user_mode+0xa3/0x340
[  182.539619][ T5842]  syscall_exit_to_user_mode+0x13f/0x340
[  182.539645][ T5842]  do_syscall_64+0x100/0x230
[  182.539668][ T5842]  ? clear_bhb_loop+0x45/0xa0
[  182.539695][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  182.539716][ T5842] RIP: 0033:0x7fe1bf18e117
[  182.539731][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  182.539742][ T5842] RSP: 002b:00007ffcd89fe9d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  182.539758][ T5842] RAX: 0000000000000000 RBX: 00007fe1bf20e08c RCX: 00007fe1bf18e117
[  182.539768][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd89fea90
[  182.539777][ T5842] RBP: 00007ffcd89fea90 R08: 0000000000000000 R09: 0000000000000000
[  182.539786][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd89ffb20
[  182.539796][ T5842] R13: 00007fe1bf20e08c R14: 000000000002bfc9 R15: 00007ffcd89ffb60
[  182.539826][ T5842]  </TASK>
[  182.539881][ T5842] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  182.818605][ T6566] loop3: detected capacity change from 0 to 64
[  184.231547][ T5892] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  184.482740][ T6581] loop3: detected capacity change from 0 to 512
[  184.499273][ T6581] ext4: Unknown parameter 'context'
[  184.668209][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  184.682669][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.914366][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  185.104190][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  185.234934][ T5892] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  185.333357][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.473875][ T5892] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  185.533031][ T5892] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  185.636917][ T5892] usb 2-1: Manufacturer: syz
[  185.851408][ T5892] usb 2-1: config 0 descriptor??
[  186.202955][ T6595] loop3: detected capacity change from 0 to 2048
[  186.256242][ T6598] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  186.278476][ T5892] rc_core: IR keymap rc-hauppauge not found
[  186.291284][ T5892] Registered IR keymap rc-empty
[  186.518811][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  186.571865][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  187.324192][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  187.372269][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11
[  187.392552][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  187.394667][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.423185][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.157'.
[  187.432431][ T6605] bond0: invalid ARP target 0.0.0.0 specified for addition
[  187.439937][ T6605] bond0: option arp_ip_target: invalid value (0)
[  187.447218][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  187.478298][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'.
[  187.481299][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.496481][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.126053][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.160709][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.196507][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.240796][ T6610] FAULT_INJECTION: forcing a failure.
[  188.240796][ T6610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  188.246079][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.266129][ T6610] CPU: 1 UID: 0 PID: 6610 Comm: syz.3.158 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  188.266158][ T6610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  188.266170][ T6610] Call Trace:
[  188.266179][ T6610]  <TASK>
[  188.266188][ T6610]  dump_stack_lvl+0x241/0x360
[  188.266224][ T6610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.266249][ T6610]  ? __pfx__printk+0x10/0x10
[  188.266275][ T6610]  ? __pfx_lock_release+0x10/0x10
[  188.266325][ T6610]  should_fail_ex+0x40a/0x550
[  188.266356][ T6610]  _copy_from_user+0x2d/0xb0
[  188.266391][ T6610]  copy_msghdr_from_user+0xae/0x680
[  188.266429][ T6610]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  188.266453][ T6610]  ? __fget_files+0x2a/0x410
[  188.266481][ T6610]  ? __fget_files+0x2a/0x410
[  188.266517][ T6610]  __sys_sendmsg+0x209/0x350
[  188.266561][ T6610]  ? __pfx___sys_sendmsg+0x10/0x10
[  188.266617][ T6610]  ? do_sys_openat2+0x179/0x1c0
[  188.266683][ T6610]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  188.266717][ T6610]  ? do_syscall_64+0x100/0x230
[  188.266754][ T6610]  ? do_syscall_64+0xb6/0x230
[  188.266786][ T6610]  do_syscall_64+0xf3/0x230
[  188.266815][ T6610]  ? clear_bhb_loop+0x45/0xa0
[  188.266850][ T6610]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.266879][ T6610] RIP: 0033:0x7f6e4eb8cde9
[  188.266899][ T6610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.266916][ T6610] RSP: 002b:00007f6e4f988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  188.266938][ T6610] RAX: ffffffffffffffda RBX: 00007f6e4eda5fa0 RCX: 00007f6e4eb8cde9
[  188.266953][ T6610] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000004
[  188.266966][ T6610] RBP: 00007f6e4f988090 R08: 0000000000000000 R09: 0000000000000000
[  188.266979][ T6610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.266991][ T6610] R13: 0000000000000000 R14: 00007f6e4eda5fa0 R15: 00007fffd3a29398
[  188.267038][ T6610]  </TASK>
[  188.546208][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.566910][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.587183][ T5892] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  188.610599][ T5892] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  188.620009][ T5892] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  188.644341][ T5892] usb 2-1: USB disconnect, device number 9
[  190.418443][ T6625] vivid-007: disconnect
[  191.049887][ T6619] vivid-007: reconnect
[  191.083241][ T6629] loop4: detected capacity change from 0 to 64
[  191.209258][ T6630] loop3: detected capacity change from 0 to 2048
[  191.222841][ T6630] udf: Unknown parameter 'devices.allow'
[  192.051726][ T6636] loop1: detected capacity change from 0 to 2048
[  192.623717][ T6645] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.454046][ T6650] loop0: detected capacity change from 0 to 512
[  193.464869][ T6650] ext4: Unknown parameter 'context'
[  196.839637][ T6665] loop1: detected capacity change from 0 to 2048
[  198.507577][ T6676] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.143213][ T6677] vivid-007: disconnect
[  199.295165][ T6674] vivid-007: reconnect
[  199.652677][ T6684] netlink: 216 bytes leftover after parsing attributes in process `syz.3.176'.
[  199.662269][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'.
[  199.673454][ T6684] netlink: 20 bytes leftover after parsing attributes in process `syz.3.176'.
[  199.791472][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  199.799324][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  200.526305][ T6695] loop2: detected capacity change from 0 to 512
[  200.538470][ T6695] ext4: Unknown parameter 'context'
[  201.731839][ T5930] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  201.739628][  T978] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  202.065985][  T978] usb 1-1: Using ep0 maxpacket: 16
[  202.083714][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.095230][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  202.109785][  T978] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  202.146102][ T5930] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  202.181264][ T5930] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  202.740263][  T978] usb 1-1: config 0 has no interface number 0
[  202.761578][ T5930] usb 2-1: Manufacturer: syz
[  202.780309][  T978] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  202.811663][ T5930] usb 2-1: config 0 descriptor??
[  202.852417][  T978] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  202.892232][  T978] usb 1-1: config 0 interface 41 has no altsetting 0
[  202.902679][  T978] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  202.916774][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.933908][  T978] usb 1-1: Product: syz
[  202.938877][  T978] usb 1-1: Manufacturer: syz
[  202.943637][  T978] usb 1-1: SerialNumber: syz
[  202.956712][  T978] usb 1-1: config 0 descriptor??
[  202.971564][ T6700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.987281][ T6700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  203.309234][ T6717] FAULT_INJECTION: forcing a failure.
[  203.309234][ T6717] name failslab, interval 1, probability 0, space 0, times 0
[  203.326631][ T6717] CPU: 1 UID: 0 PID: 6717 Comm: syz.2.184 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  203.326661][ T6717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  203.326673][ T6717] Call Trace:
[  203.326681][ T6717]  <TASK>
[  203.326690][ T6717]  dump_stack_lvl+0x241/0x360
[  203.326744][ T6717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.326769][ T6717]  ? __pfx__printk+0x10/0x10
[  203.326797][ T6717]  ? __kmalloc_noprof+0xb5/0x4c0
[  203.326830][ T6717]  ? __pfx___might_resched+0x10/0x10
[  203.326870][ T6717]  should_fail_ex+0x40a/0x550
[  203.326903][ T6717]  should_failslab+0xac/0x100
[  203.326940][ T6717]  __kmalloc_noprof+0xdd/0x4c0
[  203.326972][ T6717]  ? hci_alloc_dev_priv+0x27/0x2030
[  203.327005][ T6717]  hci_alloc_dev_priv+0x27/0x2030
[  203.327034][ T6717]  hci_uart_tty_ioctl+0x3f5/0xa00
[  203.327072][ T6717]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[  203.327109][ T6717]  tty_ioctl+0x998/0xdc0
[  203.327137][ T6717]  ? __pfx_tty_ioctl+0x10/0x10
[  203.327169][ T6717]  __se_sys_ioctl+0xf1/0x160
[  203.327202][ T6717]  do_syscall_64+0xf3/0x230
[  203.327234][ T6717]  ? clear_bhb_loop+0x45/0xa0
[  203.327271][ T6717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.327300][ T6717] RIP: 0033:0x7f9fbe38cde9
[  203.327319][ T6717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.327336][ T6717] RSP: 002b:00007f9fbf22d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  203.327358][ T6717] RAX: ffffffffffffffda RBX: 00007f9fbe5a6160 RCX: 00007f9fbe38cde9
[  203.327373][ T6717] RDX: 0000000000000002 RSI: 00000000400455c8 RDI: 0000000000000006
[  203.327386][ T6717] RBP: 00007f9fbf22d090 R08: 0000000000000000 R09: 0000000000000000
[  203.327399][ T6717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.327411][ T6717] R13: 0000000000000000 R14: 00007f9fbe5a6160 R15: 00007ffc911ebd18
[  203.327452][ T6717]  </TASK>
[  203.327487][ T6717] Bluetooth: Can't allocate HCI device
[  204.400858][ T6710] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000067: 0000 [#1] PREEMPT SMP KASAN PTI
[  204.413500][ T6710] KASAN: null-ptr-deref in range [0x0000000000000338-0x000000000000033f]
[  204.421928][ T6710] CPU: 1 UID: 0 PID: 6710 Comm: syz.2.184 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0
[  204.432008][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  204.442077][ T6710] RIP: 0010:__lock_acquire+0x6a/0x2100
[  204.447577][ T6710] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 2b c3 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 58 6c 8c 00 48 be 00 00 00 00 00 fc
[  204.467211][ T6710] RSP: 0018:ffffc9000b567870 EFLAGS: 00010002
[  204.473321][ T6710] RAX: 0000000000000067 RBX: 0000000000000000 RCX: 0000000000000000
[  204.481308][ T6710] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000338
[  204.489294][ T6710] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  204.497284][ T6710] R10: dffffc0000000000 R11: fffffbfff207b48f R12: ffff888030305a00
[  204.505276][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000338
[  204.513252][ T6710] FS:  00005555708f9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  204.522223][ T6710] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.528811][ T6710] CR2: 000000110c3214b1 CR3: 0000000024f16000 CR4: 00000000003526f0
[  204.536789][ T6710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  204.544758][ T6710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  204.552732][ T6710] Call Trace:
[  204.556023][ T6710]  <TASK>
[  204.558963][ T6710]  ? __die_body+0x5f/0xb0
[  204.563310][ T6710]  ? die_addr+0xb0/0xe0
[  204.567485][ T6710]  ? exc_general_protection+0x3dd/0x5d0
[  204.573054][ T6710]  ? asm_exc_general_protection+0x26/0x30
[  204.578791][ T6710]  ? __lock_acquire+0x6a/0x2100
[  204.583662][ T6710]  ? rcu_read_lock_any_held+0x8d/0x160
[  204.589131][ T6710]  lock_acquire+0x1ed/0x550
[  204.593650][ T6710]  ? __timer_delete_sync+0x12f/0x310
[  204.598959][ T6710]  ? __pfx_lock_acquire+0x10/0x10
[  204.603999][ T6710]  ? mark_lock+0x9a/0x360
[  204.608340][ T6710]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  204.614340][ T6710]  ? __timer_delete_sync+0x12f/0x310
[  204.619638][ T6710]  __timer_delete_sync+0x148/0x310
[  204.624763][ T6710]  ? __timer_delete_sync+0x12f/0x310
[  204.630068][ T6710]  ? __pfx___timer_delete_sync+0x10/0x10
[  204.635710][ T6710]  ? __pfx_h5_close+0x10/0x10
[  204.640398][ T6710]  ? enable_work+0x2e3/0x360
[  204.644997][ T6710]  h5_close+0x4b/0x170
[  204.649073][ T6710]  hci_uart_tty_close+0x205/0x290
[  204.654111][ T6710]  tty_ldisc_kill+0xa3/0x1a0
[  204.658733][ T6710]  tty_ldisc_release+0x1a1/0x200
[  204.663699][ T6710]  tty_release_struct+0x2b/0xe0
[  204.668567][ T6710]  tty_release+0xd06/0x12c0
[  204.673082][ T6710]  ? __pfx_tty_release+0x10/0x10
[  204.678029][ T6710]  __fput+0x3e9/0x9f0
[  204.682026][ T6710]  task_work_run+0x24f/0x310
[  204.686620][ T6710]  ? _raw_spin_unlock+0x28/0x50
[  204.691501][ T6710]  ? __pfx_task_work_run+0x10/0x10
[  204.696641][ T6710]  ? syscall_exit_to_user_mode+0xa3/0x340
[  204.702369][ T6710]  syscall_exit_to_user_mode+0x13f/0x340
[  204.708016][ T6710]  do_syscall_64+0x100/0x230
[  204.712622][ T6710]  ? clear_bhb_loop+0x45/0xa0
[  204.717315][ T6710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.723215][ T6710] RIP: 0033:0x7f9fbe38cde9
[  204.727636][ T6710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.747293][ T6710] RSP: 002b:00007ffc911ebe78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  204.755726][ T6710] RAX: 0000000000000000 RBX: 00007f9fbe5a7ba0 RCX: 00007f9fbe38cde9
[  204.763811][ T6710] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  204.771793][ T6710] RBP: 00007f9fbe5a7ba0 R08: 0000000000000000 R09: 00000011911ec16f
[  204.779780][ T6710] R10: 00007f9fbe5a7ac0 R11: 0000000000000246 R12: 0000000000031ba0
[  204.787759][ T6710] R13: 00007ffc911ebf70 R14: ffffffffffffffff R15: 00007ffc911ebf90
[  204.795768][ T6710]  </TASK>
[  204.798786][ T6710] Modules linked in:
[  204.802708][ T6710] ---[ end trace 0000000000000000 ]---
[  204.808165][ T6710] RIP: 0010:__lock_acquire+0x6a/0x2100
[  204.813640][ T6710] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d 2b c3 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 58 6c 8c 00 48 be 00 00 00 00 00 fc
[  204.833370][ T6710] RSP: 0018:ffffc9000b567870 EFLAGS: 00010002
[  204.839442][ T6710] RAX: 0000000000000067 RBX: 0000000000000000 RCX: 0000000000000000
[  204.847413][ T6710] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000338
[  204.855387][ T6710] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001
[  204.863356][ T6710] R10: dffffc0000000000 R11: fffffbfff207b48f R12: ffff888030305a00
[  204.871331][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000338
[  204.879303][ T6710] FS:  00005555708f9500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  204.888236][ T6710] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.894824][ T6710] CR2: 000000110c3214b1 CR3: 0000000024f16000 CR4: 00000000003526f0
[  204.902796][ T6710] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  204.910769][ T6710] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  204.918771][ T6710] Kernel panic - not syncing: Fatal exception
[  204.925136][ T6710] Kernel Offset: disabled
[  204.929471][ T6710] Rebooting in 86400 seconds..