last executing test programs:

24m34.881930358s ago: executing program 32 (id=333):
r0 = socket$kcm(0x15, 0x5, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f3"], 0xfdef)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)

23m45.793498249s ago: executing program 33 (id=458):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'rose0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r1], 0x20}}, 0x4000000)

22m19.368185165s ago: executing program 3 (id=669):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2d, 0x25dfdbfd, {0x2, 0x20, 0x2d, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_RT_PRIORITY={0x8, 0x9, 0x102}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x80d0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

22m18.407753649s ago: executing program 3 (id=674):
pipe(&(0x7f0000000440))
socket$kcm(0x29, 0x5, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6aeb5544524474004730942a21d7214bf920000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dffff00002ccd0b8aa0cc1dc2767bbe00"}, 0xd8)
socket$kcm(0x23, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f50000000000"], 0x78)

22m16.693500331s ago: executing program 3 (id=680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000003010101"], 0x14}, 0x1, 0x0, 0x0, 0x4048051}, 0x440c0)
recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000640)=""/90, 0x5a}, {&(0x7f0000001840)=""/72, 0x48}], 0x3}, 0x3}], 0x1, 0x2142, 0x0)

22m14.492558702s ago: executing program 3 (id=686):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

22m12.756955256s ago: executing program 3 (id=691):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[], 0x758)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

22m10.450151664s ago: executing program 3 (id=694):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x5}, 0x3, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x98f90c, 0x1})
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000000)=r2)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = fsmount(r0, 0x1, 0x4)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8)

21m54.726727991s ago: executing program 34 (id=694):
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x5}, 0x3, 0x7})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000)
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x98f90c, 0x1})
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000000)=r2)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = fsmount(r0, 0x1, 0x4)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8)

18m21.010395118s ago: executing program 5 (id=1142):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r0, 0x406)

18m19.295950276s ago: executing program 5 (id=1145):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x4000000}, 0x0)
socket$rds(0x15, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x6, 0xc8, 0x7}}}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket(0x10, 0x1, 0x0)
io_uring_setup(0x7625, &(0x7f00000003c0)={0x0, 0x9678, 0x2, 0x200000, 0xa9})
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}}, 0x0)

18m17.85543199s ago: executing program 5 (id=1147):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x50, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}}, 0x50}}, 0x0)

18m17.045271668s ago: executing program 5 (id=1150):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000440)="f7", 0x1}], 0x1}}], 0x1, 0x90)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@acl}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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")
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4)
bind$inet6(r8, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c)
listen(r8, 0x0)
listen(r7, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000100001042dbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="00000000000000002000128008000100736974001400028008000100"], 0x40}}, 0x0)
write$vga_arbiter(r1, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd)
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="6685bf96a5241062e8c89f03d1522c774b63770e06d18c80e558dd3e191aa461dbede5c7a69ad17ad66b2dedc4ebf6f33ea9967df3c187d3acf9cf374d26c7cfd4f100f83f5acca9623d20d52e81e6ae8c3c09e6fbaa21a85e70c6cfd44c79e7ebc0968490db182f97ed074d0055666d51a23334bc3f74d91107fdcf5d6362035229caf554", 0x85}, {&(0x7f00000002c0)="39fccda7af5565d7f6e9676e1ae7161c83fc845c867f662267e5dc50127d9ea28134da5eec898609f5ed244334c71029d2489e299a88c3bb31982ba6ba90a37e3e036ad2b47215bed175ac716a87055f6e0395398dab8a5d574ddd8c801c042fec9e47e8e0ecf2471cb3e5e5578f218f431607676e9e74a0e39708f878a1cbed1658b689d8fba3bc4bd192949e23f57697e24f5ea4a5613924bd67ad5600e61fb8c54031f7b51fe68e606d21472ce561acc34b7ae99280079bc35752a0b0dcf7ca295ff276561c97091ece6499cc86a3306eab", 0xd3}, {&(0x7f0000000040)="55bbd6ac698682753c597025833b0616584a06421e61f1a874af04dd247b3898de74e1b9f5ca4b705799f1440f8a1397", 0x30}, {&(0x7f0000001e00)="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", 0x373}], 0x4}}], 0x1, 0x4800)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

18m14.458152837s ago: executing program 5 (id=1156):
r0 = syz_open_dev$evdev(&(0x7f0000000400), 0x6114, 0x22000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002fbd701d0000000001"], 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
writev(r1, &(0x7f0000000180), 0x100000000000003c)
ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000ac0)=""/137)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000cae000/0x2000)=nil, 0x0}, 0x64)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000080"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000b80), 0x1, 0x45f, &(0x7f0000000fc0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r3, &(0x7f0000000740), &(0x7f00000006c0)=""/46}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000007"], 0x78)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000080)={{@any, 0x2}, 0x0, 0x0, 0x101})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c0100001900000200000000fbdbf9e9ae1b3e076734d9a1df25e0b213bbda95c3ad0000011af113f9c52fe696828c06fe000000000000000000800000ac1414bb00"/76, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000009000000000000000600000000000000ffffffffffffffff8000000000000000000000000000000000000000000000000100000200000000c4000500ff020000000000000000000000000001000000002b00000000000000fc0200000000000000000000000000000035000000020000480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a0000000a01010200000000000000000000000002000000000000000008000000080000fcffffffac1414aa000000000000000000000000000004d43c00000000000000e00000010000000000000000000000000300000004010800090000000004000001000080"], 0x17c}}, 0x40080)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@nodioread_nolock}, {@grpquota}]}, 0x5, 0x4eb, &(0x7f0000000ac0)="$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")
statx(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1000, 0x56159817211d7953, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="170900000000000000000100000014002000fe80000000000000000000000000003008000900fffffffe060002000100000008000a000100000008001800ac1414aa08001900e0000002"], 0x50}}, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x1)

18m10.598934569s ago: executing program 5 (id=1165):
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x8, 0x9, 0x1, 0x10}, 0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)

18m7.778908453s ago: executing program 35 (id=1165):
fsopen(&(0x7f0000000000)='overlay\x00', 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x8, 0x9, 0x1, 0x10}, 0x10)
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)

18m2.815605267s ago: executing program 7 (id=711):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r0=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8011}, 0x48088)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280))
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0)

18m1.966146604s ago: executing program 7 (id=1180):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103)
mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x102832, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3002000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}, {@metacopy_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)

18m0.501570969s ago: executing program 7 (id=1183):
r0 = socket(0x2, 0x1, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, 0x0)
setregid(0xffffffffffffffff, r1)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000800)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000000c0)='n', 0x1}], 0x1)

17m59.541469864s ago: executing program 7 (id=1186):
timer_create(0x0, 0x0, &(0x7f0000bbdffc))

17m57.01587338s ago: executing program 36 (id=1186):
timer_create(0x0, 0x0, &(0x7f0000bbdffc))

9m51.120522338s ago: executing program 0 (id=2179):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1818e5b, &(0x7f00000003c0), 0x2a, 0x644, &(0x7f0000000400)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

9m48.299748071s ago: executing program 0 (id=2185):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000000300)="ea", 0x1, 0x7a})

9m46.725275595s ago: executing program 0 (id=2189):
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2808080, &(0x7f00000007c0)=ANY=[], 0x1, 0x6bb, &(0x7f0000001940)="$eJzs3U9sHGfdB/DvbDZrb14pdds0zYsQtRqpgkYkdlYlQUJqQAjlEKEILr1aidNYcdLKcVFaIbIBChInTqgHDkUoHHpCCCGVE6KckZC4cMo9EjcOOQCLZnZ2vV5vHLv5s277+UjjeZ595nme3/w6M7s722gCfGadfS37uyly9ti5G2X9zu3O6p3bnauDcpKZJI2k2V+laCfFR8mZ9Jf8f/liPVxxv3leufth0Xzvg06/1qyXavvGdv22mLhlN5kdVvYlme8X/73jYbeMVy3VOBc2xtuV5rBUDOMuE3Z0kDiYtt4W3Y3GxgO77/y8Bfasm/33zS3mkgNJZov6VK+vDg++Mkzfttem7pOLAwAAAB6Xid/lRz11L/dyIwefTDgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6VD0nxlY1EtjUJ5PUT3/P0lr5Jn6rSmH+5DevVStvvPUtAMBAAAAAAAAgIfywr3cy40cHNR7RfWb/4tV5VD19//yVq5nOWs5nhtZynrWs/aFxSRzIwO1biytr68tpj3e8xcpe/Z6vZv9njk5sefJzXF1xwOd9H8abNkIAAAAAAAAAD6zfpizG7//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXlAk+/qrajk0KM+l0Uwym6RVzA83bk053If2p2kHAAAAAI9fu14fLP7bL/SK6jv/4erb/WzeyrWsZyXrWc1yLlb3AlJ962/8rdtZvXO7c7Vctg789X/uKo5qxPTvPUyeeaHa4rlhj7P5Vr6bY5nP+axlJd/LUtaznPl8syotpchcffdi7s7tdgaxbo33zKba+fHYXhgpl/EdqSJp51JWqtiO50JrEHqj3u7IyGx/aCVjM94qs1O8Wtthji7W63KPfl6v94a5as/3DzOyUOe+zMbTo3nfmvtdHifjMy2mMbwHdWhjlrI6PtPHyvmBel3m+iePN+cPuJXWu7m5vjkT3Z+VtcHRd3j7nCdf+vufz19uXLty+dL1Y3vnMPqYxo+Jzkgmnt9RJlbLTHQfIhOzDxP/o9Oqs9G/im5/tdxXtwyuli9WfQ9mJd/OG7mY5ZzKQhZzOgv5ak6mk5MjeX1u+7xW51pjd+fa0S/WhfI96acj701PzMz9Gsq8Pj2S19Er3VzVNvrKRpae2UGWilYmZ+kfE0Npfq4ulHP8aOQdZ/rGM7E4kolnt8/Er/7TS3J99dqVtctLb+5wvpfqdXnavrv52vzrR7JDu1fvbnm8PFP+x0r/bWP06Cjbnh20jeWrVf/i0qwH29TWSnU+99sedKaWIx2+NWmkftvzE2fpVG1HRto2fcrJG1kdfgoBYA878PKBVvtu+6/t99s/bl9un5v9xszpmc+3sv8vzT/u+23jN42vFS/n/fwgB6cdKQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBpcf/udK0urq8tre7CQxiMe8NbEpkEq+q+09sa+f1ILM9sdUb9Lsk331qOPJ/WTle6/TTvJnkhdmk9grplMaDo3fKWdNEZTd2WPPOAOeBxOrF9988T1t9/58srVpdeXX1++dvL0qVdPdb6yePPEpZXV5YX+32lHCTwOGx8Dph0JAAAAAAAAAAAAsFNP4p83TJi26E5hXwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBPprOvZX83RRYXji+U9Tu3O6vlMihvbNlM0khSfD8pPkrOpL9kbmS44n7zvHL3w1++9N4HnY2xmoPtG2P9fv+vXm+Xe9Gtl8wn2VevH2xmR+NdGBmvu8vA+orhHpYJOzpIHEzb/wIAAP//WEIEmQ==")
socket$kcm(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x80805, 0x0)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44)

9m44.226128697s ago: executing program 0 (id=2195):
syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1818e5b, &(0x7f00000003c0), 0x2a, 0x644, &(0x7f0000000400)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000003040)={0x8, {"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", 0x1000}}, 0xd31)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)

9m40.977080231s ago: executing program 0 (id=2202):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000000)={[{@grpquota}, {@attr2}, {@lazytime}, {@qnoenforce}]}, 0x1, 0xb989, &(0x7f0000001280)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2)
ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8})

9m36.841477837s ago: executing program 0 (id=2207):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="06", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="af278d5dce87b01dcbd67184e298d36f", 0x10}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000140)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ace0ee77", 0x5}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="ffe2", 0x2}, {&(0x7f00000006c0)="7940e900e0", 0x5}, {&(0x7f0000000100)="f009982057", 0x5}], 0x7}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121f722fe", 0x5}, {&(0x7f0000000280)="e3a00a47e0", 0xffffff48}, {&(0x7f0000000240)="b09c9e4239984af70cca74c668"}], 0x3}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

9m21.460167293s ago: executing program 37 (id=2207):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="06", 0x1}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0", 0x2}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000000700)="af278d5dce87b01dcbd67184e298d36f", 0x10}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000140)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0x1}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f00000004c0)="d8ace0ee77", 0x5}, {&(0x7f0000001600)="f2", 0x1}, {&(0x7f0000000500)="ffe2", 0x2}, {&(0x7f00000006c0)="7940e900e0", 0x5}, {&(0x7f0000000100)="f009982057", 0x5}], 0x7}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f00000005c0)="1121f722fe", 0x5}, {&(0x7f0000000280)="e3a00a47e0", 0xffffff48}, {&(0x7f0000000240)="b09c9e4239984af70cca74c668"}], 0x3}}], 0x4, 0x4000000)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

6m18.060984529s ago: executing program 2 (id=2591):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000007b80)=ANY=[@ANYBLOB="12010000000000106a058400000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0xc, 0x38, {0x38, 0x21, "12aaf462ab1910d461594e4df53159e606230f7c84e2c088afe016a33a87a6236c4e012e9b46f02caac699580e1f910061b7a4804d7f"}}, &(0x7f0000000480)=ANY=[@ANYBLOB="e60202e6ffff0103"], &(0x7f0000000240)=ANY=[@ANYBLOB="000f190000df050f190001141004091353e79d3803db64a42861229614197f445087783965d7cce9561a6f28413bb3a90455afd7"], &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0x0, 0x9, "048dd2e9", "f2bd95db"}}, 0x0}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
sendmmsg$inet(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b80)='Q', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b8", 0x1}], 0xef}, 0x1000000}], 0x2, 0x4000000)
socket(0x10, 0x80002, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f00000004c0)=@ethtool_stats})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10)
unshare(0x22020600)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000180)=0x7, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000003ffffef410000000000000001000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r3, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
setsockopt$sock_timeval(r4, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10)
recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700})
r5 = socket(0x200000000000011, 0x2, 0x1000000)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x400, 0x3, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000100)={0x0, r5}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0)

6m14.195524605s ago: executing program 2 (id=2600):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e23, 0xb9ad, @remote, 0x37f}}, [0x7fffffff, 0xfffffffffffff575, 0x0, 0xde1f, 0xfffffffffffffff8, 0x5, 0x8, 0x2, 0x8003, 0x3c, 0x8, 0x2, 0x3ff, 0x100, 0xffffffffffffff43]}, &(0x7f0000000080)=0x100)
syz_io_uring_setup(0x1e1e, &(0x7f00000000c0)={0x0, 0x123d, 0x8, 0x0, 0x1d6}, &(0x7f0000002000), &(0x7f0000000000))
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, {0x0, r3}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socketpair(0xa, 0xa, 0x9, &(0x7f0000000000))
socketpair(0x2, 0x80000, 0x5, &(0x7f0000000080))
syz_usb_connect$rtl8150(0x4, 0x0, 0x0, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x20840, 0x191)
io_uring_setup(0x16d9, &(0x7f0000000200)={0x0, 0x5fc6, 0x40, 0x4, 0x40385, 0x0, r5})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = dup(r6)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, &(0x7f0000000080)=0x8)

6m9.799334765s ago: executing program 2 (id=2609):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000480)={0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0xa, 0xb9, 0x3, 0x8e, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0xbaf7}, {0x1, 0x3, 0x38, 0xb, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x7fffffff}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000, 0x280a00})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m8.684900774s ago: executing program 2 (id=2613):
prlimit64(0x0, 0xe, &(0x7f0000000340)={0xb, 0x88}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0xfffffffe, 0x8, 0x9}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x7ff, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0xfffffffd}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x80006, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x83, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x280, 0x7fffffff, 0x37d, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x3, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x4, 0xe}, {0xfffffff5, 0x8, 0x702b, 0x8, 0x4, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x80000001, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0xa, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x11, 0x5, 0x8, 0xfffffffe, 0x405b9, 0x6}, {0x9, 0x1, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x202, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0xffffffb7, 0xef, 0x202}, {0x2, 0xa, 0x1, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x2, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x7, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x2007, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0xe6, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0xffffff09, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x10104a8, 0x0, 0x81, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

6m5.589337714s ago: executing program 2 (id=2619):
r0 = getpid()
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000980)={0xfff7, 0x6, 0x3, 0x8e, 0xd, 0x81, 0x4}, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x29, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
r3 = syz_pidfd_open(r0, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d69736f383835392d352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c758d695f786c6174653d312c757466383d302c696f636861727365743d6d616363726f617469616e2c696f636861727365743d6d61636761656c69632c616c6c6f775f7574696d653d30303030303030303030303030303030303030303532372c6e66732c6e6f6e756d7461696c3d302c696f636861727365743d63703836352c7569643d", @ANYRES64=r3, @ANYBLOB="2c636f6465706167653d3835352c004c87a56b54e38109000000b98d86d772421a964d437fff01c5e125acb191c125f8030000000000009dba05feee081e91fc61a0fef5511251"], 0xff, 0x249, &(0x7f0000000240)="$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")
creat(&(0x7f00000000c0)='./file0\x00', 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)=@ipmr_newroute={0x140, 0x18, 0x200, 0x70bd2d, 0x25dfdbfb, {0x80, 0x80, 0x80, 0x42, 0xfe, 0x2, 0xff, 0x6, 0x100}, [@RTA_SRC={0x8, 0x2, @broadcast}, @RTA_IIF={0x8, 0x3, r2}, @RTA_TABLE={0x8, 0xf, 0x3}, @RTA_METRICS={0x102, 0x8, 0x0, 0x1, "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"}, @RTA_SPORT={0x6, 0x1c, 0x4e23}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x4000041)

6m1.672848559s ago: executing program 2 (id=2627):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0xffffffffffffffff]}, 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0xffffffffffffffff, 0x0, 0x31, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x1d, r1, 0x0, {0x1, 0x1, 0x3}, 0xfd}, 0x18, &(0x7f0000000980)={&(0x7f0000000840)="744fdfb21b15b66343eaeabb0e5b779d37819a5140ef09526151b9fa6b956979681ca224f3ae9ad644f039f1ba84fe3bb014efa5317b571d196f13244167e091806cfe1534b8aa5f2d55e8cdfcbc9d19fce6c051be154c3c619a1f1cbebeb53c68db6f8ec9292f7aabf1c19838cc9472b07de1303406cd4277209678cb7781e4dbb24469b1a00d274e314d0a463cc80f0d73257550001bf81e9d9acb16be8e97a4d4fde5b24711d8f452128e2d6bced681e87b8ec8c3c63afb62e15200d551e428e4db1d72", 0xc5}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x2)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x4c60d085c1424085, 0xaa, &(0x7f0000001480)=""/170}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000a33516a646470d70ffe2f8ffffff0000000000000000000071"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000a00)={0x3d0, 0x1d, [{}, {0xf, 0x1}, {0x9, 0x1}, {0xd, 0x1}, {0x3}, {0xf}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0xe, 0x1}, {0x0, 0x1}, {0x1}, {0x9, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x6, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0x3}, {0x4}, {0x8, 0x1}]})

5m57.968251704s ago: executing program 38 (id=2627):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000480)={[0xffffffffffffffff]}, 0x8, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000600), 0xffffffffffffffff, 0x0, 0x31, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
sendmsg$can_j1939(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x1d, r1, 0x0, {0x1, 0x1, 0x3}, 0xfd}, 0x18, &(0x7f0000000980)={&(0x7f0000000840)="744fdfb21b15b66343eaeabb0e5b779d37819a5140ef09526151b9fa6b956979681ca224f3ae9ad644f039f1ba84fe3bb014efa5317b571d196f13244167e091806cfe1534b8aa5f2d55e8cdfcbc9d19fce6c051be154c3c619a1f1cbebeb53c68db6f8ec9292f7aabf1c19838cc9472b07de1303406cd4277209678cb7781e4dbb24469b1a00d274e314d0a463cc80f0d73257550001bf81e9d9acb16be8e97a4d4fde5b24711d8f452128e2d6bced681e87b8ec8c3c63afb62e15200d551e428e4db1d72", 0xc5}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0, 0xdddd0000})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000005c0))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0, 0x4})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x2)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x4c60d085c1424085, 0xaa, &(0x7f0000001480)=""/170}]})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000a33516a646470d70ffe2f8ffffff0000000000000000000071"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, 0x0)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000a00)={0x3d0, 0x1d, [{}, {0xf, 0x1}, {0x9, 0x1}, {0xd, 0x1}, {0x3}, {0xf}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0xe, 0x1}, {0x0, 0x1}, {0x1}, {0x9, 0x1}, {}, {0x2, 0x1}, {0x6, 0x1}, {0xa}, {0x1, 0x1}, {0x3, 0x1}, {0x6}, {0x6, 0x1}, {0x8, 0x1}, {0xd, 0x1}, {0x3}, {0x4}, {0x8, 0x1}]})

4m11.243432483s ago: executing program 4 (id=2830):
socket$nl_generic(0x10, 0x3, 0x10)
socket$unix(0x1, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000)=<r1=>0x0, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
syz_io_uring_submit(r1, 0x0, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
io_uring_enter(r0, 0x5040, 0x7ccb, 0x4c, 0x0, 0x0)

4m10.367665517s ago: executing program 4 (id=2831):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "1aedf707"}}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'cp775'}}, {@part={'part', 0x3d, 0x8001}}, {@uid}, {@umask={'umask', 0x3d, 0x6}}, {@nodecompose}, {@uid}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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")
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$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")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000110001002bbd7000fedb5f25fe8000000000000000000000000000bb000004d30a0033000c0015005b073500000000007d1dd6a50e813232d012040b914e3273d498be5b69152993f8d66b96ee4713e8f510fd603431709997d1112a93355267152c7317977e0c324a0bb733c44b06338049d49716b7d774e5b45fdb00da1678b5bc4f16f031d861d290904f26de32d279"], 0x34}}, 0x40)
truncate(&(0x7f0000001c40)='./file1\x00', 0xe4a0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x1b0, 0x478, 0x478, 0x0, 0x1b0, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@loopback, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'veth1\x00', 'netpci0\x00', {0xce20bd18e82654d6}, {}, 0x3a, 0x3, 0x0, 0x4e}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678)
openat$tun(0xffffffffffffff9c, 0x0, 0x68240, 0x0)
getsockname$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f00000001c0))
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000140)="24000000010006", 0x7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)

4m8.129290281s ago: executing program 4 (id=2838):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) (fail_nth: 3)

4m6.367737407s ago: executing program 4 (id=2844):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x55}, 0x20044010)

4m5.344302575s ago: executing program 4 (id=2847):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[{@type={'type', 0x3d, "1aedf707"}}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'cp775'}}, {@part={'part', 0x3d, 0x8001}}, {@uid}, {@umask={'umask', 0x3d, 0x6}}, {@nodecompose}, {@uid}]}, 0x3, 0x5f4, &(0x7f0000000640)="$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")
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00a717cf64394a00dc299b573660f498c4d99aac48af10923f703f53e58070c2bf4575228d0e471df7101ac03b8d48a1b0fc276e395f25b63e9a27cd2ab98888989eec154d97b4dbcf"], 0x1, 0xa09, &(0x7f0000001540)="$eJzs3UuMHEfdAPDq2Z31M5/H+WyyOCaxCSThkd14vZiHBXEUX7DiiFukiIvlOMHCMQhHgkQ52D5xI1FkrjzEKZcIEBK5ICsnLpGIJS45BQ4csIwUiQME7EW7WzU7+/eMemZt73h2fj+ptqa6aqaqZ3t6erq7qhIwthpLf+fnp6uULr3z5tG/P/y3LYtLnmiXaC39nexINVNKVU5Phtf7cGI5vv7Raye7xVWaW/pb0umZa+3nbkspnU/70uXUSnsuXXnjvbmnj184dnH/+28dvnpn1h4AAMbLty4fnt/9lz/dv/Pjtx84kja1l5fj81ZOb8/H/UfygX85/m+k1emqI3SaCuUmc2iEchNdynXW0wzlJnvUPxVet9mj3Kaa+ic6lnVbbxhlZTtupaoxsyrdaMzMLP8mT0u/66eqmbOnz7xwbkgNBW67fz6YUtonCMI4hoUdw94DASyL1wtvcj6eWbg17Veb7K/+a082uj8fboP13v7VP1r1/+qCPQ63z0bdmsp6lc/R9pyO1xHi/UuDfv7L68XrEc0+29nrOsKoXF/o1c6JdW7HWvVqf9wuNqqv57i8D98I+Z2fn/g/HZX/MdDdv5z/F4SxDQvD3gEBd61439xCVvLjfX0xf1NN/uaa/C01+Vtr8rfV5MM4++3LP0mvVyu/8+Nv+kHPh5XzbPfk+P8GbE88Hzlo/fG+30Hdav3xfmK4m/3+xLOnvvL8c1eW7/+v2tv/jby978vpVv5sXc4FyvnCeF69fe9/a3U9jR7l7g3tuadL+aXHu1aXq3atvE7q2M/c1I7p1c/b0avc3tXlWqHclhw2h/bG45Ot4Xnl+KPsV8v7NRnWtxnWYyq0o+xXduY4tgPWomyPve7/L9vndGpWL5w+c+rxnC7b6R8nmpsWlx9Y53YDt67f/j/TaXX/n+3t5c1G535hx8ryqnO/0ArL53osP5jT5XvuOxNblpbPnPzemedv98rDmDv3yqvfPXHmzKkfeOCBBx60Hwx7zwTcabMvv/T92XOvvPrY6ZdOvHjqxVNnDx46dHBu7tBXD87PLh3Xz3Ye3QMbycqX/rBbAgAAAAAAAAAAAPTrh8eOXvnzu1/+YLn//0r/v9L/v9z5W/r//zj0/4/95Es/+NIPcGeX/KUyYYDVqVCumcP/h/buCvXsDs/7RI7b8/jl/v+lujiua2nPfWF5HL+3lAvDCdw0XspUGIMkzhf46RxfzPEvEwxRtaX74hzXjW9dtvUyPoVxKUZT+b+VraGMY1L6f/ca16ns/3euQxu5/dajO+Gw1xHo7h/G/xaEsQ0LC2bxAO4Ow57/s5z3LPHZP3xz82Ioxa49uXp/GccvhVtxt88/qf6NNf9ne/67vvd/Yca81trq/ffPrn7QUW3a02/9cf3LONC7Bqv/41x/WZtHUn/1L/wi1B8vCPXpP6H+rX3Wf9P6711b/f/N9Ze37dGH+q1/ucVVY3U74nnjcv0vnjcurof1L2N7Drz+a5yo8UauH8bZqMwzO6hRmf+3l3gfxpdyuuwIy30Ocb6TQdtf7q8o3wO7w+tXNd9v5v8dbV/Lcd3nocz/W7bHVpd0oyPd7PLebtR9DYyqD13/E4SxDQsLC3f2hFaNoVbO0N//Yf9OGHb9w37/68T5f+MxfJz/N+bH+X9jfpz/N+bH+fVifpz/N76fcf7fmH9feN04P/B0Tf4na/L31OTfX5O/tyb/UzX5+2vyH6jJf7Am/96a/Idq8j9Tk//ZmvyHa/Ifrcn/XE3+Rlf6o4zr+sM4i/3zfP5hfJTrP70+/7tq8oHR9dO3Dzz13G++3Vru/z/VPh9SruMdyelm/u38o5yO171TR3ox792c/mvIv9vPd8A4ieNnxO/3R2rygdFV7vPy+YYxVHUfsaffcat6HeczWj6f4y/k+Is5fizHMzmezfGBHM+tU/u4M5769e8Ov16t/N7fEfL7vZ889geK40Qd7LM98fzAoPezx3H8BnWr9a+xOxgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDQNJb+zs9PVyldeufNo88ePz27uOSJdonW0t/JjlSz/byUHs/xRI5/nh9c/+i1k53xjcV4KqUqzaUqVe3l6Zlr7Zq2pZTOp33pcmqlPZeuvPHe3NPHLxy7uP/9tw5fvYNvAQAAAGx4/wsAAP//2XsNow==")
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000110001002bbd7000fedb5f25fe8000000000000000000000000000bb000004d30a0033000c0015005b073500000000007d1dd6a50e813232d012040b914e3273d498be5b69152993f8d66b96ee4713e8f510fd603431709997d1112a93355267152c7317977e0c324a0bb733c44b06338049d49716b7d774e5b45fdb00da1678b5bc4f16f031d861d290904f26de32d279"], 0x34}}, 0x40)
truncate(&(0x7f0000001c40)='./file1\x00', 0xe4a0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x618, 0x1b0, 0x478, 0x478, 0x0, 0x1b0, 0x548, 0x548, 0x548, 0x548, 0x548, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast1, [], [0x0, 0xff000000], 'team0\x00', 'vlan1\x00', {}, {}, 0x11}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x5c, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [0x0, 0xff], [0x0, 0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xff]}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x1, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x0, 0x4e20, 0x0, 0xfffd], [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xfd, 0xfd]}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x18, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0xff000000, 0xffffff00], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8, 0x48000000}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x8, 0x4, @ipv6=@loopback, 0x4e23}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff], 'veth0_vlan\x00', 'veth1_to_bond\x00', {0x9865820c52afa8d5}, {0xff}, 0x84, 0x1, 0x0, 0x28}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x37}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xd}, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 'veth1\x00', 'netpci0\x00', {0xce20bd18e82654d6}, {}, 0x3a, 0x3, 0x0, 0x4e}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x678)
openat$tun(0xffffffffffffff9c, 0x0, 0x68240, 0x0)
getsockname$llc(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f00000001c0))
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000140)="24000000010006", 0x7)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009)

4m3.418115773s ago: executing program 4 (id=2852):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
creat(&(0x7f0000000000)='./file1\x00', 0xc9)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x13}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f0000000440)={0x0, 0x23, 0x2e, {0x2e, 0x35, "9c8510acd1894839d4195aa2bb3b5aca5a3c39a7909cdc2611ee722217d654db60bad05768396a0500000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

13.150788118s ago: executing program 8 (id=3214):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x808010, &(0x7f0000000200)=ANY=[@ANYBLOB="75737271756f74612c67727071756f2ef6f1aae11601658d0e886d74612c67bcd763f96ba69d6e7d727071756f74615f696e6f64655f686172646c696d69743d36676b3535452c696e646f36"])
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x25, 0x55a2, &(0x7f0000000840)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
fallocate(r1, 0x0, 0x800003d, 0x7ff)
lseek(r1, 0xcbb, 0x3)
fallocate(r0, 0xf, 0xfffffffffffffffb, 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
r3 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000740)={0x0, 0x96})
prlimit64(r3, 0xf, &(0x7f0000000180)={0x80000000, 0x9}, &(0x7f00000001c0))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async)
mount$tmpfs(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x808010, &(0x7f0000000200)=ANY=[@ANYBLOB="75737271756f74612c67727071756f2ef6f1aae11601658d0e886d74612c67bcd763f96ba69d6e7d727071756f74615f696e6f64655f686172646c696d69743d36676b3535452c696e646f36"]) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x25, 0x55a2, &(0x7f0000000840)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) (async)
fallocate(r1, 0x0, 0x800003d, 0x7ff) (async)
lseek(r1, 0xcbb, 0x3) (async)
fallocate(r0, 0xf, 0xfffffffffffffffb, 0x40) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) (async)
syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r3) (async)
ptrace$getregset(0x4204, r3, 0x201, &(0x7f0000000740)={0x0, 0x96}) (async)
prlimit64(r3, 0xf, &(0x7f0000000180)={0x80000000, 0x9}, &(0x7f00000001c0)) (async)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async)

8.666953644s ago: executing program 8 (id=3222):
r0 = socket(0x2, 0x400000000002, 0x0)
setsockopt(r0, 0x0, 0x1e, &(0x7f0000000080), 0x30)

6.981660143s ago: executing program 9 (id=3226):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r0, 0x6, &(0x7f0000000340)={0x0, 0x2, 0x201, 0x7fffffff})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x20006, 0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x98d})

6.806928254s ago: executing program 8 (id=3227):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r0, 0xffff, 0x4, 0x0, 0x0)

6.652797615s ago: executing program 1 (id=3228):
r0 = socket(0x18, 0x2, 0x0)
close(r0)
r1 = socket(0x2, 0x3, 0x0)
close(r1)
r2 = socket(0x18, 0x2, 0x0)
setsockopt(r2, 0x1000000029, 0x31, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88)
setsockopt(r1, 0x1000000029, 0x32, &(0x7f0000000140)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x200}, 0x5, 0x8001, 0x24b83c97})
r3 = socket(0x18, 0x3, 0x0)
connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
write(r0, 0x0, 0x0)

5.881834486s ago: executing program 6 (id=3229):
setitimer(0x0, &(0x7f0000000000)={{0x3, 0x2}, {0x800, 0x4}}, 0x0)
getitimer(0x0, 0xfffffffffffffffe)

5.845844166s ago: executing program 9 (id=3230):
setuid(0xffffffffffffffff)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket(0x800000018, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
openat(0xffffffffffffffff, 0x0, 0x2, 0x28)
getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1006, 0x0, 0x0)
listen(r0, 0x1)
r1 = socket(0x18, 0x4001, 0x0)
fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x100000000000000})
connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c)
sendto$inet(r1, &(0x7f0000000180)="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", 0xfdbf, 0x7, 0x0, 0x0)

4.902073923s ago: executing program 1 (id=3231):
open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x9c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r0 = socket(0x18, 0x1, 0x0)
setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4)

4.857239515s ago: executing program 9 (id=3232):
r0 = socket(0x2, 0x3, 0x0)
r1 = dup(r0)
r2 = dup(r1)
setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000300), 0x0)

4.814085216s ago: executing program 8 (id=3233):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x141, 0x145)
open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0)

4.664671643s ago: executing program 6 (id=3234):
mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0xd02)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1)
link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x0)
rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00')
mkdir(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1)
r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60)

3.883242064s ago: executing program 6 (id=3235):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
select(0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x842)

3.79339131s ago: executing program 1 (id=3236):
r0 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x14, &(0x7f0000000080), 0x0)

3.638766612s ago: executing program 8 (id=3237):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x400000c1, 0x100000001})
open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0)
fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010001, 0xffffffffffffffff})

3.156237157s ago: executing program 9 (id=3238):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))

2.844918069s ago: executing program 1 (id=3239):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xfffffffe, @empty, 0xfffffffe}, 0x1c)

2.057974003s ago: executing program 6 (id=3240):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x4008800)

2.057567727s ago: executing program 9 (id=3241):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000000206010800000000000000000000e90005000500000000000500010007020000e8ff0300000000000900020073797a32"], 0x38}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.026221392s ago: executing program 8 (id=3242):
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fsync(0xffffffffffffffff)

1.730066376s ago: executing program 1 (id=3243):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0xfffffffffffffffe, 0x3, 0xe691, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0xd1, 0x0, 0x6, 0x6], 0x0, 0x8340})

1.122904476s ago: executing program 6 (id=3244):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
r1 = dup(r0)
shutdown(r1, 0x1)

1.004381218s ago: executing program 9 (id=3245):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, 0x0})

318.61688ms ago: executing program 1 (id=3246):
r0 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051)

0s ago: executing program 6 (id=3247):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
sendto$inet6(r0, &(0x7f0000000540)='\\', 0x1, 0x800, &(0x7f0000000480)={0xa, 0x4e21, 0x0, @private2, 0x5}, 0x1c)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ebackuproot' instead
[ 1625.130176][T16453] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2944 (16453)
[ 1625.161171][T16453] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1625.172123][T16453] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[ 1625.388479][ T8460] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1625.404552][T16453] BTRFS error (device loop6): failed to load root extent
[ 1625.412730][T16453] BTRFS warning (device loop6): try to load backup roots slot 1
[ 1625.474618][ T8460] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1625.488631][T16453] BTRFS warning (device loop6): couldn't read tree root
[ 1625.496067][T16453] BTRFS warning (device loop6): try to load backup roots slot 2
[ 1625.508668][   T36] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1625.521674][T16453] BTRFS warning (device loop6): couldn't read tree root
[ 1625.528861][T16453] BTRFS warning (device loop6): try to load backup roots slot 3
[ 1625.648910][T16453] BTRFS info (device loop6): rebuilding free space tree
[ 1625.683530][T16453] BTRFS info (device loop6): checking UUID tree
[ 1625.704980][T16453] BTRFS info (device loop6): enabling ssd optimizations
[ 1625.712820][T16453] BTRFS info (device loop6): turning off barriers
[ 1625.719743][T16453] BTRFS info (device loop6): disabling tree log
[ 1625.732440][T16453] BTRFS info (device loop6): turning on async discard
[ 1625.739775][T16453] BTRFS info (device loop6): enabling free space tree
[ 1625.747037][T16453] BTRFS info (device loop6): force clearing of disk cache
[ 1625.754496][T16453] BTRFS info (device loop6): enabling auto defrag
[ 1625.761128][T16453] BTRFS info (device loop6): trying to use backup root at mount time
[ 1625.769621][T16453] BTRFS info (device loop6): use zstd compression, level 3
[ 1626.476232][T16269] Bluetooth: hci2: command tx timeout
[ 1626.761444][T16484] binder: 16482:16484 ioctl 4018620d 0 returned -22
[ 1627.331065][ T7406] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1627.702772][T16483] loop9: detected capacity change from 0 to 32768
[ 1627.724065][T16483] (syz.9.2946,16483,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1627.755822][T16483] (syz.9.2946,16483,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1627.950129][T16483] JBD2: Ignoring recovery information on journal
[ 1628.041594][T16490] loop1: detected capacity change from 0 to 1024
[ 1628.137839][T16483] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1628.277837][T16483] ocfs2: Unmounting device (7,9) on (node local)
[ 1628.363739][T16269] Bluetooth: hci2: command tx timeout
[ 1629.202969][T13263] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1629.463564][T13263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1629.474248][T13263] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1629.515567][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2950'.
[ 1629.614135][T16269] Bluetooth: hci3: unexpected event for opcode 0x0c12
[ 1629.633691][T13263] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1629.647774][T13263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1629.657718][T13263] usb 2-1: SerialNumber: syz
[ 1629.781770][T16458] chnl_net:caif_netlink_parms(): no params data found
[ 1630.198396][T13263] usb 2-1: 0:2 : does not exist
[ 1630.332668][T16269] Bluetooth: hci2: command tx timeout
[ 1630.417364][T13263] usb 2-1: USB disconnect, device number 13
[ 1630.766912][ T7602] udevd[7602]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1631.233533][T12040] hfsplus: b-tree write err: -5, ino 4
[ 1631.366383][ T6008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1631.727676][T16512] loop9: detected capacity change from 0 to 1024
[ 1631.805952][ T6008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1631.918455][T16514] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1632.046804][T16517] loop1: detected capacity change from 0 to 8
[ 1632.107523][ T6008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1632.314984][T16516] SQUASHFS error: zstd decompression error: 10
[ 1632.324987][T16269] Bluetooth: hci2: command tx timeout
[ 1632.369831][T16516] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1632.378742][T16516] SQUASHFS error: Failed to read block 0x60: -5
[ 1632.959448][T16516] SQUASHFS error: zstd decompression error: 10
[ 1632.965832][T16516] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1632.974533][T16516] SQUASHFS error: Failed to read block 0x60: -5
[ 1633.113993][T16514] loop6: detected capacity change from 0 to 32768
[ 1633.144184][   T30] audit: type=1800 audit(45074430.970:319): pid=16516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2953" name="/" dev="loop1" ino=1 res=0 errno=0
[ 1633.216523][T16514] 
[ 1633.216523][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.216523][T16514] 
[ 1633.423719][ T6008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1633.512166][T16514] ERROR: (device loop6): diWrite: ixpxd invalid
[ 1633.512166][T16514] 
[ 1633.526059][T16514] ERROR: (device loop6): txAbort: 
[ 1633.526059][T16514] 
[ 1633.538960][T16514] overlayfs: failed to resolve './bus': -2
[ 1633.632896][T16514] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1633.632896][T16514] 
[ 1633.671382][T16514] 
[ 1633.671382][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.671382][T16514] 
[ 1633.682397][T16514] 
[ 1633.682397][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.682397][T16514] 
[ 1633.693364][T16514] 
[ 1633.693364][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.693364][T16514] 
[ 1633.707348][T16514] 
[ 1633.707348][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.707348][T16514] 
[ 1633.718336][T16514] 
[ 1633.718336][T16514]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.718336][T16514] 
[ 1633.731321][  T112] 
[ 1633.731321][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1633.731321][  T112] 
[ 1634.571149][ T3448] 
[ 1634.571149][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1634.571149][ T3448] 
[ 1634.669490][ T3448] 
[ 1634.669490][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1634.669490][ T3448] 
[ 1634.740374][  T111] 
[ 1634.740374][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1634.740374][  T111] 
[ 1634.773498][ T3448] read_mapping_page failed!
[ 1634.778836][ T3448] ERROR: (device loop6): txAbort: 
[ 1634.778836][ T3448] 
[ 1634.786766][ T3448] jfs_write_inode: jfs_commit_inode failed!
[ 1634.903347][ T7406] 
[ 1634.903347][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1634.903347][ T7406] 
[ 1634.993580][ T7406] 
[ 1634.993580][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1634.993580][ T7406] 
[ 1635.132260][T16458] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1635.141591][T16458] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1635.176283][T16532] binder: 16531:16532 ioctl 4018620d 0 returned -22
[ 1635.256294][T16458] bridge_slave_0: entered allmulticast mode
[ 1635.336077][T16458] bridge_slave_0: entered promiscuous mode
[ 1635.373449][T16530] loop9: detected capacity change from 0 to 512
[ 1635.510470][T16458] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.520420][T16458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.533683][T16458] bridge_slave_1: entered allmulticast mode
[ 1635.549409][T16458] bridge_slave_1: entered promiscuous mode
[ 1635.682095][T16530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1635.763350][ T6008] bridge_slave_1: left allmulticast mode
[ 1635.770895][ T6008] bridge_slave_1: left promiscuous mode
[ 1635.777864][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1635.960936][ T6008] bridge_slave_0: left allmulticast mode
[ 1635.967068][ T6008] bridge_slave_0: left promiscuous mode
[ 1635.974239][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1636.280364][T16539] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2959'.
[ 1636.418933][T16540] loop8: detected capacity change from 0 to 8
[ 1636.458451][T16539] input: syz1 as /devices/virtual/input/input55
[ 1636.597973][T16540] SQUASHFS error: zstd decompression error: 10
[ 1636.709872][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2960'.
[ 1636.720280][T16540] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1636.735365][T16540] SQUASHFS error: Failed to read block 0x60: -5
[ 1636.838607][T16540] SQUASHFS error: zstd decompression error: 10
[ 1636.970491][T16540] SQUASHFS error: zstd decompression failed, data probably corrupt
[ 1636.979008][T16540] SQUASHFS error: Failed to read block 0x60: -5
[ 1637.405989][   T30] audit: type=1800 audit(45074435.551:320): pid=16540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2960" name="/" dev="loop8" ino=1 res=0 errno=0
[ 1638.087093][T10077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1638.491467][T16269] Bluetooth: hci5: unexpected event for opcode 0x0c12
[ 1638.689703][ T6008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1638.762325][ T6008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1638.839840][ T6008] bond0 (unregistering): Released all slaves
[ 1638.955295][T16458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1639.111707][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2961'.
[ 1639.192068][T16458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1639.296154][ T6008] hsr_slave_0: left promiscuous mode
[ 1639.349601][ T6008] hsr_slave_1: left promiscuous mode
[ 1639.402061][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1639.409969][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1639.478158][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1639.487414][ T6008] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1639.684326][ T6008] veth1_macvtap: left promiscuous mode
[ 1639.719981][ T6008] veth0_macvtap: left promiscuous mode
[ 1639.730514][T16562] loop9: detected capacity change from 0 to 1024
[ 1639.758271][ T6008] veth1_vlan: left promiscuous mode
[ 1639.781606][ T6008] veth0_vlan: left promiscuous mode
[ 1640.033278][   T30] audit: type=1800 audit(45074438.352:321): pid=16562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2963" name="file2" dev="loop9" ino=22 res=0 errno=0
[ 1641.879955][T16574] loop9: detected capacity change from 0 to 32768
[ 1641.966838][T16574] 
[ 1641.966838][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1641.966838][T16574] 
[ 1642.116282][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1642.125355][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1642.248376][T16574] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1642.248376][T16574] 
[ 1642.259843][T16574] ERROR: (device loop9): txAbort: 
[ 1642.259843][T16574] 
[ 1642.270814][T16574] overlayfs: failed to resolve './bus': -2
[ 1642.305275][T16574] ERROR: (device loop9): dbAlloc: the hint is outside the map
[ 1642.305275][T16574] 
[ 1642.322798][T16574] 
[ 1642.322798][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.322798][T16574] 
[ 1642.338809][T16574] 
[ 1642.338809][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.338809][T16574] 
[ 1642.350750][T16574] 
[ 1642.350750][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.350750][T16574] 
[ 1642.361633][T16574] 
[ 1642.361633][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.361633][T16574] 
[ 1642.372462][T16574] 
[ 1642.372462][T16574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.372462][T16574] 
[ 1642.402371][  T112] 
[ 1642.402371][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1642.402371][  T112] 
[ 1642.604753][ T6008] team0 (unregistering): Port device team_slave_1 removed
[ 1642.665876][ T6008] team0 (unregistering): Port device team_slave_0 removed
[ 1643.235172][T16564] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2964'.
[ 1643.246399][T16573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1643.596352][T16458] team0: Port device team_slave_0 added
[ 1643.702030][T16458] team0: Port device team_slave_1 added
[ 1643.785560][ T3448] 
[ 1643.785560][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1643.785560][ T3448] 
[ 1643.882597][ T3448] 
[ 1643.882597][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1643.882597][ T3448] 
[ 1643.922631][  T111] 
[ 1643.922631][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1643.922631][  T111] 
[ 1643.935188][ T3448] read_mapping_page failed!
[ 1643.940635][ T3448] ERROR: (device loop9): txAbort: 
[ 1643.940635][ T3448] 
[ 1643.948406][ T3448] jfs_write_inode: jfs_commit_inode failed!
[ 1644.087851][T10077] 
[ 1644.087851][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1644.087851][T10077] 
[ 1644.151444][T10077] 
[ 1644.151444][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1644.151444][T10077] 
[ 1644.246562][T16585] binder: BINDER_SET_CONTEXT_MGR already set
[ 1644.253018][T16585] binder: 16581:16585 ioctl 4018620d 200000000040 returned -16
[ 1644.354571][T16458] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1644.362844][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1644.389522][T16458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1644.665009][T16458] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1644.676915][T16458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1644.705625][T16458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1645.278371][T16595] loop1: detected capacity change from 0 to 512
[ 1645.461449][T16595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1645.552967][T16458] hsr_slave_0: entered promiscuous mode
[ 1645.565429][T16458] hsr_slave_1: entered promiscuous mode
[ 1645.605344][T16458] debugfs: 'hsr0' already exists in 'hsr'
[ 1645.611598][T16458] Cannot create hsr debugfs directory
[ 1646.390337][T15582] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1646.890176][ T9413] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1647.041603][ T9413] usb 7-1: device descriptor read/64, error -71
[ 1647.555118][T16269] Bluetooth: hci5: unexpected event for opcode 0x0c12
[ 1648.179596][ T9413] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1648.378802][T16617] loop9: detected capacity change from 0 to 40427
[ 1648.400956][T16617] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1648.410506][T16617] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1648.450322][ T9413] usb 7-1: device descriptor read/64, error -71
[ 1648.461923][T16617] F2FS-fs (loop9): invalid crc value
[ 1648.569023][ T9413] usb usb7-port1: attempt power cycle
[ 1648.871936][T16617] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1648.927056][T16617] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1648.934462][T16617] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1649.223541][ T9413] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[ 1649.743784][T16634] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1650.875031][ T9413] usb 7-1: device descriptor read/8, error -71
[ 1650.893391][T16634] loop8: detected capacity change from 0 to 32768
[ 1651.052495][T16634] 
[ 1651.052495][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.052495][T16634] 
[ 1651.353457][T16458] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1651.572030][T16639] binder: BINDER_SET_CONTEXT_MGR already set
[ 1651.582758][T16639] binder: 16638:16639 ioctl 4018620d 200000000040 returned -16
[ 1651.605817][T16634] overlayfs: failed to resolve './bus': -2
[ 1651.655361][T16640] ERROR: (device loop8): diWrite: ixpxd invalid
[ 1651.655361][T16640] 
[ 1651.675294][T16640] ERROR: (device loop8): txAbort: 
[ 1651.675294][T16640] 
[ 1651.763920][T16634] ERROR: (device loop8): dbAlloc: the hint is outside the map
[ 1651.763920][T16634] 
[ 1651.791766][T16634] 
[ 1651.791766][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.791766][T16634] 
[ 1651.802902][T16634] 
[ 1651.802902][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.802902][T16634] 
[ 1651.814149][T16634] 
[ 1651.814149][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.814149][T16634] 
[ 1651.825076][T16634] 
[ 1651.825076][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.825076][T16634] 
[ 1651.836294][T16634] 
[ 1651.836294][T16634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.836294][T16634] 
[ 1651.863124][  T111] 
[ 1651.863124][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1651.863124][  T111] 
[ 1651.954045][T16458] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1652.098030][T16458] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1652.267849][T16458] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1652.353819][T16650] FAULT_INJECTION: forcing a failure.
[ 1652.353819][T16650] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1652.367574][T16650] CPU: 1 UID: 0 PID: 16650 Comm: syz.9.2981 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1652.367775][T16650] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1652.367835][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1652.367946][T16650] Call Trace:
[ 1652.368003][T16650]  <TASK>
[ 1652.368061][T16650]  __dump_stack+0x26/0x30
[ 1652.368248][T16650]  dump_stack_lvl+0x14c/0x1c0
[ 1652.368449][T16650]  dump_stack+0x1e/0x25
[ 1652.368615][T16650]  should_fail_ex+0x7da/0x8a0
[ 1652.368837][T16650]  should_fail+0x2a/0x40
[ 1652.369017][T16650]  should_fail_usercopy+0x2e/0x40
[ 1652.369225][T16650]  _copy_from_user+0x33/0x100
[ 1652.369429][T16650]  ___sys_sendmsg+0x11b/0x3b0
[ 1652.369612][T16650]  ? kmsan_get_metadata+0xf1/0x160
[ 1652.369845][T16650]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1652.370081][T16650]  ? __rcu_read_unlock+0x6c/0xd0
[ 1652.370277][T16650]  ? __fget_files+0x3b4/0x4a0
[ 1652.370433][T16650]  ? __fget_files+0x3b9/0x4a0
[ 1652.370583][T16650]  ? kmsan_get_metadata+0xf1/0x160
[ 1652.370792][T16650]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1652.371024][T16650]  __x64_sys_sendmsg+0x211/0x3e0
[ 1652.371204][T16650]  ? ksys_write+0x3ac/0x470
[ 1652.371400][T16650]  ? kmsan_get_metadata+0xf1/0x160
[ 1652.371617][T16650]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1652.371836][T16650]  ? kmsan_get_metadata+0xf1/0x160
[ 1652.372048][T16650]  ? kmsan_get_metadata+0xf1/0x160
[ 1652.372282][T16650]  x64_sys_call+0x1c60/0x3e70
[ 1652.372492][T16650]  do_syscall_64+0xc9/0xf80
[ 1652.372680][T16650]  ? clear_bhb_loop+0x40/0x90
[ 1652.372847][T16650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1652.373019][T16650] RIP: 0033:0x7f0f4099acb9
[ 1652.373133][T16650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1652.373265][T16650] RSP: 002b:00007f0f417ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1652.373416][T16650] RAX: ffffffffffffffda RBX: 00007f0f40c15fa0 RCX: 00007f0f4099acb9
[ 1652.373530][T16650] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000005
[ 1652.373626][T16650] RBP: 00007f0f417ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1652.373723][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1652.373817][T16650] R13: 00007f0f40c16038 R14: 00007f0f40c15fa0 R15: 00007ffe666b9c78
[ 1652.373966][T16650]  </TASK>
[ 1652.778477][ T3448] 
[ 1652.778477][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1652.778477][ T3448] 
[ 1652.964932][ T3448] 
[ 1652.964932][ T3448]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1652.964932][ T3448] 
[ 1653.186955][  T112] 
[ 1653.186955][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1653.186955][  T112] 
[ 1653.222322][ T3448] read_mapping_page failed!
[ 1653.227040][ T3448] ERROR: (device loop8): txAbort: 
[ 1653.227040][ T3448] 
[ 1653.234903][ T3448] jfs_write_inode: jfs_commit_inode failed!
[ 1653.348814][ T9998] 
[ 1653.348814][ T9998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1653.348814][ T9998] 
[ 1653.391862][ T9998] 
[ 1653.391862][ T9998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1653.391862][ T9998] 
[ 1654.407325][T16269] Bluetooth: hci5: unexpected event for opcode 0x0c12
[ 1655.457495][T16458] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1655.914243][T16458] 8021q: adding VLAN 0 to HW filter on device team0
[ 1656.032601][T12040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1656.040282][T12040] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1656.120663][T13263] usb 7-1: new full-speed USB device number 61 using dummy_hcd
[ 1656.322362][T12056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1656.330232][T12056] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1656.429511][T13263] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1656.441745][T13263] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1656.453370][T13263] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1656.655572][T13263] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1656.665565][T13263] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1656.674325][T13263] usb 7-1: Manufacturer: syz
[ 1656.679424][T13263] usb 7-1: SerialNumber: syz
[ 1656.778646][T16681] binder: BINDER_SET_CONTEXT_MGR already set
[ 1656.822473][T16681] binder: 16680:16681 ioctl 4018620d 200000000040 returned -16
[ 1657.323902][T13263] yealink 7-1:36.0: invalid payload size 0, expected 16
[ 1657.331632][T16685] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1657.417897][T13263] input: Yealink usb-p1k as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:36.0/input/input58
[ 1657.528998][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.537797][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.545240][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.553316][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.561305][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.571896][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.580486][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.588255][    C0] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[ 1657.595264][    C0] yealink 7-1:36.0: urb_ctl_callback - usb_submit_urb failed -90
[ 1657.901453][T13263] usb 7-1: USB disconnect, device number 61
[ 1658.373334][T16687] loop8: detected capacity change from 0 to 32768
[ 1658.431712][T16687] 
[ 1658.431712][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1658.431712][T16687] 
[ 1658.518791][T16690] loop1: detected capacity change from 0 to 512
[ 1658.647676][T16690] EXT4-fs: Ignoring removed bh option
[ 1658.761248][T16690] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[ 1659.182704][T16695] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[ 1659.189533][T16695] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1659.200011][T16695] vhci_hcd vhci_hcd.0: Device attached
[ 1659.209841][T16696] vhci_hcd: connection closed
[ 1659.242380][ T3448] vhci_hcd vhci_hcd.6: stop threads
[ 1659.253005][ T3448] vhci_hcd vhci_hcd.6: release socket
[ 1659.258616][ T3448] vhci_hcd vhci_hcd.6: disconnect device
[ 1659.384486][   T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[ 1659.479121][T16685] ERROR: (device loop8): diWrite: ixpxd invalid
[ 1659.479121][T16685] 
[ 1659.505918][T16687] overlayfs: failed to resolve './bus': -2
[ 1659.550907][T16685] ERROR: (device loop8): txAbort: 
[ 1659.550907][T16685] 
[ 1659.641116][T16687] ERROR: (device loop8): dbAlloc: the hint is outside the map
[ 1659.641116][T16687] 
[ 1659.656673][T16687] 
[ 1659.656673][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.656673][T16687] 
[ 1659.669375][T16687] 
[ 1659.669375][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.669375][T16687] 
[ 1659.680538][T16687] 
[ 1659.680538][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.680538][T16687] 
[ 1659.691439][T16687] 
[ 1659.691439][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.691439][T16687] 
[ 1659.707078][T16687] 
[ 1659.707078][T16687]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.707078][T16687] 
[ 1659.802826][  T111] 
[ 1659.802826][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1659.802826][  T111] 
[ 1660.511467][T12040] 
[ 1660.511467][T12040]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1660.511467][T12040] 
[ 1660.590171][T12040] 
[ 1660.590171][T12040]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1660.590171][T12040] 
[ 1660.663848][  T112] 
[ 1660.663848][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1660.663848][  T112] 
[ 1660.676416][T12040] read_mapping_page failed!
[ 1660.681438][T12040] ERROR: (device loop8): txAbort: 
[ 1660.681438][T12040] 
[ 1660.689244][T12040] jfs_write_inode: jfs_commit_inode failed!
[ 1660.768324][ T9998] 
[ 1660.768324][ T9998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1660.768324][ T9998] 
[ 1660.830654][ T9998] 
[ 1660.830654][ T9998]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1660.830654][ T9998] 
[ 1661.032804][   T24] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1661.261778][   T24] usb 10-1: Using ep0 maxpacket: 16
[ 1661.361311][   T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1661.371156][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.379760][   T24] usb 10-1: Product: syz
[ 1661.385381][   T24] usb 10-1: Manufacturer: syz
[ 1661.390728][   T24] usb 10-1: SerialNumber: syz
[ 1661.559923][   T24] r8152-cfgselector 10-1: Unknown version 0x0000
[ 1661.566856][   T24] r8152-cfgselector 10-1: config 0 descriptor??
[ 1661.748612][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1661.756869][   T10] usb 2-1: can't read configurations, error -71
[ 1661.930631][T16269] Bluetooth: hci1: unexpected event for opcode 0x0c12
[ 1662.074431][   T24] r8152-cfgselector 10-1: Unknown version 0x0000
[ 1662.109360][   T24] r8152-cfgselector 10-1: bad CDC descriptors
[ 1662.128272][T16458] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1662.216642][   T24] r8152-cfgselector 10-1: USB disconnect, device number 35
[ 1662.789196][T16712] loop1: detected capacity change from 0 to 1024
[ 1663.595750][   T24] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1663.620025][T16720] binder: 16718:16720 ioctl c0306201 0 returned -14
[ 1663.908658][   T24] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1663.918279][   T24] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1663.927015][   T24] usb 7-1: Product: syz
[ 1663.931754][   T24] usb 7-1: Manufacturer: syz
[ 1663.936572][   T24] usb 7-1: SerialNumber: syz
[ 1664.158345][   T24] usb 7-1: config 0 descriptor??
[ 1664.259449][   T24] ch341 7-1:0.0: ch341-uart converter detected
[ 1665.227775][   T24] usb 7-1: failed to send control message: -71
[ 1665.234466][   T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1665.279141][T16733] bond0: (slave macsec0): Error -34 calling dev_set_mtu
[ 1665.340111][   T24] usb 7-1: USB disconnect, device number 62
[ 1665.410565][   T24] ch341 7-1:0.0: device disconnected
[ 1665.539761][T16737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1666.614170][T16738] loop1: detected capacity change from 0 to 32768
[ 1666.691252][T16738] 
[ 1666.691252][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1666.691252][T16738] 
[ 1667.060451][T16458] veth0_vlan: entered promiscuous mode
[ 1667.107565][T16269] Bluetooth: hci4: unexpected event for opcode 0x0c12
[ 1667.279693][T16737] ERROR: (device loop1): diWrite: ixpxd invalid
[ 1667.279693][T16737] 
[ 1667.331524][T16738] overlayfs: failed to resolve './bus': -2
[ 1667.353535][T16737] ERROR: (device loop1): txAbort: 
[ 1667.353535][T16737] 
[ 1667.402771][T16737] ERROR: (device loop1): dbAlloc: the hint is outside the map
[ 1667.402771][T16737] 
[ 1667.452815][T16738] 
[ 1667.452815][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.452815][T16738] 
[ 1667.464099][T16738] 
[ 1667.464099][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.464099][T16738] 
[ 1667.475113][T16738] 
[ 1667.475113][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.475113][T16738] 
[ 1667.485989][T16738] 
[ 1667.485989][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.485989][T16738] 
[ 1667.499544][T16738] 
[ 1667.499544][T16738]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.499544][T16738] 
[ 1667.518978][T16458] veth1_vlan: entered promiscuous mode
[ 1667.537647][  T112] 
[ 1667.537647][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.537647][  T112] 
[ 1667.846793][T16752] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3014'.
[ 1667.973174][T12051] 
[ 1667.973174][T12051]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1667.973174][T12051] 
[ 1668.060685][T12051] 
[ 1668.060685][T12051]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1668.060685][T12051] 
[ 1668.134594][  T112] 
[ 1668.134594][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1668.134594][  T112] 
[ 1668.181686][T12051] read_mapping_page failed!
[ 1668.186602][T12051] ERROR: (device loop1): txAbort: 
[ 1668.186602][T12051] 
[ 1668.199764][T12051] jfs_write_inode: jfs_commit_inode failed!
[ 1668.259469][T15582] 
[ 1668.259469][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1668.259469][T15582] 
[ 1668.317284][T15582] 
[ 1668.317284][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1668.317284][T15582] 
[ 1668.418864][T16458] veth0_macvtap: entered promiscuous mode
[ 1668.430536][T16756] loop6: detected capacity change from 0 to 1024
[ 1668.581963][T16458] veth1_macvtap: entered promiscuous mode
[ 1669.056832][T16458] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1669.293089][T16458] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1669.328691][T16759] binder: 16758:16759 ioctl c0306201 0 returned -14
[ 1669.477134][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1669.659852][T12054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1669.753163][T12054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1669.873222][T12054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1670.255327][T16767] FAULT_INJECTION: forcing a failure.
[ 1670.255327][T16767] name failslab, interval 1, probability 0, space 0, times 0
[ 1670.270257][T16767] CPU: 1 UID: 0 PID: 16767 Comm: syz.6.3020 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1670.270468][T16767] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1670.270534][T16767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1670.270629][T16767] Call Trace:
[ 1670.270685][T16767]  <TASK>
[ 1670.270741][T16767]  __dump_stack+0x26/0x30
[ 1670.270927][T16767]  dump_stack_lvl+0x14c/0x1c0
[ 1670.271121][T16767]  dump_stack+0x1e/0x25
[ 1670.271283][T16767]  should_fail_ex+0x7da/0x8a0
[ 1670.271494][T16767]  should_failslab+0x158/0x200
[ 1670.271647][T16767]  __kmalloc_noprof+0x1e4/0x1c00
[ 1670.271797][T16767]  ? kmsan_get_metadata+0xf1/0x160
[ 1670.272011][T16767]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[ 1670.272228][T16767]  ? tomoyo_path_number_perm+0x41/0x7d0
[ 1670.272389][T16767]  ? kmsan_get_metadata+0xf1/0x160
[ 1670.272618][T16767]  tomoyo_realpath_from_path+0xeb/0x9f0
[ 1670.272815][T16767]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1670.273054][T16767]  ? __srcu_read_lock+0x5e/0xd0
[ 1670.273205][T16767]  tomoyo_path_number_perm+0x1d0/0x7d0
[ 1670.273407][T16767]  ? kmsan_get_metadata+0xf1/0x160
[ 1670.273620][T16767]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1670.273891][T16767]  tomoyo_file_ioctl+0x3d/0x50
[ 1670.274099][T16767]  security_file_ioctl+0x139/0x570
[ 1670.274261][T16767]  __se_sys_ioctl+0xbb/0x400
[ 1670.274459][T16767]  __x64_sys_ioctl+0x97/0xe0
[ 1670.274648][T16767]  x64_sys_call+0x18a7/0x3e70
[ 1670.274845][T16767]  do_syscall_64+0xc9/0xf80
[ 1670.275031][T16767]  ? clear_bhb_loop+0x40/0x90
[ 1670.275205][T16767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1670.275370][T16767] RIP: 0033:0x7fb3bcb9acb9
[ 1670.275487][T16767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1670.275621][T16767] RSP: 002b:00007fb3bd987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1670.275767][T16767] RAX: ffffffffffffffda RBX: 00007fb3bce15fa0 RCX: 00007fb3bcb9acb9
[ 1670.275880][T16767] RDX: 0000000000000000 RSI: 0000000000004b3d RDI: 0000000000000003
[ 1670.275974][T16767] RBP: 00007fb3bd987090 R08: 0000000000000000 R09: 0000000000000000
[ 1670.276082][T16767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1670.276175][T16767] R13: 00007fb3bce16038 R14: 00007fb3bce15fa0 R15: 00007ffe36d08b98
[ 1670.276326][T16767]  </TASK>
[ 1670.276387][T16767] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1671.031341][T13263] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1671.326308][T13263] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1671.335892][T13263] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[ 1671.349390][T13263] usb 2-1: Product: syz
[ 1671.355398][T13263] usb 2-1: Manufacturer: syz
[ 1671.361762][T13263] usb 2-1: SerialNumber: syz
[ 1671.455775][T13263] usb 2-1: config 0 descriptor??
[ 1671.569021][T13263] ch341 2-1:0.0: ch341-uart converter detected
[ 1671.852044][T16269] Bluetooth: hci4: unexpected event for opcode 0x0c12
[ 1672.183899][T16781] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1673.240513][T16781] loop9: detected capacity change from 0 to 32768
[ 1673.250321][T13263] usb 2-1: failed to send control message: -71
[ 1673.264500][T13263] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1673.323268][T13263] usb 2-1: USB disconnect, device number 16
[ 1673.361359][T13263] ch341 2-1:0.0: device disconnected
[ 1673.417895][T16785] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3027'.
[ 1673.479978][T16781] 
[ 1673.479978][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.479978][T16781] 
[ 1673.743320][T16781] ERROR: (device loop9): diWrite: ixpxd invalid
[ 1673.743320][T16781] 
[ 1673.765273][T16781] ERROR: (device loop9): txAbort: 
[ 1673.765273][T16781] 
[ 1673.778116][T16781] overlayfs: failed to resolve './bus': -2
[ 1673.836006][T16781] ERROR: (device loop9): dbAlloc: the hint is outside the map
[ 1673.836006][T16781] 
[ 1673.850159][T16781] 
[ 1673.850159][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.850159][T16781] 
[ 1673.861178][T16781] 
[ 1673.861178][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.861178][T16781] 
[ 1673.872151][T16781] 
[ 1673.872151][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.872151][T16781] 
[ 1673.883064][T16781] 
[ 1673.883064][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.883064][T16781] 
[ 1673.896769][T16781] 
[ 1673.896769][T16781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.896769][T16781] 
[ 1673.933017][  T111] 
[ 1673.933017][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1673.933017][  T111] 
[ 1674.463611][T12054] 
[ 1674.463611][T12054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1674.463611][T12054] 
[ 1674.566524][T12054] 
[ 1674.566524][T12054]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1674.566524][T12054] 
[ 1674.641104][  T111] 
[ 1674.641104][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1674.641104][  T111] 
[ 1674.659615][T12054] read_mapping_page failed!
[ 1674.664398][T12054] ERROR: (device loop9): txAbort: 
[ 1674.664398][T12054] 
[ 1674.672949][T12054] jfs_write_inode: jfs_commit_inode failed!
[ 1674.726249][T16793] loop1: detected capacity change from 0 to 2048
[ 1674.789822][T10077] 
[ 1674.789822][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1674.789822][T10077] 
[ 1674.804680][T16793] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1674.860256][T10077] 
[ 1674.860256][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1674.860256][T10077] 
[ 1674.887825][T16793] NILFS (loop1): mounting unchecked fs
[ 1674.915010][T16796] binder: 16795:16796 ioctl c0306201 0 returned -14
[ 1675.148450][T16793] NILFS (loop1): recovery complete
[ 1675.216915][T16800] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1677.020288][T16269] Bluetooth: hci4: unexpected event for opcode 0x0c12
[ 1678.048910][T16823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1679.065054][T16823] loop6: detected capacity change from 0 to 32768
[ 1679.150792][T16823] 
[ 1679.150792][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.150792][T16823] 
[ 1679.363222][T16828] loop8: detected capacity change from 0 to 512
[ 1679.402766][T16823] ERROR: (device loop6): diWrite: ixpxd invalid
[ 1679.402766][T16823] 
[ 1679.412538][T16823] ERROR: (device loop6): txAbort: 
[ 1679.412538][T16823] 
[ 1679.428421][T16823] overlayfs: failed to resolve './bus': -2
[ 1679.438805][T16823] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1679.438805][T16823] 
[ 1679.452539][T16823] 
[ 1679.452539][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.452539][T16823] 
[ 1679.468717][T16823] 
[ 1679.468717][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.468717][T16823] 
[ 1679.481294][T16823] 
[ 1679.481294][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.481294][T16823] 
[ 1679.492345][T16823] 
[ 1679.492345][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.492345][T16823] 
[ 1679.503221][T16823] 
[ 1679.503221][T16823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.503221][T16823] 
[ 1679.546189][  T111] 
[ 1679.546189][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1679.546189][  T111] 
[ 1679.595471][T16828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842c028, mo2=0002]
[ 1679.619501][T16828] System zones: 1-12
[ 1679.727502][T16828] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3041: bg 0: block 288: padding at end of block bitmap is not set
[ 1679.856639][T16828] EXT4-fs (loop8): Remounting filesystem read-only
[ 1679.887026][T16828] EXT4-fs (loop8): 1 truncate cleaned up
[ 1679.928575][T16828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1680.061032][T10994] 
[ 1680.061032][T10994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1680.061032][T10994] 
[ 1680.102366][T16819] loop1: detected capacity change from 0 to 8192
[ 1680.162894][T10994] 
[ 1680.162894][T10994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1680.162894][T10994] 
[ 1680.243439][T16819] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[ 1680.277331][  T111] 
[ 1680.277331][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1680.277331][  T111] 
[ 1680.301341][T10994] read_mapping_page failed!
[ 1680.306064][T10994] ERROR: (device loop6): txAbort: 
[ 1680.306064][T10994] 
[ 1680.313993][T10994] jfs_write_inode: jfs_commit_inode failed!
[ 1680.452340][ T7406] 
[ 1680.452340][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1680.452340][ T7406] 
[ 1680.545539][ T7406] 
[ 1680.545539][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1680.545539][ T7406] 
[ 1680.670573][T16819] ntfs3(loop1): Failed to read $UpCase (-4).
[ 1681.221582][ T9998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1681.234189][T16834] loop9: detected capacity change from 0 to 2048
[ 1681.373358][T16834] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1681.444421][T16834] NILFS (loop9): mounting unchecked fs
[ 1681.639377][T13747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1681.683386][T13747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1681.696444][T13747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1681.729427][T13747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1681.762531][T13747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1681.896018][T16834] NILFS (loop9): recovery complete
[ 1681.995535][T16843] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1682.332649][T16834] Bluetooth: MGMT ver 1.23
[ 1683.088305][T13263] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1683.290941][T13263] usb 7-1: Using ep0 maxpacket: 16
[ 1683.342084][T13263] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1683.351666][T13263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1683.360340][T13263] usb 7-1: Product: syz
[ 1683.364855][T13263] usb 7-1: Manufacturer: syz
[ 1683.374138][T13263] usb 7-1: SerialNumber: syz
[ 1683.599501][T13263] r8152-cfgselector 7-1: Unknown version 0x0000
[ 1683.606038][T13263] r8152-cfgselector 7-1: config 0 descriptor??
[ 1683.699399][T13747] Bluetooth: hci0: command tx timeout
[ 1684.303140][T13263] r8152-cfgselector 7-1: USB disconnect, device number 63
[ 1684.433731][T13747] Bluetooth: hci3: unexpected event for opcode 0x0c12
[ 1685.638506][T13747] Bluetooth: hci0: command tx timeout
[ 1685.713571][T16865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1685.983901][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3054'.
[ 1686.399290][T16869] loop1: detected capacity change from 0 to 32768
[ 1686.574742][T16869] 
[ 1686.574742][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1686.574742][T16869] 
[ 1686.949493][T12040] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1687.046687][T16837] chnl_net:caif_netlink_parms(): no params data found
[ 1687.429834][T16865] ERROR: (device loop1): diWrite: ixpxd invalid
[ 1687.429834][T16865] 
[ 1687.451852][T16869] overlayfs: failed to resolve './bus': -2
[ 1687.549428][T16865] ERROR: (device loop1): txAbort: 
[ 1687.549428][T16865] 
[ 1687.555868][T16876] ERROR: (device loop1): dbAlloc: the hint is outside the map
[ 1687.555868][T16876] 
[ 1687.577113][T13747] Bluetooth: hci0: command tx timeout
[ 1687.610591][T16869] 
[ 1687.610591][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.610591][T16869] 
[ 1687.621635][T16869] 
[ 1687.621635][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.621635][T16869] 
[ 1687.634008][T16869] 
[ 1687.634008][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.634008][T16869] 
[ 1687.644961][T16869] 
[ 1687.644961][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.644961][T16869] 
[ 1687.655820][T16869] 
[ 1687.655820][T16869]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.655820][T16869] 
[ 1687.700137][  T112] 
[ 1687.700137][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1687.700137][  T112] 
[ 1687.780851][T16877] loop6: detected capacity change from 0 to 256
[ 1688.003156][T12040] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.269806][   T30] audit: type=1326 audit(45074490.119:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.311194][T10994] 
[ 1688.311194][T10994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1688.311194][T10994] 
[ 1688.397907][   T30] audit: type=1326 audit(45074490.130:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.398184][   T30] audit: type=1326 audit(45074490.130:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.446427][   T30] audit: type=1326 audit(45074490.162:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.467060][T10994] 
[ 1688.467060][T10994]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1688.467060][T10994] 
[ 1688.471580][   T30] audit: type=1326 audit(45074490.162:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.502712][   T30] audit: type=1326 audit(45074490.183:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3bcb5b58e code=0x7ffc0000
[ 1688.528665][   T30] audit: type=1326 audit(45074490.183:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.544741][T12040] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.552894][   T30] audit: type=1326 audit(45074490.259:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1688.651847][T16874] loop9: detected capacity change from 0 to 8192
[ 1688.656300][  T111] 
[ 1688.656300][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1688.656300][  T111] 
[ 1688.670103][T10994] read_mapping_page failed!
[ 1688.674772][T10994] ERROR: (device loop1): txAbort: 
[ 1688.674772][T10994] 
[ 1688.685928][T10994] jfs_write_inode: jfs_commit_inode failed!
[ 1688.780314][T15582] 
[ 1688.780314][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1688.780314][T15582] 
[ 1688.792513][T16874] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512).
[ 1688.832966][T15582] 
[ 1688.832966][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1688.832966][T15582] 
[ 1689.034316][T12040] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1689.295320][T16874] ntfs3(loop9): Failed to read $UpCase (-4).
[ 1689.338183][   T30] audit: type=1326 audit(45074491.063:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1689.362092][   T30] audit: type=1326 audit(45074491.074:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16875 comm="syz.6.3056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1689.512989][T13747] Bluetooth: hci0: command tx timeout
[ 1689.525865][T16885] loop8: detected capacity change from 0 to 2048
[ 1689.636694][T16885] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1689.771848][T16885] NILFS (loop8): mounting unchecked fs
[ 1690.087851][T12040] bridge_slave_1: left allmulticast mode
[ 1690.094213][T12040] bridge_slave_1: left promiscuous mode
[ 1690.100958][T12040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1690.153581][T16885] NILFS (loop8): recovery complete
[ 1690.233855][T16887] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1690.314481][T12040] bridge_slave_0: left allmulticast mode
[ 1690.320895][T12040] bridge_slave_0: left promiscuous mode
[ 1690.328184][T12040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1692.285220][T12040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1692.295506][T13747] Bluetooth: hci4: unexpected event for opcode 0x0c12
[ 1692.385190][T12040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1692.443550][T12040] bond0 (unregistering): Released all slaves
[ 1693.035160][T12040] hsr_slave_0: left promiscuous mode
[ 1693.094191][T12040] hsr_slave_1: left promiscuous mode
[ 1693.115435][ T9413] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1693.129246][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1693.137258][T12040] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1693.226047][T12040] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1693.233710][T12040] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1693.314642][ T9413] usb 9-1: device descriptor read/64, error -71
[ 1693.494208][T12040] veth1_macvtap: left promiscuous mode
[ 1693.531253][T12040] veth0_macvtap: left promiscuous mode
[ 1693.540730][T12040] veth1_vlan: left promiscuous mode
[ 1693.617923][T12040] veth0_vlan: left promiscuous mode
[ 1694.303672][T16914] loop6: detected capacity change from 0 to 32768
[ 1694.384376][T16914] 
[ 1694.384376][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.384376][T16914] 
[ 1694.497461][ T9413] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1694.616782][T16914] ERROR: (device loop6): diWrite: ixpxd invalid
[ 1694.616782][T16914] 
[ 1694.626363][T16914] ERROR: (device loop6): txAbort: 
[ 1694.626363][T16914] 
[ 1694.653449][T16914] overlayfs: failed to resolve './bus': -2
[ 1694.661037][ T9413] usb 9-1: device descriptor read/64, error -71
[ 1694.682278][T16914] ERROR: (device loop6): dbAlloc: the hint is outside the map
[ 1694.682278][T16914] 
[ 1694.701052][T16914] 
[ 1694.701052][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.701052][T16914] 
[ 1694.712018][T16914] 
[ 1694.712018][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.712018][T16914] 
[ 1694.723016][T16914] 
[ 1694.723016][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.723016][T16914] 
[ 1694.736053][T16149] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1694.745700][T16914] 
[ 1694.745700][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.745700][T16914] 
[ 1694.756568][T16914] 
[ 1694.756568][T16914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.756568][T16914] 
[ 1694.782241][  T112] 
[ 1694.782241][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1694.782241][  T112] 
[ 1694.802954][ T9413] usb usb9-port1: attempt power cycle
[ 1694.957800][T16149] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1694.969465][T16149] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1694.981968][T16149] usb 10-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[ 1694.992318][T16149] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.106054][T16149] usb 10-1: config 0 descriptor??
[ 1695.183922][ T9413] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1695.230949][ T9413] usb 9-1: device descriptor read/8, error -71
[ 1695.464250][ T9413] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1695.746636][T16149] usbhid 10-1:0.0: can't add hid device: -71
[ 1695.753563][T16149] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1695.864522][T16149] usb 10-1: USB disconnect, device number 36
[ 1697.040565][T12040] team0 (unregistering): Port device team_slave_1 removed
[ 1697.229908][T12040] team0 (unregistering): Port device team_slave_0 removed
[ 1697.381219][T16923] loop9: detected capacity change from 0 to 1024
[ 1698.864539][T16913] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1698.934698][T16837] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1698.943325][T16837] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1699.037400][T16837] bridge_slave_0: entered allmulticast mode
[ 1699.072592][ T9413] usb 9-1: device descriptor read/8, error -71
[ 1699.103055][T16837] bridge_slave_0: entered promiscuous mode
[ 1699.199272][ T9413] usb usb9-port1: unable to enumerate USB device
[ 1699.283986][T16837] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1699.291718][T16837] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1699.386618][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1699.393297][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1699.457798][T16837] bridge_slave_1: entered allmulticast mode
[ 1699.516140][T16837] bridge_slave_1: entered promiscuous mode
[ 1699.536447][ T6775] 
[ 1699.536447][ T6775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1699.536447][ T6775] 
[ 1699.601926][ T6775] 
[ 1699.601926][ T6775]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1699.601926][ T6775] 
[ 1699.659910][  T111] 
[ 1699.659910][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1699.659910][  T111] 
[ 1699.675386][ T6775] read_mapping_page failed!
[ 1699.680101][ T6775] ERROR: (device loop6): txAbort: 
[ 1699.680101][ T6775] 
[ 1699.688125][ T6775] jfs_write_inode: jfs_commit_inode failed!
[ 1699.708718][ T7406] 
[ 1699.708718][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1699.708718][ T7406] 
[ 1699.774309][ T7406] 
[ 1699.774309][ T7406]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1699.774309][ T7406] 
[ 1699.791270][T16932] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3073'.
[ 1699.801349][T16932] netlink: 276 bytes leftover after parsing attributes in process `syz.8.3073'.
[ 1700.107311][T16837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1700.291664][T16837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1700.364854][T16149] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1700.607109][T16149] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1700.621492][T16149] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1700.633619][T16149] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1700.649986][T16149] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1700.660986][T16149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1700.819861][T16837] team0: Port device team_slave_0 added
[ 1700.903960][T16935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1700.955757][T16837] team0: Port device team_slave_1 added
[ 1701.244830][   T24] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1701.555597][T16837] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1701.563519][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1701.593234][T16837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1701.621706][T16935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1701.713286][T16935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1701.966732][T16837] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1701.974398][T16837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1702.006922][T16837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1702.201606][ T9413] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1702.386122][ T9413] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1702.397769][ T9413] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1702.408041][ T9413] usb 9-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[ 1702.417636][ T9413] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1702.600757][ T9413] usb 9-1: config 0 descriptor??
[ 1702.736684][T16954] loop9: detected capacity change from 0 to 128
[ 1703.140565][ T9413] itetech 0003:06CB:2968.000D: unknown main item tag 0x2
[ 1703.148176][ T9413] itetech 0003:06CB:2968.000D: item fetching failed at offset 5/7
[ 1703.252928][T16149] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[ 1703.265185][T16837] hsr_slave_0: entered promiscuous mode
[ 1703.297153][ T9413] itetech 0003:06CB:2968.000D: probe with driver itetech failed with error -22
[ 1703.331369][T16149] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input61
[ 1703.345683][T16837] hsr_slave_1: entered promiscuous mode
[ 1703.473818][T16837] debugfs: 'hsr0' already exists in 'hsr'
[ 1703.482420][T16837] Cannot create hsr debugfs directory
[ 1703.584874][ T9413] usb 9-1: USB disconnect, device number 44
[ 1703.730862][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1703.739550][T16149] usb 2-1: USB disconnect, device number 17
[ 1704.789815][T16962] loop9: detected capacity change from 0 to 1024
[ 1705.211765][ T9413] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1705.467344][ T9413] usb 9-1: Using ep0 maxpacket: 16
[ 1705.566659][ T9413] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1705.577270][ T9413] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1705.586028][ T9413] usb 9-1: Product: syz
[ 1705.590408][ T9413] usb 9-1: Manufacturer: syz
[ 1705.595454][ T9413] usb 9-1: SerialNumber: syz
[ 1705.722262][ T9413] r8152-cfgselector 9-1: Unknown version 0x0000
[ 1705.729077][ T9413] r8152-cfgselector 9-1: config 0 descriptor??
[ 1706.398315][T16149] r8152-cfgselector 9-1: USB disconnect, device number 45
[ 1707.548317][T16149] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1707.793702][T16149] usb 2-1: Using ep0 maxpacket: 16
[ 1707.874915][T16149] usb 2-1: config 252 has an invalid interface number: 15 but max is 0
[ 1707.883682][T16149] usb 2-1: config 252 has no interface number 0
[ 1707.992077][T16149] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1708.040344][T16837] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1708.077522][T16149] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 1708.087108][T16149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.099995][T16149] usb 2-1: Product: syz
[ 1708.105929][T16149] usb 2-1: Manufacturer: syz
[ 1708.111230][T16149] usb 2-1: SerialNumber: syz
[ 1708.202163][T16837] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1708.366824][T16149] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1708.381936][T16837] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1708.589696][T16837] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1708.601868][T16980] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b
[ 1709.130630][ T9413] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1709.176541][ T6008] usb 2-1: Failed to submit usb control message: -71
[ 1709.183820][ T6008] usb 2-1: unable to send the bmi data to the device: -71
[ 1709.191469][ T6008] usb 2-1: unable to get target info from device
[ 1709.198033][ T6008] usb 2-1: could not get target info (-71)
[ 1709.208192][T16149] usb 2-1: USB disconnect, device number 18
[ 1709.376722][ T6008] usb 2-1: could not probe fw (-71)
[ 1710.752224][T17005] loop8: detected capacity change from 0 to 1024
[ 1710.909181][   T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1711.023174][T16837] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1711.125863][   T10] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1711.138317][   T10] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1711.154393][   T10] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1711.167844][   T10] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1711.177563][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.425501][T16837] 8021q: adding VLAN 0 to HW filter on device team0
[ 1711.547360][T12054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1711.555058][T12054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1711.596851][T17006] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1711.640920][   T24] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1711.774264][T12054] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1711.781860][T12054] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1711.902062][   T24] usb 7-1: Using ep0 maxpacket: 16
[ 1712.043879][   T24] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1712.053770][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1712.062252][   T24] usb 7-1: Product: syz
[ 1712.067576][   T24] usb 7-1: Manufacturer: syz
[ 1712.072874][   T24] usb 7-1: SerialNumber: syz
[ 1712.264509][   T24] r8152-cfgselector 7-1: Unknown version 0x0000
[ 1712.271544][   T24] r8152-cfgselector 7-1: config 0 descriptor??
[ 1712.326242][T17006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1712.371756][T17006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1712.982816][   T24] r8152-cfgselector 7-1: USB disconnect, device number 64
[ 1713.547510][   T10] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[ 1713.577118][   T10] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input62
[ 1713.980133][    C0] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1713.988897][   T10] usb 10-1: USB disconnect, device number 39
[ 1714.711754][T13263] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1714.923350][T13263] usb 2-1: Using ep0 maxpacket: 8
[ 1714.999626][T13263] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1715.009384][T13263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1715.256007][ T6775] Bluetooth: hci2: Frame reassembly failed (-84)
[ 1715.295064][T13263] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1715.302716][T13263] pvrusb2: **********
[ 1715.307332][T13263] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1715.322243][T13263] pvrusb2: Important functionality might not be entirely working.
[ 1715.330428][T13263] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1715.348661][T13263] pvrusb2: **********
[ 1715.603009][ T2335] pvrusb2: Invalid write control endpoint
[ 1715.715823][   T24] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 1715.822215][T17029] pvrusb2: Invalid write control endpoint
[ 1715.929068][T13263] usb 2-1: USB disconnect, device number 19
[ 1716.050597][   T24] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1716.060943][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1716.069275][   T24] usb 10-1: Product: syz
[ 1716.074884][   T24] usb 10-1: Manufacturer: syz
[ 1716.080172][   T24] usb 10-1: SerialNumber: syz
[ 1716.342502][T16837] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1716.369924][ T2335] pvrusb2: Invalid write control endpoint
[ 1716.376092][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1716.386346][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1716.400154][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1716.412341][ T2335] pvrusb2: Device being rendered inoperable
[ 1716.446893][   T24] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1716.724242][ T9413] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1716.724931][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1716.909453][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1716.994657][   T24] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1716.999824][ T2335] pvrusb2: Attached sub-driver cx25840
[ 1717.008604][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1717.019034][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1717.108255][T13747] Bluetooth: hci2: Opcode 0x1003 failed: -110
[ 1717.116158][T16269] Bluetooth: hci2: command 0x1003 tx timeout
[ 1717.450276][   T24] usb 7-1: device descriptor read/64, error -71
[ 1717.703091][   T24] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1717.857051][T13263] usb 10-1: USB disconnect, device number 40
[ 1718.150553][ T9413] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[ 1718.186989][ T9413] ath9k_htc: Failed to initialize the device
[ 1718.307376][T13263] usb 10-1: ath9k_htc: USB layer deinitialized
[ 1718.366388][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3103'.
[ 1718.742526][T17058] loop8: detected capacity change from 0 to 64
[ 1719.011148][T17058] FAULT_INJECTION: forcing a failure.
[ 1719.011148][T17058] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1719.025478][T17058] CPU: 0 UID: 0 PID: 17058 Comm: syz.8.3104 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1719.025681][T17058] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1719.025745][T17058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1719.025838][T17058] Call Trace:
[ 1719.025905][T17058]  <TASK>
[ 1719.025958][T17058]  __dump_stack+0x26/0x30
[ 1719.026143][T17058]  dump_stack_lvl+0x14c/0x1c0
[ 1719.026326][T17058]  dump_stack+0x1e/0x25
[ 1719.026490][T17058]  should_fail_ex+0x7da/0x8a0
[ 1719.026706][T17058]  should_fail_alloc_page+0x222/0x240
[ 1719.026886][T17058]  prepare_alloc_pages+0x1e8/0x630
[ 1719.027079][T17058]  __alloc_frozen_pages_noprof+0x1b6/0xaa0
[ 1719.027296][T17058]  alloc_pages_mpol+0x328/0x860
[ 1719.027535][T17058]  folio_alloc_noprof+0x108/0x360
[ 1719.027694][T17058]  filemap_alloc_folio_noprof+0xd9/0x480
[ 1719.027899][T17058]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1719.028129][T17058]  do_read_cache_folio+0x7ca/0x1470
[ 1719.028345][T17058]  ? __pfx_minix_read_folio+0x10/0x10
[ 1719.028582][T17058]  read_cache_folio+0x62/0x90
[ 1719.028799][T17058]  minix_find_entry+0x24e/0xbe0
[ 1719.028978][T17058]  ? stack_depot_save_flags+0x35/0x790
[ 1719.029173][T17058]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1719.029395][T17058]  ? minix_inode_by_name+0x3d/0x320
[ 1719.029547][T17058]  ? minix_lookup+0x142/0x260
[ 1719.029754][T17058]  minix_inode_by_name+0x53/0x320
[ 1719.029920][T17058]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1719.030152][T17058]  minix_lookup+0x142/0x260
[ 1719.030354][T17058]  ? __pfx_minix_lookup+0x10/0x10
[ 1719.030549][T17058]  lookup_one_qstr_excl+0x23f/0x7b0
[ 1719.030711][T17058]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1719.030937][T17058]  filename_create+0x2c1/0x570
[ 1719.031150][T17058]  do_mknodat+0x19f/0xe90
[ 1719.031339][T17058]  __x64_sys_mknod+0xc3/0x140
[ 1719.031541][T17058]  x64_sys_call+0x2ef3/0x3e70
[ 1719.031728][T17058]  do_syscall_64+0xc9/0xf80
[ 1719.031915][T17058]  ? clear_bhb_loop+0x40/0x90
[ 1719.032084][T17058]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1719.032243][T17058] RIP: 0033:0x7f1c02f9acb9
[ 1719.032359][T17058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1719.032499][T17058] RSP: 002b:00007f1c03e44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[ 1719.032647][T17058] RAX: ffffffffffffffda RBX: 00007f1c03215fa0 RCX: 00007f1c02f9acb9
[ 1719.032760][T17058] RDX: 0000000000000710 RSI: 0000000000000800 RDI: 0000200000000180
[ 1719.032866][T17058] RBP: 00007f1c03e44090 R08: 0000000000000000 R09: 0000000000000000
[ 1719.032962][T17058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1719.033054][T17058] R13: 00007f1c03216038 R14: 00007f1c03215fa0 R15: 00007ffc7662f148
[ 1719.033202][T17058]  </TASK>
[ 1719.474717][T17061] FAULT_INJECTION: forcing a failure.
[ 1719.474717][T17061] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1719.488786][T17061] CPU: 1 UID: 0 PID: 17061 Comm: syz.9.3105 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1719.488990][T17061] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1719.489053][T17061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1719.489146][T17061] Call Trace:
[ 1719.489205][T17061]  <TASK>
[ 1719.489261][T17061]  __dump_stack+0x26/0x30
[ 1719.489436][T17061]  dump_stack_lvl+0x14c/0x1c0
[ 1719.489634][T17061]  dump_stack+0x1e/0x25
[ 1719.489794][T17061]  should_fail_ex+0x7da/0x8a0
[ 1719.490005][T17061]  should_fail+0x2a/0x40
[ 1719.490176][T17061]  should_fail_usercopy+0x2e/0x40
[ 1719.490363][T17061]  _copy_from_iter+0x1b8/0x2ff0
[ 1719.490543][T17061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1719.490774][T17061]  ? __alloc_skb+0xbba/0x1030
[ 1719.490931][T17061]  ? kmsan_get_metadata+0xf1/0x160
[ 1719.491160][T17061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1719.491393][T17061]  ? skb_put+0x1a3/0x250
[ 1719.491569][T17061]  netlink_sendmsg+0xc63/0x1250
[ 1719.491809][T17061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1719.492011][T17061]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1719.492205][T17061]  __sock_sendmsg+0x333/0x3d0
[ 1719.492400][T17061]  ____sys_sendmsg+0x7f5/0xcf0
[ 1719.492601][T17061]  ___sys_sendmsg+0x271/0x3b0
[ 1719.492766][T17061]  ? kmsan_get_metadata+0xf1/0x160
[ 1719.492985][T17061]  ? __rcu_read_unlock+0x6c/0xd0
[ 1719.493159][T17061]  ? __fget_files+0x3b4/0x4a0
[ 1719.493291][T17061]  ? __fget_files+0x3b9/0x4a0
[ 1719.493428][T17061]  ? kmsan_get_metadata+0xf1/0x160
[ 1719.493618][T17061]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1719.493832][T17061]  __x64_sys_sendmsg+0x211/0x3e0
[ 1719.494015][T17061]  ? kmsan_get_metadata+0xf1/0x160
[ 1719.494226][T17061]  x64_sys_call+0x1c60/0x3e70
[ 1719.494399][T17061]  do_syscall_64+0xc9/0xf80
[ 1719.494566][T17061]  ? clear_bhb_loop+0x40/0x90
[ 1719.494723][T17061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1719.494868][T17061] RIP: 0033:0x7f0f4099acb9
[ 1719.494974][T17061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1719.495096][T17061] RSP: 002b:00007f0f417ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1719.495227][T17061] RAX: ffffffffffffffda RBX: 00007f0f40c15fa0 RCX: 00007f0f4099acb9
[ 1719.495327][T17061] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003
[ 1719.495416][T17061] RBP: 00007f0f417ac090 R08: 0000000000000000 R09: 0000000000000000
[ 1719.495504][T17061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1719.495587][T17061] R13: 00007f0f40c16038 R14: 00007f0f40c15fa0 R15: 00007ffe666b9c78
[ 1719.495745][T17061]  </TASK>
[ 1720.544101][T17068] loop1: detected capacity change from 0 to 1024
[ 1720.869686][   T24] usb 7-1: new high-speed USB device number 67 using dummy_hcd
[ 1721.102020][   T24] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1721.114646][   T24] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1721.126095][   T24] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1721.138682][   T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1721.148423][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1721.407005][T17071] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1722.145985][T17079] bridge0: port 3(syz_tun) entered blocking state
[ 1722.153447][T17079] bridge0: port 3(syz_tun) entered disabled state
[ 1722.241482][T17079] syz_tun: entered allmulticast mode
[ 1722.320061][T17071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1722.366908][T17079] syz_tun: entered promiscuous mode
[ 1722.422478][T17071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1722.686808][T17080] loop9: detected capacity change from 0 to 32768
[ 1722.888068][T17080] 
[ 1722.888068][T17080]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1722.888068][T17080] 
[ 1723.072380][T10077] 
[ 1723.072380][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1723.072380][T10077] 
[ 1723.185605][T10077] 
[ 1723.185605][T10077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1723.185605][T10077] 
[ 1723.226310][T16837] veth0_vlan: entered promiscuous mode
[ 1723.279011][T16837] veth1_vlan: entered promiscuous mode
[ 1724.063291][   T24] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1724.112330][T16837] veth0_macvtap: entered promiscuous mode
[ 1724.176435][   T24] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input63
[ 1724.421558][T16837] veth1_macvtap: entered promiscuous mode
[ 1724.525615][   T24] usb 7-1: USB disconnect, device number 67
[ 1724.525883][    C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1724.920307][T16837] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1725.300773][T16837] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1725.503433][T10994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1725.579655][T10994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1725.663874][T12051] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1725.753340][T12051] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1725.995264][T17104] loop6: detected capacity change from 0 to 8
[ 1726.238135][T17102] loop9: detected capacity change from 0 to 64
[ 1727.234662][T17115] loop6: detected capacity change from 0 to 1024
[ 1727.378817][T17119] FAULT_INJECTION: forcing a failure.
[ 1727.378817][T17119] name failslab, interval 1, probability 0, space 0, times 0
[ 1727.392245][T17119] CPU: 0 UID: 0 PID: 17119 Comm: syz.1.3126 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1727.392441][T17119] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1727.392498][T17119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1727.392584][T17119] Call Trace:
[ 1727.392639][T17119]  <TASK>
[ 1727.392694][T17119]  __dump_stack+0x26/0x30
[ 1727.392869][T17119]  dump_stack_lvl+0x14c/0x1c0
[ 1727.393043][T17119]  dump_stack+0x1e/0x25
[ 1727.393209][T17119]  should_fail_ex+0x7da/0x8a0
[ 1727.393416][T17119]  should_failslab+0x158/0x200
[ 1727.393578][T17119]  __kmalloc_noprof+0x1e4/0x1c00
[ 1727.393723][T17119]  ? kmsan_get_metadata+0xf1/0x160
[ 1727.393928][T17119]  ? tomoyo_realpath_from_path+0xeb/0x9f0
[ 1727.394135][T17119]  ? tomoyo_path_number_perm+0x41/0x7d0
[ 1727.394290][T17119]  ? kmsan_get_metadata+0xf1/0x160
[ 1727.394508][T17119]  tomoyo_realpath_from_path+0xeb/0x9f0
[ 1727.394724][T17119]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1727.394953][T17119]  ? __srcu_read_lock+0x5e/0xd0
[ 1727.395115][T17119]  tomoyo_path_number_perm+0x1d0/0x7d0
[ 1727.395305][T17119]  ? kmsan_get_metadata+0xf1/0x160
[ 1727.395518][T17119]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1727.395790][T17119]  tomoyo_file_ioctl+0x3d/0x50
[ 1727.395995][T17119]  security_file_ioctl+0x139/0x570
[ 1727.396175][T17119]  __se_sys_ioctl+0xbb/0x400
[ 1727.396363][T17119]  __x64_sys_ioctl+0x97/0xe0
[ 1727.396543][T17119]  x64_sys_call+0x18a7/0x3e70
[ 1727.396735][T17119]  do_syscall_64+0xc9/0xf80
[ 1727.396913][T17119]  ? clear_bhb_loop+0x40/0x90
[ 1727.397081][T17119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1727.397258][T17119] RIP: 0033:0x7fb5a2d9acb9
[ 1727.397373][T17119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1727.397507][T17119] RSP: 002b:00007fb5a3cc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1727.397652][T17119] RAX: ffffffffffffffda RBX: 00007fb5a3015fa0 RCX: 00007fb5a2d9acb9
[ 1727.397767][T17119] RDX: 00002000000000c0 RSI: 00000000c0045003 RDI: 0000000000000003
[ 1727.397869][T17119] RBP: 00007fb5a3cc8090 R08: 0000000000000000 R09: 0000000000000000
[ 1727.397967][T17119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1727.398080][T17119] R13: 00007fb5a3016038 R14: 00007fb5a3015fa0 R15: 00007ffd85ab8d48
[ 1727.398230][T17119]  </TASK>
[ 1727.614779][T17117] loop9: detected capacity change from 0 to 512
[ 1727.636804][T17119] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1727.658094][ T9412] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1727.869882][ T9412] usb 9-1: Using ep0 maxpacket: 8
[ 1727.972224][ T9412] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1727.982074][ T9412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1728.085247][T17117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1728.178386][ T9412] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1728.185951][ T9412] pvrusb2: **********
[ 1728.190207][ T9412] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1728.202093][ T9412] pvrusb2: Important functionality might not be entirely working.
[ 1728.213298][ T9412] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1728.226043][ T9412] pvrusb2: **********
[ 1728.447882][ T2335] pvrusb2: Invalid write control endpoint
[ 1728.657228][T17114] pvrusb2: Invalid write control endpoint
[ 1728.732984][T13263] usb 9-1: USB disconnect, device number 46
[ 1729.130803][ T2335] pvrusb2: Invalid write control endpoint
[ 1729.137249][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1729.148222][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1729.156551][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1729.158751][T10077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1729.166879][ T2335] pvrusb2: Device being rendered inoperable
[ 1729.333176][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1729.342340][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1729.357708][ T2335] pvrusb2: Attached sub-driver cx25840
[ 1729.363479][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1729.376663][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1730.265005][T13263] usb 7-1: new high-speed USB device number 68 using dummy_hcd
[ 1731.168142][T17137] loop8: detected capacity change from 0 to 32768
[ 1731.178782][T17137] BTRFS warning: excessive commit interval 2147483648, use with care
[ 1731.193528][T17137] btrfs: Deprecated parameter 'usebackuproot'
[ 1731.200068][T17137] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1731.223718][T17137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3130 (17137)
[ 1731.297687][T17137] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1731.308664][T17137] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[ 1731.359317][T13263] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1731.371522][T13263] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1731.388174][T13263] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1731.401897][T13263] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1731.411989][T13263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1731.529251][T17133] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1731.637000][T12040] BTRFS warning (device loop8): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[ 1731.651382][T17137] BTRFS error (device loop8): failed to load root extent
[ 1731.662426][T17137] BTRFS warning (device loop8): try to load backup roots slot 1
[ 1731.680441][T12040] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[ 1731.694548][T17137] BTRFS warning (device loop8): couldn't read tree root
[ 1731.702155][T17137] BTRFS warning (device loop8): try to load backup roots slot 2
[ 1731.732509][T12040] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1731.743633][T17137] BTRFS warning (device loop8): couldn't read tree root
[ 1731.751332][T17137] BTRFS warning (device loop8): try to load backup roots slot 3
[ 1731.851212][T17133] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[ 1731.953817][T17137] BTRFS info (device loop8): rebuilding free space tree
[ 1732.068019][T17137] BTRFS info (device loop8): checking UUID tree
[ 1732.099061][T17137] BTRFS info (device loop8): enabling ssd optimizations
[ 1732.110067][T17137] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1732.117966][T17137] BTRFS info (device loop8): turning on sync discard
[ 1732.125987][T17137] BTRFS info (device loop8): enabling free space tree
[ 1732.133322][T17137] BTRFS info (device loop8): force clearing of disk cache
[ 1732.147331][T17137] BTRFS info (device loop8): enabling auto defrag
[ 1732.154191][T17137] BTRFS info (device loop8): trying to use backup root at mount time
[ 1732.163001][T17137] BTRFS info (device loop8): force zlib compression, level 3
[ 1732.275538][T17133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1732.395931][T17133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1732.442215][T17162] loop9: detected capacity change from 0 to 512
[ 1732.666645][T17162] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1732.896053][ T9998] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1733.239548][T13263] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1733.281561][T13263] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input64
[ 1733.749859][T17168] loop1: detected capacity change from 0 to 2048
[ 1733.916886][T17168] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1733.926093][T17168] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[ 1733.926205][T17168] UDF-fs: Scanning with blocksize 512 failed
[ 1734.136903][T17168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1734.999856][ T9412] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1735.230738][T17162] syzkaller0: entered promiscuous mode
[ 1735.237233][T17162] syzkaller0: entered allmulticast mode
[ 1735.311611][ T9412] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 1735.371424][ T9412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1735.383022][ T9412] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1735.396148][ T9412] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1735.411017][ T9412] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[ 1735.420439][ T9412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.171938][ T9412] usb 2-1: config 0 descriptor??
[ 1736.205696][   T24] usb 7-1: USB disconnect, device number 68
[ 1736.206297][    C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1736.287422][ T9412] usb 2-1: can't set config #0, error -71
[ 1736.312311][ T9412] usb 2-1: USB disconnect, device number 20
[ 1737.611331][T17181] loop8: detected capacity change from 0 to 512
[ 1737.946746][T17181] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1738.018518][T17184] loop9: detected capacity change from 0 to 1024
[ 1738.255806][T13747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1738.276050][T13747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1738.288613][T13747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1738.303129][T13747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1738.316617][T13747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1738.747186][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1738.851165][T17182] loop6: detected capacity change from 0 to 4096
[ 1738.937109][T17182] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[ 1739.002244][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1739.074254][   T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1739.083817][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1739.118212][ T9998] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1739.313632][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1739.324185][   T24] pvrusb2: **********
[ 1739.328351][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1739.340484][   T24] pvrusb2: Important functionality might not be entirely working.
[ 1739.348700][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1739.361754][   T24] pvrusb2: **********
[ 1739.632262][ T2335] pvrusb2: Invalid write control endpoint
[ 1739.835366][T17194] pvrusb2: Invalid write control endpoint
[ 1739.926506][T13263] usb 2-1: USB disconnect, device number 21
[ 1739.928791][T17182] FAULT_INJECTION: forcing a failure.
[ 1739.928791][T17182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1739.947832][T17182] CPU: 1 UID: 0 PID: 17182 Comm: syz.6.3136 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1739.948039][T17182] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1739.948098][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1739.948199][T17182] Call Trace:
[ 1739.948259][T17182]  <TASK>
[ 1739.948318][T17182]  __dump_stack+0x26/0x30
[ 1739.948507][T17182]  dump_stack_lvl+0x14c/0x1c0
[ 1739.948686][T17182]  dump_stack+0x1e/0x25
[ 1739.948847][T17182]  should_fail_ex+0x7da/0x8a0
[ 1739.949068][T17182]  should_fail+0x2a/0x40
[ 1739.949253][T17182]  should_fail_usercopy+0x2e/0x40
[ 1739.949461][T17182]  strncpy_from_user+0x38/0x4b0
[ 1739.949636][T17182]  ? kmsan_get_metadata+0xf1/0x160
[ 1739.949855][T17182]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1739.950088][T17182]  getname_flags+0x178/0xac0
[ 1739.950254][T17182]  do_sys_openat2+0xaa/0x430
[ 1739.950453][T17182]  __x64_sys_openat+0x240/0x300
[ 1739.950647][T17182]  x64_sys_call+0x3597/0x3e70
[ 1739.950845][T17182]  do_syscall_64+0xc9/0xf80
[ 1739.951034][T17182]  ? clear_bhb_loop+0x40/0x90
[ 1739.951201][T17182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1739.951366][T17182] RIP: 0033:0x7fb3bcb9acb9
[ 1739.951490][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1739.951627][T17182] RSP: 002b:00007fb3bd987028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1739.951770][T17182] RAX: ffffffffffffffda RBX: 00007fb3bce15fa0 RCX: 00007fb3bcb9acb9
[ 1739.951883][T17182] RDX: 0000000000121042 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 1739.951992][T17182] RBP: 00007fb3bd987090 R08: 0000000000000000 R09: 0000000000000000
[ 1739.952092][T17182] R10: 0000000000000115 R11: 0000000000000246 R12: 0000000000000001
[ 1739.952187][T17182] R13: 00007fb3bce16038 R14: 00007fb3bce15fa0 R15: 00007ffe36d08b98
[ 1739.952334][T17182]  </TASK>
[ 1740.284723][T13747] Bluetooth: hci2: command tx timeout
[ 1740.668293][ T2335] pvrusb2: Invalid write control endpoint
[ 1740.674301][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1740.684625][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1740.692365][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1740.704091][ T2335] pvrusb2: Device being rendered inoperable
[ 1740.787649][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1740.798582][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1740.812068][ T2335] pvrusb2: Attached sub-driver cx25840
[ 1740.818142][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1740.832852][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1741.229875][T17202] input: syz0 as /devices/virtual/input/input65
[ 1741.614231][   T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd
[ 1741.756572][T17210] loop6: detected capacity change from 0 to 8
[ 1741.852602][   T24] usb 9-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config
[ 1741.951857][T17210] squashfs: Unknown parameter '­ô÷tå²'
[ 1741.963086][   T24] usb 9-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1741.980248][   T24] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1741.990486][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1742.017316][T17188] chnl_net:caif_netlink_parms(): no params data found
[ 1742.225641][T13747] Bluetooth: hci2: command tx timeout
[ 1742.268324][   T24] aiptek 9-1:17.0: interface has no int in endpoints, but must have minimum 1
[ 1742.745460][   T24] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1743.004190][   T24] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1743.016830][   T24] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1743.031452][   T24] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1743.044041][   T24] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1743.053717][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.533603][T17212] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1743.868302][T17212] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[ 1744.176940][T13747] Bluetooth: hci2: command tx timeout
[ 1744.380211][T17212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1744.619164][T12054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1744.650129][T17212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1745.489908][T12054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1745.642558][ T9412] usb 9-1: USB disconnect, device number 47
[ 1745.838957][T17226] loop6: detected capacity change from 0 to 512
[ 1745.857665][   T24] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[ 1745.892463][T12054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1745.935765][   T24] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input67
[ 1746.009245][T17226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1746.102438][T13747] Bluetooth: hci2: command tx timeout
[ 1746.407739][T12054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1747.194283][ T7406] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1747.312883][T16149] usb 10-1: USB disconnect, device number 41
[ 1747.313494][    C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1747.972470][T17188] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1747.986045][T17188] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1748.053985][T13263] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1748.319303][T13263] usb 2-1: Using ep0 maxpacket: 8
[ 1748.380157][T13263] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1748.390044][T13263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1748.821871][T13263] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1748.831550][T13263] pvrusb2: **********
[ 1748.835787][T13263] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1748.853254][T13263] pvrusb2: Important functionality might not be entirely working.
[ 1748.863337][T13263] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1748.875025][T13263] pvrusb2: **********
[ 1748.934578][T17238] loop8: detected capacity change from 0 to 32768
[ 1748.954405][T17188] bridge_slave_0: entered allmulticast mode
[ 1748.988973][T17242] 9p: Bad value for 'rfdno'
[ 1749.027817][T17238] (syz.8.3154,17238,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1749.054411][T17238] (syz.8.3154,17238,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1749.077038][T17188] bridge_slave_0: entered promiscuous mode
[ 1749.221172][T17238] JBD2: Ignoring recovery information on journal
[ 1749.426102][T17188] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1749.434969][T17188] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1749.516747][T17238] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1749.527286][T17188] bridge_slave_1: entered allmulticast mode
[ 1749.537577][ T2335] pvrusb2: Invalid write control endpoint
[ 1749.645181][T17238] ocfs2: Unmounting device (7,8) on (node local)
[ 1749.674759][T17188] bridge_slave_1: entered promiscuous mode
[ 1749.691866][ T9413] usb 2-1: USB disconnect, device number 22
[ 1750.184494][T17251] binder: 17250:17251 ioctl 4018620d 0 returned -22
[ 1750.297676][ T2335] pvrusb2: Invalid write control endpoint
[ 1750.303624][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1750.313711][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1750.321439][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1750.332404][ T2335] pvrusb2: Device being rendered inoperable
[ 1750.506715][   T30] audit: type=1326 audit(45074556.896:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1750.530679][   T30] audit: type=1326 audit(45074556.896:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1750.650507][T12054] bridge_slave_1: left allmulticast mode
[ 1750.662998][T12054] bridge_slave_1: left promiscuous mode
[ 1750.672813][T12054] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1750.696191][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1750.731361][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1750.830338][ T2335] pvrusb2: Attached sub-driver cx25840
[ 1750.836524][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1750.851453][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1750.923173][T12054] bridge_slave_0: left allmulticast mode
[ 1750.930367][T12054] bridge_slave_0: left promiscuous mode
[ 1750.937004][T12054] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1751.011629][   T30] audit: type=1326 audit(45074556.993:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.035581][   T30] audit: type=1326 audit(45074557.004:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.062914][   T30] audit: type=1326 audit(45074557.004:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.086561][   T30] audit: type=1326 audit(45074557.004:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.112013][   T30] audit: type=1326 audit(45074557.079:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.137899][   T30] audit: type=1326 audit(45074557.079:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.161200][   T30] audit: type=1326 audit(45074557.079:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1751.184054][   T30] audit: type=1326 audit(45074557.079:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17252 comm="syz.8.3157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1c02f9acb9 code=0x7ffc0000
[ 1752.032530][T13263] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1752.179168][T17261] loop9: detected capacity change from 0 to 512
[ 1752.319781][T13263] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1752.333578][T13263] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1752.344975][T13263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.506153][T17261] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1752.633220][T13263] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[ 1753.501318][ T9413] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1753.611431][T10077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1753.672719][T12054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1753.772957][ T9413] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1753.786876][ T9413] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1753.798831][ T9413] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1753.813784][ T9413] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1753.823891][ T9413] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1753.851643][T12054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1754.009631][T12054] bond0 (unregistering): Released all slaves
[ 1754.130055][T17188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1754.202540][T17270] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1754.397088][T17188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1754.498674][   T24] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1754.562278][T17270] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[ 1754.637177][T12054] hsr_slave_0: left promiscuous mode
[ 1754.696838][T12054] hsr_slave_1: left promiscuous mode
[ 1754.743958][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1754.753032][T12054] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1754.776668][   T24] usb 7-1: Using ep0 maxpacket: 8
[ 1754.896719][   T24] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1754.906556][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1754.915105][   T24] usb 7-1: Product: syz
[ 1754.920632][   T24] usb 7-1: Manufacturer: syz
[ 1754.925442][   T24] usb 7-1: SerialNumber: syz
[ 1754.948792][T17270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1754.990629][T12054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1754.998715][T12054] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1755.081421][T17270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1755.307165][   T24] usb 7-1: config 0 descriptor??
[ 1755.339845][ T9412] usb 2-1: USB disconnect, device number 23
[ 1755.404300][T12054] veth1_macvtap: left promiscuous mode
[ 1755.410169][T12054] veth0_macvtap: left promiscuous mode
[ 1755.688037][T12054] veth1_vlan: left promiscuous mode
[ 1755.696475][   T24] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1755.943318][T12054] veth0_vlan: left promiscuous mode
[ 1756.484614][   T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110)
[ 1756.493211][   T24] sq905 7-1:0.0: probe with driver sq905 failed with error -110
[ 1756.746919][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 1756.753580][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 1756.891267][T17272] loop6: detected capacity change from 0 to 256
[ 1757.482809][T17283] loop1: detected capacity change from 0 to 32768
[ 1757.512403][T17283] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3167 (17283)
[ 1757.602638][T17283] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1757.615184][T17283] BTRFS info (device loop1): using blake2b (blake2b-256-lib) checksum algorithm
[ 1757.916902][T13263] usb 7-1: USB disconnect, device number 69
[ 1758.158150][T17283] BTRFS info (device loop1): enabling ssd optimizations
[ 1758.167031][T17283] BTRFS info (device loop1): turning on async discard
[ 1758.174420][T17283] BTRFS info (device loop1): enabling free space tree
[ 1758.181834][T17283] BTRFS info (device loop1): use zstd compression, level 3
[ 1758.248261][   T36] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0x53ccb67cf2cd4d57b8377a99cb15d167f07773786963ca6c47ef35dda1a43427 found 0x39f036c1bb442bfca8a0c90ad9820c9278f52e66defdc0f28ebd096751cea374 level 0
[ 1758.273592][T17283] BTRFS: error (device loop1) in btrfs_fill_super:992: errno=-5 IO failure
[ 1758.306903][T17283] BTRFS error (device loop1 state E): commit super ret -30
[ 1761.016311][T12054] team0 (unregistering): Port device team_slave_1 removed
[ 1761.195082][T12054] team0 (unregistering): Port device team_slave_0 removed
[ 1762.591497][ T9413] aiptek 9-1:17.0: Aiptek using 400 ms programming speed
[ 1762.661831][T17188] team0: Port device team_slave_0 added
[ 1762.685667][T17305] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1762.708495][ T9413] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input69
[ 1763.046957][T17302] pimreg: entered allmulticast mode
[ 1763.346906][T17188] team0: Port device team_slave_1 added
[ 1764.472833][T13263] usb 9-1: USB disconnect, device number 48
[ 1764.472833][    C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1764.616580][T17188] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1764.623973][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1764.651607][T17188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1764.868903][T17188] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1764.882265][T17188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1764.911297][T17188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1765.557609][T13747] Bluetooth: hci1: unexpected event for opcode 0x0c12
[ 1765.705237][T13263] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1765.940729][T17188] hsr_slave_0: entered promiscuous mode
[ 1765.983748][T13263] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1765.999194][T13263] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1766.014932][T13263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1766.058033][T17188] hsr_slave_1: entered promiscuous mode
[ 1766.112323][T17188] debugfs: 'hsr0' already exists in 'hsr'
[ 1766.123660][T17188] Cannot create hsr debugfs directory
[ 1766.240397][T13263] aiptek 7-1:17.0: interface has no int in endpoints, but must have minimum 1
[ 1767.396029][T17338] netlink: 'syz.8.3179': attribute type 4 has an invalid length.
[ 1767.589559][T17335] loop1: detected capacity change from 0 to 40427
[ 1767.600993][T17335] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1767.609269][T17335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1767.656814][T17335] F2FS-fs (loop1): invalid crc value
[ 1768.016271][T17335] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1768.091929][T17335] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1768.099959][T17335] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1768.283937][T13263] usb 10-1: new high-speed USB device number 42 using dummy_hcd
[ 1768.509573][T13263] usb 10-1: Using ep0 maxpacket: 8
[ 1768.566395][ T9413] usb 7-1: USB disconnect, device number 70
[ 1768.578916][T13263] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1768.586241][T13263] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 1768.595936][T13263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1768.739722][T17348] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1768.799758][T13263] usb 10-1: config 0 descriptor??
[ 1769.316560][T13263] kone 0003:1E7D:2CED.000E: unknown main item tag 0x0
[ 1769.405112][T13263] kone 0003:1E7D:2CED.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.9-1/input0
[ 1769.871225][T13263] kone 0003:1E7D:2CED.000E: couldn't init struct kone_device
[ 1769.879215][T13263] kone 0003:1E7D:2CED.000E: couldn't install mouse
[ 1769.989076][T13263] kone 0003:1E7D:2CED.000E: probe with driver kone failed with error -5
[ 1770.090090][T13263] usb 10-1: USB disconnect, device number 42
[ 1770.750872][T17364] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[ 1771.088926][T17360] fido_id[17360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1771.219798][T13263] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1771.482668][T13263] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1771.492310][T13263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.597603][T13263] usb 7-1: config 0 descriptor??
[ 1771.775803][T13263] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1772.030777][T13263] gp8psk: usb in 128 operation failed.
[ 1772.557179][T17188] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1772.918404][T17373] loop9: detected capacity change from 0 to 32768
[ 1772.938458][T13263] gp8psk: usb in 137 operation failed.
[ 1772.945624][T17188] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1772.954945][T13263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1772.976309][T17373] (syz.9.3186,17373,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1773.000623][T17373] (syz.9.3186,17373,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1773.061889][T17373] JBD2: Ignoring recovery information on journal
[ 1773.132424][T17188] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1773.143544][T13263] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1773.220371][T13263] usb 7-1: media controller created
[ 1773.238868][T17373] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1773.331525][T17373] ocfs2: Unmounting device (7,9) on (node local)
[ 1773.446047][T17188] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1774.144338][T13747] Bluetooth: hci1: unexpected event for opcode 0x0c12
[ 1774.290263][T13263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1774.790582][T13263] gp8psk_fe: Frontend attached
[ 1774.795618][T13263] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1774.910873][T13263] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1774.927502][T13506] usb 10-1: new high-speed USB device number 43 using dummy_hcd
[ 1775.192376][T13506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1775.203810][T13506] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1775.214215][T13506] usb 10-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[ 1775.223780][T13506] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1775.267070][T13263] gp8psk: usb in 138 operation failed.
[ 1775.272834][T13263] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1775.289290][T13263] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1775.477019][T13263] usb 7-1: USB disconnect, device number 71
[ 1775.649617][T13506] usb 10-1: config 0 descriptor??
[ 1775.927351][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1776.378823][T17391] loop8: detected capacity change from 0 to 32768
[ 1776.403125][T17391] (syz.8.3190,17391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1776.417739][T17391] (syz.8.3190,17391,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1776.437563][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1776.452023][   T10] usb 2-1: config 0 has no interfaces?
[ 1776.458701][   T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1776.468323][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1776.540286][T13506] itetech 0003:06CB:2968.000F: unbalanced delimiter at end of report description
[ 1776.576696][T17391] JBD2: Ignoring recovery information on journal
[ 1776.727969][T13506] itetech 0003:06CB:2968.000F: probe with driver itetech failed with error -22
[ 1776.741347][T17391] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1776.873386][   T10] usb 2-1: config 0 descriptor??
[ 1776.893112][T13506] usb 10-1: USB disconnect, device number 43
[ 1777.327125][ T9998] ocfs2: Unmounting device (7,8) on (node local)
[ 1777.365603][T17188] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1777.759612][T17188] 8021q: adding VLAN 0 to HW filter on device team0
[ 1777.993552][T12054] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1778.001269][T12054] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1778.107753][T12054] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1778.115416][T12054] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1778.230264][T13263] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1778.596713][T13506] usb 2-1: USB disconnect, device number 24
[ 1778.725679][T13263] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1778.994167][T13263] usb 7-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1779.012049][T13263] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1779.023031][T13263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.083418][T17188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1779.116320][ T9413] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1779.318754][ T9413] usb 9-1: device descriptor read/64, error -71
[ 1779.619958][T13263] usb 7-1: can't set config #17, error -71
[ 1779.628427][ T9413] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1779.703221][T13263] usb 7-1: USB disconnect, device number 72
[ 1781.324642][T13747] Bluetooth: hci1: unexpected event for opcode 0x0c12
[ 1781.344726][ T9413] usb 10-1: new high-speed USB device number 44 using dummy_hcd
[ 1781.509658][T17429] dlm: plock device version mismatch: kernel (1.2.0), user (64.6.0)
[ 1781.632106][ T9413] usb 10-1: Using ep0 maxpacket: 8
[ 1781.648892][ T9413] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1781.658506][ T9413] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.871363][ T9413] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1781.878930][ T9413] pvrusb2: **********
[ 1781.883762][ T9413] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1781.895250][ T9413] pvrusb2: Important functionality might not be entirely working.
[ 1781.903381][ T9413] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1781.914987][ T9413] pvrusb2: **********
[ 1781.949328][ T5847] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1782.889254][T17433] loop1: detected capacity change from 0 to 32768
[ 1782.912012][T17433] (syz.1.3201,17433,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1782.930741][T17433] (syz.1.3201,17433,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1782.959806][ T2335] pvrusb2: Invalid write control endpoint
[ 1783.016500][T17433] JBD2: Ignoring recovery information on journal
[ 1783.044591][ T5847] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[ 1783.054161][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1783.101090][ T5847] usb 7-1: config 0 descriptor??
[ 1783.142618][ T9413] usb 10-1: USB disconnect, device number 44
[ 1783.188314][T17433] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1783.241559][ T5847] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1783.330694][T17433] ocfs2: Unmounting device (7,1) on (node local)
[ 1783.472800][ T5847] gp8psk: usb in 128 operation failed.
[ 1783.523259][ T5847] gp8psk: usb in 137 operation failed.
[ 1783.528967][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1783.618420][ T5847] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[ 1783.638302][ T5847] usb 7-1: media controller created
[ 1783.736236][T17188] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1784.020479][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1784.054576][ T2335] pvrusb2: Invalid write control endpoint
[ 1784.060512][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1784.078277][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1784.086211][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1784.096690][ T2335] pvrusb2: Device being rendered inoperable
[ 1784.369794][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1784.455119][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1784.526626][ T2335] pvrusb2: Attached sub-driver cx25840
[ 1784.532469][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1784.547776][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1784.556064][ T5847] gp8psk_fe: Frontend attached
[ 1784.642303][ T5847] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1784.684356][ T5847] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1785.078823][T13263] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1785.321988][T13263] usb 9-1: Using ep0 maxpacket: 16
[ 1785.415864][T13263] usb 9-1: config 252 has an invalid interface number: 15 but max is 0
[ 1785.424707][T13263] usb 9-1: config 252 has no interface number 0
[ 1785.524295][T13263] usb 9-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[ 1785.655270][T13263] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[ 1785.668124][T13263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1785.676670][T13263] usb 9-1: Product: syz
[ 1785.681049][T13263] usb 9-1: Manufacturer: syz
[ 1785.690436][T13263] usb 9-1: SerialNumber: syz
[ 1785.841079][ T5847] gp8psk: usb in 138 operation failed.
[ 1785.848504][ T5847] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[ 1785.858613][ T5847] gp8psk: found Genpix USB device pID = 203 (hex)
[ 1785.900747][ T5847] usb 7-1: USB disconnect, device number 73
[ 1786.704947][T13263] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1787.171960][T17459] loop1: detected capacity change from 0 to 32768
[ 1787.235425][T12053] usb 9-1: Failed to submit usb control message: -71
[ 1787.237862][ T9413] usb 9-1: USB disconnect, device number 51
[ 1787.242569][T12053] usb 9-1: unable to send the bmi data to the device: -71
[ 1787.242768][T12053] usb 9-1: unable to get target info from device
[ 1787.263403][T12053] usb 9-1: could not get target info (-71)
[ 1787.344740][T17459] 
[ 1787.344740][T17459]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1787.344740][T17459] 
[ 1787.400318][T17459] ERROR: (device loop1): diWrite: ixpxd invalid
[ 1787.400318][T17459] 
[ 1787.480821][T17459] ERROR: (device loop1): txAbort: 
[ 1787.480821][T17459] 
[ 1787.554239][T12053] usb 9-1: could not probe fw (-71)
[ 1788.017569][T12040] 
[ 1788.017569][T12040]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1788.017569][T12040] 
[ 1788.136126][T12040] 
[ 1788.136126][T12040]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1788.136126][T12040] 
[ 1788.251329][T15582] 
[ 1788.251329][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1788.251329][T15582] 
[ 1788.327400][  T111] 
[ 1788.327400][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1788.327400][  T111] 
[ 1788.345594][T15582] 
[ 1788.345594][T15582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1788.345594][T15582] 
[ 1788.556393][ T5847] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[ 1789.749574][T17479] binder: 17477:17479 ioctl c0306201 0 returned -14
[ 1790.122461][T17478] loop6: detected capacity change from 0 to 32768
[ 1790.137854][T17478] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3210 (17478)
[ 1790.174260][T17478] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1790.185408][T17478] BTRFS info (device loop6): using blake2b (blake2b-256-lib) checksum algorithm
[ 1791.264334][T17489] loop8: detected capacity change from 0 to 32768
[ 1791.292310][T17489] (syz.8.3212,17489,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1791.320330][T17489] (syz.8.3212,17489,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1791.423323][T17489] JBD2: Ignoring recovery information on journal
[ 1791.531875][T17478] BTRFS info (device loop6): setting nodatasum
[ 1791.538611][T17478] BTRFS info (device loop6): enabling ssd optimizations
[ 1791.545880][T17478] BTRFS info (device loop6): turning on async discard
[ 1791.553116][T17478] BTRFS info (device loop6): enabling free space tree
[ 1791.676642][T17489] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1791.860276][T17489] ocfs2: Unmounting device (7,8) on (node local)
[ 1792.030044][T17188] veth0_vlan: entered promiscuous mode
[ 1792.170331][ T7406] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1792.277614][T17188] veth1_vlan: entered promiscuous mode
[ 1795.581437][T17502] loop8: detected capacity change from 0 to 40427
[ 1796.764154][T16269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1796.798039][T16269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1796.811722][T16269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1796.875426][T16269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1796.903010][T16269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1798.819243][T16269] Bluetooth: hci0: command tx timeout
[ 1800.745727][T17524] chnl_net:caif_netlink_parms(): no params data found
[ 1800.767370][T16269] Bluetooth: hci0: command tx timeout
[ 1802.705400][T16269] Bluetooth: hci0: command tx timeout
[ 1802.870141][T12040] bridge_slave_1: left allmulticast mode
[ 1802.876668][T12040] bridge_slave_1: left promiscuous mode
[ 1802.883595][T12040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1803.072696][T12040] bridge_slave_0: left allmulticast mode
[ 1803.079255][T12040] bridge_slave_0: left promiscuous mode
[ 1803.085891][T12040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1804.512942][   T30] kauditd_printk_skb: 22 callbacks suppressed
[ 1804.513031][   T30] audit: type=1326 audit(45074614.801:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.542553][   T30] audit: type=1326 audit(45074614.822:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.566097][   T30] audit: type=1326 audit(45074614.822:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.591818][   T30] audit: type=1326 audit(45074614.833:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.615437][   T30] audit: type=1326 audit(45074614.833:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.638305][   T30] audit: type=1326 audit(45074614.833:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.662035][   T30] audit: type=1326 audit(45074614.833:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.687768][   T30] audit: type=1326 audit(45074614.833:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.712014][   T30] audit: type=1326 audit(45074614.919:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1804.735612][T16269] Bluetooth: hci0: command tx timeout
[ 1804.797061][   T30] audit: type=1326 audit(45074615.080:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17593 comm="syz.6.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3bcb9acb9 code=0x7ffc0000
[ 1805.046546][T12040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1805.143297][T12040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1805.227208][T12040] bond0 (unregistering): Released all slaves
[ 1805.268228][T17599] =====================================================
[ 1805.275680][T17599] BUG: KMSAN: uninit-value in validate_xmit_skb+0x14e1/0x2400
[ 1805.283733][T17599]  validate_xmit_skb+0x14e1/0x2400
[ 1805.289243][T17599]  validate_xmit_skb_list+0xd4/0x320
[ 1805.294747][T17599]  sch_direct_xmit+0xd4/0xcf0
[ 1805.299755][T17599]  __dev_queue_xmit+0x2f2d/0x5890
[ 1805.305149][T17599]  packet_xmit+0x8f/0x710
[ 1805.309700][T17599]  packet_sendmsg+0x91e7/0xa330
[ 1805.315004][T17599]  __sock_sendmsg+0x333/0x3d0
[ 1805.319938][T17599]  ____sys_sendmsg+0x7f5/0xcf0
[ 1805.325137][T17599]  ___sys_sendmsg+0x271/0x3b0
[ 1805.330027][T17599]  __x64_sys_sendmsg+0x211/0x3e0
[ 1805.335342][T17599]  x64_sys_call+0x1c60/0x3e70
[ 1805.340264][T17599]  do_syscall_64+0xc9/0xf80
[ 1805.345153][T17599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.351377][T17599] 
[ 1805.353802][T17599] Uninit was stored to memory at:
[ 1805.359128][T17599]  validate_xmit_skb+0x14da/0x2400
[ 1805.364627][T17599]  validate_xmit_skb_list+0xd4/0x320
[ 1805.370256][T17599]  sch_direct_xmit+0xd4/0xcf0
[ 1805.375131][T17599]  __dev_queue_xmit+0x2f2d/0x5890
[ 1805.380546][T17599]  packet_xmit+0x8f/0x710
[ 1805.385067][T17599]  packet_sendmsg+0x91e7/0xa330
[ 1805.390367][T17599]  __sock_sendmsg+0x333/0x3d0
[ 1805.395291][T17599]  ____sys_sendmsg+0x7f5/0xcf0
[ 1805.400460][T17599]  ___sys_sendmsg+0x271/0x3b0
[ 1805.405400][T17599]  __x64_sys_sendmsg+0x211/0x3e0
[ 1805.410792][T17599]  x64_sys_call+0x1c60/0x3e70
[ 1805.415689][T17599]  do_syscall_64+0xc9/0xf80
[ 1805.420578][T17599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.426823][T17599] 
[ 1805.429245][T17599] Uninit was created at:
[ 1805.433774][T17599]  kmem_cache_alloc_node_noprof+0x9de/0x1780
[ 1805.440116][T17599]  kmalloc_reserve+0x13c/0x4b0
[ 1805.445185][T17599]  __alloc_skb+0x805/0x1030
[ 1805.449888][T17599]  alloc_skb_with_frags+0xc5/0xa60
[ 1805.455415][T17599]  sock_alloc_send_pskb+0xacb/0xc60
[ 1805.460854][T17599]  packet_sendmsg+0x7485/0xa330
[ 1805.466093][T17599]  __sock_sendmsg+0x333/0x3d0
[ 1805.471043][T17599]  ____sys_sendmsg+0x7f5/0xcf0
[ 1805.476210][T17599]  ___sys_sendmsg+0x271/0x3b0
[ 1805.481140][T17599]  __x64_sys_sendmsg+0x211/0x3e0
[ 1805.486457][T17599]  x64_sys_call+0x1c60/0x3e70
[ 1805.491550][T17599]  do_syscall_64+0xc9/0xf80
[ 1805.496305][T17599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.502572][T17599] 
[ 1805.505052][T17599] CPU: 0 UID: 0 PID: 17599 Comm: syz.1.3246 Tainted: G        W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1805.516938][T17599] Tainted: [W]=WARN, [L]=SOFTLOCKUP
[ 1805.522386][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1805.532758][T17599] =====================================================
[ 1805.540001][T17599] Disabling lock debugging due to kernel taint
[ 1805.546308][T17599] Kernel panic - not syncing: kmsan.panic set ...
[ 1805.552902][T17599] CPU: 0 UID: 0 PID: 17599 Comm: syz.1.3246 Tainted: G    B   W    L      syzkaller #0 PREEMPT(voluntary) 
[ 1805.564535][T17599] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP
[ 1805.571096][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 1805.581407][T17599] Call Trace:
[ 1805.584812][T17599]  <TASK>
[ 1805.587873][T17599]  __dump_stack+0x26/0x30
[ 1805.592427][T17599]  dump_stack_lvl+0x50/0x1c0
[ 1805.597240][T17599]  ? dump_stack+0x12/0x25
[ 1805.601789][T17599]  dump_stack+0x1e/0x25
[ 1805.606155][T17599]  vpanic+0x435/0xd40
[ 1805.610356][T17599]  panic+0x15d/0x160
[ 1805.614580][T17599]  kmsan_report+0x31a/0x320
[ 1805.619316][T17599]  ? __msan_warning+0x1b/0x30
[ 1805.624203][T17599]  ? validate_xmit_skb+0x14e1/0x2400
[ 1805.629686][T17599]  ? validate_xmit_skb_list+0xd4/0x320
[ 1805.635347][T17599]  ? sch_direct_xmit+0xd4/0xcf0
[ 1805.640400][T17599]  ? __dev_queue_xmit+0x2f2d/0x5890
[ 1805.645837][T17599]  ? packet_xmit+0x8f/0x710
[ 1805.650573][T17599]  ? packet_sendmsg+0x91e7/0xa330
[ 1805.655840][T17599]  ? __sock_sendmsg+0x333/0x3d0
[ 1805.660942][T17599]  ? ____sys_sendmsg+0x7f5/0xcf0
[ 1805.666077][T17599]  ? ___sys_sendmsg+0x271/0x3b0
[ 1805.671122][T17599]  ? __x64_sys_sendmsg+0x211/0x3e0
[ 1805.676434][T17599]  ? x64_sys_call+0x1c60/0x3e70
[ 1805.681503][T17599]  ? do_syscall_64+0xc9/0xf80
[ 1805.686406][T17599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.692697][T17599]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.699003][T17599]  ? skb_network_protocol+0x898/0xaa0
[ 1805.704591][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.709937][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.715984][T17599]  ? netif_skb_features+0x1788/0x2160
[ 1805.721574][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.726937][T17599]  __msan_warning+0x1b/0x30
[ 1805.731672][T17599]  validate_xmit_skb+0x14e1/0x2400
[ 1805.737002][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.743063][T17599]  ? sch_direct_xmit+0x31/0xcf0
[ 1805.748085][T17599]  ? filter_irq_stacks+0x49/0x190
[ 1805.753346][T17599]  validate_xmit_skb_list+0xd4/0x320
[ 1805.758860][T17599]  sch_direct_xmit+0xd4/0xcf0
[ 1805.763710][T17599]  ? kmsan_get_metadata+0x146/0x160
[ 1805.769141][T17599]  ? kmsan_internal_set_shadow_origin+0x7a/0x110
[ 1805.775706][T17599]  __dev_queue_xmit+0x2f2d/0x5890
[ 1805.780926][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.787002][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.792371][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.798466][T17599]  ? __dev_queue_xmit+0x27d/0x5890
[ 1805.803832][T17599]  packet_xmit+0x8f/0x710
[ 1805.808325][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.813662][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.819713][T17599]  packet_sendmsg+0x91e7/0xa330
[ 1805.824778][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.830161][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.836225][T17599]  ? aa_label_sk_perm+0x764/0x820
[ 1805.841496][T17599]  ? __pfx_tomoyo_socket_sendmsg_permission+0x1/0x10
[ 1805.848407][T17599]  ? __pfx_filter_irq_stacks+0x10/0x10
[ 1805.854129][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.859676][T17599]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1805.865090][T17599]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1805.870506][T17599]  __sock_sendmsg+0x333/0x3d0
[ 1805.875426][T17599]  ____sys_sendmsg+0x7f5/0xcf0
[ 1805.880441][T17599]  ___sys_sendmsg+0x271/0x3b0
[ 1805.885316][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.890683][T17599]  ? __rcu_read_unlock+0x6c/0xd0
[ 1805.895830][T17599]  ? __fget_files+0x3b4/0x4a0
[ 1805.900678][T17599]  ? __fget_files+0x3b9/0x4a0
[ 1805.905532][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.910902][T17599]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1805.916955][T17599]  __x64_sys_sendmsg+0x211/0x3e0
[ 1805.922147][T17599]  ? kmsan_get_metadata+0xf1/0x160
[ 1805.927534][T17599]  x64_sys_call+0x1c60/0x3e70
[ 1805.932431][T17599]  do_syscall_64+0xc9/0xf80
[ 1805.937167][T17599]  ? clear_bhb_loop+0x40/0x90
[ 1805.942028][T17599]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.948108][T17599] RIP: 0033:0x7fb5a2d9acb9
[ 1805.952659][T17599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1805.972446][T17599] RSP: 002b:00007fb5a3cc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1805.981055][T17599] RAX: ffffffffffffffda RBX: 00007fb5a3015fa0 RCX: 00007fb5a2d9acb9
[ 1805.989187][T17599] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003
[ 1805.997298][T17599] RBP: 00007fb5a2e08bf7 R08: 0000000000000000 R09: 0000000000000000
[ 1806.005408][T17599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1806.013601][T17599] R13: 00007fb5a3016038 R14: 00007fb5a3015fa0 R15: 00007ffd85ab8d48
[ 1806.021773][T17599]  </TASK>
[ 1806.025549][T17599] Kernel Offset: disabled
[ 1806.030309][T17599] Rebooting in 86400 seconds..