last executing test programs:

32m56.885814407s ago: executing program 3 (id=1255):
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="01002bbd"], 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000003c0)=[@nested_amd_invlpga={0x17d, 0x20, {0x50000, 0x3e79}}], 0x20})
syz_usb_connect(0x3, 0x59, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xad, 0x80, 0x67, 0x40, 0x856, 0xac31, 0xfb7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x0, 0x7, 0x60, 0x9, "", [{{0x9, 0x4, 0x5, 0x10, 0x1, 0xae, 0x53, 0x3b, 0x10, [@generic={0x2c, 0x23, "9b3b2e48dd6861a261066ec1d5b3c99c92130eaf090578596ae770bb4b005bbef77a7e7d3d147b98a27a"}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x10, 0x79}}]}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})

32m55.408939433s ago: executing program 3 (id=1260):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

32m53.206163846s ago: executing program 3 (id=1267):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000640), 0xe, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe})
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000d40)={0x2, 0x4e22, @loopback}, 0x10)
syz_emit_ethernet(0x45, &(0x7f0000000d80)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c"}}}}}, 0x0)

32m53.165124018s ago: executing program 3 (id=1268):
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x84000, 0x0)

32m52.233207221s ago: executing program 3 (id=1272):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000003c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="ebe3a0e9796cfd164781f4a75803e2beae", 0x2d}], 0x1, 0x0, 0x0, 0x20048044}], 0x1, 0x20040045)
recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)=""/3, 0x3}, {0x0}], 0x2}, 0x0)

32m51.795372961s ago: executing program 3 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x8c9}, 0x0)

32m50.757551516s ago: executing program 32 (id=1273):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x8c9}, 0x0)

13m34.147316281s ago: executing program 2 (id=6352):
mknod$loop(&(0x7f0000001c00)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001c40), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000001c80)='./file0\x00', 0x0, 0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000001d80)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_POLL(r0, &(0x7f0000003dc0)={0x18, 0x0, r1, {0x7}}, 0x18)
syz_fuse_handle_req(r0, &(0x7f0000003e00)="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", 0x2000, &(0x7f0000005e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000005ec0)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000005f00)='./file0\x00', 0x2c41, 0x0)
writev(r2, &(0x7f0000005f40)=[{0x0}, {&(0x7f0000005f80)="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", 0x13b}], 0x2)

13m33.961482635s ago: executing program 2 (id=6354):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d)
shutdown(r0, 0x1)

13m33.795448629s ago: executing program 2 (id=6356):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0)

13m32.878328211s ago: executing program 2 (id=6357):
mkdirat(0xffffffffffffff9c, &(0x7f0000003800)='./file0\x00', 0x0)
mount$bind(&(0x7f0000003840)='.\x00', &(0x7f0000003880)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000038c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000003900)='./file0/../file0\x00', &(0x7f0000003940)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000003980)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000039c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x185093, 0x0)
mount$bind(&(0x7f0000003a40)='.\x00', &(0x7f0000003a80)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000003ac0)='./file0/../file0\x00', 0xa)

13m32.650194137s ago: executing program 2 (id=6359):
r0 = fsopen(&(0x7f0000000080)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.events\x00', 0x26e1, 0x0)

13m29.876517423s ago: executing program 2 (id=6366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="e6", 0x1, 0xfffffffffffffffd)
request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x8e46, 0x2, 0x0, 0x244}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b70, 0x200, 0x2, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x240c, 0x2, 0x2, 0x197}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4fe, 0x4, 0xffffffff, 0x15f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85ff, 0x40000, 0x0, 0x41}}], 0x4, &(0x7f00000006c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x12f, 0x0, &(0x7f00000014c0)=@buf_max_buf="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"}}, &(0x7f0000002540))
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
shutdown(r3, 0x2)

13m29.354674075s ago: executing program 33 (id=6366):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80000)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)="e6", 0x1, 0xfffffffffffffffd)
request_key(&(0x7f0000000440)='user\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x8e46, 0x2, 0x0, 0x244}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b70, 0x200, 0x2, 0x8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x240c, 0x2, 0x2, 0x197}, <r5=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4fe, 0x4, 0xffffffff, 0x15f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x85ff, 0x40000, 0x0, 0x41}}], 0x4, &(0x7f00000006c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x12f, 0x0, &(0x7f00000014c0)=@buf_max_buf="61492f9b741a87a79b84b801d4a5e4dcfdac546e1b4974e89080925dd73756e2823d0039e637fb35527b26ddd0585aa23c8f299ae5c73be4a27d0949612554850809c11f9d14ca2d46cd0ef9963d83de5d2cc367aaa81645b036cba17de9fd3717e8c75a97c072657523157fe78f4eaee068cda93fc90db44616d46ed34d1d2bae331b9f0d952848984bb325bc3cde9d155ad825f785e21069ad99cebb3bf31e862f6df6847ddd6f5beb59ecc10c1674063c5439ca214ea199476343f9f7b46264d9b559f47516f472f75bd6b3da9e0750ea31e72d9484815fac24622d7fc61dc56e4f4cd4988d98bd865a5273b524be05e8f5fbf486479426d841983a5ba1c4f6fee6db97f06d09e628275a95014f00f9986690dbdf25e3993c257907a376f60b9776edf01df6dcf85e75396a17191a7f4333e3743b09fc39451dd9632b1826089419f6692801b2787771e0b9406f7e032186a1b153d397ccb7b788b8f6c5cd8f24e53820b3e3cf7b3e2eaee368e16e3ae4270d9d57703e003549213086390a4d31e84a7f93d0390cf738c9b820a9a5e5d0868b3bb86dabea52e8bc1bb6676d8c6c46f19b2fd90259adce497ac5957336561f665279982e9caaead902b6366b1ca9c7f4e7540ea3db9cf45b3ea7a18d9e9600f08c284e89e031048552035c5ab4d1c8eb28837aba99974a2a1ef4fbe1cbb3c6c2a89638afdd542f747598f53d28cfb53a44a3eb633f3d5efa23963077f4f3e5c07936f3495b2745d148d268352a16ff75e77d818b686c7801a6661174e2cd7851fe7f49b122ffde0991ff5668e6e4b2ba3acce6e7bda077afa6d8e904d9290598826f5c7977e44419d31abcd1c833bdfbbb39fa6f1b85b98b2e9cd2c27ae4930181959b73500d9b06e63a4b64ac3a1e0d45998dc3ba26121a7a8a28769976cbce12ba7772b715409aef0ca5b2afa7f024a006e6b478f94c7efa9e95c4994fd3f099b1748a38244f4c3277fcad5bfdb1b627c5de0e51b129d168516516d4e95206bef50955b9af0bc7a85cd24fc0b9350d85b471e7d49357c1c130a071b58cf6c0710b93e468336506661213821139aa4b3f8505949a3741f0818c0cfb797d08805b924584aaa38158f1d7f89550aa4dda358f2a6641b6fdf9ace7d9b9205bfe2d0a6bfee0388dcea6816d83d7e3311a4de98c1706377d5252bfb5be5b50dcdfa74081600cc0fe38b10b479de002bf059c88ef7842a19f3fd91a231ab6692ec498dae11c94ab41ffc02ea593dd5af0d1841f787193d2c547061dff54caa7e01e92494e95c608d700764593b1310ab36d35f7136df0ea28f6fada5e8ba9d43549a277739db36b2f820475bf6c24e97f88f4a37c81efc867d333b514e63691820b4e0d9704de439bd35958a15bb248bd34d29a8e2f154df279c4e75201b820474471c5f35f5b39bd507278299e2dddfb7e91ef4a0ded91367ce0cbfb854ad830a0fcc4d8b3a23e841044a6b7f729a44172f0d46a3620219ffec0ff9265972b509ad90283180b98463c50fc08418e8ae94727b08425987782b8ed9b7d4f4f8ba9f4c2e3223bf55b66f1c7eab4f2e72b0617234a2ce49f4a1ef85c473bbe91d3e8807ed27c39d469e77087ac835844cc69a4ab165c6d85002443a526401975abd241cf0368299393b1cfd80574673bae5a9a585e2f3652668087a64e2f978a5b104befa4538ce5d42e41ca14972f53dd913005db72e3b93824bbb0a14882e6087d81098a3fefd1fd646db96d00789271b09050e79a5bbe0555b54de48118f528148b468c1201e62b8e8c68d08d04b15f116be477aca7d754853b4b110dee387db1ec174263d54612e183af57c8a8e0478ae6c7c1a2e60554675679950bcecb13f64830e5debff0cf2c67a71cd1e22550605d208e736aed9eef07fe819d79f61b80a9b83344688dccdd891e00aeff608935f43447e9b6d62d9d567253f7af6b65348672b68fb08f43cc77ea3340d10f3b21c2b60dfde27a8a67e01c6f853c799fcb96ae17143da512cfcac413aa18fca7c5202a5c1b6e6010e6038e8dc4d0b8188e01dbd9be3cf6509f3192eeeb0f994a60add4df1d952e8414085cee2f4d9881a12a0be6f7078ffa37e4ea553426dcd6d901a082fbd3c297446a8bb9c2cb20738f42d99f7d61649606cbfae195b223a895498259fa03eb0e228867c65b36d9e6a8b3e358155f1207d68ab10a7d32d7b705a69094c3539eade51438c43eff3a6253d8f45fc68129a028c1ae1bf1be178847c8e2bf14f30ce249f04ffa1e8a036c95d12313edcfa4aaef627f271fca57f2991198034131fac449bd551a85f8d8912931b90cfb8bf45b3ee1fd2a4b2053add7255bdcecb0d12e428c767d98d7fc5fd5fbc53926087bc0c6b8dc25b013c762e7f246323cadb428cabd654263faa3a69b88044c9811cac702aeee4280abfcbe2fb14c07be5e871549fb79cead7de381cadf805018f1fe15f59bb4df46731a01254d4067537d07b33ddd0b2b6fa9d1af17a90408ab8f6673671d6fff20fe7a7a0de7a009d6d0c8e41dac1a29781f0e33f384eed5e6e0d71950ec9cfef5af146b17ad8f563bce9837c3872cf98d633a54390f30cf849550021b9f82393dd171eaf3a4c08fba84877f5576a53033e7e62b148d55f4c1fb1f9a6fb1c1dcfecfe915d87a48cfbbc5242ae63a738d15584709dfb154fbd88743db47f8151dc365406278f1f35cf300e05cb2b77709f917334af5080a399cdd80fe95e9a9485fbe285cbdf58939a413a76ac8c439799fa72e480b9f258b9aca7992b1e9bd1441c384d89bd0d0ed036e3e671e7501e5f2ec103045a268dbb84da2538c332fb99fbcb9044480ec7d33927c66f5120b391cbf13e598d36455a5f98fd67e02f1b6436b5197cf420620770c9f4d76f5ab34d0d916087ce9c15f45cd206815af9b0539116a6ee0c8630b6a1465eb22acdacb4c8e30b5952294875dcbc9d01baddd601f6a391456d9912ca2462c956ca65845045d44002dcc443ef11e1a8d4a50573be256907c7497e650f7ac094123d6771d13d8b692c9bcd25e2fcdcdfbb59744f0bfed104cb06f45184f773529ef80bc541dfec8933b6c50b9de1da1081d61d369c710a07a13d7c71f2da9bfc9efe5e3c7d2632bbd2de109770949be96cc47ec5944f79ac859a3a266bc958fc2500603420c1a55ae0a54ddcb79f7ca7c491b9f4d054599e855a07f558c8a7ce4df02b0c7919b1c8e0009ba1386ae53431ed238bc4de322fad7de06a1025a215a94e44454b0e612ec20d38f9e3141d4a2fb64382bdfcc9746bac8f07fbecce269638f7d48831c93344e61187cfd692a5b87d68b213f66905603d68ae704657e06ad26d94c0af11951be5be23dbb09b994b2dca678437ed852e8cdd51a0eb902373a647acf5af18a8401626dcc31cfc65a2ec0d56dcc2743cd4059120e2cc7049083e191d253fa42495be13ec9ad9f7950c872b9fa258ee8bb38fcfc0a3e659cf67fc3910650ae3bb40769cc881b4c442f7ab1c1e297bc79033876b1c43c2d74a4d03fd502b28b017979ae9f7bed0070d7bb6624c6a84d7ccd9ffeb0d0cc59537c33c0259964388f8ef160da1b320c8812cd884a1086b9f7d98489435f272e191b08584cd7637c2b2d9afd6aa16c7cecd24351f8861834bfadbdf0c1920c70a8f217fd492a18f0fcdde822a4a8cc601f6f9d93481c053c21d8b53adf4c0e79d01f6d920fa8e1534c282a682b2fe1943cfd099fdd1db85b89e994c47b594a5b56308a5e1177525a87543baa2c1be72f2118e7d66ab3e1c4606b4c656ed8e196bbe906098b22fcfdddd8f0d4e070daf597203e6042b13c8d0e9822ed0de10fda35e6f720b7be57698f16887c3aed2858f3e747d6fe745de12bb04ceeb9c435248d6706f1ced4ba4d4e43bf0ad4e0920929293c152f95f0c2d8b1e8bec6eef22329605778ba42c471e1b839efb88eee6d6271dd072aeda905b3a266b88007c5f2d578f7b1501d74b17725ba8e004ca9e5c5e563f4b290cefe4485d13d632636fb3e3dd9479305a16de3c9019abc3a8ad7ecf20eb74a4f70b1d9527e677830324944ff724d5bd9b821cb21e2704e65fb61bceff2a64e5d8b034e2307300a2e8902efd0e14ef38d04cb48a9bd2362ad9b1efd5295c289f043eaa0411c2c29ebe8ca9985a7651eedd074f9aecc65e16b420bf143bf922acb898c54e0af7bbce5d558fc454717ad4da255decdf3042ac9ebc96ee8c39d99fb3d30bc77e35e9649a62b902e4bc1a65865e7652c13b9bbea94fc7fbb27dc5f9bfcfe1b8e9cd21901a8979aac0bcde7838f320b34932788748e6c73f1d21172dfd0ad2d19b435f9f6f48a64e1346e0d7a9be5babb0c33419b5409224f2ab893e7d9edb5af9b6c533d791d8a962538f6641ccf77be3370b85126a6d3f9a3fe0e3b521d3a82c7b26b8994de5320b23350af88ff40cab25883aa3cbb5b1287bd5de193affb50aa25d07594147dc4483e7db2d9b731e82171d176aa76d53321d9d50cc2c37805997fb66f1d4411154fdfeda1e140c78964c1d5f64b08393618f081242af14dafe9abb1efe5122b5fd6cf3a0c1fd5b47e49daab9d79115606e4243566a92c3f72916f5e742441f9f846d414eb55c485f72110797e78c8447804b675871dc553b19181919c8150e585c5b3fe5b99d9d60b637c42f3f740b8d80c4d7e24109ecb2e21a108974ec4536a128ad0ca495fc4b595ef23224fe871abb832e26b5bc69506a9c5f877c0e2712841f98d4e34273074ba6f4ce547a247c6ab55cde727f581607cfa5fab744f072b725e40d3ad33d674717f4159f6f64f3127dd20fab43ba2a6833260489d113452c3d8dad1930ad4b6dfab71795a59fae0b9facf4cb11e3d022685970872e9b3ae7ab4de767aa58c79a056b941460a361fcc992e5d53bb9245f0dcf1073f8f07ac8374ca3946f5122f203711ad51a1021d05252cc6106df9bbaf5309349f68e13754d8b23931f1d5fd96f41df99322938fbbcfc558d5f605a1244bfb6248124debdd23a445fc17731f1672edd3a87294a518f07f87e8edba86872062174cf385fff0ba9a2179ee6bbf334c6af360bdac1608ab850dfa05d7a7132c38c94de016bd6d5e8b4853c1f3a9bf65b08c743f9e9904a194894c50b6cc47d371f47de14f529493d85d1a32291587046eee18e841da3ce43d1181da4d8aaa6a7635e45bd8839f3558bce06ef6aedac5ceb552bf605f0a57bfb3be48b9702232e9eb97e4ef1f19b05feb1c28dc7173dfd6beaf45e357ad89f03194b427542c0bdf4d1f992be9521d49b75d9385459e73872dc39aa18f69e0555de94246bd54f0aca5c1cf664a5c83d8067e41561a2c81cab3ab759c02112ae574fca9f76f7c4c633a3da437e36ea971a7989c7f6963f942476a824866dc5f48ce3649c75ccac862d2e6d3d26a7453fc9e5d9c6b036132bddc28a3fa6a232520444db961fd2f92c18f355ab5f2eb1d97dad17ffdf9b88daab09292581a74e2e5a90da672852a500232dd5ac5634d03fc2e63235b1a4989c7683535b95ba013b7e8fbe6614bb6909cbcb36b5253640daf8771458fe279cd8dc51d560791b682a1b4837674a074d23d8e97c4e8a25898a5f4dbefbd73e06f18308edeab9b75e79786e19e89596bd38a4b0eb67055b6ee5c9d656a2999d46d64d6446eca52c67318fdf2003a0978ffbc243ff8ed656743b2e868bef82569c66a07febcb01f452bcf8924bb447d9fc4893c9d5f2316b7f0a05f1a892397c5358ea94573c3047c9d06c5622be2"}}, &(0x7f0000002540))
io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0)
shutdown(r3, 0x2)

13.370241444s ago: executing program 4 (id=8452):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x10)

12.426886036s ago: executing program 0 (id=8454):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@rr={0x7, 0x3, 0x1a}]}}, @timestamp={0xd, 0x0, 0x0, 0x8, 0x3a, 0x6, 0x5e157e35, 0x80}}}}}, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xb, 0x2)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000440)=""/228)
r1 = socket$kcm(0x2, 0x1, 0x84)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa200)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000025c0)={{0x0, 0x1}, 0x1, 0x5, 0x1, {0xff, 0x4}, 0x1, 0xc357})
setsockopt$sock_attach_bpf(r1, 0x84, 0x9, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x54, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x40}, 0x9}, @in6={0xa, 0x4e20, 0x11, @remote, 0xf}, @in6={0xa, 0x4e20, 0x0, @local, 0x200}]}, &(0x7f0000000040)=0x10)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000002c0)={0x9d2, 0x5})
shutdown(r3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f00000001c0))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b35, &(0x7f0000000040))
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x30, 0x0, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004801}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000)
syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000380)={<r9=>r8, &(0x7f0000000280)='\xc2\xea\x00', 0x8000, 0x0, 0x800, &(0x7f0000000300), &(0x7f0000000340)=0x10000})
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r8)
sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r10, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x6, @bearer=@l2={'ib', 0x3a, 'virt_wifi0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

12.28573122s ago: executing program 4 (id=8455):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019400), 0x88b02, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019480), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000194c0), 0x2982, 0x0)

10.256126847s ago: executing program 1 (id=8457):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x5d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0xc0405627, 0x0)
sendmsg$key(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x10}}, 0x0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000a00))
sendmsg$key(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10}}, 0x0)
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r6, 0xc0145b0e, &(0x7f0000000100)={0x100000, 0x0, 0xfffffffc})
close_range(r5, r6, 0x0)

10.042917983s ago: executing program 4 (id=8458):
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000003d40)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001ce00)=0x40003)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)

9.590213843s ago: executing program 5 (id=8459):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000240)=0x6)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

9.361195429s ago: executing program 0 (id=8460):
socket$unix(0x1, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000400)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@acquire]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x98, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})

8.90205119s ago: executing program 1 (id=8461):
set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x8001)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x2000c001, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c)
recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/77, 0x4d}, 0x5}], 0x4f4, 0x0, 0x0)

8.826811131s ago: executing program 0 (id=8462):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, &(0x7f00000003c0)=""/102392, 0x18ff8)
sched_setaffinity(r0, 0x8, &(0x7f00000193c0)=0x80000000000003)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000019440)=ANY=[], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019480), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000194c0), 0x2982, 0x0)

7.457560354s ago: executing program 0 (id=8463):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0x12, 0x4)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c)
listen(r3, 0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x10)
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000000240))

7.290170537s ago: executing program 1 (id=8464):
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf598, 0x0, 0xfffffffd, 0x51}, &(0x7f0000000100), 0x0, &(0x7f0000000080))
syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fe, 0x10000, 0x2, 0x333, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000))
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mpls/platform_labels\x00', 0x2, 0x0)
write(r1, &(0x7f0000000140)='100', 0x3)

6.664813512s ago: executing program 5 (id=8465):
socket$unix(0x1, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0)
read$msr(r3, &(0x7f0000000540)=""/102392, 0x18ff8)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
mknod$loop(0x0, 0x2000, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000000300)=[{{&(0x7f0000000380)={0xa, 0x4e23, 0x8000001, @private0={0xfc, 0x0, '\x00', 0x2}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)="14", 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x2002}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="85", 0x1}], 0x1}}], 0x2, 0x931766f6319eedc4)
shutdown(r4, 0x1)

6.467610517s ago: executing program 1 (id=8466):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x105000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
getpgrp(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000019400), 0x88b02, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019480), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000194c0), 0x2982, 0x0)

6.180513014s ago: executing program 4 (id=8467):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x170, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x130, 0x2, [@TCA_BPF_ACT={0x12c, 0x1, [@m_simple={0x128, 0x1, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x6, 0x2, 0xb, 0x5}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x85, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x170}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001a000100"], 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4040080, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

5.703765975s ago: executing program 0 (id=8468):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000008c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054)
write$nci(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
r4 = socket(0x1e, 0x4, 0x0)
write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14)

4.486455814s ago: executing program 4 (id=8469):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000240), 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x0, 0x5d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0xc0405627, 0x0)
sendmsg$key(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[], 0x10}}, 0x0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000a00))
sendmsg$key(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x10}}, 0x0)
close(0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r6, 0xc0145b0e, &(0x7f0000000100)={0x100000, 0x0, 0xfffffffc})
close_range(r5, r6, 0x0)

4.306254488s ago: executing program 5 (id=8470):
socket$unix(0x1, 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@increfs]})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ppoll(&(0x7f0000000400)=[{r0}], 0x1, &(0x7f0000000440), 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x100, 0x2})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000500)=[@acquire]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x98, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000640)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}]})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000007c0)})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]})

4.185206031s ago: executing program 1 (id=8471):
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000193c0)=0x80000000000003)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000019440)=ANY=[], 0x230)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000019480), 0x20a02, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000194c0), 0x2982, 0x0)

3.306313412s ago: executing program 5 (id=8472):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000000280)={0x20, 0x8, 0xa1, "75f379c2c5293c37e70ff7ad82ca7ba177514e95c7036b11bc8c747d525f5b1d53d64422ec5383c9c256eebedd59a739a00eb7f760f5ba59e06671ab0bdff5797f8ec1109e5c3ac78da177c00d863eb61c11be443a76db9b78f89c8bf4d5d6bee15f832f712cdfda33e411f9c63f41687d89e4210365c239afcc36d218903e03537fb25490a01aaf0a20416c49789018c0c83d16ef2d7a3fb838208b2e077c7c9c"}, 0x0, 0x0})

2.017349392s ago: executing program 1 (id=8473):
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000240)=0x6)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r4, 0x8, &(0x7f0000000080)=0x7)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.456418815s ago: executing program 5 (id=8474):
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80140, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
openat$sndtimer(0xffffff9c, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r2, &(0x7f0000000000)='10', 0x2)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0)
ioctl(r1, 0x8b1a, &(0x7f0000000040))

642.304345ms ago: executing program 0 (id=8475):
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000003d40)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001ce00)=0x40003)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)

523.662408ms ago: executing program 4 (id=8476):
syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./mnt\x00')
fsmount(r2, 0x1, 0x0)
ftruncate(0xffffffffffffffff, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

0s ago: executing program 5 (id=8477):
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x10000000005)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r3, &(0x7f0000003d40)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f000001ce00)=0x40003)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7, 0x20ffd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r4, 0x100000000)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)

kernel console output (not intermixed with test programs):

768.720442][  T172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1768.738751][  T172] usb 6-1: Product: syz
[ 1768.750347][  T172] usb 6-1: Manufacturer: syz
[ 1768.755175][  T172] usb 6-1: SerialNumber: syz
[ 1768.818572][T21372] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1769.213444][T21505] gspca_spca501: reg write: error -71
[ 1769.219180][T21505] spca501 1-1:1.0: Reg write failed for 0x02,0xa048,0x00
[ 1769.244725][T21505] spca501: probe of 1-1:1.0 failed with error -22
[ 1769.269849][T21505] usb 1-1: USB disconnect, device number 2
[ 1769.344667][T21437] usb 6-1: USB disconnect, device number 28
[ 1771.248802][T21372] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1771.256101][T21372] ath9k_htc: Failed to initialize the device
[ 1771.257122][T29074] loop4: detected capacity change from 0 to 128
[ 1771.278670][T21437] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1771.341260][T29074] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1771.390604][T29074] hpfs: filesystem error: improperly stopped
[ 1771.400810][T29074] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1771.419176][T29074] hpfs: You really don't want any checks? You are crazy...
[ 1771.437305][T29074] hpfs: Code page index out of array
[ 1771.448648][T29074] hpfs: code page support is disabled
[ 1771.467016][T29074] hpfs: hpfs_map_4sectors(): unaligned read
[ 1771.483309][T29074] hpfs: hpfs_map_4sectors(): unaligned read
[ 1771.500908][T29074] hpfs: filesystem error: unable to find root dir
[ 1771.790818][T21437] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[ 1772.611740][T21437] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1772.622991][T21437] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1772.637273][T21437] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1772.647257][T21437] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.650824][ T2182] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1772.707604][T29089] loop1: detected capacity change from 0 to 512
[ 1772.746500][T29089] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.7200: iget: bad i_size value: 38620345925642
[ 1772.770060][T29089] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.7200: couldn't read orphan inode 15 (err -117)
[ 1772.786998][T29089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1772.860536][ T2182] usb 1-1: Using ep0 maxpacket: 16
[ 1772.870917][ T2182] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1772.882755][ T2182] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1772.897412][ T2182] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1772.901636][T21437] usb 6-1: usb_control_msg returned -32
[ 1772.904747][ T2182] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1772.909721][T21437] usbtmc 6-1:16.0: can't read capabilities
[ 1772.925764][ T2182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.963442][ T2182] usb 1-1: config 0 descriptor??
[ 1773.037689][T29089] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.7200: bg 0: block 5: invalid block bitmap
[ 1773.066222][T29089] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 724 with error 28
[ 1773.079793][T29089] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1773.079793][T29089] 
[ 1773.091558][T29089] EXT4-fs (loop1): Total free blocks count 0
[ 1773.097700][T29089] EXT4-fs (loop1): Free/Dirty block details
[ 1773.103896][T29089] EXT4-fs (loop1): free_blocks=0
[ 1773.109080][T29089] EXT4-fs (loop1): dirty_blocks=728
[ 1773.114526][T29089] EXT4-fs (loop1): Block reservation details
[ 1773.120729][T29089] EXT4-fs (loop1): i_reserved_data_blocks=728
[ 1773.263250][T28461] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1773.355575][T29096] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32
[ 1773.444691][T13334] usb 6-1: USB disconnect, device number 29
[ 1773.498562][T29100] netlink: 'syz.1.7205': attribute type 10 has an invalid length.
[ 1773.672546][T29100] team0 (unregistering): Port device team_slave_0 removed
[ 1773.719227][T29100] team0 (unregistering): Port device team_slave_1 removed
[ 1773.920638][T29103] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[ 1773.980382][T29103] CIFS: Attempting to mount //127.0.0.1/share
[ 1774.021933][T29103] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1774.029577][T29103] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1774.594757][ T2182] usbhid 1-1:0.0: can't add hid device: -71
[ 1774.607173][ T2182] usbhid: probe of 1-1:0.0 failed with error -71
[ 1774.628600][ T2182] usb 1-1: USB disconnect, device number 3
[ 1775.200381][T21437] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 1775.402701][T21437] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1775.430370][T21437] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00
[ 1775.439808][T21437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1775.462107][T21437] usb 1-1: config 0 descriptor??
[ 1775.882573][T21437] usbhid 1-1:0.0: can't add hid device: -71
[ 1775.899081][T21437] usbhid: probe of 1-1:0.0 failed with error -71
[ 1775.926254][T21437] usb 1-1: USB disconnect, device number 4
[ 1776.900572][   T34] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1777.080416][   T34] usb 1-1: Using ep0 maxpacket: 32
[ 1777.087982][   T34] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1777.098099][   T34] usb 1-1: config 0 has no interface number 0
[ 1777.107581][   T34] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1777.117219][   T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1777.125425][   T34] usb 1-1: Product: syz
[ 1777.129911][   T34] usb 1-1: Manufacturer: syz
[ 1777.134891][   T34] usb 1-1: SerialNumber: syz
[ 1777.142848][   T34] usb 1-1: config 0 descriptor??
[ 1777.156530][   T34] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1777.210494][T21437] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1777.358601][   T34] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1777.377798][   T34] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1777.400412][T21437] usb 2-1: Using ep0 maxpacket: 16
[ 1777.415244][T21437] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1777.460659][T21437] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1777.475614][T21437] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1777.483701][T21437] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1777.493074][T21437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.521160][T21437] usb 2-1: config 0 descriptor??
[ 1777.567693][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1777.576508][   T34] usb 1-1: USB disconnect, device number 5
[ 1777.591940][   T34] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1777.610657][   T34] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1777.624589][   T34] quatech2 1-1:0.51: device disconnected
[ 1778.317255][T29133] CIFS: Attempting to mount //127.0.0.1/share
[ 1778.540613][ T2182] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[ 1778.807933][ T2182] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1778.854898][ T2182] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1778.935268][ T2182] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1778.995309][ T2182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1779.213271][T29133] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1779.293552][T29133] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1779.441696][ T2182] usb 1-1: usb_control_msg returned -32
[ 1779.512908][ T2182] usbtmc 1-1:16.0: can't read capabilities
[ 1779.908737][T29149] loop4: detected capacity change from 0 to 512
[ 1780.021910][T29149] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[ 1780.063706][T29142] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32
[ 1780.170913][  T172] usb 1-1: USB disconnect, device number 6
[ 1780.217208][T29153] netlink: 'syz.5.7219': attribute type 10 has an invalid length.
[ 1780.323011][T21437] usbhid 2-1:0.0: can't add hid device: -71
[ 1780.329211][T21437] usbhid: probe of 2-1:0.0 failed with error -71
[ 1780.375849][T21437] usb 2-1: USB disconnect, device number 59
[ 1780.517027][T29153] team0 (unregistering): Port device team_slave_0 removed
[ 1780.572138][T29153] team0 (unregistering): Port device team_slave_1 removed
[ 1781.110399][T21505] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1781.280400][T21505] usb 1-1: device descriptor read/64, error -71
[ 1781.379334][T29173] CIFS: Attempting to mount //127.0.0.1/share
[ 1781.552952][T21505] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1781.560779][ T2182] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1781.740490][ T2182] usb 2-1: Using ep0 maxpacket: 16
[ 1781.750464][ T2182] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1781.750868][T21505] usb 1-1: device descriptor read/64, error -71
[ 1781.770511][ T2182] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1781.810686][ T2182] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1781.840229][ T2182] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.872767][ T2182] usb 2-1: config 0 descriptor??
[ 1781.890528][ T2182] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1781.900831][T21505] usb usb1-port1: attempt power cycle
[ 1782.186144][T29173] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1782.204496][T29173] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1782.311268][T21505] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1782.351394][T21505] usb 1-1: device descriptor read/8, error -71
[ 1782.620612][T21505] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1782.672963][T21505] usb 1-1: device descriptor read/8, error -71
[ 1782.800695][T21505] usb usb1-port1: unable to enumerate USB device
[ 1783.287554][T29188] binder: BINDER_SET_CONTEXT_MGR already set
[ 1783.295449][T29188] binder: 29187:29188 ioctl 4018620d 200000004a80 returned -16
[ 1783.958092][T29196] tipc: Started in network mode
[ 1783.970846][T29196] tipc: Node identity ac1414aa, cluster identity 4711
[ 1783.984441][T29196] tipc: New replicast peer: 172.20.20.187
[ 1784.002378][T29196] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1784.097316][ T2182] usb 2-1: USB disconnect, device number 60
[ 1784.430548][T29208] netlink: 'syz.5.7240': attribute type 10 has an invalid length.
[ 1785.120434][ T2182] tipc: Node number set to 2886997162
[ 1785.620790][   T34] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[ 1785.812483][   T34] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1785.840391][   T34] usb 1-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.00
[ 1785.880388][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.902118][   T34] usb 1-1: config 0 descriptor??
[ 1786.203218][T29231] CIFS: Attempting to mount //127.0.0.1/share
[ 1786.331413][   T34] usbhid 1-1:0.0: can't add hid device: -71
[ 1786.347456][   T34] usbhid: probe of 1-1:0.0 failed with error -71
[ 1786.376406][   T34] usb 1-1: USB disconnect, device number 11
[ 1786.993195][T29237] loop0: detected capacity change from 0 to 128
[ 1787.021792][T29231] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1787.029321][T29231] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1787.570469][T29244] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[ 1788.008178][T29252] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2
[ 1788.018535][T29252] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0
[ 1788.292197][T29253] loop5: detected capacity change from 0 to 4096
[ 1789.767948][   T27] audit: type=1800 audit(1792234043.142:2113): pid=29253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7253" name="file1" dev="loop5" ino=0 res=0 errno=0
[ 1790.574181][T29262] loop5: detected capacity change from 0 to 512
[ 1790.627645][T29262] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.7261: iget: bad i_size value: 38620345925642
[ 1790.715405][T29262] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.7261: couldn't read orphan inode 15 (err -117)
[ 1790.768234][T29262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1790.907080][T29270] CIFS: Attempting to mount //127.0.0.1/share
[ 1790.948433][T26119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1791.426721][T29284] loop0: detected capacity change from 0 to 8
[ 1791.480429][  T172] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1791.529550][T29284] SQUASHFS error: Unable to read directory block [26067d:ffff]
[ 1791.716005][T29286] loop0: detected capacity change from 0 to 512
[ 1791.720332][  T172] usb 6-1: Using ep0 maxpacket: 8
[ 1791.724159][T29270] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1791.749083][  T172] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1791.774054][T29286] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 1791.774991][  T172] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1791.802472][T29270] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1791.828685][  T172] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1791.848097][  T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1791.864544][T29286] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 1792.377804][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.385839][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.500691][T29302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1792.532794][T29302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1792.841048][T29313] CIFS: Attempting to mount //127.0.0.1/share
[ 1793.641835][T29313] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1793.660749][T29313] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1794.169342][ T2182] usb 6-1: USB disconnect, device number 30
[ 1794.363298][T29348] loop5: detected capacity change from 0 to 512
[ 1794.387971][T29348] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1794.459136][T29348] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 1794.765881][T29355] CIFS: Attempting to mount //127.0.0.1/share
[ 1795.564305][T29355] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1795.581040][T29355] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1796.575804][T29395] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7309'.
[ 1796.661419][T29396] IPVS: Error connecting to the multicast addr
[ 1808.890650][T29543] netlink: 'syz.4.7355': attribute type 10 has an invalid length.
[ 1811.445861][T29593] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1812.643422][T29614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7377'.
[ 1814.222728][T29637] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7387'.
[ 1815.913679][T29663] CIFS: Attempting to mount //127.0.0.1/share
[ 1816.010157][T29668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7400'.
[ 1816.172395][T29667] netlink: 'syz.4.7398': attribute type 10 has an invalid length.
[ 1816.738506][T29663] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1816.761304][T29663] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1817.359311][T29702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7409'.
[ 1819.880300][T29736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7419'.
[ 1820.030417][T26121] Bluetooth: hci4: command 0x0406 tx timeout
[ 1822.449481][T29762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7428'.
[ 1825.313210][T29798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7437'.
[ 1828.213068][T29837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7446'.
[ 1833.360507][T29898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7457'.
[ 1834.618574][T29906] syz.4.7465 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 1834.628559][T29906] CPU: 0 PID: 29906 Comm: syz.4.7465 Not tainted syzkaller #0
[ 1834.636829][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1834.647593][T29906] Call Trace:
[ 1834.650969][T29906]  <TASK>
[ 1834.654426][T29906]  dump_stack_lvl+0x18c/0x250
[ 1834.659287][T29906]  ? show_regs_print_info+0x20/0x20
[ 1834.664607][T29906]  ? load_image+0x420/0x420
[ 1834.669216][T29906]  ? ___ratelimit+0x478/0x610
[ 1834.674202][T29906]  ? radix_tree_cpu_dead+0x160/0x160
[ 1834.679720][T29906]  dump_header+0xd8/0x820
[ 1834.684107][T29906]  oom_kill_process+0x390/0x580
[ 1834.689165][T29906]  out_of_memory+0xe0e/0x1200
[ 1834.693962][T29906]  ? mem_cgroup_out_of_memory+0xc1/0x390
[ 1834.699609][T29906]  ? mutex_lock_nested+0x20/0x20
[ 1834.704663][T29906]  ? unregister_oom_notifier+0x20/0x20
[ 1834.710238][T29906]  mem_cgroup_out_of_memory+0x2c2/0x390
[ 1834.715934][T29906]  ? try_charge_memcg+0xc91/0x17c0
[ 1834.721256][T29906]  ? drain_local_stock+0x630/0x630
[ 1834.726411][T29906]  ? do_raw_spin_unlock+0x121/0x230
[ 1834.731800][T29906]  try_charge_memcg+0xca1/0x17c0
[ 1834.736857][T29906]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 1834.742960][T29906]  ? folio_flags+0x120/0x120
[ 1834.748289][T29906]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 1834.753610][T29906]  ? percpu_ref_tryget+0x15/0x180
[ 1834.758738][T29906]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 1834.764291][T29906]  charge_memcg+0x11b/0x3b0
[ 1834.768804][T29906]  ? __mem_cgroup_charge+0x80/0x80
[ 1834.774035][T29906]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 1834.779535][T29906]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 1834.785205][T29906]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 1834.790868][T29906]  __mem_cgroup_charge+0x25/0x80
[ 1834.795833][T29906]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 1834.801495][T29906]  ? xas_load+0x12b/0x140
[ 1834.805938][T29906]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 1834.811240][T29906]  shmem_get_folio_gfp+0x1037/0x2b40
[ 1834.816565][T29906]  shmem_write_begin+0xf2/0x430
[ 1834.821605][T29906]  generic_perform_write+0x2fe/0x5c0
[ 1834.826994][T29906]  ? generic_file_direct_write+0x3e0/0x3e0
[ 1834.832997][T29906]  ? down_write+0x16e/0x200
[ 1834.837680][T29906]  ? file_update_time+0x98/0x1a0
[ 1834.843200][T29906]  shmem_file_write_iter+0xfb/0x120
[ 1834.848597][T29906]  __kernel_write_iter+0x29f/0x6d0
[ 1834.853814][T29906]  ? vfs_read+0x990/0x990
[ 1834.858151][T29906]  ? get_dump_page+0x156/0x200
[ 1834.863013][T29906]  ? __asan_memset+0x22/0x40
[ 1834.867802][T29906]  ? iov_iter_bvec+0xd4/0x1b0
[ 1834.872700][T29906]  dump_user_range+0x418/0x840
[ 1834.877486][T29906]  ? dump_skip+0x40/0x40
[ 1834.882103][T29906]  ? dump_emit+0x78/0xe0
[ 1834.886465][T29906]  ? dump_emit+0xa6/0xe0
[ 1834.890907][T29906]  ? elf_core_dump+0x2dbb/0x37c0
[ 1834.895875][T29906]  elf_core_dump+0x320e/0x37c0
[ 1834.900766][T29906]  ? load_elf_binary+0x2850/0x2850
[ 1834.906205][T29906]  ? verify_lock_unused+0x140/0x140
[ 1834.911533][T29906]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1834.916679][T29906]  ? mas_next_slot+0x94c/0x980
[ 1834.921605][T29906]  ? rcu_read_lock_any_held+0xb4/0x140
[ 1834.927121][T29906]  ? 0xffffffffff600000
[ 1834.931396][T29906]  do_coredump+0x1791/0x24a0
[ 1834.936034][T29906]  ? nfs_stat_to_errno+0x170/0x170
[ 1834.941210][T29906]  ? lock_chain_count+0x20/0x20
[ 1834.946281][T29906]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1834.951593][T29906]  ? lockdep_hardirqs_on+0x98/0x150
[ 1834.957026][T29906]  get_signal+0x10da/0x1390
[ 1834.961572][T29906]  arch_do_signal_or_restart+0xc2/0x7b0
[ 1834.967177][T29906]  ? get_sigframe_size+0x20/0x20
[ 1834.972256][T29906]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1834.978390][T29906]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1834.984066][T29906]  exit_to_user_mode_loop+0x70/0x110
[ 1834.989393][T29906]  exit_to_user_mode_prepare+0xee/0x180
[ 1834.994985][T29906]  irqentry_exit_to_user_mode+0x9/0x30
[ 1835.000576][T29906]  exc_page_fault+0x8c/0x100
[ 1835.005316][T29906]  asm_exc_page_fault+0x26/0x30
[ 1835.010315][T29906] RIP: 0033:0x7f0b37b9e561
[ 1835.014775][T29906] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 1835.034755][T29906] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 1835.040833][T29906] RAX: 0000000000000000 RBX: 00007f0b37e26090 RCX: 00007f0b37b9e559
[ 1835.048833][T29906] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 1835.056910][T29906] RBP: 00007f0b37c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 1835.065059][T29906] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1835.073137][T29906] R13: 00007f0b37e26128 R14: 00007f0b37e26090 R15: 00007ffd2f2940a8
[ 1835.081148][T29906]  </TASK>
[ 1835.085158][T29906] memory: usage 307200kB, limit 307200kB, failcnt 429
[ 1835.091992][T29906] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[ 1835.100115][T29906] kmem: usage 2076kB, limit 9007199254740988kB, failcnt 0
[ 1835.107521][T29906] Memory cgroup stats for /syz4:
[ 1835.107632][T29906] cache 311869440
[ 1835.116243][T29906] rss 348160
[ 1835.119550][T29906] rss_huge 0
[ 1835.125121][T29906] shmem 311869440
[ 1835.129001][T29906] mapped_file 11755520
[ 1835.133452][T29906] dirty 0
[ 1835.136609][T29906] writeback 0
[ 1835.139921][T29906] workingset_refault_anon 1
[ 1835.144546][T29906] workingset_refault_file 0
[ 1835.149070][T29906] swap 0
[ 1835.152195][T29906] pgpgin 1055802
[ 1835.155957][T29906] pgpgout 980088
[ 1835.159538][T29906] pgfault 537811
[ 1835.163315][T29906] pgmajfault 7
[ 1835.166723][T29906] inactive_anon 20398080
[ 1835.171021][T29906] active_anon 291811328
[ 1835.175193][T29906] inactive_file 0
[ 1835.179040][T29906] active_file 0
[ 1835.182567][T29906] unevictable 0
[ 1835.186146][T29906] hierarchical_memory_limit 314572800
[ 1835.191605][T29906] hierarchical_memsw_limit 9223372036854771712
[ 1835.198641][T29906] total_cache 311869440
[ 1835.202978][T29906] total_rss 348160
[ 1835.207025][T29906] total_rss_huge 0
[ 1835.210810][T29906] total_shmem 311869440
[ 1835.214991][T29906] total_mapped_file 11755520
[ 1835.219605][T29906] total_dirty 0
[ 1835.223151][T29906] total_writeback 0
[ 1835.227058][T29906] total_workingset_refault_anon 1
[ 1835.232322][T29906] total_workingset_refault_file 0
[ 1835.237692][T29906] total_swap 0
[ 1835.241172][T29906] total_pgpgin 1055802
[ 1835.245276][T29906] total_pgpgout 980088
[ 1835.249370][T29906] total_pgfault 537843
[ 1835.253509][T29906] total_pgmajfault 7
[ 1835.257585][T29906] total_inactive_anon 20398080
[ 1835.262610][T29906] total_active_anon 291811328
[ 1835.267385][T29906] total_inactive_file 0
[ 1835.271628][T29906] total_active_file 0
[ 1835.275638][T29906] total_unevictable 0
[ 1835.279651][T29906] anon_cost 0
[ 1835.283029][T29906] file_cost 0
[ 1835.286410][T29906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7465,pid=29906,uid=0
[ 1835.301878][T29906] Memory cgroup out of memory: Killed process 29906 (syz.4.7465) total-vm:104440kB, anon-rss:1432kB, file-rss:64512kB, shmem-rss:11392kB, UID:0 pgtables:236kB oom_score_adj:0
[ 1836.101188][T29918] xt_CT: No such helper "pptp"
[ 1836.568202][T29933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7472'.
[ 1837.822011][T29963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7482'.
[ 1840.128005][T29999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7491'.
[ 1843.049469][T30025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7500'.
[ 1843.295659][T30038] ip_tables: iptables: counters copy to user failed while replacing table
[ 1843.832666][T30049] CIFS: Attempting to mount //127.0.0.1/share
[ 1844.875902][T30049] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1844.889437][T30049] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1851.302070][T30128] CIFS: Attempting to mount //127.0.0.1/share
[ 1852.494700][T30128] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1852.550412][T30128] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1853.799875][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.817447][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1857.042641][T30205] CIFS: Attempting to mount //127.0.0.1/share
[ 1857.844897][T30205] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1857.908786][T30205] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1861.297200][T30244] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7550'.
[ 1861.337541][T30244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1861.506708][T30252] netlink: 'syz.4.7552': attribute type 5 has an invalid length.
[ 1861.719939][T30260] CIFS: Attempting to mount //127.0.0.1/share
[ 1861.939149][T30260] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1861.988374][T30260] CIFS: VFS: cifs_mount failed w/return code = -101
[ 1863.236051][T30271] autofs4:pid:30271:autofs_fill_super: called with bogus options
[ 1873.741268][T30363] CIFS: Attempting to mount //127.0.0.1/share
[ 1874.521766][T30363] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1874.564204][T30363] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1877.339266][T30414] CIFS: Attempting to mount //127.0.0.1/share
[ 1878.110385][T30414] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1878.141656][T30414] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1879.315542][T26121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1879.328279][T26121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1879.337967][T26121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1879.347508][T26121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1879.356416][T26121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1879.364069][T26121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1879.591615][T30456] rxe_eth0 speed is unknown, defaulting to 1000
[ 1880.338650][T20304] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode
[ 1880.552144][T30486] CIFS: Attempting to mount //127.0.0.1/share
[ 1881.516899][ T5786] Bluetooth: hci1: command tx timeout
[ 1881.698729][T30486] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1881.717853][T30486] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1881.907739][T30456] chnl_net:caif_netlink_parms(): no params data found
[ 1881.954278][T20304] tipc: Disabling bearer <udp:syz0>
[ 1881.970464][T20304] tipc: Left network mode
[ 1882.277030][T30456] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1882.328336][T30456] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1882.360747][T30456] bridge_slave_0: entered allmulticast mode
[ 1882.386913][T30456] bridge_slave_0: entered promiscuous mode
[ 1882.415097][T30456] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1882.441942][T30456] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1882.479980][T30456] bridge_slave_1: entered allmulticast mode
[ 1882.497212][T30456] bridge_slave_1: entered promiscuous mode
[ 1882.917119][T30508] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1883.025980][T30508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1883.550959][ T5786] Bluetooth: hci1: command tx timeout
[ 1884.719125][T30456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1884.768258][T30456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1885.064224][T30456] team0: Port device team_slave_0 added
[ 1885.084472][T30456] team0: Port device team_slave_1 added
[ 1885.401067][T30456] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1885.430461][T30456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1885.488248][T30456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1885.605848][T30456] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1885.630399][ T5786] Bluetooth: hci1: command tx timeout
[ 1885.641442][T30456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1885.704140][T30456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1886.129586][T30456] hsr_slave_0: entered promiscuous mode
[ 1886.168875][T30456] hsr_slave_1: entered promiscuous mode
[ 1886.192034][T30456] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1886.230177][T30456] Cannot create hsr debugfs directory
[ 1887.710887][ T5786] Bluetooth: hci1: command tx timeout
[ 1888.281059][T20304] hsr_slave_0: left promiscuous mode
[ 1889.221304][T20304] hsr_slave_1: left promiscuous mode
[ 1890.502659][T30590] CIFS: Attempting to mount //127.0.0.1/share
[ 1891.315711][T30590] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1891.326960][T30590] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1892.154281][T20304] bond0 (unregistering): Released all slaves
[ 1894.963551][T30456] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1895.005275][T30456] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1895.042143][T30456] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1895.054842][T30456] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1895.398409][T30456] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1895.474858][T30456] 8021q: adding VLAN 0 to HW filter on device team0
[ 1895.521428][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1895.528836][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1895.585486][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1895.593153][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1895.765264][T30456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1896.131977][T30663] CIFS: Attempting to mount //127.0.0.1/share
[ 1896.406575][T30456] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1896.515561][T30672] tipc: New replicast peer: 172.20.20.187
[ 1896.545945][T30672] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1896.560893][T30456] veth0_vlan: entered promiscuous mode
[ 1896.605713][T30456] veth1_vlan: entered promiscuous mode
[ 1896.724548][T30456] veth0_macvtap: entered promiscuous mode
[ 1896.748672][T30456] veth1_macvtap: entered promiscuous mode
[ 1896.785400][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1896.804550][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1896.829543][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1896.853979][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1896.870945][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1896.885284][T30663] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1896.901659][T30663] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1896.915730][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1896.937670][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1897.929295][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1898.969205][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1899.002526][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.062609][T30456] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1899.095176][   T34] tipc: Node number set to 112479717
[ 1899.144892][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1899.190925][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.230621][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1899.280303][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.310301][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1899.340341][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.360315][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1899.399265][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.429496][T30456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1899.462451][T30456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1899.482093][T30456] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1899.544032][T30456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1899.560315][T30456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1899.569179][T30456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1899.630851][T30456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1900.054002][T26689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1900.090478][T26689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1900.145767][T25569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1900.181665][T25569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1900.970570][T30721] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1902.202307][   T34] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1902.400669][   T34] usb 1-1: Using ep0 maxpacket: 8
[ 1902.422519][   T34] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1902.440486][   T34] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1902.473492][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1902.504912][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1902.531992][T30735] CIFS: Attempting to mount //127.0.0.1/share
[ 1902.548432][   T34] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1902.581578][   T34] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1902.612444][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1904.097986][T30746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1904.125559][T30735] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1904.140793][T30746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1904.200500][T30735] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1904.236317][   T34] usb 1-1: usb_control_msg returned -71
[ 1904.260527][   T34] usbtmc 1-1:16.0: can't read capabilities
[ 1904.298896][   T34] usb 1-1: USB disconnect, device number 12
[ 1906.075325][T13334] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1906.277528][T13334] usb 1-1: Using ep0 maxpacket: 16
[ 1907.242736][T13334] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1907.256170][T13334] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1907.290443][T13334] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1907.297400][T13334] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[ 1907.327936][T30778] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[ 1907.337494][T30778] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[ 1907.380402][T13334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1907.421616][T13334] usb 1-1: config 0 descriptor??
[ 1912.519100][T13334] usbhid 1-1:0.0: can't add hid device: -32
[ 1912.527397][T13334] usbhid: probe of 1-1:0.0 failed with error -32
[ 1913.849744][T30853] syzkaller0: entered promiscuous mode
[ 1913.879627][T30853] syzkaller0: entered allmulticast mode
[ 1914.171413][T21505] usb 1-1: USB disconnect, device number 13
[ 1916.029463][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1916.036831][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1926.309169][T30935] netlink: 'syz.1.7690': attribute type 1 has an invalid length.
[ 1926.411393][T30935] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1926.951572][T30938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1927.158909][T25577] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1927.264769][T30938] bond1: (slave batadv0): Enslaving as an active interface with an up link
[ 1927.424372][ T1140] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1927.635242][T30942] bond1: (slave batadv0): Removing an active aggregator
[ 1927.660470][T25569] bond1: Warning: Found an uninitialized port
[ 1929.098153][T30942] bond1: (slave batadv0): Releasing backup interface
[ 1929.217580][T30942] bridge_slave_0: left allmulticast mode
[ 1929.250987][T30942] bridge_slave_0: left promiscuous mode
[ 1929.256923][T30942] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1929.302938][T30942] bridge_slave_1: left allmulticast mode
[ 1929.308932][T30942] bridge_slave_1: left promiscuous mode
[ 1929.346874][T30942] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1929.404965][T30942] bond0: (slave bond_slave_0): Releasing backup interface
[ 1929.471638][T30942] bond0: (slave bond_slave_1): Releasing backup interface
[ 1929.520826][T30942] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1929.528348][T30942] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1929.569327][T30942] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1929.600530][T30942] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1930.577819][T30965] netlink: 'syz.0.7694': attribute type 5 has an invalid length.
[ 1941.660409][   T34] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1941.860371][   T34] usb 1-1: Using ep0 maxpacket: 32
[ 1941.885119][   T34] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1941.910262][   T34] usb 1-1: config 0 has no interface number 0
[ 1941.925089][   T34] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1941.968193][   T34] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1942.010372][   T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1942.018475][   T34] usb 1-1: Product: syz
[ 1942.050353][   T34] usb 1-1: Manufacturer: syz
[ 1942.055313][   T34] usb 1-1: SerialNumber: syz
[ 1942.087257][   T34] usb 1-1: config 0 descriptor??
[ 1942.113088][   T34] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1942.350772][   T34] usb 1-1: qt2_setup_urbs - submit read urb failed -8
[ 1942.386339][   T34] quatech2: probe of 1-1:0.51 failed with error -8
[ 1942.556189][T30763] usb 1-1: USB disconnect, device number 14
[ 1946.058399][T31060] ip_tables: iptables: counters copy to user failed while replacing table
[ 1948.085604][T31075] autofs4:pid:31075:autofs_fill_super: called with bogus options
[ 1952.517770][T31105] CIFS: Attempting to mount //127.0.0.1/share
[ 1954.492064][T31105] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1954.499575][T31105] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1957.736732][T31142] CIFS: Attempting to mount //127.0.0.1/share
[ 1957.791939][T31143] netlink: 'syz.0.7744': attribute type 10 has an invalid length.
[ 1958.072873][T31143] team0 (unregistering): Port device team_slave_0 removed
[ 1958.210558][T31143] team0 (unregistering): Port device team_slave_1 removed
[ 1959.161902][T31142] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1959.169729][T31142] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1963.570445][   T34] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1964.680311][   T34] usb 1-1: Using ep0 maxpacket: 8
[ 1964.687695][   T34] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1964.705322][   T34] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1964.730273][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1964.760498][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1964.780499][   T34] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1964.800450][   T34] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1964.820078][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1965.064610][   T34] usb 1-1: usb_control_msg returned -32
[ 1965.079980][T31169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1965.090374][   T34] usbtmc 1-1:16.0: can't read capabilities
[ 1965.110862][T31169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1965.149187][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.161263][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.170622][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.181131][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.190391][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.199601][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.234312][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.243519][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.252923][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.263308][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.272738][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.281977][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.291101][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.300241][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.309580][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.318784][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1965.389867][   T34] usb 1-1: USB disconnect, device number 15
[ 1967.935444][T31195] loop0: detected capacity change from 0 to 4096
[ 1968.089170][T31196] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1976.650599][  T971] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[ 1976.685781][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.692241][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.867032][  T971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1976.881047][  T971] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1977.800369][  T971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1977.810138][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1978.058978][  T971] usb 1-1: usb_control_msg returned -32
[ 1978.077597][  T971] usbtmc 1-1:16.0: can't read capabilities
[ 1979.413865][T21505] usb 1-1: USB disconnect, device number 16
[ 1981.332716][T31249] CIFS: Attempting to mount //127.0.0.1/share
[ 1982.192837][T31249] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1982.202709][T31249] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1985.394662][T13334] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1985.630919][T13334] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1985.670437][T13334] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1985.700332][T13334] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1985.707125][T13334] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[ 1986.676994][T13334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1986.688806][T13334] usb 1-1: config 0 descriptor??
[ 1986.935136][T31269] binder: 31268:31269 ioctl c0306201 200000000400 returned -11
[ 1988.307170][T13334] usbhid 1-1:0.0: can't add hid device: -71
[ 1988.313535][T13334] usbhid: probe of 1-1:0.0 failed with error -71
[ 1988.434669][T13334] usb 1-1: USB disconnect, device number 17
[ 1989.772110][T31298] CIFS: Attempting to mount //127.0.0.1/share
[ 1990.581295][T31298] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 1990.611693][T31298] CIFS: VFS: cifs_mount failed w/return code = -4
[ 1992.640471][T14143] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[ 1992.863690][T14143] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1992.890255][T14143] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1992.940349][T14143] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1992.979219][T14143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1993.279251][T14143] usb 1-1: usb_control_msg returned -32
[ 1993.315917][T14143] usbtmc 1-1:16.0: can't read capabilities
[ 1995.911411][T31341] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32
[ 1996.185305][T14143] usb 1-1: USB disconnect, device number 18
[ 1997.810295][   T34] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1998.030342][   T34] usb 1-1: Using ep0 maxpacket: 32
[ 1998.042565][   T34] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1998.051213][   T34] usb 1-1: config 0 has no interface number 0
[ 1998.072607][   T34] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1998.082258][   T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1998.120987][   T34] usb 1-1: Product: syz
[ 1998.130520][   T34] usb 1-1: Manufacturer: syz
[ 1998.135960][   T34] usb 1-1: SerialNumber: syz
[ 1998.171802][   T34] usb 1-1: config 0 descriptor??
[ 1998.199922][   T34] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1998.462953][   T34] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1998.520895][   T34] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1998.828652][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1998.838229][   T34] usb 1-1: USB disconnect, device number 19
[ 1998.862310][   T34] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1998.904470][   T34] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1998.952180][   T34] quatech2 1-1:0.51: device disconnected
[ 1999.961720][T31366] CIFS: Attempting to mount //127.0.0.1/share
[ 2000.152430][T31366] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 2000.229773][T31366] CIFS: VFS: cifs_mount failed w/return code = -101
[ 2003.690630][T30763] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 2004.735655][ T5786] Bluetooth: hci1: command 0x0406 tx timeout
[ 2004.824478][T30763] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2004.840258][T30763] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2004.860254][T30763] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2004.870273][T30763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2005.260328][T30763] usb 1-1: usb_control_msg returned -32
[ 2005.266125][T30763] usbtmc 1-1:16.0: can't read capabilities
[ 2009.620650][T30763] usb 1-1: USB disconnect, device number 20
[ 2012.264714][T31433] CIFS: Attempting to mount //127.0.0.1/share
[ 2013.715881][T31433] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 2013.731362][T31433] CIFS: VFS: cifs_mount failed w/return code = -4
[ 2015.266666][T31460] loop0: detected capacity change from 0 to 4096
[ 2015.383279][T31460] NILFS (loop0): invalid segment: Checksum error in segment payload
[ 2015.472379][T31460] NILFS (loop0): trying rollback from an earlier position
[ 2015.539457][T31460] NILFS (loop0): recovery complete
[ 2015.578924][T31470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2016.862343][T31475] CIFS: Attempting to mount //127.0.0.1/share
[ 2017.084464][T31475] CIFS: VFS: Error connecting to socket. Aborting operation.
[ 2017.100813][T31475] CIFS: VFS: cifs_mount failed w/return code = -4
[ 2017.300772][  T971] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 2017.502868][  T971] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2017.514471][  T971] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2017.541598][  T971] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2017.560322][  T971] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[ 2017.583741][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2017.605391][  T971] usb 1-1: config 0 descriptor??
[ 2017.840742][T31485] binder: 31484:31485 ioctl c0306201 200000000400 returned -11
[ 2019.229617][  T971] usbhid 1-1:0.0: can't add hid device: -71
[ 2019.242342][  T971] usbhid: probe of 1-1:0.0 failed with error -71
[ 2019.252832][  T971] usb 1-1: USB disconnect, device number 21
[ 2022.538744][T31539] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7881'.
[ 2027.662484][  T971] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 2027.880522][  T971] usb 1-1: Using ep0 maxpacket: 32
[ 2027.922236][  T971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 2027.952178][  T971] usb 1-1: config 0 has no interface number 0
[ 2027.983186][  T971] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 2028.009621][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2028.018188][  T971] usb 1-1: Product: syz
[ 2028.022718][  T971] usb 1-1: Manufacturer: syz
[ 2028.027982][  T971] usb 1-1: SerialNumber: syz
[ 2028.047629][  T971] usb 1-1: config 0 descriptor??
[ 2028.082795][  T971] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 2028.101000][  T971] usb 1-1: selecting invalid altsetting 1
[ 2028.106898][  T971] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 2028.147751][  T971] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2028.200818][  T971] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 2028.209190][  T971] usb 1-1: media controller created
[ 2028.265393][  T971] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2028.451601][T31591] loop0: detected capacity change from 0 to 1024
[ 2028.482368][T31591] hfsplus: unable to parse mount options
[ 2028.522010][T31591] jffs2: notice: (31591) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 2029.837752][  T971] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 2029.848578][  T971] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 2029.860898][  T971] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 2030.033083][  T971] usb 1-1: USB disconnect, device number 22
[ 2032.808416][T31640] loop0: detected capacity change from 0 to 128
[ 2035.180745][   T34] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 2035.370479][   T34] usb 1-1: Using ep0 maxpacket: 8
[ 2035.409355][   T34] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2035.440371][   T34] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2035.470601][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2035.493435][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2036.540353][   T34] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2036.564856][   T34] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2036.575648][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2036.826022][   T34] usb 1-1: usb_control_msg returned -32
[ 2036.848687][   T34] usbtmc 1-1:16.0: can't read capabilities
[ 2036.855458][T31654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2036.948576][T31654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2037.012584][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.021869][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.032580][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.042511][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.051657][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.060810][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.081151][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.090353][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.099563][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.108814][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.118257][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.127942][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.137611][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.146749][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.155888][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.165048][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2037.201677][T30763] usb 1-1: USB disconnect, device number 23
[ 2038.331146][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2038.337537][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.661903][T31675] blk-mq: reduced tag depth (128 -> 64)
[ 2039.068784][T31682] loop0: detected capacity change from 0 to 128
[ 2041.463528][T31719] autofs4:pid:31719:autofs_fill_super: called with bogus options
[ 2046.500577][T31738] autofs4:pid:31738:autofs_fill_super: called with bogus options
[ 2048.870310][   T34] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2049.060265][   T34] usb 1-1: Using ep0 maxpacket: 8
[ 2049.069342][   T34] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2049.080384][   T34] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2049.110692][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2049.136713][   T34] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2049.170408][   T34] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2049.210353][   T34] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2049.219782][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2049.457140][   T34] usb 1-1: usb_control_msg returned -32
[ 2049.467818][T31755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2049.477361][   T34] usbtmc 1-1:16.0: can't read capabilities
[ 2049.516608][T31755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2049.569331][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.578802][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.588395][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.614678][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.624402][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.634498][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.689999][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.699311][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.709210][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.718826][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.728753][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.738074][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.830552][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.840177][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.849589][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.876277][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2049.921513][   T34] usb 1-1: USB disconnect, device number 24
[ 2051.601858][T31795] autofs4:pid:31795:autofs_fill_super: called with bogus options
[ 2052.054041][T31802] syzkaller0: entered promiscuous mode
[ 2052.059554][T31802] syzkaller0: entered allmulticast mode
[ 2052.998205][T31814] netlink: 'syz.4.7956': attribute type 1 has an invalid length.
[ 2053.136850][T31814] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2054.171597][T31831] autofs4:pid:31831:autofs_fill_super: called with bogus options
[ 2055.909094][T31838] IPVS: Scheduler module ip_vs_sip not found
[ 2056.747807][T31852] netlink: 'syz.1.7967': attribute type 1 has an invalid length.
[ 2056.894164][T31852] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2058.121231][T31871] autofs4:pid:31871:autofs_fill_super: called with bogus options
[ 2065.370435][T31932] syzkaller0: entered promiscuous mode
[ 2065.441839][T31932] syzkaller0: entered allmulticast mode
[ 2075.501577][T32011] syzkaller0: entered promiscuous mode
[ 2075.507958][T32011] syzkaller0: entered allmulticast mode
[ 2082.220552][   T34] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 2082.462400][   T34] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2082.490800][   T34] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3
[ 2082.534034][   T34] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[ 2082.550643][   T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.589627][   T34] usb 1-1: Product: syz
[ 2082.630452][   T34] usb 1-1: Manufacturer: syz
[ 2082.635233][   T34] usb 1-1: SerialNumber: syz
[ 2082.892288][T32063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2082.950883][T32063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2083.010649][   T34] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 2083.051204][   T34] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22
[ 2083.085951][   T34] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 2083.130260][   T34] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22
[ 2083.180376][   T34] usb 1-1: USB disconnect, device number 25
[ 2083.771679][T32078] binder: 32077:32078 ioctl c0306201 0 returned -14
[ 2085.240547][T21437] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 2086.123395][T21437] usb 1-1: Using ep0 maxpacket: 8
[ 2086.142313][T21437] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2086.151612][T21437] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2086.170292][T21437] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2086.180826][T21437] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2086.194958][T21437] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2086.208592][T21437] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2086.218039][T21437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2086.435611][T32095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2086.449009][T21437] usb 1-1: usb_control_msg returned -32
[ 2086.462253][T21437] usbtmc 1-1:16.0: can't read capabilities
[ 2086.481305][T32095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2087.523332][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.532607][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.541902][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.552283][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.561439][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.570566][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.651663][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.660888][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.670205][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.760884][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.770340][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.779591][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.850758][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.860185][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.869771][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.879654][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2087.903869][T30763] usb 1-1: USB disconnect, device number 26
[ 2094.355377][T32160] netlink: 'syz.4.8043': attribute type 5 has an invalid length.
[ 2094.936270][T32164] binder: BINDER_SET_CONTEXT_MGR already set
[ 2094.960336][T32164] binder: 32163:32164 ioctl 4018620d 200000001000 returned -16
[ 2096.315281][T32175] loop0: detected capacity change from 0 to 128
[ 2098.480531][T32185] autofs4:pid:32185:autofs_fill_super: called with bogus options
[ 2098.627085][T32186] netlink: 'syz.0.8052': attribute type 5 has an invalid length.
[ 2099.554224][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.570217][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2104.670779][T21437] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 2104.851869][T32219] netlink: 'syz.4.8063': attribute type 5 has an invalid length.
[ 2104.876368][T21437] usb 1-1: Using ep0 maxpacket: 8
[ 2104.892413][T21437] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2104.908205][T21437] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2104.960757][T21437] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2105.000694][T21437] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2105.030894][T21437] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2105.054605][T21437] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2105.069814][T21437] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2105.295172][T32213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2105.304960][T21437] usb 1-1: usb_control_msg returned -32
[ 2105.330397][T21437] usbtmc 1-1:16.0: can't read capabilities
[ 2105.338143][T32213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2105.870652][T32227] syz.4.8064 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2105.880767][T32227] CPU: 0 PID: 32227 Comm: syz.4.8064 Not tainted syzkaller #0
[ 2105.888256][T32227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2105.898688][T32227] Call Trace:
[ 2105.902162][T32227]  <TASK>
[ 2105.905298][T32227]  dump_stack_lvl+0x18c/0x250
[ 2105.910197][T32227]  ? show_regs_print_info+0x20/0x20
[ 2105.915524][T32227]  ? load_image+0x420/0x420
[ 2105.920146][T32227]  ? ___ratelimit+0x478/0x610
[ 2105.925043][T32227]  ? radix_tree_cpu_dead+0x160/0x160
[ 2105.930879][T32227]  dump_header+0xd8/0x820
[ 2105.935343][T32227]  oom_kill_process+0x390/0x580
[ 2105.940278][T32227]  out_of_memory+0xe0e/0x1200
[ 2105.945309][T32227]  ? mem_cgroup_out_of_memory+0xc1/0x390
[ 2105.950993][T32227]  ? mutex_lock_nested+0x20/0x20
[ 2105.955953][T32227]  ? unregister_oom_notifier+0x20/0x20
[ 2105.961435][T32227]  mem_cgroup_out_of_memory+0x2c2/0x390
[ 2105.967012][T32227]  ? try_charge_memcg+0xc91/0x17c0
[ 2105.972175][T32227]  ? drain_local_stock+0x630/0x630
[ 2105.977396][T32227]  ? do_raw_spin_unlock+0x121/0x230
[ 2105.982613][T32227]  try_charge_memcg+0xca1/0x17c0
[ 2105.987655][T32227]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2105.993566][T32227]  ? folio_flags+0x120/0x120
[ 2105.998168][T32227]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2106.003370][T32227]  ? percpu_ref_tryget+0x15/0x180
[ 2106.008530][T32227]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2106.014015][T32227]  charge_memcg+0x11b/0x3b0
[ 2106.018617][T32227]  ? __mem_cgroup_charge+0x80/0x80
[ 2106.023754][T32227]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2106.029383][T32227]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2106.034873][T32227]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2106.040557][T32227]  __mem_cgroup_charge+0x25/0x80
[ 2106.045538][T32227]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2106.051098][T32227]  ? xas_load+0x12b/0x140
[ 2106.055449][T32227]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2106.060665][T32227]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2106.066167][T32227]  shmem_write_begin+0xf2/0x430
[ 2106.071126][T32227]  generic_perform_write+0x2fe/0x5c0
[ 2106.076454][T32227]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2106.082378][T32227]  ? down_write+0x16e/0x200
[ 2106.086948][T32227]  ? file_update_time+0x98/0x1a0
[ 2106.092002][T32227]  shmem_file_write_iter+0xfb/0x120
[ 2106.097281][T32227]  __kernel_write_iter+0x29f/0x6d0
[ 2106.102597][T32227]  ? vfs_read+0x990/0x990
[ 2106.106946][T32227]  ? get_dump_page+0x156/0x200
[ 2106.112166][T32227]  ? __asan_memset+0x22/0x40
[ 2106.116897][T32227]  ? iov_iter_bvec+0xd4/0x1b0
[ 2106.121601][T32227]  dump_user_range+0x418/0x840
[ 2106.126561][T32227]  ? dump_skip+0x40/0x40
[ 2106.130809][T32227]  ? dump_emit+0x78/0xe0
[ 2106.135242][T32227]  ? dump_emit+0xa6/0xe0
[ 2106.139569][T32227]  ? elf_core_dump+0x2dbb/0x37c0
[ 2106.144610][T32227]  elf_core_dump+0x320e/0x37c0
[ 2106.149592][T32227]  ? load_elf_binary+0x2850/0x2850
[ 2106.155155][T32227]  ? verify_lock_unused+0x140/0x140
[ 2106.160802][T32227]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2106.165953][T32227]  ? mas_next_slot+0x94c/0x980
[ 2106.170868][T32227]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2106.176551][T32227]  ? 0xffffffffff600000
[ 2106.180732][T32227]  do_coredump+0x1791/0x24a0
[ 2106.185461][T32227]  ? nfs_stat_to_errno+0x170/0x170
[ 2106.190608][T32227]  ? lock_chain_count+0x20/0x20
[ 2106.195501][T32227]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2106.200809][T32227]  ? lockdep_hardirqs_on+0x98/0x150
[ 2106.206049][T32227]  get_signal+0x10da/0x1390
[ 2106.210684][T32227]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2106.216251][T32227]  ? get_sigframe_size+0x20/0x20
[ 2106.221209][T32227]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2106.227230][T32227]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2106.232721][T32227]  exit_to_user_mode_loop+0x70/0x110
[ 2106.238051][T32227]  exit_to_user_mode_prepare+0xee/0x180
[ 2106.243642][T32227]  irqentry_exit_to_user_mode+0x9/0x30
[ 2106.249125][T32227]  exc_page_fault+0x8c/0x100
[ 2106.253942][T32227]  asm_exc_page_fault+0x26/0x30
[ 2106.258916][T32227] RIP: 0033:0x7f0b37b9e561
[ 2106.263357][T32227] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 2106.283243][T32227] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2106.289434][T32227] RAX: 0000000000000000 RBX: 00007f0b37e26090 RCX: 00007f0b37b9e559
[ 2106.297505][T32227] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2106.305599][T32227] RBP: 00007f0b37c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2106.313691][T32227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2106.321942][T32227] R13: 00007f0b37e26128 R14: 00007f0b37e26090 R15: 00007ffd2f2940a8
[ 2106.330213][T32227]  </TASK>
[ 2106.335041][T32227] memory: usage 307200kB, limit 307200kB, failcnt 951
[ 2106.342219][T32227] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0
[ 2106.350690][T32227] kmem: usage 2780kB, limit 9007199254740988kB, failcnt 0
[ 2106.358437][T32227] Memory cgroup stats for /syz4:
[ 2106.358657][T32227] cache 310829056
[ 2106.368673][T32227] rss 638976
[ 2106.372087][T32227] rss_huge 0
[ 2106.375560][T32227] shmem 310829056
[ 2106.379382][T32227] mapped_file 11755520
[ 2106.383564][T32227] dirty 0
[ 2106.386556][T32227] writeback 0
[ 2106.389949][T32227] workingset_refault_anon 1
[ 2106.394842][T32227] workingset_refault_file 446
[ 2106.399882][T32227] swap 0
[ 2106.402863][T32227] pgpgin 1903077
[ 2106.406487][T32227] pgpgout 1827539
[ 2106.410306][T32227] pgfault 741046
[ 2106.413978][T32227] pgmajfault 8
[ 2106.417457][T32227] inactive_anon 1847296
[ 2106.421860][T32227] active_anon 309641216
[ 2106.426049][T32227] inactive_file 0
[ 2106.429689][T32227] active_file 0
[ 2106.433328][T32227] unevictable 0
[ 2106.436849][T32227] hierarchical_memory_limit 314572800
[ 2106.442298][T32227] hierarchical_memsw_limit 9223372036854771712
[ 2106.448465][T32227] total_cache 310829056
[ 2106.453110][T32227] total_rss 638976
[ 2106.456859][T32227] total_rss_huge 0
[ 2106.460681][T32227] total_shmem 310829056
[ 2106.465017][T32227] total_mapped_file 11755520
[ 2106.469732][T32227] total_dirty 0
[ 2106.473262][T32227] total_writeback 0
[ 2106.477171][T32227] total_workingset_refault_anon 1
[ 2106.482256][T32227] total_workingset_refault_file 446
[ 2106.487468][T32227] total_swap 0
[ 2106.490898][T32227] total_pgpgin 1903077
[ 2106.494966][T32227] total_pgpgout 1827539
[ 2106.499139][T32227] total_pgfault 741078
[ 2106.503348][T32227] total_pgmajfault 8
[ 2106.507265][T32227] total_inactive_anon 1847296
[ 2106.512140][T32227] total_active_anon 309641216
[ 2106.516927][T32227] total_inactive_file 0
[ 2106.521158][T32227] total_active_file 0
[ 2106.525151][T32227] total_unevictable 0
[ 2106.529146][T32227] anon_cost 0
[ 2106.532555][T32227] file_cost 0
[ 2106.536029][T32227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8064,pid=32227,uid=0
[ 2106.551234][T32227] Memory cgroup out of memory: Killed process 32227 (syz.4.8064) total-vm:102392kB, anon-rss:1428kB, file-rss:56704kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[ 2106.599243][T32223] autofs4:pid:32223:autofs_fill_super: called with bogus options
[ 2106.761799][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.771019][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.780280][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.820670][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.830123][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.839348][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.853723][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.862969][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.872516][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.882050][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.891937][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.901377][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.922197][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.931682][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.940884][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2106.950004][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2107.055344][T14143] usb 1-1: USB disconnect, device number 27
[ 2110.570616][T32246] netlink: 'syz.0.8071': attribute type 1 has an invalid length.
[ 2110.701636][T32246] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2112.580471][T21437] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 2112.692912][T32262] netlink: 'syz.1.8072': attribute type 5 has an invalid length.
[ 2112.800483][T21437] usb 1-1: Using ep0 maxpacket: 32
[ 2112.821166][T21437] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 2112.857961][T21437] usb 1-1: config 0 has no interface number 0
[ 2112.912604][T21437] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2112.940285][T21437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2112.964931][T21437] usb 1-1: Product: syz
[ 2112.973862][T21437] usb 1-1: Manufacturer: syz
[ 2112.978621][T21437] usb 1-1: SerialNumber: syz
[ 2112.996682][T21437] usb 1-1: config 0 descriptor??
[ 2113.023648][T21437] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2113.369307][T21437] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2113.459054][T21437] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2113.893132][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2113.894406][T30763] usb 1-1: USB disconnect, device number 28
[ 2113.987681][T30763] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2114.081020][T30763] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2114.162062][T30763] quatech2 1-1:0.51: device disconnected
[ 2116.775276][T32309] netlink: 'syz.0.8085': attribute type 5 has an invalid length.
[ 2117.880750][T32317] netlink: 'syz.5.8089': attribute type 1 has an invalid length.
[ 2118.733125][T32317] 8021q: adding VLAN 0 to HW filter on device bond1
[ 2124.192793][T30763] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 2124.400261][T30763] usb 1-1: Using ep0 maxpacket: 32
[ 2124.407577][T30763] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 2124.430720][T30763] usb 1-1: config 0 has no interface number 0
[ 2124.452832][T30763] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2124.470393][T30763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2124.478452][T30763] usb 1-1: Product: syz
[ 2124.500201][T30763] usb 1-1: Manufacturer: syz
[ 2124.504971][T30763] usb 1-1: SerialNumber: syz
[ 2124.522768][T30763] usb 1-1: config 0 descriptor??
[ 2124.538513][T30763] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2124.744208][T30763] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2124.790579][T30763] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2125.170689][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2125.172048][T21505] usb 1-1: USB disconnect, device number 29
[ 2125.309864][T21505] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2125.581833][T21505] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2125.668620][T21505] quatech2 1-1:0.51: device disconnected
[ 2126.926217][T32368] autofs4:pid:32368:autofs_fill_super: called with bogus options
[ 2130.389873][T32384] binder: BINDER_SET_CONTEXT_MGR already set
[ 2130.400273][T32384] binder: 32383:32384 ioctl 4018620d 200000001000 returned -16
[ 2136.458733][T32422] autofs4:pid:32422:autofs_fill_super: called with bogus options
[ 2138.900279][T30763] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2139.103518][T30763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2139.120208][T30763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2139.143649][T30763] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00
[ 2139.160440][T30763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 2139.178842][T30763] usb 1-1: Product: syz
[ 2139.183645][T30763] usb 1-1: Manufacturer: syz
[ 2139.232533][T30763] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected
[ 2139.650359][T30763] mos7840: probe of ttyUSB0 failed with error -32
[ 2140.850735][   T34] usb 1-1: USB disconnect, device number 30
[ 2140.859942][   T34] mos7840 1-1:1.0: device disconnected
[ 2141.194173][T32451] autofs4:pid:32451:autofs_fill_super: called with bogus options
[ 2146.941685][T32483] autofs4:pid:32483:autofs_fill_super: called with bogus options
[ 2150.664420][T32507] autofs4:pid:32507:autofs_fill_super: called with bogus options
[ 2156.106766][T32534] autofs4:pid:32534:autofs_fill_super: called with bogus options
[ 2161.494585][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2161.501359][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2194.752831][T32751] netlink: 'syz.1.8212': attribute type 5 has an invalid length.
[ 2196.364046][ T2182] kernel write not supported for file [eventfd] (pid: 2182 comm: kworker/0:3)
[ 2200.260688][  T316] netlink: 'syz.5.8226': attribute type 5 has an invalid length.
[ 2205.424665][  T358] netlink: 'syz.1.8236': attribute type 1 has an invalid length.
[ 2205.562447][  T358] 8021q: adding VLAN 0 to HW filter on device bond3
[ 2205.702103][  T360] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2206.523869][  T360] bond3: (slave batadv0): Enslaving as an active interface with an up link
[ 2207.475889][  T371] ip_tables: iptables: counters copy to user failed while replacing table
[ 2211.260557][  T396] macvlan1: entered promiscuous mode
[ 2211.969060][  T403] netlink: 'syz.5.8238': attribute type 5 has an invalid length.
[ 2214.919620][   T14] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1160 jiffies old.
[ 2216.343910][  T428] binder: 427:428 ioctl c0306201 0 returned -14
[ 2216.683230][  T430] loop0: detected capacity change from 0 to 512
[ 2216.727867][  T430] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2216.823591][  T430] EXT4-fs: Ignoring removed mblk_io_submit option
[ 2216.914503][  T430] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 2216.980775][  T430] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[ 2218.071354][  T430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 2218.427304][  T430] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.8267: bad symlink.
[ 2218.578575][T30456] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2222.435474][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2222.442175][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2225.596880][  T492] fuse: Bad value for 'fd'
[ 2226.911604][  T506] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2226.924563][  T506] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2226.941319][  T506] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2226.951458][  T506] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2226.959468][  T506] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 2226.968571][  T506] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2227.311796][  T504] rxe_eth0 speed is unknown, defaulting to 1000
[ 2227.661196][  T515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8280'.
[ 2228.340922][  T505] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[517] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[505]
[ 2229.070658][T30458] Bluetooth: hci0: command tx timeout
[ 2230.245038][  T504] chnl_net:caif_netlink_parms(): no params data found
[ 2231.120799][  T504] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2231.155222][T30458] Bluetooth: hci0: command tx timeout
[ 2231.163821][  T504] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2231.171992][  T504] bridge_slave_0: entered allmulticast mode
[ 2231.179642][  T504] bridge_slave_0: entered promiscuous mode
[ 2231.200925][  T504] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2231.208404][  T504] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2231.216668][  T504] bridge_slave_1: entered allmulticast mode
[ 2231.224547][  T504] bridge_slave_1: entered promiscuous mode
[ 2232.140887][  T541] autofs4:pid:541:autofs_fill_super: called with bogus options
[ 2232.436867][  T558] netlink: 'syz.5.8293': attribute type 5 has an invalid length.
[ 2232.585200][  T504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2232.673073][  T504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2233.084135][  T504] team0: Port device team_slave_0 added
[ 2233.233608][T30458] Bluetooth: hci0: command tx timeout
[ 2233.392475][  T504] team0: Port device team_slave_1 added
[ 2234.628939][  T504] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2234.670606][  T504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2234.809731][  T504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2234.871749][  T504] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2234.939262][  T504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2235.112650][  T504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2235.320882][T30458] Bluetooth: hci0: command tx timeout
[ 2235.901868][  T504] hsr_slave_0: entered promiscuous mode
[ 2235.944528][  T504] hsr_slave_1: entered promiscuous mode
[ 2235.957629][  T504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2235.985450][  T504] Cannot create hsr debugfs directory
[ 2236.113723][  T597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8300'.
[ 2236.854300][  T606] FAULT_INJECTION: forcing a failure.
[ 2236.854300][  T606] name failslab, interval 1, probability 0, space 0, times 0
[ 2236.948275][  T608] netlink: 'syz.5.8302': attribute type 5 has an invalid length.
[ 2236.970380][  T606] CPU: 0 PID: 606 Comm: syz.0.8294 Not tainted syzkaller #0
[ 2236.978221][  T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2236.988433][  T606] Call Trace:
[ 2236.991774][  T606]  <TASK>
[ 2236.995149][  T606]  dump_stack_lvl+0x18c/0x250
[ 2236.999976][  T606]  ? show_regs_print_info+0x20/0x20
[ 2237.005409][  T606]  ? load_image+0x420/0x420
[ 2237.010066][  T606]  ? __might_sleep+0xe0/0xe0
[ 2237.014773][  T606]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2237.019919][  T606]  should_fail_ex+0x394/0x4c0
[ 2237.024655][  T606]  should_failslab+0x9/0x20
[ 2237.029353][  T606]  slab_pre_alloc_hook+0x59/0x300
[ 2237.034534][  T606]  ? lookup_one_len+0x1a1/0x2e0
[ 2237.039584][  T606]  kmem_cache_alloc_lru+0x4d/0x2b0
[ 2237.044799][  T606]  ? new_inode_pseudo+0x82/0x1d0
[ 2237.049759][  T606]  new_inode_pseudo+0x82/0x1d0
[ 2237.054793][  T606]  new_inode+0x22/0x1d0
[ 2237.058953][  T606]  ? start_creating+0x1f5/0x310
[ 2237.063857][  T606]  debugfs_create_dir+0xf0/0x4b0
[ 2237.069080][  T606]  blk_mq_debugfs_register_sched+0x109/0x2b0
[ 2237.075092][  T606]  blk_mq_init_sched+0x3bc/0x780
[ 2237.080047][  T606]  ? blk_mq_sched_try_insert_merge+0x160/0x160
[ 2237.086465][  T606]  ? blk_mq_quiesce_queue+0xfe/0x190
[ 2237.091810][  T606]  elevator_switch+0x1ee/0x5b0
[ 2237.096610][  T606]  elv_iosched_store+0x3b9/0x4b0
[ 2237.102010][  T606]  ? kernfs_fop_write_iter+0x1dc/0x520
[ 2237.107517][  T606]  ? elevator_disable+0x4f0/0x4f0
[ 2237.112763][  T606]  queue_attr_store+0x9e/0xd0
[ 2237.117484][  T606]  ? sysfs_kf_read+0x360/0x360
[ 2237.122530][  T606]  kernfs_fop_write_iter+0x3a4/0x520
[ 2237.127858][  T606]  vfs_write+0x474/0x9a0
[ 2237.132825][  T606]  ? file_end_write+0x250/0x250
[ 2237.137881][  T606]  ? __fget_files+0x3fc/0x460
[ 2237.142759][  T606]  ? __fdget_pos+0x2a3/0x330
[ 2237.147379][  T606]  ? ksys_write+0x74/0x260
[ 2237.151807][  T606]  ksys_write+0x151/0x260
[ 2237.156338][  T606]  ? __ia32_sys_read+0x90/0x90
[ 2237.161122][  T606]  ? lockdep_hardirqs_on+0x98/0x150
[ 2237.166946][  T606]  do_syscall_64+0x55/0xb0
[ 2237.171367][  T606]  ? clear_bhb_loop+0x40/0x90
[ 2237.176233][  T606]  ? clear_bhb_loop+0x40/0x90
[ 2237.180979][  T606]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2237.186906][  T606] RIP: 0033:0x7fb525b9e559
[ 2237.191408][  T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2237.211148][  T606] RSP: 002b:00007fb526a0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2237.219685][  T606] RAX: ffffffffffffffda RBX: 00007fb525e25fa0 RCX: 00007fb525b9e559
[ 2237.227697][  T606] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003
[ 2237.235691][  T606] RBP: 00007fb525c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2237.243875][  T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2237.251960][  T606] R13: 00007fb525e26038 R14: 00007fb525e25fa0 R15: 00007fff962be3f8
[ 2237.259983][  T606]  </TASK>
[ 2238.090939][  T602] autofs4:pid:602:autofs_fill_super: called with bogus options
[ 2238.116057][  T606] debugfs: out of free dentries, can not create directory 'sched'
[ 2240.391184][T20304] hsr_slave_0: left promiscuous mode
[ 2240.423295][T20304] hsr_slave_1: left promiscuous mode
[ 2241.472142][T20304] bond1 (unregistering): Released all slaves
[ 2244.813322][T20304] bond0 (unregistering): Released all slaves
[ 2245.064723][T20304] lo (unregistering): left allmulticast mode
[ 2245.739590][  T668] netlink: 'syz.1.8311': attribute type 5 has an invalid length.
[ 2246.104801][T20304] IPVS: stop unused estimator thread 0...
[ 2246.294128][  T504] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 2246.334058][  T504] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 2246.397531][  T504] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 2246.447683][  T504] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 2246.457313][T30458] Bluetooth: Unknown LE signaling command 0x03
[ 2246.464507][T30458] Bluetooth: Wrong link type (-22)
[ 2246.520554][  T678] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 2246.566465][  T678] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 2246.654099][  T678] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2246.682592][  T678] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 2246.765165][  T678] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 2246.790748][  T678] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2246.811203][  T678] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 2246.995821][  T504] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2247.019927][  T504] 8021q: adding VLAN 0 to HW filter on device team0
[ 2247.076800][T32274] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2247.084168][T32274] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2248.641422][  T506] Bluetooth: hci4: command 0x0406 tx timeout
[ 2248.656952][T32274] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2248.664414][T32274] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2248.674877][  T506] Bluetooth: hci1: command 0x0406 tx timeout
[ 2248.831623][  T506] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2249.021994][  T702] netlink: 'syz.0.8321': attribute type 5 has an invalid length.
[ 2249.648033][  T504] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2251.451539][  T506] Bluetooth: hci4: command 0x0406 tx timeout
[ 2251.457834][T30458] Bluetooth: hci1: command 0x0406 tx timeout
[ 2251.460518][  T504] veth0_vlan: entered promiscuous mode
[ 2251.464996][  T506] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2251.573227][  T504] veth1_vlan: entered promiscuous mode
[ 2251.763366][  T504] veth0_macvtap: entered promiscuous mode
[ 2251.817356][  T504] veth1_macvtap: entered promiscuous mode
[ 2251.944541][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2251.987801][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2252.048542][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2252.097741][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2252.130256][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2252.190099][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2252.223070][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2252.260149][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2252.790486][  T751] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[765] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[751]
[ 2253.090192][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 2253.121313][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.152276][  T504] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2253.224123][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2253.270158][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.301840][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2253.329456][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.353254][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2253.380246][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.400650][  T769] netlink: 'syz.1.8332': attribute type 5 has an invalid length.
[ 2253.417916][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2253.440406][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.460150][  T504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 2253.480268][  T504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 2253.512439][  T504] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2253.550689][  T749] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2253.564487][  T504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.631924][  T504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.660990][  T504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.669825][  T504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2253.951242][T32274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2253.980918][T32274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2254.072253][T20304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2254.080993][T20304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2254.336583][  T785] kAFS: Invalid Command on /proc/fs/afs/cells file
[ 2254.560764][  T796] device-mapper: ioctl: populate_table: target parameters not NUL-terminated
[ 2256.104570][  T811] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[817] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[811]
[ 2262.032406][   T34] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[ 2262.233867][   T34] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2262.244623][   T34] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2262.258640][   T34] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2262.268309][   T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.490362][   T34] usb 1-1: usb_control_msg returned -32
[ 2262.496229][   T34] usbtmc 1-1:16.0: can't read capabilities
[ 2262.861938][  T869] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8349'.
[ 2262.911462][  T870] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -32
[ 2262.982694][T30763] usb 1-1: USB disconnect, device number 31
[ 2264.411196][  T878] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[879] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[878]
[ 2266.011467][  T895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8358'.
[ 2266.140396][T14143] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 2266.159717][  T900] bond3: (slave batadv0): Releasing backup interface
[ 2266.350434][T14143] usb 1-1: Using ep0 maxpacket: 8
[ 2266.459987][T14143] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2266.509187][T14143] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2266.568153][T14143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2266.600254][T14143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2266.649483][T14143] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2266.708520][T14143] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2266.717751][T14143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.138991][  T892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2268.147845][T14143] usb 1-1: usb_control_msg returned -32
[ 2268.178278][T14143] usbtmc 1-1:16.0: can't read capabilities
[ 2268.201125][  T892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2268.322670][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.331876][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.341285][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.448255][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.451078][  T918] loop4: detected capacity change from 0 to 4096
[ 2268.457427][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.473622][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.598588][  T925] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2268.605928][  T922] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[924] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[922]
[ 2268.626768][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.635945][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.645180][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.741584][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.750838][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.760148][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.769426][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.778742][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.787905][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.864604][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2268.942678][T14143] usb 1-1: USB disconnect, device number 32
[ 2270.684645][  T943] loop0: detected capacity change from 0 to 128
[ 2274.014873][  T961] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[962] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[961]
[ 2274.684430][  T970] tmpfs: Bad value for 'mpol'
[ 2274.710789][  T970] FAULT_INJECTION: forcing a failure.
[ 2274.710789][  T970] name failslab, interval 1, probability 0, space 0, times 0
[ 2274.860552][  T970] CPU: 0 PID: 970 Comm: syz.4.8374 Not tainted syzkaller #0
[ 2274.868121][  T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2274.878404][  T970] Call Trace:
[ 2274.881810][  T970]  <TASK>
[ 2274.884780][  T970]  dump_stack_lvl+0x18c/0x250
[ 2274.889511][  T970]  ? show_regs_print_info+0x20/0x20
[ 2274.894753][  T970]  ? load_image+0x420/0x420
[ 2274.899399][  T970]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2274.904568][  T970]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 2274.910612][  T970]  ? _raw_spin_unlock+0x40/0x40
[ 2274.915610][  T970]  should_fail_ex+0x394/0x4c0
[ 2274.920348][  T970]  should_failslab+0x9/0x20
[ 2274.925084][  T970]  slab_pre_alloc_hook+0x59/0x300
[ 2274.930339][  T970]  ? alloc_workqueue+0x682/0x1380
[ 2274.935591][  T970]  kmem_cache_alloc_node+0x5e/0x310
[ 2274.940847][  T970]  ? alloc_workqueue+0x82e/0x1380
[ 2274.945941][  T970]  alloc_workqueue+0x82e/0x1380
[ 2274.950947][  T970]  ? mutex_unlock+0x10/0x10
[ 2274.955599][  T970]  ? round_jiffies_relative+0xcf/0xf0
[ 2274.961014][  T970]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 2274.966786][  T970]  ? apply_workqueue_attrs+0x180/0x180
[ 2274.972293][  T970]  ? __ceph_monc_want_map+0x101/0x460
[ 2274.977845][  T970]  ceph_get_tree+0x4fd/0x1800
[ 2274.982582][  T970]  ? bpf_lsm_capable+0x9/0x10
[ 2274.987301][  T970]  ? security_capable+0x89/0xb0
[ 2274.992296][  T970]  vfs_get_tree+0x8c/0x280
[ 2274.996764][  T970]  do_new_mount+0x24a/0xa40
[ 2275.001418][  T970]  __se_sys_mount+0x2e7/0x3d0
[ 2275.006260][  T970]  ? __x64_sys_mount+0xc0/0xc0
[ 2275.011147][  T970]  ? __x64_sys_mount+0x20/0xc0
[ 2275.016222][  T970]  do_syscall_64+0x55/0xb0
[ 2275.020838][  T970]  ? clear_bhb_loop+0x40/0x90
[ 2275.025627][  T970]  ? clear_bhb_loop+0x40/0x90
[ 2275.030320][  T970]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2275.036325][  T970] RIP: 0033:0x7f7d5df9e559
[ 2275.040797][  T970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2275.060788][  T970] RSP: 002b:00007f7d5ef4c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2275.069409][  T970] RAX: ffffffffffffffda RBX: 00007f7d5e225fa0 RCX: 00007f7d5df9e559
[ 2275.077408][  T970] RDX: 00002000000028c0 RSI: 0000200000002880 RDI: 0000200000002840
[ 2275.085400][  T970] RBP: 00007f7d5e035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2275.093477][  T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2275.101480][  T970] R13: 00007f7d5e226038 R14: 00007f7d5e225fa0 R15: 00007ffc197babc8
[ 2275.109689][  T970]  </TASK>
[ 2276.863844][  T993] loop4: detected capacity change from 0 to 8
[ 2276.985414][  T993] SQUASHFS error: Failed to read block 0x8f: -5
[ 2277.053254][   T27] audit: type=1800 audit(1792234530.592:2114): pid=993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8383" name="file1" dev="loop4" ino=5 res=0 errno=0
[ 2277.100181][T14143] IPVS: starting estimator thread 0...
[ 2277.538485][  T991] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[998] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[991]
[ 2278.490239][  T996] IPVS: using max 18 ests per chain, 43200 per kthread
[ 2278.731942][ T1000] lo: entered allmulticast mode
[ 2284.308313][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout
[ 2284.315141][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 2284.322014][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 2286.277225][ T1035] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[1047] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[1035]
[ 2288.117162][ T1055] loop0: detected capacity change from 0 to 32768
[ 2288.227644][ T1055] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2288.480925][ T1055] XFS (loop0): Ending clean mount
[ 2288.531150][ T1055] XFS (loop0): Quotacheck needed: Please wait.
[ 2288.544794][ T1067] loop4: detected capacity change from 0 to 4096
[ 2288.607553][ T1069] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2289.191674][ T1055] XFS (loop0): Quotacheck: Done.
[ 2290.110153][   T27] audit: type=1800 audit(1792234543.352:2115): pid=1077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8398" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0
[ 2290.314251][T30456] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2290.437588][ T1079] loop4: detected capacity change from 0 to 128
[ 2294.914663][ T1100] binder: 1097:1100 ioctl c0306201 0 returned -14
[ 2295.965472][ T1105] loop0: detected capacity change from 0 to 4096
[ 2296.190570][ T1110] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2297.625229][ T1128] loop0: detected capacity change from 0 to 1764
[ 2300.629147][ T1141] loop4: detected capacity change from 0 to 4096
[ 2300.689027][ T1143] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2305.693473][ T1177] loop0: detected capacity change from 0 to 4096
[ 2305.767308][ T1180] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2307.494524][ T1194] netlink: 'syz.0.8429': attribute type 1 has an invalid length.
[ 2307.733076][ T1194] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2307.890886][ T1196] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2307.950437][ T1196] bond2: (slave batadv0): making interface the new active one
[ 2308.000492][ T1196] bond2: (slave batadv0): Enslaving as an active interface with an up link
[ 2308.232323][ T1199] bond2: (slave batadv0): Releasing active interface
[ 2308.281491][ T1199] bridge_slave_0: left allmulticast mode
[ 2308.341188][ T1199] bridge_slave_0: left promiscuous mode
[ 2308.391448][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2308.829503][ T1199] bridge_slave_1: left allmulticast mode
[ 2308.845486][ T1199] bridge_slave_1: left promiscuous mode
[ 2308.964645][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2309.232430][ T1199] bond0: (slave bond_slave_0): Releasing backup interface
[ 2310.458441][ T1199] bond0: (slave bond_slave_1): Releasing backup interface
[ 2310.583915][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2310.610225][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2310.691582][ T1199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2310.761359][ T1199] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2312.394560][T21372] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 2312.680149][T21372] usb 1-1: Using ep0 maxpacket: 8
[ 2312.736149][T21372] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2312.774490][T21372] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2312.803534][T21372] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2312.837015][ T1229] loop4: detected capacity change from 0 to 4096
[ 2312.886254][T21372] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2312.896942][T21372] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2312.906780][ T1230] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2312.911180][T21372] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2312.940113][T21372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2313.215504][T21372] usb 1-1: usb_control_msg returned -32
[ 2313.221848][T21372] usbtmc 1-1:16.0: can't read capabilities
[ 2313.243412][ T1215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2313.268940][ T1215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2313.883963][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2313.893122][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2313.902231][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2313.950842][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2313.960116][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2313.969257][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.010474][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.020024][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.029311][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.112549][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.121928][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.131313][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.230429][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.239671][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.249368][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.258537][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 2314.315357][T21505] usb 1-1: USB disconnect, device number 33
[ 2315.320352][T21372] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 2315.550369][T21372] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2315.565518][T21372] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2315.610441][T21372] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2315.620279][T21372] usb 1-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00
[ 2315.646889][T21372] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2315.685299][T21372] usb 1-1: config 0 descriptor??
[ 2315.925059][ T1240] binder: 1238:1240 ioctl c0306201 200000000400 returned -11
[ 2315.934550][T21372] usbhid 1-1:0.0: can't add hid device: -71
[ 2315.956935][T21372] usbhid: probe of 1-1:0.0 failed with error -71
[ 2315.987244][T21372] usb 1-1: USB disconnect, device number 34
[ 2322.110311][T21372] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 2322.562760][T21372] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2322.668659][T21372] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 3
[ 2322.784718][T21372] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=bd.95
[ 2322.812962][T21372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2322.870191][T21372] usb 1-1: Product: syz
[ 2322.884721][T21372] usb 1-1: Manufacturer: syz
[ 2322.902599][T21372] usb 1-1: SerialNumber: syz
[ 2323.187514][ T1299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2323.264730][ T1299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2323.393013][T21372] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 2323.402012][T21372] dvb_usb_af9015: probe of 1-1:2.0 failed with error -22
[ 2323.490703][T21372] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 2323.520726][T21372] dvb_usb_af9035: probe of 1-1:2.0 failed with error -22
[ 2323.587599][T21372] usb 1-1: USB disconnect, device number 35
[ 2324.428664][ T1322] binder_alloc: 1321: binder_alloc_buf, no vma
[ 2326.423167][ T1336] loop0: detected capacity change from 0 to 128
[ 2330.867478][ T1275] syz.4.8445 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 2330.920338][ T1275] CPU: 0 PID: 1275 Comm: syz.4.8445 Not tainted syzkaller #0
[ 2330.927814][ T1275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2330.938116][ T1275] Call Trace:
[ 2330.941601][ T1275]  <TASK>
[ 2330.944560][ T1275]  dump_stack_lvl+0x18c/0x250
[ 2330.949370][ T1275]  ? show_regs_print_info+0x20/0x20
[ 2330.954883][ T1275]  ? load_image+0x420/0x420
[ 2330.959436][ T1275]  ? ___ratelimit+0x478/0x610
[ 2330.964329][ T1275]  ? radix_tree_cpu_dead+0x160/0x160
[ 2330.969862][ T1275]  dump_header+0xd8/0x820
[ 2330.974246][ T1275]  oom_kill_process+0x390/0x580
[ 2330.979160][ T1275]  out_of_memory+0xe0e/0x1200
[ 2330.983889][ T1275]  ? mem_cgroup_out_of_memory+0xc1/0x390
[ 2330.990045][ T1275]  ? mutex_lock_nested+0x20/0x20
[ 2330.995090][ T1275]  ? unregister_oom_notifier+0x20/0x20
[ 2331.000702][ T1275]  mem_cgroup_out_of_memory+0x2c2/0x390
[ 2331.006367][ T1275]  ? try_charge_memcg+0xc91/0x17c0
[ 2331.011601][ T1275]  ? drain_local_stock+0x630/0x630
[ 2331.016761][ T1275]  ? do_raw_spin_unlock+0x121/0x230
[ 2331.022089][ T1275]  try_charge_memcg+0xca1/0x17c0
[ 2331.027091][ T1275]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2331.033297][ T1275]  ? folio_flags+0x120/0x120
[ 2331.038185][ T1275]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2331.043550][ T1275]  ? percpu_ref_tryget+0x15/0x180
[ 2331.048692][ T1275]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2331.054182][ T1275]  charge_memcg+0x11b/0x3b0
[ 2331.058788][ T1275]  ? __mem_cgroup_charge+0x80/0x80
[ 2331.063930][ T1275]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2331.069777][ T1275]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2331.075617][ T1275]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2331.081371][ T1275]  __mem_cgroup_charge+0x25/0x80
[ 2331.086447][ T1275]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2331.092064][ T1275]  ? xas_load+0x12b/0x140
[ 2331.096431][ T1275]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2331.101869][ T1275]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2331.107213][ T1275]  shmem_write_begin+0xf2/0x430
[ 2331.112084][ T1275]  generic_perform_write+0x2fe/0x5c0
[ 2331.117402][ T1275]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2331.123231][ T1275]  ? down_write+0x16e/0x200
[ 2331.127786][ T1275]  ? file_update_time+0x98/0x1a0
[ 2331.132781][ T1275]  shmem_file_write_iter+0xfb/0x120
[ 2331.138156][ T1275]  __kernel_write_iter+0x29f/0x6d0
[ 2331.143316][ T1275]  ? vfs_read+0x990/0x990
[ 2331.147746][ T1275]  ? get_dump_page+0x156/0x200
[ 2331.152639][ T1275]  ? __asan_memset+0x22/0x40
[ 2331.157284][ T1275]  ? iov_iter_bvec+0xd4/0x1b0
[ 2331.161997][ T1275]  dump_user_range+0x418/0x840
[ 2331.166896][ T1275]  ? dump_skip+0x40/0x40
[ 2331.171189][ T1275]  ? dump_emit+0x78/0xe0
[ 2331.175460][ T1275]  ? dump_emit+0xa6/0xe0
[ 2331.179724][ T1275]  ? elf_core_dump+0x2dbb/0x37c0
[ 2331.184881][ T1275]  elf_core_dump+0x320e/0x37c0
[ 2331.189702][ T1275]  ? load_elf_binary+0x2850/0x2850
[ 2331.195041][ T1275]  ? verify_lock_unused+0x140/0x140
[ 2331.200438][ T1275]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2331.205563][ T1275]  ? mas_next_slot+0x94c/0x980
[ 2331.210411][ T1275]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2331.215908][ T1275]  ? 0xffffffffff600000
[ 2331.220102][ T1275]  do_coredump+0x1791/0x24a0
[ 2331.224760][ T1275]  ? nfs_stat_to_errno+0x170/0x170
[ 2331.230010][ T1275]  ? lock_chain_count+0x20/0x20
[ 2331.235024][ T1275]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2331.240438][ T1275]  ? lockdep_hardirqs_on+0x98/0x150
[ 2331.245740][ T1275]  get_signal+0x10da/0x1390
[ 2331.250262][ T1275]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2331.255824][ T1275]  ? get_sigframe_size+0x20/0x20
[ 2331.260945][ T1275]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2331.267297][ T1275]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2331.272952][ T1275]  exit_to_user_mode_loop+0x70/0x110
[ 2331.278313][ T1275]  exit_to_user_mode_prepare+0xee/0x180
[ 2331.284322][ T1275]  irqentry_exit_to_user_mode+0x9/0x30
[ 2331.289874][ T1275]  exc_page_fault+0x8c/0x100
[ 2331.294843][ T1275]  asm_exc_page_fault+0x26/0x30
[ 2331.299698][ T1275] RIP: 0033:0x7f7d5df9e561
[ 2331.304129][ T1275] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 2331.324096][ T1275] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2331.330436][ T1275] RAX: 0000000000000000 RBX: 00007f7d5e226090 RCX: 00007f7d5df9e559
[ 2331.338438][ T1275] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2331.346964][ T1275] RBP: 00007f7d5e035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2331.355659][ T1275] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2331.363931][ T1275] R13: 00007f7d5e226128 R14: 00007f7d5e226090 R15: 00007ffc197babc8
[ 2331.372454][ T1275]  </TASK>
[ 2331.641767][ T1353] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2331.835856][ T1275] memory: usage 307192kB, limit 307200kB, failcnt 1105
[ 2331.856536][ T1275] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0
[ 2331.942470][ T1275] kmem: usage 2292kB, limit 9007199254740988kB, failcnt 0
[ 2332.022199][ T1275] Memory cgroup stats for /syz4:
[ 2332.022317][ T1275] cache 311472128
[ 2332.089540][ T1275] rss 745472
[ 2332.109432][ T1275] rss_huge 0
[ 2332.113051][ T1275] shmem 311472128
[ 2332.116788][ T1275] mapped_file 17457152
[ 2332.819893][ T1275] dirty 0
[ 2332.840596][ T1275] writeback 0
[ 2332.879780][ T1275] workingset_refault_anon 1
[ 2332.929955][ T1275] workingset_refault_file 446
[ 2332.991432][ T1275] swap 0
[ 2333.030371][ T1275] pgpgin 2482468
[ 2333.072809][ T1275] pgpgout 2406754
[ 2333.111546][ T1275] pgfault 866614
[ 2333.140844][ T1275] pgmajfault 8
[ 2333.189458][ T1275] inactive_anon 312201216
[ 2333.248091][ T1275] active_anon 16384
[ 2333.270344][ T1275] inactive_file 0
[ 2333.291340][ T1275] active_file 0
[ 2333.307981][ T1275] unevictable 0
[ 2333.326909][ T1275] hierarchical_memory_limit 314572800
[ 2333.350353][ T1275] hierarchical_memsw_limit 9223372036854771712
[ 2333.386380][ T1275] total_cache 311472128
[ 2333.395219][ T1275] total_rss 745472
[ 2333.410842][ T1275] total_rss_huge 0
[ 2333.432661][ T1275] total_shmem 311472128
[ 2333.456028][ T1275] total_mapped_file 17457152
[ 2333.473131][ T1275] total_dirty 0
[ 2333.498429][ T1275] total_writeback 0
[ 2333.514210][ T1275] total_workingset_refault_anon 1
[ 2333.549395][ T1275] total_workingset_refault_file 446
[ 2333.562390][ T1275] total_swap 0
[ 2333.580285][ T1275] total_pgpgin 2482468
[ 2333.593584][ T1275] total_pgpgout 2406754
[ 2333.617219][ T1275] total_pgfault 866646
[ 2333.630501][ T1275] total_pgmajfault 8
[ 2333.654487][ T1275] total_inactive_anon 312201216
[ 2333.675631][ T1275] total_active_anon 16384
[ 2333.695647][ T1275] total_inactive_file 0
[ 2333.715190][ T1275] total_active_file 0
[ 2333.726884][ T1275] total_unevictable 0
[ 2333.744978][ T1275] anon_cost 0
[ 2333.763343][ T1275] file_cost 0
[ 2333.782483][ T1275] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.8445,pid=1275,uid=0
[ 2333.881634][ T1275] Memory cgroup out of memory: Killed process 1275 (syz.4.8445) total-vm:102392kB, anon-rss:1408kB, file-rss:61440kB, shmem-rss:11392kB, UID:0 pgtables:232kB oom_score_adj:1000
[ 2335.090613][ T1373] syz.1.8473 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[ 2335.100729][ T1373] CPU: 0 PID: 1373 Comm: syz.1.8473 Not tainted syzkaller #0
[ 2335.108121][ T1373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2335.118286][ T1373] Call Trace:
[ 2335.121673][ T1373]  <TASK>
[ 2335.124620][ T1373]  dump_stack_lvl+0x18c/0x250
[ 2335.129311][ T1373]  ? show_regs_print_info+0x20/0x20
[ 2335.134622][ T1373]  ? load_image+0x420/0x420
[ 2335.139361][ T1373]  ? ___ratelimit+0x478/0x610
[ 2335.144093][ T1373]  ? radix_tree_cpu_dead+0x160/0x160
[ 2335.149494][ T1373]  dump_header+0xd8/0x820
[ 2335.153843][ T1373]  oom_kill_process+0x390/0x580
[ 2335.158703][ T1373]  out_of_memory+0xe0e/0x1200
[ 2335.163486][ T1373]  ? mem_cgroup_out_of_memory+0xc1/0x390
[ 2335.169226][ T1373]  ? mutex_lock_nested+0x20/0x20
[ 2335.174191][ T1373]  ? unregister_oom_notifier+0x20/0x20
[ 2335.179668][ T1373]  mem_cgroup_out_of_memory+0x2c2/0x390
[ 2335.185246][ T1373]  ? try_charge_memcg+0xc91/0x17c0
[ 2335.190374][ T1373]  ? drain_local_stock+0x630/0x630
[ 2335.195537][ T1373]  ? do_raw_spin_unlock+0x121/0x230
[ 2335.200831][ T1373]  try_charge_memcg+0xca1/0x17c0
[ 2335.205813][ T1373]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2335.211653][ T1373]  ? folio_flags+0x120/0x120
[ 2335.216361][ T1373]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2335.221597][ T1373]  ? percpu_ref_tryget+0x15/0x180
[ 2335.226837][ T1373]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2335.232338][ T1373]  charge_memcg+0x11b/0x3b0
[ 2335.236884][ T1373]  ? __mem_cgroup_charge+0x80/0x80
[ 2335.242003][ T1373]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2335.247484][ T1373]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2335.253355][ T1373]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2335.259063][ T1373]  __mem_cgroup_charge+0x25/0x80
[ 2335.264061][ T1373]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2335.269648][ T1373]  ? xas_load+0x12b/0x140
[ 2335.274008][ T1373]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2335.279257][ T1373]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2335.284678][ T1373]  shmem_write_begin+0xf2/0x430
[ 2335.289559][ T1373]  generic_perform_write+0x2fe/0x5c0
[ 2335.294960][ T1373]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2335.300784][ T1373]  ? down_write+0x16e/0x200
[ 2335.305303][ T1373]  ? file_update_time+0x98/0x1a0
[ 2335.310248][ T1373]  shmem_file_write_iter+0xfb/0x120
[ 2335.315554][ T1373]  __kernel_write_iter+0x29f/0x6d0
[ 2335.320799][ T1373]  ? vfs_read+0x990/0x990
[ 2335.325157][ T1373]  ? get_dump_page+0x156/0x200
[ 2335.330046][ T1373]  ? __asan_memset+0x22/0x40
[ 2335.334670][ T1373]  ? iov_iter_bvec+0xd4/0x1b0
[ 2335.339445][ T1373]  dump_user_range+0x418/0x840
[ 2335.344240][ T1373]  ? dump_skip+0x40/0x40
[ 2335.348749][ T1373]  ? dump_emit+0x78/0xe0
[ 2335.353214][ T1373]  ? dump_emit+0xa6/0xe0
[ 2335.357571][ T1373]  ? elf_core_dump+0x2dbb/0x37c0
[ 2335.362665][ T1373]  elf_core_dump+0x320e/0x37c0
[ 2335.367595][ T1373]  ? load_elf_binary+0x2850/0x2850
[ 2335.372834][ T1373]  ? verify_lock_unused+0x140/0x140
[ 2335.378324][ T1373]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2335.383661][ T1373]  ? mas_next_slot+0x94c/0x980
[ 2335.388627][ T1373]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2335.394127][ T1373]  ? 0xffffffffff600000
[ 2335.398303][ T1373]  do_coredump+0x1791/0x24a0
[ 2335.402921][ T1373]  ? nfs_stat_to_errno+0x170/0x170
[ 2335.408051][ T1373]  ? lock_chain_count+0x20/0x20
[ 2335.412916][ T1373]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2335.418389][ T1373]  ? lockdep_hardirqs_on+0x98/0x150
[ 2335.423798][ T1373]  get_signal+0x10da/0x1390
[ 2335.428428][ T1373]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2335.434236][ T1373]  ? get_sigframe_size+0x20/0x20
[ 2335.439687][ T1373]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2335.445717][ T1373]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2335.451229][ T1373]  exit_to_user_mode_loop+0x70/0x110
[ 2335.456584][ T1373]  exit_to_user_mode_prepare+0xee/0x180
[ 2335.462245][ T1373]  irqentry_exit_to_user_mode+0x9/0x30
[ 2335.468043][ T1373]  exc_page_fault+0x8c/0x100
[ 2335.472676][ T1373]  asm_exc_page_fault+0x26/0x30
[ 2335.477584][ T1373] RIP: 0033:0x7fcc93b9e561
[ 2335.482138][ T1373] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[ 2335.501950][ T1373] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2335.508071][ T1373] RAX: 0000000000000000 RBX: 00007fcc93e26090 RCX: 00007fcc93b9e559
[ 2335.516069][ T1373] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2335.524160][ T1373] RBP: 00007fcc93c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2335.532277][ T1373] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2335.540321][ T1373] R13: 00007fcc93e26128 R14: 00007fcc93e26090 R15: 00007fff34c54e78
[ 2335.548358][ T1373]  </TASK>
[ 2335.553616][ T1373] memory: usage 307200kB, limit 307200kB, failcnt 53535
[ 2335.561178][ T1373] memory+swap: usage 315216kB, limit 9007199254740988kB, failcnt 0
[ 2335.569197][ T1373] kmem: usage 2724kB, limit 9007199254740988kB, failcnt 0
[ 2335.576487][ T1373] Memory cgroup stats for /syz1:
[ 2335.576601][ T1373] cache 310833152
[ 2335.585332][ T1373] rss 888832
[ 2335.588558][ T1373] rss_huge 0
[ 2335.591851][ T1373] shmem 310804480
[ 2335.595496][ T1373] mapped_file 23539712
[ 2335.599590][ T1373] dirty 28672
[ 2335.603034][ T1373] writeback 0
[ 2335.606366][ T1373] workingset_refault_anon 162
[ 2335.611307][ T1373] workingset_refault_file 9905
[ 2335.616268][ T1373] swap 8208384
[ 2335.619675][ T1373] pgpgin 3326441
[ 2335.623268][ T1373] pgpgout 3251344
[ 2335.626917][ T1373] pgfault 1258283
[ 2335.630888][ T1373] pgmajfault 4134
[ 2335.635226][ T1373] inactive_anon 170033152
[ 2335.639815][ T1373] active_anon 141721600
[ 2335.644292][ T1373] inactive_file 0
[ 2335.648116][ T1373] active_file 28672
[ 2335.652779][ T1373] unevictable 0
[ 2335.656340][ T1373] hierarchical_memory_limit 314572800
[ 2335.661982][ T1373] hierarchical_memsw_limit 9223372036854771712
[ 2335.668607][ T1373] total_cache 310833152
[ 2335.673015][ T1373] total_rss 888832
[ 2335.676844][ T1373] total_rss_huge 0
[ 2335.680695][ T1373] total_shmem 310804480
[ 2335.685030][ T1373] total_mapped_file 23539712
[ 2335.689687][ T1373] total_dirty 28672
[ 2335.693781][ T1373] total_writeback 0
[ 2335.697689][ T1373] total_workingset_refault_anon 165
[ 2335.703249][ T1373] total_workingset_refault_file 9905
[ 2335.708618][ T1373] total_swap 8208384
[ 2335.713120][ T1373] total_pgpgin 3326581
[ 2335.717468][ T1373] total_pgpgout 3251484
[ 2335.721862][ T1373] total_pgfault 1258590
[ 2335.726118][ T1373] total_pgmajfault 4137
[ 2335.730491][ T1373] total_inactive_anon 170033152
[ 2335.735486][ T1373] total_active_anon 141721600
[ 2335.740787][ T1373] total_inactive_file 0
[ 2335.745348][ T1373] total_active_file 28672
[ 2335.789981][ T1373] total_unevictable 0
[ 2335.794541][ T1373] anon_cost 0
[ 2335.797834][ T1373] file_cost 0
[ 2335.801195][ T1373] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8456,pid=1312,uid=0
[ 2335.816390][ T1373] Memory cgroup out of memory: Killed process 1312 (syz.1.8456) total-vm:102392kB, anon-rss:1408kB, file-rss:53632kB, shmem-rss:11392kB, UID:0 pgtables:228kB oom_score_adj:0
[ 2438.959982][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 2438.967165][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P1379/1:b..l P1367/1:b..l P1333/1:b..l P1352/1:b..l
[ 2438.979497][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=292145, q=124 ncpus=2)
[ 2438.987745][    C1] task:syz.1.8466      state:R  running task     stack:21192 pid:1352  ppid:28461  flags:0x00004002
[ 2439.000446][    C1] Call Trace:
[ 2439.003758][    C1]  <TASK>
[ 2439.006886][    C1]  __schedule+0x15ae/0x4660
[ 2439.011878][    C1]  ? asan.module_dtor+0x20/0x20
[ 2439.016772][    C1]  ? arch_stack_walk+0x160/0x190
[ 2439.021834][    C1]  ? verify_lock_unused+0x140/0x140
[ 2439.027059][    C1]  preempt_schedule_notrace+0xdd/0x110
[ 2439.032557][    C1]  ? preempt_schedule_common+0xc0/0xc0
[ 2439.038319][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2439.043103][    C1]  ? trace_pelt_se_tp+0x39/0x100
[ 2439.048102][    C1]  preempt_schedule_notrace_thunk+0x1a/0x30
[ 2439.054296][    C1]  rcu_is_watching+0x7a/0xb0
[ 2439.058918][    C1]  lock_acquire+0xc6/0x420
[ 2439.063362][    C1]  ? try_to_wake_up+0x680/0x10e0
[ 2439.068363][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 2439.073841][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2439.079053][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2439.084024][    C1]  mem_cgroup_iter+0x58/0x4a0
[ 2439.088965][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2439.093909][    C1]  shrink_node+0x68c/0x3740
[ 2439.098518][    C1]  ? allow_direct_reclaim+0x8f0/0x8f0
[ 2439.103910][    C1]  ? wq_worker_last_func+0x40/0x40
[ 2439.109043][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2439.114344][    C1]  ? _raw_spin_unlock+0x28/0x40
[ 2439.119202][    C1]  ? vmpressure_prio+0xe3/0x140
[ 2439.124059][    C1]  do_try_to_free_pages+0x67e/0x1ae0
[ 2439.129452][    C1]  ? try_to_free_pages+0xeb0/0xeb0
[ 2439.134663][    C1]  ? mark_lock+0x94/0x320
[ 2439.139040][    C1]  try_to_free_mem_cgroup_pages+0x325/0x7e0
[ 2439.144988][    C1]  ? shrink_lruvec+0x2b90/0x2b90
[ 2439.149947][    C1]  ? psi_memstall_enter+0x244/0x2e0
[ 2439.155170][    C1]  ? cgroup_file_notify+0x110/0x190
[ 2439.160921][    C1]  try_charge_memcg+0x5de/0x17c0
[ 2439.165983][    C1]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2439.171806][    C1]  ? folio_flags+0x120/0x120
[ 2439.176402][    C1]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2439.181637][    C1]  ? percpu_ref_tryget+0x15/0x180
[ 2439.186670][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.192152][    C1]  charge_memcg+0x11b/0x3b0
[ 2439.196685][    C1]  ? __mem_cgroup_charge+0x80/0x80
[ 2439.201806][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.207269][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.212775][    C1]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2439.218450][    C1]  __mem_cgroup_charge+0x25/0x80
[ 2439.223471][    C1]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2439.229037][    C1]  ? xas_load+0x12b/0x140
[ 2439.233391][    C1]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2439.238518][    C1]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2439.243877][    C1]  shmem_write_begin+0xf2/0x430
[ 2439.248741][    C1]  generic_perform_write+0x2fe/0x5c0
[ 2439.254167][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2439.260066][    C1]  ? down_write+0x16e/0x200
[ 2439.264635][    C1]  ? file_update_time+0x98/0x1a0
[ 2439.269699][    C1]  shmem_file_write_iter+0xfb/0x120
[ 2439.274950][    C1]  __kernel_write_iter+0x29f/0x6d0
[ 2439.280182][    C1]  ? vfs_read+0x990/0x990
[ 2439.284709][    C1]  ? get_dump_page+0x156/0x200
[ 2439.289594][    C1]  ? __asan_memset+0x22/0x40
[ 2439.294402][    C1]  ? iov_iter_bvec+0xd4/0x1b0
[ 2439.299206][    C1]  dump_user_range+0x418/0x840
[ 2439.304187][    C1]  ? dump_skip+0x40/0x40
[ 2439.308526][    C1]  ? dump_emit+0x78/0xe0
[ 2439.312778][    C1]  ? dump_emit+0xa6/0xe0
[ 2439.317020][    C1]  ? elf_core_dump+0x2dbb/0x37c0
[ 2439.322138][    C1]  elf_core_dump+0x320e/0x37c0
[ 2439.327117][    C1]  ? load_elf_binary+0x2850/0x2850
[ 2439.332279][    C1]  ? verify_lock_unused+0x140/0x140
[ 2439.337537][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2439.342674][    C1]  ? mas_next_slot+0x94c/0x980
[ 2439.347556][    C1]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2439.353402][    C1]  ? 0xffffffffff600000
[ 2439.357605][    C1]  do_coredump+0x1791/0x24a0
[ 2439.362480][    C1]  ? nfs_stat_to_errno+0x170/0x170
[ 2439.368055][    C1]  ? lock_chain_count+0x20/0x20
[ 2439.373078][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2439.378412][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 2439.383765][    C1]  get_signal+0x10da/0x1390
[ 2439.388404][    C1]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2439.393990][    C1]  ? get_sigframe_size+0x20/0x20
[ 2439.398949][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2439.405025][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2439.410692][    C1]  exit_to_user_mode_loop+0x70/0x110
[ 2439.416106][    C1]  exit_to_user_mode_prepare+0xee/0x180
[ 2439.421840][    C1]  irqentry_exit_to_user_mode+0x9/0x30
[ 2439.428188][    C1]  exc_page_fault+0x8c/0x100
[ 2439.432798][    C1]  asm_exc_page_fault+0x26/0x30
[ 2439.437752][    C1] RIP: 0033:0x7fcc93b9e561
[ 2439.442256][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2439.448350][    C1] RAX: 0000000000000000 RBX: 00007fcc93e26090 RCX: 00007fcc93b9e559
[ 2439.456522][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2439.464519][    C1] RBP: 00007fcc93c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2439.472513][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2439.480849][    C1] R13: 00007fcc93e26128 R14: 00007fcc93e26090 R15: 00007fff34c54e78
[ 2439.489123][    C1]  </TASK>
[ 2439.492153][    C1] task:syz.4.8458      state:R  running task     stack:20616 pid:1333  ppid:504    flags:0x00004002
[ 2439.503244][    C1] Call Trace:
[ 2439.506585][    C1]  <TASK>
[ 2439.509609][    C1]  __schedule+0x15ae/0x4660
[ 2439.514136][    C1]  ? asan.module_dtor+0x20/0x20
[ 2439.519078][    C1]  ? arch_stack_walk+0x160/0x190
[ 2439.524036][    C1]  ? verify_lock_unused+0x140/0x140
[ 2439.529252][    C1]  preempt_schedule_notrace+0xdd/0x110
[ 2439.534797][    C1]  ? preempt_schedule_common+0xc0/0xc0
[ 2439.540255][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2439.545016][    C1]  ? trace_pelt_se_tp+0x39/0x100
[ 2439.549972][    C1]  preempt_schedule_notrace_thunk+0x1a/0x30
[ 2439.555903][    C1]  rcu_is_watching+0x7a/0xb0
[ 2439.560511][    C1]  lock_acquire+0xc6/0x420
[ 2439.564961][    C1]  ? try_to_wake_up+0x680/0x10e0
[ 2439.569912][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 2439.575555][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2439.580775][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2439.585719][    C1]  mem_cgroup_iter+0x58/0x4a0
[ 2439.590394][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2439.595242][    C1]  shrink_node+0x68c/0x3740
[ 2439.599767][    C1]  ? allow_direct_reclaim+0x8f0/0x8f0
[ 2439.605137][    C1]  ? wq_worker_last_func+0x40/0x40
[ 2439.610267][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2439.615468][    C1]  ? _raw_spin_unlock+0x28/0x40
[ 2439.620318][    C1]  ? vmpressure_prio+0xe3/0x140
[ 2439.625278][    C1]  do_try_to_free_pages+0x67e/0x1ae0
[ 2439.630932][    C1]  ? try_to_free_pages+0xeb0/0xeb0
[ 2439.636228][    C1]  ? mark_lock+0x94/0x320
[ 2439.640779][    C1]  try_to_free_mem_cgroup_pages+0x325/0x7e0
[ 2439.646766][    C1]  ? shrink_lruvec+0x2b90/0x2b90
[ 2439.651716][    C1]  ? psi_memstall_enter+0x244/0x2e0
[ 2439.657026][    C1]  ? cgroup_file_notify+0x110/0x190
[ 2439.662313][    C1]  try_charge_memcg+0x5de/0x17c0
[ 2439.667280][    C1]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2439.673110][    C1]  ? folio_flags+0x120/0x120
[ 2439.677898][    C1]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2439.683018][    C1]  ? percpu_ref_tryget+0x15/0x180
[ 2439.688230][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.693805][    C1]  charge_memcg+0x11b/0x3b0
[ 2439.698329][    C1]  ? __mem_cgroup_charge+0x80/0x80
[ 2439.703438][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.708905][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2439.714362][    C1]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2439.720007][    C1]  __mem_cgroup_charge+0x25/0x80
[ 2439.725040][    C1]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2439.730583][    C1]  ? xas_load+0x12b/0x140
[ 2439.734917][    C1]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2439.740132][    C1]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2439.745534][    C1]  shmem_write_begin+0xf2/0x430
[ 2439.750404][    C1]  generic_perform_write+0x2fe/0x5c0
[ 2439.755992][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2439.761821][    C1]  ? down_write+0x16e/0x200
[ 2439.766344][    C1]  ? file_update_time+0x98/0x1a0
[ 2439.771299][    C1]  shmem_file_write_iter+0xfb/0x120
[ 2439.776744][    C1]  __kernel_write_iter+0x29f/0x6d0
[ 2439.781887][    C1]  ? vfs_read+0x990/0x990
[ 2439.786406][    C1]  ? get_dump_page+0x156/0x200
[ 2439.791694][    C1]  ? __asan_memset+0x22/0x40
[ 2439.796496][    C1]  ? iov_iter_bvec+0xd4/0x1b0
[ 2439.801188][    C1]  dump_user_range+0x418/0x840
[ 2439.806147][    C1]  ? dump_skip+0x40/0x40
[ 2439.810422][    C1]  ? dump_emit+0x78/0xe0
[ 2439.814764][    C1]  ? dump_emit+0xa6/0xe0
[ 2439.819094][    C1]  ? elf_core_dump+0x2dbb/0x37c0
[ 2439.824221][    C1]  elf_core_dump+0x320e/0x37c0
[ 2439.829191][    C1]  ? load_elf_binary+0x2850/0x2850
[ 2439.834329][    C1]  ? verify_lock_unused+0x140/0x140
[ 2439.839640][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2439.844857][    C1]  ? mas_next_slot+0x94c/0x980
[ 2439.849834][    C1]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2439.855291][    C1]  ? 0xffffffffff600000
[ 2439.859569][    C1]  do_coredump+0x1791/0x24a0
[ 2439.864280][    C1]  ? nfs_stat_to_errno+0x170/0x170
[ 2439.869577][    C1]  ? lock_chain_count+0x20/0x20
[ 2439.874519][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2439.879807][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 2439.885098][    C1]  get_signal+0x10da/0x1390
[ 2439.889713][    C1]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2439.895351][    C1]  ? get_sigframe_size+0x20/0x20
[ 2439.900422][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2439.906436][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2439.912019][    C1]  exit_to_user_mode_loop+0x70/0x110
[ 2439.917359][    C1]  exit_to_user_mode_prepare+0xee/0x180
[ 2439.922957][    C1]  irqentry_exit_to_user_mode+0x9/0x30
[ 2439.928542][    C1]  exc_page_fault+0x8c/0x100
[ 2439.933267][    C1]  asm_exc_page_fault+0x26/0x30
[ 2439.938137][    C1] RIP: 0033:0x7f7d5df9e561
[ 2439.942832][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2439.949080][    C1] RAX: 0000000000000000 RBX: 00007f7d5e225fa0 RCX: 00007f7d5df9e559
[ 2439.957050][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2439.965111][    C1] RBP: 00007f7d5e035ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2439.973082][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2439.981053][    C1] R13: 00007f7d5e226038 R14: 00007f7d5e225fa0 R15: 00007ffc197babc8
[ 2439.989146][    C1]  </TASK>
[ 2439.992337][    C1] task:syz.1.8471      state:R  running task     stack:21192 pid:1367  ppid:28461  flags:0x00004002
[ 2440.003317][    C1] Call Trace:
[ 2440.006764][    C1]  <TASK>
[ 2440.009725][    C1]  __schedule+0x15ae/0x4660
[ 2440.014527][    C1]  ? asan.module_dtor+0x20/0x20
[ 2440.019669][    C1]  ? arch_stack_walk+0x160/0x190
[ 2440.024659][    C1]  preempt_schedule_notrace+0xdd/0x110
[ 2440.030170][    C1]  ? preempt_schedule_common+0xc0/0xc0
[ 2440.035832][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2440.040740][    C1]  preempt_schedule_notrace_thunk+0x1a/0x30
[ 2440.046685][    C1]  rcu_is_watching+0x7a/0xb0
[ 2440.051411][    C1]  lock_acquire+0xc6/0x420
[ 2440.055864][    C1]  ? try_to_wake_up+0x680/0x10e0
[ 2440.060833][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 2440.066249][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2440.071480][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2440.076516][    C1]  mem_cgroup_iter+0x58/0x4a0
[ 2440.081280][    C1]  ? mem_cgroup_iter+0x3c/0x4a0
[ 2440.086145][    C1]  shrink_node+0x68c/0x3740
[ 2440.090714][    C1]  ? allow_direct_reclaim+0x8f0/0x8f0
[ 2440.096268][    C1]  ? wq_worker_last_func+0x40/0x40
[ 2440.101381][    C1]  ? do_raw_spin_unlock+0x121/0x230
[ 2440.106606][    C1]  ? _raw_spin_unlock+0x28/0x40
[ 2440.111488][    C1]  ? vmpressure_prio+0xe3/0x140
[ 2440.116431][    C1]  do_try_to_free_pages+0x67e/0x1ae0
[ 2440.121915][    C1]  ? try_to_free_pages+0xeb0/0xeb0
[ 2440.127111][    C1]  ? mark_lock+0x94/0x320
[ 2440.131542][    C1]  try_to_free_mem_cgroup_pages+0x325/0x7e0
[ 2440.137527][    C1]  ? shrink_lruvec+0x2b90/0x2b90
[ 2440.142745][    C1]  ? psi_memstall_enter+0x244/0x2e0
[ 2440.148227][    C1]  ? cgroup_file_notify+0x110/0x190
[ 2440.153656][    C1]  try_charge_memcg+0x5de/0x17c0
[ 2440.158603][    C1]  ? folio_prep_large_rmappable+0x9e/0x1b0
[ 2440.164716][    C1]  ? folio_flags+0x120/0x120
[ 2440.169395][    C1]  ? shmem_alloc_folio+0x1f4/0x2a0
[ 2440.174542][    C1]  ? percpu_ref_tryget+0x15/0x180
[ 2440.179580][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2440.185150][    C1]  charge_memcg+0x11b/0x3b0
[ 2440.189785][    C1]  ? __mem_cgroup_charge+0x80/0x80
[ 2440.194897][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2440.200354][    C1]  ? get_mem_cgroup_from_mm+0x38/0x290
[ 2440.205988][    C1]  ? get_mem_cgroup_from_mm+0x1b2/0x290
[ 2440.211693][    C1]  __mem_cgroup_charge+0x25/0x80
[ 2440.216708][    C1]  shmem_add_to_page_cache+0x8d3/0x1b80
[ 2440.222274][    C1]  ? xas_load+0x12b/0x140
[ 2440.226692][    C1]  ? shmem_alloc_folio+0x2a0/0x2a0
[ 2440.231837][    C1]  ? mark_lock+0x94/0x320
[ 2440.236195][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2440.242287][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2440.247417][    C1]  ? lock_chain_count+0x20/0x20
[ 2440.252298][    C1]  shmem_get_folio_gfp+0x1037/0x2b40
[ 2440.257761][    C1]  shmem_write_begin+0xf2/0x430
[ 2440.262809][    C1]  generic_perform_write+0x2fe/0x5c0
[ 2440.268221][    C1]  ? generic_file_direct_write+0x3e0/0x3e0
[ 2440.274071][    C1]  ? file_update_time+0x192/0x1a0
[ 2440.279126][    C1]  shmem_file_write_iter+0xfb/0x120
[ 2440.284398][    C1]  __kernel_write_iter+0x29f/0x6d0
[ 2440.290098][    C1]  ? vfs_read+0x990/0x990
[ 2440.294698][    C1]  ? get_dump_page+0x156/0x200
[ 2440.299563][    C1]  ? __asan_memset+0x22/0x40
[ 2440.304333][    C1]  ? iov_iter_bvec+0xd4/0x1b0
[ 2440.309138][    C1]  dump_user_range+0x418/0x840
[ 2440.313948][    C1]  ? dump_skip+0x40/0x40
[ 2440.318200][    C1]  ? dump_emit+0x78/0xe0
[ 2440.322531][    C1]  ? dump_emit+0xa6/0xe0
[ 2440.326805][    C1]  ? elf_core_dump+0x2dbb/0x37c0
[ 2440.331855][    C1]  elf_core_dump+0x320e/0x37c0
[ 2440.336761][    C1]  ? load_elf_binary+0x2850/0x2850
[ 2440.341884][    C1]  ? verify_lock_unused+0x140/0x140
[ 2440.347282][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2440.352618][    C1]  ? mas_next_slot+0x94c/0x980
[ 2440.357734][    C1]  ? rcu_read_lock_any_held+0xb4/0x140
[ 2440.363416][    C1]  ? 0xffffffffff600000
[ 2440.367781][    C1]  do_coredump+0x1791/0x24a0
[ 2440.372395][    C1]  ? nfs_stat_to_errno+0x170/0x170
[ 2440.377724][    C1]  ? lock_chain_count+0x20/0x20
[ 2440.382648][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2440.388237][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 2440.393734][    C1]  get_signal+0x10da/0x1390
[ 2440.398353][    C1]  arch_do_signal_or_restart+0xc2/0x7b0
[ 2440.404230][    C1]  ? get_sigframe_size+0x20/0x20
[ 2440.409453][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2440.415459][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[ 2440.421131][    C1]  exit_to_user_mode_loop+0x70/0x110
[ 2440.426617][    C1]  exit_to_user_mode_prepare+0xee/0x180
[ 2440.432274][    C1]  irqentry_exit_to_user_mode+0x9/0x30
[ 2440.437754][    C1]  exc_page_fault+0x8c/0x100
[ 2440.442361][    C1]  asm_exc_page_fault+0x26/0x30
[ 2440.447389][    C1] RIP: 0033:0x7fcc93b9e561
[ 2440.451814][    C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217
[ 2440.457904][    C1] RAX: 0000000000000000 RBX: 00007fcc93e26090 RCX: 00007fcc93b9e559
[ 2440.465909][    C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000
[ 2440.474132][    C1] RBP: 00007fcc93c35ab8 R08: 0000000000000000 R09: 0000000000000000
[ 2440.482225][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2440.490206][    C1] R13: 00007fcc93e26128 R14: 00007fcc93e26090 R15: 00007fff34c54e78
[ 2440.498457][    C1]  </TASK>
[ 2440.501515][    C1] task:syz.0.8475      state:R  running task     stack:25576 pid:1379  ppid:30456  flags:0x00004002
[ 2440.512662][    C1] Call Trace:
[ 2440.516076][    C1]  <TASK>
[ 2440.519010][    C1]  __schedule+0x15ae/0x4660
[ 2440.523640][    C1]  ? asan.module_dtor+0x20/0x20
[ 2440.528669][    C1]  ? mark_lock+0x94/0x320
[ 2440.533100][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2440.539660][    C1]  ? preempt_schedule_irq+0xb4/0x150
[ 2440.544970][    C1]  preempt_schedule_irq+0xbf/0x150
[ 2440.550117][    C1]  ? preempt_schedule_notrace+0x110/0x110
[ 2440.555948][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 2440.561767][    C1]  irqentry_exit+0x67/0x70
[ 2440.566210][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2440.572217][    C1] RIP: 0010:lock_acquire+0x208/0x420
[ 2440.577511][    C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25
[ 2440.597947][    C1] RSP: 0018:ffffc90004f3f740 EFLAGS: 00000206
[ 2440.604398][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 2e3cebc094a99b00
[ 2440.612720][    C1] RDX: 0000000000000000 RSI: ffffffff8acae160 RDI: ffffffff8b1d5160
[ 2440.620732][    C1] RBP: ffffc90004f3f848 R08: dffffc0000000000 R09: 1ffffffff23fe2a0
[ 2440.628826][    C1] R10: dffffc0000000000 R11: fffffbfff23fe2a1 R12: 1ffff920009e7ef4
[ 2440.636992][    C1] R13: ffffffff8df320e0 R14: 0000000000000246 R15: dffffc0000000000
[ 2440.645009][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 2440.650435][    C1]  ? finish_fault+0x930/0xce0
[ 2440.655134][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2440.660355][    C1]  count_memcg_event_mm+0xaf/0x3c0
[ 2440.665493][    C1]  ? count_memcg_event_mm+0x8e/0x3c0
[ 2440.670880][    C1]  ? count_memcg_event_mm+0x8e/0x3c0
[ 2440.676176][    C1]  ? put_page+0x260/0x260
[ 2440.680522][    C1]  ? finish_fault+0x93c/0xce0
[ 2440.685301][    C1]  ? folio_unlock+0x118/0x2f0
[ 2440.690067][    C1]  handle_mm_fault+0x28c0/0x4a50
[ 2440.695182][    C1]  ? handle_mm_fault+0xe6/0x4a50
[ 2440.700125][    C1]  ? numa_migrate_prep+0x350/0x350
[ 2440.705232][    C1]  ? follow_page_pte+0x6dd/0x1ae0
[ 2440.710267][    C1]  ? pmd_lock+0x60/0x60
[ 2440.714512][    C1]  __get_user_pages+0x604/0x1580
[ 2440.719555][    C1]  ? populate_vma_page_range+0x380/0x380
[ 2440.725281][    C1]  populate_vma_page_range+0x2c1/0x380
[ 2440.730744][    C1]  ? fixup_user_fault+0x750/0x750
[ 2440.735792][    C1]  ? down_read+0x1ac/0x2e0
[ 2440.740320][    C1]  __mm_populate+0x260/0x390
[ 2440.745029][    C1]  ? faultin_page_range+0x8a0/0x8a0
[ 2440.750320][    C1]  ? up_write+0x1be/0x410
[ 2440.754648][    C1]  vm_mmap_pgoff+0x2da/0x3f0
[ 2440.759263][    C1]  ? account_locked_vm+0x200/0x200
[ 2440.764384][    C1]  ? ksys_mmap_pgoff+0xf3/0x720
[ 2440.769323][    C1]  ? __x64_sys_mmap+0x7a/0x130
[ 2440.774086][    C1]  do_syscall_64+0x55/0xb0
[ 2440.778504][    C1]  ? clear_bhb_loop+0x40/0x90
[ 2440.783266][    C1]  ? clear_bhb_loop+0x40/0x90
[ 2440.788054][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 2440.793978][    C1] RIP: 0033:0x7fb525b9e559
[ 2440.798391][    C1] RSP: 002b:00007fb526a0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 2440.806906][    C1] RAX: ffffffffffffffda RBX: 00007fb525e25fa0 RCX: 00007fb525b9e559
[ 2440.815246][    C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000
[ 2440.823496][    C1] RBP: 00007fb525c35ab8 R08: ffffffffffffffff R09: 000000001b5cb000
[ 2440.831468][    C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000
[ 2440.839526][    C1] R13: 00007fb525e26038 R14: 00007fb525e25fa0 R15: 00007fff962be3f8
[ 2440.847505][    C1]  </TASK>
[ 2440.850523][    C1] rcu: rcu_preempt kthread starved for 10687 jiffies! g292145 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 2440.862325][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 2440.872297][    C1] rcu: RCU grace-period kthread stack dump:
[ 2440.878871][    C1] task:rcu_preempt     state:R  running task     stack:26824 pid:17    ppid:2      flags:0x00004000
[ 2440.890009][    C1] Call Trace:
[ 2440.893315][    C1]  <TASK>
[ 2440.896432][    C1]  __schedule+0x15ae/0x4660
[ 2440.901052][    C1]  ? asan.module_dtor+0x20/0x20
[ 2440.906118][    C1]  ? rcu_is_watching+0x15/0xb0
[ 2440.911214][    C1]  schedule+0xbd/0x170
[ 2440.915643][    C1]  schedule_timeout+0x188/0x2d0
[ 2440.920533][    C1]  ? console_conditional_schedule+0x40/0x40
[ 2440.926526][    C1]  ? update_process_times+0x1b0/0x1b0
[ 2440.932050][    C1]  ? prepare_to_swait_event+0x344/0x360
[ 2440.937697][    C1]  rcu_gp_fqs_loop+0x30d/0x1590
[ 2440.942748][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[ 2440.947677][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 2440.953961][    C1]  ? __lock_acquire+0x7eb0/0x7eb0
[ 2440.959176][    C1]  ? rcu_gp_init+0x1530/0x1530
[ 2440.964060][    C1]  ? rcu_gp_cleanup+0xade/0xc30
[ 2440.969003][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2440.974332][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 2440.979587][    C1]  rcu_gp_kthread+0x9d/0x3b0
[ 2440.984214][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 2440.989335][    C1]  ? __kthread_parkme+0x71/0x1c0
[ 2440.994381][    C1]  ? __kthread_parkme+0x15b/0x1c0
[ 2440.999457][    C1]  kthread+0x2fa/0x390
[ 2441.003601][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[ 2441.008932][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 2441.013628][    C1]  ret_from_fork+0x48/0x80
[ 2441.018138][    C1]  ? kthread_blkcg+0xd0/0xd0
[ 2441.022738][    C1]  ret_from_fork_asm+0x11/0x20
[ 2441.027632][    C1]  </TASK>
[ 2441.030695][    C1] rcu: Stack dump where RCU GP kthread last ran:
[ 2441.037043][    C1] Sending NMI from CPU 1 to CPUs 0:
[ 2441.042308][    C0] NMI backtrace for cpu 0
[ 2441.042320][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0
[ 2441.042336][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 2441.042345][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x10
[ 2441.042370][    C0] Code: 99 17 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d d3 38 35 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9
[ 2441.042383][    C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6
[ 2441.042399][    C0] RAX: 802e28b520153f00 RBX: ffffffff81631e31 RCX: 802e28b520153f00
[ 2441.042410][    C0] RDX: 0000000000000001 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160
[ 2441.042422][    C0] RBP: ffffffff8dc07eb8 R08: ffff8880b8c36b6b R09: 1ffff11017186d6d
[ 2441.042433][    C0] R10: dffffc0000000000 R11: ffffed1017186d6e R12: 1ffffffff1b80fbc
[ 2441.042443][    C0] R13: dffffc0000000000 R14: 1ffffffff1b92688 R15: 0000000000000000
[ 2441.042454][    C0] FS:  0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 2441.042468][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2441.042479][    C0] CR2: 0000001b2f020ff8 CR3: 0000000061497000 CR4: 00000000003506f0
[ 2441.042495][    C0] DR0: 0000000000000000 DR1: 00000000e88ba5cb DR2: 0000000000000000
[ 2441.042505][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2441.042516][    C0] Call Trace:
[ 2441.042524][    C0]  <TASK>
[ 2441.042530][    C0]  default_idle+0x13/0x20
[ 2441.042614][    C0]  default_idle_call+0x6c/0xa0
[ 2441.042634][    C0]  do_idle+0x221/0x5c0
[ 2441.042658][    C0]  ? idle_inject_timer_fn+0x60/0x60
[ 2441.042676][    C0]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2441.042701][    C0]  cpu_startup_entry+0x43/0x60
[ 2441.042718][    C0]  rest_init+0x2e2/0x300
[ 2441.042737][    C0]  ? time_init+0x40/0x40
[ 2441.042814][    C0]  arch_call_rest_init+0xe/0x10
[ 2441.042838][    C0]  start_kernel+0x461/0x4e0
[ 2441.042857][    C0]  x86_64_start_reservations+0x2a/0x30
[ 2441.042874][    C0]  x86_64_start_kernel+0x60/0x60
[ 2441.042889][    C0]  secondary_startup_64_no_verify+0x179/0x17b
[ 2441.042916][    C0]  </TASK>