last executing test programs:

1m24.983075875s ago: executing program 3 (id=207):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x2000000, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m24.788422101s ago: executing program 3 (id=208):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
pipe(&(0x7f0000000d00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007a030000000000001d440000000000007a0a00fe00ffffffc3030000a0000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)
kexec_load(0x0, 0x0, 0x0, 0x3e0001)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r6, 0x404, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004090}, 0x44001)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000005280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005240)={&(0x7f00000031c0)={0x204c, 0x13, 0x200, 0x70bd26, 0x25dfdbfd, {0x2c, 0x9, 0xa5, 0xd1, {0x4e20, 0x4e22, [0x0, 0x3, 0x4, 0x3], [0x4f, 0x9, 0x0, 0x800], r1, [0x9, 0x5]}, 0x7, 0x800}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "0b30362cd34a176540c08f47b0665d89352dbe6e85813b3d0d79a1cc4c1282fc804b5d538340c1a3fd1f1f828cda5fcc8c2493ebd77e5bdf171ec71c816ae5fc33ae8282b5dd4bc5597c71d93b02a26322cfb5579534dc93ebdd9e5248e2849a7ffdfcf5fef00160591d2817e14e2903ddac13e867f73468f0425ffbe640b4028df96a7d4b657df1ba0c3bcfe3d4017f36dac674b5d8ab030e945a549a0fa0cdf12b4cd046d92fee11655841fba770f90895ea4495f6a9cd47c5df9d693dde350f99ad1f795816d7bcaad493443b7634461d14c8fc3a7b75c75c663254d4527b9a21a3f07df7364300858c1e3233a6b8e5cc4546111db31e6d77ccd1f99def0f03c8ca26610a0cc192f1351e0d2360e2c75a9a415376165be1290e1dbed04bf560d7c5f6cc892eed1f433d063fefc20e8a117abd4bba1047b181e567a997cf3c74b949e644cf1eb2e6037eb9eace32e73f20bc7ccdbf8e290be9d16c136e79ecab573a30de0c65e0544a4bda1d1e3f6806a26d3f882d4d4c833cb538b9e94918464732c55692c0b158c24d44440f47c5787a96c959dd403f47ccc1a389ad167e53f7276ac7487d78dadfb0b823418ce63d156ad1cc69239e8611eee10c0ea174309851383d488f1b414a61a37b450a97a95995eba4187fd22f85dca1f99387f9b97fb91d16433cdba840b22b20ef9ec75f392a2da68a5e97f7f1fe833d677390d86aa13417b45fc99924663ab5e06166f5c9f61377bf9d0c9476d97f15f1376c252ed1e642cbe9dd05f9c68d2a64fa3f348821a11dcf3ebbd7fb03aa776a3d3c5f0b5336c35fc39a953b8ca9a95c92ec9e778a243c4f787aa2d2a17bb7a2393e18764d90c6e425cfe99a3082d370f7ae1a6ac6c0b11949735af61798ec9f1ac0b364f5f17f4ad04a6ba3bf411318b6d53cda320944b272d7d01fdfceae2a0c7b73fafc4ca6a5a299bbb9a6fca62b10384d084fbd9fa4dc68557932f99aa7db0be4390a69c2cdca7cbcaf28d03035127e214480b82f72b1805da14548e43047989014d7e15021093ade6a54c075fb12bdd47ff46ff5c1474b6f03954d3bc0bc90f3ac0a7106d5786ffc5032fa2bad617b26c2af372ac081a78e78c2cf78931671ffa2e8706b8d965ab6690a1dba8c267e893af6cd21be41b13a6c2b1a627ce09461d7789f9953133f41641a35dd1e232308a4526554767d3112620c8547986b96b4689eec2f48110a6bd8f0af9e17850198b3b7a106dd3f06f9f8b8ef531f665885df619349e00668b797fc5787afada5d12e2141ab909282cb510a68d8e3542a8f86c177d8636458db4fd8ca9de1124b9c3077c90c35ceae828d26ba6b2017bc9087392dc9058430b3a0534f18da0fe2ad517893960f1a4db971e8e1ba7a4e58c6530ad74bf0230943abe58a572bf5bf1227dd31be916050079f0edd6d8b7965b5fceabcb77339212a20bcb88ec7a7faa65d7dd6da2a74ff81eb323e09cd22921477fbed80badcc3f1f01c3e15832bc0cb958e8d88eb5fc5df930a04b14186dffe43570c115d99eaf1ed974c0a014440ce8c051f29f7ea0b3040e7579d50affb8ea9d96919b33f1755789cc266a9ff605fab7c15abcc54a681445706a1d684aa2f6a9afa6df0ba4500bf86e3544e5e9ae0a7807e63889bde64ba4174c1c4eb0cb02464e4a16f2b28bd58fbb4c56bcff3a21aaafdc750dd072a7dca8f6cd71f2bc1e9c13eae3104b849b310f92b62cf32265748eb471278de27ca3840ef329ac347a342f7de675986f079b3fbf9704f8b32f95c4f89bdc7f328227a94b564a668ba0f7484d6612a1c09ae9cb5097dc4c76e04ba8a6094dc8f9a5c19575f6ad38b33b0c63fa4a4a630aea9bb62741b4c44d694302b5f313a3a643738006e5c1bbcd4a277dfae92263e30345380ffc3ff5b5ff2b24dce58a808ed873ad30cc79137ecd8fd0cf5a267e75b623b1305ffccd5be3de1032a9a5bce8f174814567d1aff03481be7a341270b0f8b621192c7550ee52638bbb8aea1f5b12bdae85f34e3c07259461ad276c7dd427ef01f92e5e8f4b10289b95a1fa13d8bcadd434c3101845c4006d945d85b49df1b2d69a7f2d8b8de798ac81bee38feb001a2631891bb551187ea92cb4e7b30762322c0ef9dd86bf168e4ee8870e925d8fbe28bde4e9bdf11f37035b2ee16a34301ec1776c7af429931d980baa40fadaa306807d52139554fa731838fe4c58f30edac31316f4d80ddac445c4fbef260a1978b76dcc3731298e16c7c1b833a7de64ac2902b631c2ee3b2d335700fe32ede3f12c10c7929b4574aae6ac0087ad328a93fc99ab3c1389569aed83669a1e8d28da144e02791e04cb92b61bd075e4dbeab555e98813de69592d5a4d30307069e1a90135318a753513c334a19519893e24977e4eaa474b14c77787012bd82f71d2ad68d6f41e0769e8a6ca36d9a36f6b6278d44ec4c926030d856b1a69a7edd8e3621cf402c9d08237973f7b8d53338bd36e5f7b1772c9bfc92064d1a672cdfeab797e385dbaa8890564c865eb399a77ed3afa7f7ae423df9bcf0378690f541210d9159ee96f3712c5a6f87b1bf5d5961ba29936aa45360ad9792799607c3ec5a692e9b64cb33942420a422c4a945e3d9549285e72c4ea60bf430f63ae37763a060de77f4d2ccd63d5736aa969b2beddc7af41b3ed14198b912d40eff9d97143042019f336d3ff5e85ba9527cdd9950928ef0165f2c6b67757de48a92f841c285f7acc4bab33d11890c718336f941383af29b8fd753730645048a01a3c259861a1d1c84ab7cdc60894a836d1379a4dd5a593ddb8c3c169fb47f8e963dc869c60eff3ce3c1074b96a84bc0f9f3cda58e69f048b497953a822e5b352ba559cbe563971f442b94379ff543add8c4e2446f5ddad72ac86dcf5b8b1a0fa7a5fff124725b16fcd9f8339f7e00953610e2d9d55c4e77394bc74ed1eab6228b75e9bd0d5b041d422525f965e898295ec7123739107c291d383c3724fc080e2c93aece1ddebce071d4820b60997c2ae2e45086ba658c77543fa415660817d8f14ea649d51d4482c93c78269040ea9663f3c42dc701dc74320e81ee1ca12db8f8116f3d3be71e04cddad33f0348e1f9000dcd75280c4787d828d7e121c35c41e29319271f774cb3a8090108cb51f36f4b0a1d9582305ae6b7386db471ca3822b9d6b462766bfb9d1e021d1c6359dfe04b9e9b152871645dd465feede0287df093fdfbd444a9f9049ccc3ee88cbf61a64e7c3decad2edb7c0ae9a04584166eb4bf9646da62993368476ba9e46de6f7bd7c42dbf6a74cffa002486b586378d5b13bd08fbf680b7d1eb765e9cf724b5daeda60a9227a4440fbcfb952c1f6f8efe544c5f4f122f1a760aef9e2c5c77a498f6de02c564cf08e63d72017c0051c8ab4b073da91a7c7f6e566ea321541c0789f89b0abffaa9046d8ec6e90d9d428d3632c6bb6b087303078d9fe4115133c454f7ca1575217907aa4ebfa28794af879d733e384311688ebbf7baaf4ad1f79fa07d87dbf06049a6b67f2794a99c1dd25026ee8a131c5c531f91a2577629dcd748b9f967005f5045b12fd4a6e8591e03e697344e05e9a1f1e281888a31076ec9a01268d3e330e374589dcef40452d9149634911d6c307ca4a602886c601cfce9adcc7393a2434bbd70ff483824998ec758efb44aba204a788e3610a930101af38cfa509761e28595332b54c9f6bfdce808953342b8e861264852663f0f1b73aa5c8aa2609634ffdc8d2291bc83e50e18af1346cd151c8a8078a3dd053b63e05b2c0c4934dafeef63e2f312d390400f8e20314736db95bafad88fd1268f5c26c52312b3fa3f0c0045a4db1153566121c4b72e32b707431d370eb786d058913c7225cbc84693e96a20040ff1fc05ab63751eb557fc69524491c35a46ba0dbd9ac7489f533156933a23963089b149304ca856c9c0ed4abed130929ecd18971ce73da3e7740ba086be2a6f650ef6ac4d4d32e7c9440b45eaa5bebed92ddf80c962101956d66a659f361b10298953b38cb07f054b27c9bb1903059f51112a0e5a277cdc02c965ad31469045d4860f8742a7f9fcccca0ddbac8225deffef4342c2b5e74cf059120d9bd618e6e6ec7a9750725ee645ef1016cfc83650f3dd3ff3525479f06341063789dc7480ad3a828b72e13b7ed915452b5bb6c14f5951afcac4f5ea6bd64be95e8fe9baa7d424fd45fedb15296f62031c6e16865084693dbfde15cabb8520f81bd65bf37480b8f2d0ba59d7bd3cf961611068d88662b3135011b2ed6da9c017e71256a2109a334457403ac10a0f5ace49d9a631b12614ab127d04a1a020ef360ec3b67b7f423154ad46a474b0e21fc72d09056a222a1459d893dceda07fa5447b9f815c3de66dd77b9eabc23707d0e986c1f255bcb270ff8d8053f928feb238191b5eb42573f809732c6e0e140040cf5f5f332921de5eb706e61c480c6590ad3ecf20dab3adf3f3962bd74c1bee0dc5528a407c1b6f535c87843a201b59e98163528d3935993bf1c98229ad59a4be0b2682026abaa1466aa2a6767e25cf707727b0e0e9ec9423586fa7ad0e7faf18f4d1bfb6220d1e033418b999279fcbd008381c3aa3a8e240fd22bdf6b4edf25246049666c4974185f466c10585e3f671c46040745bcb994643636fafe31eb4e09bbda20d3f31f1c0c2a07e055de3be0989ca5a2f4b1cc2897b1c3431bbdfd2e7f6892c0ac533062299e5e9b8da307928b3a08729096a14161a053c18eba3086c1e96b02154a674906b950665e4619a39378cb0f588864673ba3fda28bac2f9dbfce6ea4be152e28c9f266a5a11e5881be1560d89928e30c4fb04442904115060e697d48ddfa3e17d74bd084be092f248735498a550a5a4c306d938034f6b432394aa66581c9a46b33a5be0fef5b0231a6b4c6d12483f30a0cdbd5a90733aefcd5c23a9d6cfe9dbd7761b159ee9fed8b12690a7d89d18f988aa849b188f7d7eebe6c800528b978622444f7737e7282f0899cfe11af771c1d41177580c846ef93b9d101701b3a52d491118694a0bb95a9e4f2b975cb50366ff06b17b832ecd45b115e7e0d07fdf76003949220eed40f0daf3cce51f7f55ec0903444fc1661729ea89c4196fbf7c2d37763bb829769563205320ed6231eee9c8f7bbdfd76ff3bc58731122e2a6beaaf18637447bd8dbb23feac0ad65cb33844739d5cadf1af3f55f38fa5b67abbc928aad9ee131d973b694dc761930bbb601b8e91358da82e873ebcf3556ee621316a450972d313c3e1d7b3cbff92a8d9092503656c9ef02f600f269ba7f8634169df7b7b3d9a29cd8db9cfc2b44748a6dedcf7d91e261bac7fcae13a0d113f40c7c46002ecebb33e957004f4955498814c387ebc67914818be63a2f1bd24bc598b83c76b7edc63243df70635e0100ee57d875a8b8b567c9bac25f600ed1c969c3169b07c04aa322faad4df92222848962107322f73fe6ecefa336ef9a23b9b6c0ebe06fc459c5b56c88fe5ada48653b48b2709ad5dbab382b860eddf53e1c9433afac6965b13dbb2dfd4622cd407e0f6948160dca69004babb3a8b916cb7298c1561e3d139ea51f842cb90fc01364d1bfd2ac9fd9a7ccd4d1dfc52b9c976dd730567d5dff793d3c1d11bb68803adf74a896d0e42acfd804261a1a6226fbea7d701d217690b0ebc49b11f2486744121464eb990c0becddb3fd49c224d0a914287beb628c85ddd304ad106002bc5631c998df831f48320e16770cfbaab59161d3ded80de3ccb56"}, @INET_DIAG_REQ_BYTECODE={0xffc, 0x1, "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"}]}, 0x204c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
syz_mount_image$hpfs(&(0x7f0000009e80), &(0x7f0000009e40)='./file0\x00', 0x41, &(0x7f0000009f40)={[{@case_asis}, {@umask={'umask', 0x3d, 0xff}}, {@check_none}]}, 0x1, 0x9e02, &(0x7f0000009fc0)="$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")
r8 = accept$alg(r5, 0x0, 0x0)
setsockopt$MRT6_ASSERT(r2, 0x29, 0xcf, &(0x7f00000004c0), 0x4)
sendmmsg(r8, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8004)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2080}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB="2c14"])
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbbd, {0x0, 0x0, 0x0, r1, {0xb, 0xb}, {0x0, 0xfff3}, {0xb, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast2}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041010}, 0x10000090)

1m23.316316798s ago: executing program 3 (id=212):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500000012fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c088010000000000240012800c0001006d6163766c616e10140002800800010010000000080003000100000008000500", @ANYRES32=r2, @ANYBLOB], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x24000804)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x68000)
r4 = socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x100001, 0x3}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000400)={0x0, 0x2, &(0x7f0000000300)=[{}], 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
dup3(r0, r4, 0x80000)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000"], 0x1c}, 0x1, 0x0, 0x0, 0x60044060}, 0x4800)

1m22.844665773s ago: executing program 3 (id=214):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='projid_map\x00')
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x8b, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480c1}, 0x40480c0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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")
r1 = syz_clone(0x20000, &(0x7f00000002c0)="5b777ace1359e1ea25fcbbe276f6019280cf2309a51e100d258002900b17ec8ffb4df63c0e22140b8da2385b8ea80173af84f0738a710746df5b59ca5a624696a09a38589b0911e3c55ad41cde79b2fbeeaca23e", 0x54, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000580)="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")
sched_setaffinity(r1, 0x8, &(0x7f0000000680)=0x6)
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f0000001180)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
exit(0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

1m21.869461134s ago: executing program 3 (id=217):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x7f}, @generic={0x0, 0xa, 0x1, 0x7, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}]}, 0x0, 0x1, 0xdb, &(0x7f00000006c0)=""/219, 0x41000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x2040, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000100)="3edb72", 0x3)
chdir(&(0x7f0000000140)='./file0\x00')
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0)

1m18.304570417s ago: executing program 3 (id=224):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x2000000})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
io_setup(0x1, &(0x7f0000000740)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d)
listen(r7, 0xfffffffc)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x258, 0x128, 0x5002004a, 0x6, 0x0, 0x3, 0x1c0, 0x3c8, 0x3c8, 0x1c0, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x6, 0x3, 0x3, 0x80000b, 0x7, 0xdcb3, 0x18, 0xd8}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x0, [0x0, 0x0, 0xfffc, 0x0, 0x800, 0x1], 0x0, 0x1, 0x4000000000}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)

1m16.95595658s ago: executing program 32 (id=224):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={0x0, 0x2000000})
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0)
io_setup(0x1, &(0x7f0000000740)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d)
listen(r7, 0xfffffffc)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x258, 0x128, 0x5002004a, 0x6, 0x0, 0x3, 0x1c0, 0x3c8, 0x3c8, 0x1c0, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x6, 0x3, 0x3, 0x80000b, 0x7, 0xdcb3, 0x18, 0xd8}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3, 0x0, [0x0, 0x0, 0xfffc, 0x0, 0x800, 0x1], 0x0, 0x1, 0x4000000000}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8)

3.812620588s ago: executing program 5 (id=506):
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f00000001c0)=[@enable_nested={0x12c, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x400, 0x4}}, @nested_load_syzos={0x136, 0xd8, {0x0, 0xf, [@nested_load_syzos={0x136, 0x20, {0x0, 0x400}}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xb2c0}}, @out_dx={0x6a, 0x28, {0x4ae0, 0x5, 0x81}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest64=0x2813, 0x7fffffff, 0x9, 0x9}}, @nested_vmresume={0x130, 0x18}]}}], 0x120})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000002c0))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.812308799s ago: executing program 2 (id=507):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000b00)=""/182, 0xb6, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

3.573023006s ago: executing program 2 (id=511):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000), 0x800000000000005, 0x89e02)
syz_usb_disconnect(r0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0)

3.572758606s ago: executing program 5 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x4015}, 0x0)

3.443181711s ago: executing program 5 (id=516):
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000100)={0x4, 0x1, 0x43, 0x6, 0x6, 0x931, "6148364061a4708060035d927909aac7", 0x6, 0x0, 0x14, 0x6, 0x5, 0x3, 0x5})

2.928520117s ago: executing program 1 (id=523):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x4003)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0xc000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

2.760213702s ago: executing program 1 (id=524):
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001, &(0x7f0000000040)={0xa, 0x4e20, 0x1005, @mcast1}, 0x1c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000240)="f4748c13d1c9", 0x6}], 0x1, 0x0, 0x378}}], 0x1, 0x40002)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x80000000, 0x100000000, 0x20, 0x7f, 0x4, 0x0, 0x2004c8, 0x7fffffc, 0x0, 0x1000000000000, 0x7, 0xfffffffffffffffc, 0x6, 0x200000008, 0xda8, 0x2], 0xfec00000, 0x102214})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.417760633s ago: executing program 1 (id=529):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x80, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x1, 0x2, 0x1, 0x10000, 0x2dcf0a80, 0x1, {0x3, 0x254, 0x8, 0x1, 0x100, 0x1, 0x3, 0x6, 0x5, 0x2000, 0x8, r2, 0x0, 0x1, 0x6}}, {0x3, 0x5, 0x2, 0x6, '.&'}}]}, 0x0, 0x0, 0x0})
getdents64(r3, 0x0, 0x0)

1.817900082s ago: executing program 0 (id=537):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=@setlink={0x40, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x35625, 0x40601}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x48000)

1.656604407s ago: executing program 0 (id=538):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'ni_at_a2150\x00', [0x140, 0x0, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x8, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x3fd, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x8]})

1.609861009s ago: executing program 2 (id=540):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendmsg$inet(r0, 0x0, 0x40)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)

1.56138291s ago: executing program 0 (id=541):
r0 = socket$inet6(0xa, 0x1, 0x84)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x44)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
r3 = fsmount(r2, 0x0, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000a9f9683b742ac14fe02bbe"], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x10, 0x803, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.448752744s ago: executing program 2 (id=542):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6364, 0x6, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0xc, 0x2, "9167d81b0701ada2"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000180)="05", 0x1, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.388125416s ago: executing program 1 (id=544):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0))
ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x80984120, &(0x7f0000000100))

1.219923171s ago: executing program 1 (id=546):
pipe(&(0x7f0000002680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x2)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r2], 0x7c}}, 0x0)

1.028674917s ago: executing program 2 (id=547):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000040)={0x80000001, 0x7f, 0x8, 0x0, 0x0, 0x2, "77afcd484bbeb37fc22331a9d74d92c1", 0x4, 0x3, 0x5, 0x3, 0x10, 0x7, 0x2})
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2b, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0xa)

891.264692ms ago: executing program 1 (id=549):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x2)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0x1)

755.048866ms ago: executing program 0 (id=551):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000040"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r2}, 0x20)
connect$unix(r1, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r3, &(0x7f00000000c0)}, 0x20)

675.474819ms ago: executing program 4 (id=552):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41043, 0x0)

568.620122ms ago: executing program 0 (id=553):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@host, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})

510.018554ms ago: executing program 4 (id=554):
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

490.411934ms ago: executing program 0 (id=555):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xb, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

360.516648ms ago: executing program 4 (id=556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)

360.338618ms ago: executing program 5 (id=557):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0xffffe000)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0)

332.948539ms ago: executing program 4 (id=558):
socket$unix(0x1, 0x1, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50)
sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='O', 0x1, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

244.677582ms ago: executing program 5 (id=559):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
pipe2(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$PPPIOCSMRU(r1, 0x40047452, 0x0)

160.670175ms ago: executing program 4 (id=560):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x45f5cb4379c34ee0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

113.000086ms ago: executing program 2 (id=561):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_read(r0, 0x5, 0x0, 0x0)
r2 = syz_open_dev$evdev(0x0, 0xb, 0x0)
ioctl$EVIOCGKEY(r2, 0x80404518, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)

88.117827ms ago: executing program 5 (id=562):
sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

0s ago: executing program 4 (id=563):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44)

kernel console output (not intermixed with test programs):

cking transaction log (loop4)
[   99.677437][ T4502] REISERFS (device loop3): using ordered data mode
[   99.692220][ T4502] reiserfs: using flush barriers
[   99.699159][ T4502] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   99.715900][ T4502] REISERFS (device loop3): checking transaction log (loop3)
[   99.723885][ T4496] loop0: detected capacity change from 0 to 4096
[   99.733642][ T4499] REISERFS (device loop4): Using r5 hash to sort names
[   99.740708][ T4499] REISERFS (device loop4): using 3.5.x disk format
[   99.748511][ T4499] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[   99.762203][ T4499] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   99.786252][ T4502] REISERFS (device loop3): Using r5 hash to sort names
[   99.792394][ T4496] __ntfs_warning: 30 callbacks suppressed
[   99.792486][ T4496] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[   99.795110][ T4502] REISERFS (device loop3): using 3.5.x disk format
[   99.826683][ T4502] REISERFS warning (device loop3): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[   99.839507][ T4502] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   99.859127][ T4496] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  100.102314][ T4496] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  101.096527][ T4496] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  101.107016][ T4496] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  101.131777][ T4496] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  101.155844][ T4496] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  101.193826][ T4496] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  101.218080][ T4496] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  101.323753][ T4517] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  102.044838][ T4496] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  102.076794][ T4496] ntfs: volume version 3.1.
[  102.097103][ T4520] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  102.124283][ T4523] loop3: detected capacity change from 0 to 512
[  102.375587][ T4523] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  102.840249][ T4523] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  103.387604][ T4536] loop2: detected capacity change from 0 to 64
[  104.065439][ T4522] delete_channel: no stack
[  104.150410][ T4543] loop1: detected capacity change from 0 to 512
[  104.278625][ T4539] loop0: detected capacity change from 0 to 4096
[  104.486132][ T4539] ntfs: volume version 3.1.
[  104.571201][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  104.751719][ T4543] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.412972][ T4551] loop3: detected capacity change from 0 to 4096
[  105.441855][ T4551] __ntfs_warning: 30 callbacks suppressed
[  105.441871][ T4551] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  105.542703][ T4556] loop2: detected capacity change from 0 to 64
[  105.597074][ T4551] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  105.612553][ T4551] ntfs: (device loop3): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  105.964941][ T4540] delete_channel: no stack
[  106.956348][ T4551] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  106.965137][ T4551] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  107.095730][ T4551] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  107.115284][ T4551] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  107.254362][ T4551] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  107.646795][ T4551] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  108.035954][ T4551] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  108.080011][ T4551] ntfs: volume version 3.1.
[  109.049386][ T4573] loop0: detected capacity change from 0 to 64
[  109.747776][ T4592] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  109.919564][ T4594] FAULT_INJECTION: forcing a failure.
[  109.919564][ T4594] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  110.010253][ T4594] CPU: 0 PID: 4594 Comm: syz.4.86 Not tainted syzkaller #0
[  110.017530][ T4594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  110.027642][ T4594] Call Trace:
[  110.030958][ T4594]  <TASK>
[  110.033918][ T4594]  dump_stack_lvl+0x188/0x250
[  110.038648][ T4594]  ? show_regs_print_info+0x20/0x20
[  110.043874][ T4594]  ? load_image+0x400/0x400
[  110.048411][ T4594]  ? __lock_acquire+0x7d10/0x7d10
[  110.053495][ T4594]  should_fail+0x38c/0x4c0
[  110.057961][ T4594]  _copy_from_user+0x2e/0x170
[  110.062672][ T4594]  __copy_msghdr_from_user+0xc9/0x630
[  110.068089][ T4594]  ? verify_lock_unused+0x140/0x140
[  110.073336][ T4594]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  110.078683][ T4594]  ___sys_sendmsg+0x19a/0x2e0
[  110.083413][ T4594]  ? __sys_sendmsg+0x2a0/0x2a0
[  110.088232][ T4594]  ? vfs_write+0x8b2/0xd60
[  110.092712][ T4594]  __se_sys_sendmsg+0x1af/0x290
[  110.097606][ T4594]  ? __x64_sys_sendmsg+0x80/0x80
[  110.102586][ T4594]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  110.108624][ T4594]  ? lockdep_hardirqs_on+0x94/0x140
[  110.113867][ T4594]  do_syscall_64+0x4c/0xa0
[  110.118403][ T4594]  ? clear_bhb_loop+0x30/0x80
[  110.123116][ T4594]  ? clear_bhb_loop+0x30/0x80
[  110.127827][ T4594]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  110.133774][ T4594] RIP: 0033:0x7f276b5a6e59
[  110.138227][ T4594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  110.157996][ T4594] RSP: 002b:00007f2769800028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  110.166455][ T4594] RAX: ffffffffffffffda RBX: 00007f276b81ffa0 RCX: 00007f276b5a6e59
[  110.174477][ T4594] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003
[  110.182488][ T4594] RBP: 00007f2769800090 R08: 0000000000000000 R09: 0000000000000000
[  110.190499][ T4594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  110.198508][ T4594] R13: 00007f276b820038 R14: 00007f276b81ffa0 R15: 00007fffbd1c0da8
[  110.206543][ T4594]  </TASK>
[  110.686222][ T4603] loop1: detected capacity change from 0 to 4096
[  110.771154][ T4605] loop0: detected capacity change from 0 to 1024
[  110.797182][ T4603] __ntfs_warning: 10 callbacks suppressed
[  110.797200][ T4603] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  110.855564][ T4605] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  110.901531][ T4603] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  110.970075][ T4603] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  111.026452][ T4233] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  111.062654][ T4603] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  111.112631][ T4603] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  111.200291][ T4609] loop0: detected capacity change from 0 to 64
[  111.215553][ T4603] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  111.255543][ T4603] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  111.358379][ T4600] loop3: detected capacity change from 0 to 32768
[  111.390023][ T4600] XFS: ikeep mount option is deprecated.
[  111.405714][ T4603] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  111.414645][ T4603] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  111.620168][ T4603] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  111.639098][ T4603] ntfs: volume version 3.1.
[  111.679142][ T4600] XFS (loop3): Mounting V5 Filesystem
[  111.839141][ T4620] loop0: detected capacity change from 0 to 256
[  111.901774][ T4600] XFS (loop3): Ending clean mount
[  111.986288][ T4233] usb 5-1: unable to get BOS descriptor or descriptor too short
[  112.040128][ T4620] FAT-fs (loop0): Directory bread(block 64) failed
[  112.047685][ T4233] usb 5-1: not running at top speed; connect to a high speed hub
[  112.075543][ T4620] FAT-fs (loop0): Directory bread(block 65) failed
[  112.136800][ T4620] FAT-fs (loop0): Directory bread(block 66) failed
[  112.156534][ T4233] usb 5-1: config 1 has an invalid descriptor of length 232, skipping remainder of the config
[  112.186777][ T4190] XFS (loop3): Unmounting Filesystem
[  112.187582][ T4620] FAT-fs (loop0): Directory bread(block 67) failed
[  112.199828][ T4233] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  112.259617][ T4620] FAT-fs (loop0): Directory bread(block 68) failed
[  112.296201][ T4620] FAT-fs (loop0): Directory bread(block 69) failed
[  112.332424][ T4620] FAT-fs (loop0): Directory bread(block 70) failed
[  112.349656][ T4620] FAT-fs (loop0): Directory bread(block 71) failed
[  112.394874][ T4620] FAT-fs (loop0): Directory bread(block 72) failed
[  112.417380][ T4233] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  112.486845][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.517252][ T4620] FAT-fs (loop0): Directory bread(block 73) failed
[  112.597115][ T4233] usb 5-1: Product: syz
[  112.656124][ T4233] usb 5-1: Manufacturer: syz
[  112.717552][ T4233] usb 5-1: SerialNumber: syz
[  113.196915][ T4607] udc-core: couldn't find an available UDC or it's busy
[  113.203953][ T4607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  113.266764][ T4607] udc-core: couldn't find an available UDC or it's busy
[  113.315785][ T4607] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  113.350559][ T4607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.92'.
[  113.418286][ T4233] usb 5-1: USB disconnect, device number 2
[  113.475600][ T4279] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  113.547066][ T4637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'.
[  113.613000][ T4642] loop0: detected capacity change from 0 to 128
[  113.681457][ T4645] loop3: detected capacity change from 0 to 4096
[  113.709513][ T4642] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  113.737401][ T4642] hpfs: filesystem error: improperly stopped
[  113.738352][ T4279] usb 3-1: Using ep0 maxpacket: 8
[  113.744182][ T4642] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  113.761828][ T4642] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  113.825583][ T4645] ntfs: volume version 3.1.
[  115.171291][ T4279] usb 3-1: unable to get BOS descriptor or descriptor too short
[  115.566784][ T4279] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.676165][ T4279] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.750054][ T4279] usb 3-1: config 1 interface 0 has no altsetting 0
[  115.846411][ T4664] FAULT_INJECTION: forcing a failure.
[  115.846411][ T4664] name failslab, interval 1, probability 0, space 0, times 1
[  115.897292][ T4664] CPU: 1 PID: 4664 Comm: syz.1.111 Not tainted syzkaller #0
[  115.904750][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  115.915011][ T4664] Call Trace:
[  115.918327][ T4664]  <TASK>
[  115.921284][ T4664]  dump_stack_lvl+0x188/0x250
[  115.926004][ T4664]  ? show_regs_print_info+0x20/0x20
[  115.931254][ T4664]  ? load_image+0x400/0x400
[  115.935804][ T4664]  ? __might_sleep+0xf0/0xf0
[  115.940440][ T4664]  ? __lock_acquire+0x7d10/0x7d10
[  115.945505][ T4664]  ? memset+0x1e/0x40
[  115.949534][ T4664]  should_fail+0x38c/0x4c0
[  115.954013][ T4664]  should_failslab+0x5/0x20
[  115.958560][ T4664]  slab_pre_alloc_hook+0x51/0xc0
[  115.963527][ T4664]  ? security_inode_alloc+0x30/0x110
[  115.968856][ T4664]  kmem_cache_alloc+0x3d/0x290
[  115.973671][ T4664]  security_inode_alloc+0x30/0x110
[  115.978829][ T4664]  inode_init_always+0x8f4/0xcb0
[  115.983817][ T4664]  ? shmem_match+0x160/0x160
[  115.988453][ T4664]  new_inode_pseudo+0x8e/0x210
[  115.993269][ T4664]  new_inode+0x25/0x1c0
[  115.997476][ T4664]  shmem_get_inode+0x334/0xa90
[  116.002408][ T4664]  ? _raw_spin_unlock+0x24/0x40
[  116.007314][ T4664]  __shmem_file_setup+0x10b/0x290
[  116.012392][ T4664]  ? shmem_file_setup+0x13/0x30
[  116.017288][ T4664]  __se_sys_memfd_create+0x290/0x450
[  116.022615][ T4664]  ? __x64_sys_memfd_create+0x60/0x60
[  116.028026][ T4664]  ? lockdep_hardirqs_on+0x94/0x140
[  116.033271][ T4664]  do_syscall_64+0x4c/0xa0
[  116.037821][ T4664]  ? clear_bhb_loop+0x30/0x80
[  116.042545][ T4664]  ? clear_bhb_loop+0x30/0x80
[  116.047262][ T4664]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  116.053188][ T4664] RIP: 0033:0x7fc8be526e59
[  116.057635][ T4664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.077287][ T4664] RSP: 002b:00007fc8bc77fe08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  116.085787][ T4664] RAX: ffffffffffffffda RBX: 0000000000009e2c RCX: 00007fc8be526e59
[  116.093814][ T4664] RDX: 00007fc8bc77fee0 RSI: 0000000000000000 RDI: 00007fc8be5bcf4f
[  116.101835][ T4664] RBP: 0000200000013e80 R08: 00000000ffffffff R09: 0000000000000000
[  116.110053][ T4664] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000009ec0
[  116.118191][ T4664] R13: 00007fc8bc77fee0 R14: 00007fc8bc77fea0 R15: 0000200000000000
[  116.126218][ T4664]  </TASK>
[  116.251147][ T4279] usb 3-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40
[  116.283855][ T4279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.305510][ T4279] usb 3-1: Product: syz
[  116.309749][ T4279] usb 3-1: Manufacturer: syz
[  116.366129][ T4279] usb 3-1: can't set config #1, error -71
[  116.371413][ T4676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'.
[  116.388587][ T4279] usb 3-1: USB disconnect, device number 2
[  116.483331][ T4652] loop4: detected capacity change from 0 to 32768
[  116.511229][ T4680] loop1: detected capacity change from 0 to 256
[  116.518326][ T4277] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  116.533475][ T4652] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  116.564185][ T4682] loop2: detected capacity change from 0 to 64
[  116.577106][ T4652] BTRFS error (device loop4): unrecognized mount option 'subj_user=trusted.overlay.origin'
[  116.598920][ T4652] BTRFS error (device loop4): open_ctree failed: -22
[  116.607221][ T4680] FAT-fs (loop1): Unrecognized mount option "shortname=sinnt" or missing value
[  116.729524][ T4683] afs: Unknown parameter 'dynfs'
[  116.747905][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  116.880894][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4179)
[  117.770283][ T4229] usb 4-1: Using ep0 maxpacket: 32
[  118.025909][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short
[  118.065796][ T4277] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  118.112628][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.415364][ T4277] usb 1-1: Product: syz
[  118.511329][ T4277] usb 1-1: Manufacturer: syz
[  118.622144][ T4277] usb 1-1: SerialNumber: syz
[  118.922459][ T4277] usb 1-1: config 0 descriptor??
[  118.955593][ T4229] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  118.975708][ T4229] usb 4-1: too many endpoints for config 1 interface 2 altsetting 1: 255, using maximum allowed: 30
[  118.993346][ T4229] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  119.031587][ T4277] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  119.131594][ T4702] loop1: detected capacity change from 0 to 4096
[  119.151614][ T4702] __ntfs_warning: 30 callbacks suppressed
[  119.151631][ T4702] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  119.215883][ T4229] usb 4-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  119.237006][ T4708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'.
[  119.238843][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.256180][ T4708] netlink: 52 bytes leftover after parsing attributes in process `syz.2.127'.
[  119.265197][ T4702] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  119.286423][ T4229] usb 4-1: Product: syz
[  119.290679][ T4229] usb 4-1: Manufacturer: syz
[  119.296715][ T4277] gspca_stk1135: reg_w 0x2 err -71
[  119.303127][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.317448][ T4229] usb 4-1: SerialNumber: syz
[  119.321255][ T4702] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  119.336659][ T4277] gspca_stk1135: Sensor write failed
[  119.342051][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.385746][ T4229] usb 4-1: can't set config #1, error -71
[  119.395818][ T4277] gspca_stk1135: Sensor write failed
[  119.422981][ T4702] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  119.435446][ T4229] usb 4-1: USB disconnect, device number 3
[  119.435531][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.457330][ T4702] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  119.505431][ T4714] capability: warning: `syz.2.130' uses deprecated v2 capabilities in a way that may be insecure
[  119.516005][    T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.518380][ T4277] gspca_stk1135: Sensor read failed
[  119.529707][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.536424][ T4702] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  119.555242][ T4715] loop3: detected capacity change from 0 to 128
[  119.561799][ T4277] gspca_stk1135: Sensor read failed
[  119.573086][ T4702] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  119.594042][ T4277] gspca_stk1135: Detected sensor type unknown (0x0)
[  119.612461][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.620710][ T4277] gspca_stk1135: Sensor read failed
[  119.627534][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.636428][ T4702] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  119.645932][ T4715] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  119.685335][ T4277] gspca_stk1135: Sensor read failed
[  119.695636][ T4702] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  119.700920][ T4715] hpfs: filesystem error: improperly stopped
[  119.720335][ T4717] FAULT_INJECTION: forcing a failure.
[  119.720335][ T4717] name failslab, interval 1, probability 0, space 0, times 0
[  119.735397][ T4715] 
[  119.742627][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.751789][ T4277] gspca_stk1135: Sensor write failed
[  119.753088][ T4715] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  119.759466][ T4277] gspca_stk1135: serial bus timeout: status=0x00
[  119.760505][ T4715] 
[  119.773186][ T4702] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  119.785037][    T7] usb 5-1: Using ep0 maxpacket: 8
[  119.786455][ T4277] gspca_stk1135: Sensor write failed
[  119.795098][ T4715] hpfs: You really don't want any checks? You are crazy...
[  119.800671][ T4717] CPU: 1 PID: 4717 Comm: syz.2.130 Not tainted syzkaller #0
[  119.809932][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  119.820027][ T4717] Call Trace:
[  119.823340][ T4717]  <TASK>
[  119.826302][ T4717]  dump_stack_lvl+0x188/0x250
[  119.828216][ T4715] hpfs: hpfs_map_sector(): read error
[  119.831019][ T4717]  ? show_regs_print_info+0x20/0x20
[  119.841654][ T4717]  ? load_image+0x400/0x400
[  119.846201][ T4717]  ? __might_sleep+0xf0/0xf0
[  119.846426][ T4715] hpfs: code page support is disabled
[  119.850838][ T4717]  ? __lock_acquire+0x7d10/0x7d10
[  119.850879][ T4717]  should_fail+0x38c/0x4c0
[  119.850910][ T4717]  should_failslab+0x5/0x20
[  119.870330][ T4717]  slab_pre_alloc_hook+0x51/0xc0
[  119.875348][ T4717]  __kmalloc+0x6b/0x330
[  119.878935][ T4715] hpfs: hpfs_map_sector(): read error
[  119.879856][ T4717]  ? tomoyo_encode+0x27e/0x540
[  119.890066][ T4717]  tomoyo_encode+0x27e/0x540
[  119.894723][ T4717]  tomoyo_realpath_from_path+0x5cd/0x610
[  119.896231][ T4715] hpfs: hpfs_map_sector(): read error
[  119.900408][ T4717]  tomoyo_path_number_perm+0x242/0x660
[  119.900442][ T4717]  ? verify_lock_unused+0x140/0x140
[  119.916620][ T4717]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  119.922135][ T4717]  ? ksys_write+0x1c6/0x260
[  119.926339][ T4715] hpfs: filesystem error: unable to find root dir
[  119.926767][ T4717]  security_file_ioctl+0x6c/0xa0
[  119.938107][ T4717]  __se_sys_ioctl+0x48/0x170
[  119.942734][ T4717]  do_syscall_64+0x4c/0xa0
[  119.947195][ T4717]  ? clear_bhb_loop+0x30/0x80
[  119.951898][ T4717]  ? clear_bhb_loop+0x30/0x80
[  119.956604][ T4717]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  119.962523][ T4717] RIP: 0033:0x7f6005970e59
[  119.966962][ T4717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  119.986616][ T4717] RSP: 002b:00007f6003b88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  119.995149][ T4717] RAX: ffffffffffffffda RBX: 00007f6005bea180 RCX: 00007f6005970e59
[  120.003150][ T4717] RDX: 0000200000000040 RSI: 00000000800448d4 RDI: 000000000000000b
[  120.011148][ T4717] RBP: 00007f6003b88090 R08: 0000000000000000 R09: 0000000000000000
[  120.019142][ T4717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.027244][ T4717] R13: 00007f6005bea218 R14: 00007f6005bea180 R15: 00007ffdeef14008
[  120.035250][ T4717]  </TASK>
[  120.040100][    T7] usb 5-1: unable to get BOS descriptor or descriptor too short
[  120.049687][ T4277] stk1135: probe of 1-1:0.0 failed with error -71
[  120.064810][ T4717] ERROR: Out of memory at tomoyo_realpath_from_path.
[  120.084183][ T4702] ntfs: volume version 3.1.
[  120.092725][ T4277] usb 1-1: USB disconnect, device number 3
[  120.125864][    T7] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.146896][    T7] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  120.201420][    T7] usb 5-1: config 1 interface 0 has no altsetting 0
[  120.395718][    T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40
[  120.473305][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.481977][    T7] usb 5-1: Product: syz
[  120.485860][ T4277] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  120.487341][    T7] usb 5-1: Manufacturer: syz
[  120.498584][    T7] usb 5-1: SerialNumber: syz
[  120.544536][ T4722] block device autoloading is deprecated and will be removed.
[  120.792328][ T4732] loop2: detected capacity change from 0 to 64
[  120.815008][ T4730] loop1: detected capacity change from 0 to 4096
[  120.829008][    T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8
[  120.925798][ T4733] xt_hashlimit: max too large, truncated to 1048576
[  121.102330][ T4730] ntfs: volume version 3.1.
[  121.517272][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'.
[  121.527552][ T3547] bcm5974 5-1:1.0: could not read from device
[  121.662620][    T7] usb 5-1: USB disconnect, device number 3
[  121.678320][ T4277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  121.688303][ T3547] bcm5974 5-1:1.0: could not read from device
[  121.709234][ T4277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255
[  122.111751][ T3547] bcm5974 5-1:1.0: could not read from device
[  122.184569][ T4740] loop1: detected capacity change from 0 to 64
[  122.211726][ T3547] bcm5974 5-1:1.0: could not read from device
[  122.255930][ T4277] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  122.295634][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.322409][ T4742] netlink: 32 bytes leftover after parsing attributes in process `syz.4.138'.
[  122.510453][ T4277] usb 1-1: Product: syz
[  122.514849][ T4277] usb 1-1: Manufacturer: syz
[  122.540976][ T4277] usb 1-1: SerialNumber: syz
[  122.547806][ T4277] usb 1-1: config 0 descriptor??
[  122.572344][ T4719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  122.593075][ T4719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  123.011236][ T4279] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  123.145734][ T4277] usb 1-1: can't set config #0, error -71
[  123.170539][ T4277] usb 1-1: USB disconnect, device number 4
[  123.451317][ T4279] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  123.469210][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.517382][ T4279] usb 4-1: config 0 descriptor??
[  123.596773][ T4758] loop0: detected capacity change from 0 to 4096
[  123.636624][ T4744] loop4: detected capacity change from 0 to 32768
[  123.661913][ T4758] ntfs: volume version 3.1.
[  123.681326][ T4760] loop2: detected capacity change from 0 to 4096
[  123.755974][ T4760] ntfs: volume version 3.1.
[  123.793114][ T4744] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  123.809290][ T4744] JBD2: Ignoring recovery information on journal
[  123.885645][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  124.191966][ T4279] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  124.199733][ T4279] [drm] Initialized udl on minor 2
[  124.229267][ T4744] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  124.356495][ T4744] (syz.4.140,4744,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  124.425761][ T4279] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  124.438357][ T4279] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  124.460567][ T4279] usb 4-1: USB disconnect, device number 4
[  124.476026][    T7] usb 2-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  124.491986][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  124.504071][    T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.513310][    T7] usb 2-1: Product: syz
[  124.518028][    T7] usb 2-1: Manufacturer: syz
[  124.524647][    T7] usb 2-1: SerialNumber: syz
[  124.536069][ T4202] ocfs2: Unmounting device (7,4) on (node local)
[  124.544409][ T4233] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  124.562245][    T7] usb 2-1: config 0 descriptor??
[  124.568048][ T4233] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  124.792346][ T4773] loop0: detected capacity change from 0 to 128
[  124.817969][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'.
[  124.852841][ T4777] loop2: detected capacity change from 0 to 64
[  124.887696][    T7] usb 2-1: selecting invalid altsetting 1
[  124.898694][ T4773] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  124.916029][    T7] comedi comedi5: could not switch to alternate setting 1
[  124.923414][ T4773] hpfs: filesystem error: improperly stopped
[  124.944585][    T7] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  124.971557][ T4773] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  125.003271][ T4773] hpfs: You really don't want any checks? You are crazy...
[  125.043350][    T7] usb 2-1: USB disconnect, device number 2
[  125.052544][ T4773] hpfs: hpfs_map_sector(): read error
[  125.087392][ T4773] hpfs: code page support is disabled
[  125.101444][ T4779] device syzkaller0 entered promiscuous mode
[  125.137286][ T4773] hpfs: hpfs_map_sector(): read error
[  125.162247][ T4782] loop3: detected capacity change from 0 to 1024
[  125.173229][ T4773] hpfs: hpfs_map_sector(): read error
[  125.195559][ T4773] hpfs: filesystem error: unable to find root dir
[  125.652838][ T4782] EXT4-fs (loop3): Ignoring removed orlov option
[  125.743098][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  126.079093][ T4792] device wg1 entered promiscuous mode
[  126.119123][ T4795] loop4: detected capacity change from 0 to 512
[  126.209455][ T4795] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  126.212610][ T4800] loop0: detected capacity change from 0 to 512
[  126.314386][ T4795] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.156: casefold flag without casefold feature
[  126.340703][ T4800] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  126.377669][ T4795] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.156: couldn't read orphan inode 15 (err -117)
[  126.390308][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  126.424145][ T4795] EXT4-fs (loop4): shut down requested (2)
[  126.474314][ T4800] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.157: casefold flag without casefold feature
[  126.605858][ T4800] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.157: couldn't read orphan inode 15 (err -117)
[  126.706115][ T4800] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  126.756153][ T4800] EXT4-fs (loop0): shut down requested (2)
[  126.794694][ T4800] FAULT_INJECTION: forcing a failure.
[  126.794694][ T4800] name failslab, interval 1, probability 0, space 0, times 0
[  126.820291][ T4800] CPU: 0 PID: 4800 Comm: syz.0.157 Not tainted syzkaller #0
[  126.827663][ T4800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  126.837775][ T4800] Call Trace:
[  126.841087][ T4800]  <TASK>
[  126.844038][ T4800]  dump_stack_lvl+0x188/0x250
[  126.848759][ T4800]  ? show_regs_print_info+0x20/0x20
[  126.854007][ T4800]  ? load_image+0x400/0x400
[  126.858561][ T4800]  ? __might_sleep+0xf0/0xf0
[  126.863198][ T4800]  ? __lock_acquire+0x7d10/0x7d10
[  126.868267][ T4800]  ? mark_lock+0x94/0x320
[  126.872646][ T4800]  should_fail+0x38c/0x4c0
[  126.877114][ T4800]  should_failslab+0x5/0x20
[  126.881655][ T4800]  slab_pre_alloc_hook+0x51/0xc0
[  126.886649][ T4800]  __kmalloc+0x6b/0x330
[  126.890842][ T4800]  ? tomoyo_realpath_from_path+0x118/0x610
[  126.896694][ T4800]  tomoyo_realpath_from_path+0x118/0x610
[  126.902383][ T4800]  tomoyo_path_number_perm+0x242/0x660
[  126.908168][ T4800]  ? verify_lock_unused+0x140/0x140
[  126.913414][ T4800]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  126.919382][ T4800]  ? ksys_write+0x1c6/0x260
[  126.923979][ T4800]  security_file_ioctl+0x6c/0xa0
[  126.928964][ T4800]  __se_sys_ioctl+0x48/0x170
[  126.933599][ T4800]  do_syscall_64+0x4c/0xa0
[  126.938058][ T4800]  ? clear_bhb_loop+0x30/0x80
[  126.942780][ T4800]  ? clear_bhb_loop+0x30/0x80
[  126.947501][ T4800]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  126.953429][ T4800] RIP: 0033:0x7f10c892be59
[  126.957876][ T4800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  126.977523][ T4800] RSP: 002b:00007f10c6b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  126.985979][ T4800] RAX: ffffffffffffffda RBX: 00007f10c8ba4fa0 RCX: 00007f10c892be59
[  126.993988][ T4800] RDX: 0000200000000100 RSI: 0000000040086602 RDI: 0000000000000004
[  127.001993][ T4800] RBP: 00007f10c6b85090 R08: 0000000000000000 R09: 0000000000000000
[  127.010000][ T4800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.018011][ T4800] R13: 00007f10c8ba5038 R14: 00007f10c8ba4fa0 R15: 00007ffdffa41fb8
[  127.026035][ T4800]  </TASK>
[  127.032765][ T4811] loop4: detected capacity change from 0 to 4096
[  127.106605][ T4811] __ntfs_warning: 46 callbacks suppressed
[  127.106621][ T4811] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  127.184884][ T4812] syz.3.160 sent an empty control message without MSG_MORE.
[  127.204729][ T4811] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  127.218731][ T4811] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  127.254055][ T4811] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  127.271317][ T4811] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  127.299002][ T4811] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  127.309192][ T4811] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  127.339594][ T4811] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  127.351107][ T4811] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  127.383657][ T4811] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  127.402156][ T4811] ntfs: volume version 3.1.
[  127.472652][ T4800] ERROR: Out of memory at tomoyo_realpath_from_path.
[  127.511117][ T4234] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.775604][ T4234] usb 3-1: Using ep0 maxpacket: 8
[  127.877408][ T4827] loop0: detected capacity change from 0 to 64
[  127.915773][ T4234] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  127.935582][ T4234] usb 3-1: config 0 interface 0 has no altsetting 0
[  127.995032][ T4828] device syzkaller0 entered promiscuous mode
[  128.036970][ T4816] loop1: detected capacity change from 0 to 40427
[  128.117029][ T4234] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  128.137917][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.153286][ T4816] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(1) root(3)
[  128.186979][ T4816] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  128.214621][ T4816] F2FS-fs (loop1): Unrecognized mount option "barrier" or missing value
[  128.234249][ T4234] usb 3-1: Product: syz
[  128.247099][ T4234] usb 3-1: Manufacturer: syz
[  128.251771][ T4234] usb 3-1: SerialNumber: syz
[  128.323157][ T4234] usb 3-1: config 0 descriptor??
[  128.404337][ T4234] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  128.858281][ T4833] loop4: detected capacity change from 0 to 4096
[  128.896074][ T4833] ntfs3: Unknown parameter 'ns/mnt'
[  129.108699][ T4234] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  129.141732][ T4234] snd_usb_toneport: probe of 3-1:0.0 failed with error -22
[  129.312662][ T4234] usb 3-1: USB disconnect, device number 3
[  129.498423][ T4851] loop3: detected capacity change from 0 to 8
[  129.594173][ T4851] FAULT_INJECTION: forcing a failure.
[  129.594173][ T4851] name failslab, interval 1, probability 0, space 0, times 0
[  129.643401][ T4851] CPU: 1 PID: 4851 Comm: syz.3.172 Not tainted syzkaller #0
[  129.650865][ T4851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  129.660952][ T4851] Call Trace:
[  129.664422][ T4851]  <TASK>
[  129.667470][ T4851]  dump_stack_lvl+0x188/0x250
[  129.672194][ T4851]  ? show_regs_print_info+0x20/0x20
[  129.677431][ T4851]  ? load_image+0x400/0x400
[  129.681974][ T4851]  ? __might_sleep+0xf0/0xf0
[  129.686600][ T4851]  ? __lock_acquire+0x7d10/0x7d10
[  129.691665][ T4851]  ? security_capable+0x85/0xb0
[  129.696559][ T4851]  should_fail+0x38c/0x4c0
[  129.701021][ T4851]  should_failslab+0x5/0x20
[  129.705561][ T4851]  slab_pre_alloc_hook+0x51/0xc0
[  129.710544][ T4851]  ? __d_alloc+0x2a/0x6f0
[  129.714914][ T4851]  kmem_cache_alloc+0x3d/0x290
[  129.719718][ T4851]  __d_alloc+0x2a/0x6f0
[  129.723915][ T4851]  d_alloc_parallel+0x7b/0x1330
[  129.728830][ T4851]  ? __d_lookup+0x6a6/0x760
[  129.733390][ T4851]  path_openat+0x95e/0x2fa0
[  129.737954][ T4851]  ? verify_lock_unused+0x140/0x140
[  129.743194][ T4851]  ? slab_post_alloc_hook+0x4c/0x380
[  129.748526][ T4851]  ? do_filp_open+0x410/0x410
[  129.753271][ T4851]  do_filp_open+0x1e2/0x410
[  129.757826][ T4851]  ? vfs_tmpfile+0x300/0x300
[  129.762485][ T4851]  ? _raw_spin_unlock+0x24/0x40
[  129.767371][ T4851]  ? alloc_fd+0x598/0x630
[  129.771757][ T4851]  do_sys_openat2+0x150/0x4b0
[  129.776593][ T4851]  ? __lock_acquire+0x7d10/0x7d10
[  129.781675][ T4851]  ? do_sys_open+0xe0/0xe0
[  129.786128][ T4851]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  129.792149][ T4851]  ? lock_chain_count+0x20/0x20
[  129.797045][ T4851]  ? vtime_user_exit+0x2c8/0x3e0
[  129.802028][ T4851]  __x64_sys_openat+0x135/0x160
[  129.806915][ T4851]  do_syscall_64+0x4c/0xa0
[  129.811374][ T4851]  ? clear_bhb_loop+0x30/0x80
[  129.816082][ T4851]  ? clear_bhb_loop+0x30/0x80
[  129.820797][ T4851]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  129.826753][ T4851] RIP: 0033:0x7f7ec3046e59
[  129.831207][ T4851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  129.850855][ T4851] RSP: 002b:00007f7ec12a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  129.859315][ T4851] RAX: ffffffffffffffda RBX: 00007f7ec32bffa0 RCX: 00007f7ec3046e59
[  129.867329][ T4851] RDX: 0000000000103042 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  129.875338][ T4851] RBP: 00007f7ec12a0090 R08: 0000000000000000 R09: 0000000000000000
[  129.883344][ T4851] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  129.891353][ T4851] R13: 00007f7ec32c0038 R14: 00007f7ec32bffa0 R15: 00007ffdfc9f3148
[  129.899377][ T4851]  </TASK>
[  130.239428][ T4848] loop0: detected capacity change from 0 to 32768
[  130.262980][ T4848] (syz.0.171,4848,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.297200][ T4848] (syz.0.171,4848,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  130.955324][ T4848] JBD2: Ignoring recovery information on journal
[  131.169646][ T4865] loop2: detected capacity change from 0 to 512
[  131.222449][ T4848] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  131.363675][ T4873] loop4: detected capacity change from 0 to 64
[  131.376823][ T4865] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  131.401353][ T4865] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.561398][ T4200] ocfs2: Unmounting device (7,0) on (node local)
[  131.581358][ T4871] device syzkaller0 entered promiscuous mode
[  132.353681][ T4885] loop0: detected capacity change from 0 to 4096
[  132.453379][ T4885] EXT4-fs (loop0): Test dummy encryption mode enabled
[  132.462819][ T4891] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  132.474965][ T4885] EXT4-fs (loop0): Test dummy encryption mode enabled
[  132.595071][ T4885] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  132.654409][ T4864] delete_channel: no stack
[  132.689038][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.695382][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.751192][ T4895] afs: Unknown parameter 'fock'
[  132.815631][ T4885] 9pnet: Insufficient options for proto=fd
[  133.429338][ T4896] loop4: detected capacity change from 0 to 40427
[  133.462759][ T4896] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  133.489956][ T4896] F2FS-fs (loop4): Unrecognized mount option "grpquota=backgro" or missing value
[  135.022646][ T4924] raw_sendmsg: syz.2.195 forgot to set AF_INET. Fix it!
[  135.055014][ T4926] loop0: detected capacity change from 0 to 64
[  135.087389][ T4912] loop3: detected capacity change from 0 to 32768
[  135.141025][ T4912] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  135.160002][ T4912] BTRFS error (device loop3): unrecognized mount option 'subj_user=trusted.overlay.origin'
[  135.172665][ T4930] loop2: detected capacity change from 0 to 512
[  135.196018][ T4928] loop4: detected capacity change from 0 to 512
[  135.324836][ T4912] BTRFS error (device loop3): open_ctree failed: -22
[  135.335537][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (4179)
[  135.365878][ T4930] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  135.851715][ T4930] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.197: casefold flag without casefold feature
[  135.946091][ T4930] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.197: couldn't read orphan inode 15 (err -117)
[  135.969545][ T4928] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  136.044131][ T4930] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,,errors=continue. Quota mode: none.
[  136.148250][ T4928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'.
[  136.210287][ T4944] netlink: 'syz.0.198': attribute type 5 has an invalid length.
[  136.263386][ T4930] EXT4-fs (loop2): shut down requested (2)
[  136.277713][ T4944] netlink: 'syz.0.198': attribute type 5 has an invalid length.
[  136.680559][ T4953] loop2: detected capacity change from 0 to 512
[  136.848200][ T4959] loop0: detected capacity change from 0 to 512
[  136.890699][ T4953] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  136.931747][ T4953] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.873806][ T4952] delete_channel: no stack
[  138.045766][ T4279] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  138.071247][ T4959] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  138.107641][ T4959] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.047301][ T4982] loop3: detected capacity change from 0 to 128
[  139.164341][ T4981] delete_channel: no stack
[  139.205806][ T4279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.222938][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  139.229840][ T4982] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  139.245082][ T4279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  139.245114][ T4279] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.245162][ T4279] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  139.278045][ T4982] hpfs: filesystem error: improperly stopped
[  139.284088][ T4982] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  139.324099][ T4982] hpfs: You really don't want any checks? You are crazy...
[  139.343303][ T4279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.352312][ T4982] hpfs: hpfs_map_sector(): read error
[  139.369847][ T4982] hpfs: code page support is disabled
[  139.385812][ T4982] hpfs: hpfs_map_sector(): read error
[  139.392907][ T4982] hpfs: hpfs_map_sector(): read error
[  139.401882][ T4279] usb 5-1: config 0 descriptor??
[  139.419168][ T4982] hpfs: filesystem error: unable to find root dir
[  139.538390][ T4984] loop1: detected capacity change from 0 to 164
[  139.644145][ T4984] iso9660: Corrupted directory entry in block 2 of inode 1792
[  139.671381][ T4963] udc-core: couldn't find an available UDC or it's busy
[  139.705891][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  139.772530][ T4963] udc-core: couldn't find an available UDC or it's busy
[  139.820471][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  139.921680][ T4963] udc-core: couldn't find an available UDC or it's busy
[  139.969575][ T4963] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  140.377103][ T5000] loop3: detected capacity change from 0 to 512
[  140.516207][ T5004] FAULT_INJECTION: forcing a failure.
[  140.516207][ T5004] name failslab, interval 1, probability 0, space 0, times 0
[  140.525294][ T5000] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  140.540236][ T5004] CPU: 0 PID: 5004 Comm: syz.2.215 Not tainted syzkaller #0
[  140.547575][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  140.557665][ T5004] Call Trace:
[  140.560983][ T5004]  <TASK>
[  140.563946][ T5004]  dump_stack_lvl+0x188/0x250
[  140.568669][ T5004]  ? show_regs_print_info+0x20/0x20
[  140.573908][ T5004]  ? load_image+0x400/0x400
[  140.578459][ T5004]  ? __might_sleep+0xf0/0xf0
[  140.583096][ T5004]  ? __lock_acquire+0x7d10/0x7d10
[  140.588182][ T5004]  should_fail+0x38c/0x4c0
[  140.592652][ T5004]  should_failslab+0x5/0x20
[  140.597193][ T5004]  slab_pre_alloc_hook+0x51/0xc0
[  140.602171][ T5004]  kmem_cache_alloc_node+0x47/0x2d0
[  140.607405][ T5004]  ? __alloc_skb+0xf4/0x750
[  140.611955][ T5004]  __alloc_skb+0xf4/0x750
[  140.616330][ T5004]  alloc_skb_with_frags+0xa7/0x730
[  140.621482][ T5004]  ? mark_lock+0x94/0x320
[  140.625857][ T5004]  sock_alloc_send_pskb+0x87f/0x9a0
[  140.631113][ T5004]  ? sock_kzfree_s+0x50/0x50
[  140.635778][ T5004]  tun_get_user+0x7c8/0x3a70
[  140.640423][ T5004]  ? tun_ring_recv+0xc40/0xc40
[  140.645238][ T5004]  ? rcu_lock_release+0x5/0x20
[  140.650046][ T5004]  ? __lock_acquire+0x7d10/0x7d10
[  140.655156][ T5004]  tun_chr_write_iter+0x112/0x1e0
[  140.660230][ T5004]  vfs_write+0x745/0xd60
[  140.664525][ T5004]  ? file_end_write+0x250/0x250
[  140.669429][ T5004]  ? __fget_files+0x40f/0x480
[  140.674156][ T5004]  ? __fdget_pos+0x1e2/0x370
[  140.678785][ T5004]  ? ksys_write+0x71/0x260
[  140.683242][ T5004]  ksys_write+0x152/0x260
[  140.687610][ T5004]  ? __ia32_sys_read+0x80/0x80
[  140.692418][ T5004]  ? lockdep_hardirqs_on+0x94/0x140
[  140.697664][ T5004]  do_syscall_64+0x4c/0xa0
[  140.702113][ T5004]  ? clear_bhb_loop+0x30/0x80
[  140.706837][ T5004]  ? clear_bhb_loop+0x30/0x80
[  140.711561][ T5004]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  140.717496][ T5004] RIP: 0033:0x7f600593168e
[  140.721959][ T5004] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.741806][ T5004] RSP: 002b:00007f6003bc9fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.750356][ T5004] RAX: ffffffffffffffda RBX: 00007f6003bca6c0 RCX: 00007f600593168e
[  140.758378][ T5004] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 00000000000000c8
[  140.766391][ T5004] RBP: 00007f6003bca090 R08: 0000000000000000 R09: 0000000000000000
[  140.774432][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.782448][ T5004] R13: 00007f6005bea038 R14: 00007f6005be9fa0 R15: 00007ffdeef14008
[  140.790476][ T5004]  </TASK>
[  141.067882][ T4988] loop0: detected capacity change from 0 to 40427
[  141.124772][ T4988] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  141.146201][ T4988] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  141.207644][ T4988] F2FS-fs (loop0): invalid crc value
[  141.220517][ T1325] usb 5-1: USB disconnect, device number 4
[  141.234794][ T5009] loop2: detected capacity change from 0 to 512
[  141.274137][ T4988] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.504505][ T5016] loop4: detected capacity change from 0 to 128
[  142.231754][ T5009] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  142.394554][ T4988] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  142.424709][ T5009] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.438267][ T4988] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  143.444972][ T5008] delete_channel: no stack
[  143.512931][ T5006] syz.3.214 (5006) used greatest stack depth: 21008 bytes left
[  143.538582][ T5023] tipc: Can't bind to reserved service type 0
[  143.946103][ T5025] xt_hashlimit: max too large, truncated to 1048576
[  144.207674][ T5029] loop2: detected capacity change from 0 to 64
[  144.432431][ T5031] xt_hashlimit: max too large, truncated to 1048576
[  147.270527][ T5055] loop1: detected capacity change from 0 to 512
[  147.443027][ T5055] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  147.500030][ T5055] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.496112][ T5054] delete_channel: no stack
[  148.705673][ T5067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'.
[  148.718369][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  148.808224][ T5043] loop4: detected capacity change from 0 to 32768
[  150.042640][ T5063] chnl_net:caif_netlink_parms(): no params data found
[  150.084288][ T5081] netlink: 'syz.0.236': attribute type 2 has an invalid length.
[  150.131558][ T5081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'.
[  150.247791][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.255039][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.263548][ T5063] device bridge_slave_0 entered promiscuous mode
[  150.272597][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.280051][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.288729][ T5063] device bridge_slave_1 entered promiscuous mode
[  150.368237][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.414478][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.499181][ T5063] team0: Port device team_slave_0 added
[  150.528957][ T5063] team0: Port device team_slave_1 added
[  150.602431][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.645391][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.676430][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.459609][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[  151.474291][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.514631][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.522764][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.561790][ T5100] loop1: detected capacity change from 0 to 512
[  151.600423][ T5100] EXT4-fs (loop1): Unrecognized mount option "smackfstransmute=}ê-‰Ì¿¸ûÔç;‘V¹ð¨ÝB]ôGöäžZí•? ¡|ž3µKj§ß¬È
˜7"ãñNËd«æwÙdK÷b¶©`ß#SH¤²æ]–æþ©b×@Ïšå$rîʘïÚ¾¬I1šWЃXe»{twÌMæ–¯šÈhœ\CªÏÜw›@¯´â}"üÄÍô2£÷tØÑ " or missing value
[  151.622386][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.636387][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.981223][ T5063] device hsr_slave_0 entered promiscuous mode
[  152.008346][ T5063] device hsr_slave_1 entered promiscuous mode
[  152.015217][ T5063] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.023054][ T5063] Cannot create hsr debugfs directory
[  152.696679][ T5118] loop1: detected capacity change from 0 to 128
[  152.714122][ T5083] loop0: detected capacity change from 0 to 32768
[  152.807642][ T4234] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  152.979129][ T5063] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  152.996579][ T5083] XFS (loop0): Mounting V5 Filesystem
[  153.016298][ T5063] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  153.037027][ T5063] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  153.101589][ T5063] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  153.160322][ T5083] XFS (loop0): Ending clean mount
[  153.183966][ T5083] XFS (loop0): Unmounting Filesystem
[  153.207395][ T4234] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.225549][ T4234] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  153.329633][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  153.360454][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  153.368145][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.391034][ T4234] usb 3-1: SerialNumber: syz
[  153.396059][ T4279] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  153.425179][ T5063] 8021q: adding VLAN 0 to HW filter on device team0
[  153.454876][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.474752][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.484751][ T4234] usb 3-1: bad CDC descriptors
[  153.506931][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  153.525318][ T4234] Bluetooth: hci1: command 0x041b tx timeout
[  153.531977][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  153.540782][ T4333] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.547939][ T4333] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.573070][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  153.608545][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  153.630961][ T4333] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.638164][ T4333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.676639][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  153.715958][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  153.741098][ T5115] loop2: detected capacity change from 0 to 512
[  153.755714][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  153.798071][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  153.818175][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  153.856190][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  153.896341][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  153.925898][ T4279] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  153.935025][ T4279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.946367][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  153.976382][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.005820][ T4279] usb 5-1: Product: syz
[  154.010071][ T4279] usb 5-1: Manufacturer: syz
[  154.014697][ T4279] usb 5-1: SerialNumber: syz
[  154.052926][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.321621][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.670946][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.965077][ T5115] EXT4-fs (loop2): Test dummy encryption mode enabled
[  154.995611][ T5115] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  155.026546][ T5148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.251'.
[  155.102666][ T5115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  155.103280][ T5148] bridge1: port 1(dummy0) entered blocking state
[  155.208177][ T5148] bridge1: port 1(dummy0) entered disabled state
[  155.230949][ T5148] device dummy0 entered promiscuous mode
[  155.253486][ T5115] EXT4-fs: error -4 creating inode table initialization thread
[  155.287618][ T5115] EXT4-fs (loop2): mount failed
[  155.361129][ T5148] syz.1.251 uses obsolete (PF_INET,SOCK_PACKET)
[  155.444925][ T5163] loop0: detected capacity change from 0 to 1764
[  155.478347][ T5155] netlink: 'syz.1.251': attribute type 10 has an invalid length.
[  155.487192][ T5155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.251'.
[  155.499922][ T5155] bridge1: port 1(dummy0) entered blocking state
[  155.506710][ T5155] bridge1: port 1(dummy0) entered forwarding state
[  155.518461][ T5155] bridge1: port 1(dummy0) entered disabled state
[  155.565712][ T4266] Bluetooth: hci1: command 0x040f tx timeout
[  155.600878][ T5166] xt_hashlimit: max too large, truncated to 1048576
[  156.374774][   T21] usb 3-1: USB disconnect, device number 4
[  156.523630][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  156.546304][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  156.557979][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.698337][ T5175] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  156.777578][ T5148] syz.1.251 (5148) used greatest stack depth: 20944 bytes left
[  156.859172][ T5179] device syzkaller0 entered promiscuous mode
[  157.032676][ T5195] loop1: detected capacity change from 0 to 128
[  157.050153][ T5196] FAULT_INJECTION: forcing a failure.
[  157.050153][ T5196] name failslab, interval 1, probability 0, space 0, times 0
[  157.077505][ T5195] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.110844][ T5195] hpfs: filesystem error: improperly stopped
[  157.117625][ T5195] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.124087][ T5196] CPU: 0 PID: 5196 Comm: syz.2.262 Not tainted syzkaller #0
[  157.128040][ T5195] hpfs: You really don't want any checks? You are crazy...
[  157.132709][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  157.132725][ T5196] Call Trace:
[  157.132733][ T5196]  <TASK>
[  157.132742][ T5196]  dump_stack_lvl+0x188/0x250
[  157.144215][ T5195] hpfs: hpfs_map_sector(): read error
[  157.150029][ T5196]  ? show_regs_print_info+0x20/0x20
[  157.150059][ T5196]  ? load_image+0x400/0x400
[  157.150082][ T5196]  ? __might_sleep+0xf0/0xf0
[  157.150103][ T5196]  ? __lock_acquire+0x7d10/0x7d10
[  157.150126][ T5196]  ? netlink_insert+0xe95/0x11f0
[  157.150149][ T5196]  should_fail+0x38c/0x4c0
[  157.150178][ T5196]  should_failslab+0x5/0x20
[  157.150197][ T5196]  slab_pre_alloc_hook+0x51/0xc0
[  157.150228][ T5196]  kmem_cache_alloc_node+0x47/0x2d0
[  157.170358][ T5195] hpfs: code page support is disabled
[  157.171756][ T5196]  ? __alloc_skb+0xf4/0x750
[  157.171793][ T5196]  __alloc_skb+0xf4/0x750
[  157.204431][ T5195] hpfs: hpfs_map_sector(): read error
[  157.204760][ T5196]  netlink_sendmsg+0x654/0xbe0
[  157.229772][ T5195] hpfs: hpfs_map_sector(): read error
[  157.234369][ T5196]  ? netlink_getsockopt+0x570/0x570
[  157.234402][ T5196]  ? aa_sock_msg_perm+0x94/0x150
[  157.249998][ T5196]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  157.255321][ T5196]  ? security_socket_sendmsg+0x7c/0xa0
[  157.260937][ T5196]  ? netlink_getsockopt+0x570/0x570
[  157.266269][ T5196]  ____sys_sendmsg+0x5b7/0x8f0
[  157.271087][ T5196]  ? __sys_sendmsg_sock+0x30/0x30
[  157.276174][ T5196]  ? import_iovec+0x6f/0xa0
[  157.280930][ T5196]  ___sys_sendmsg+0x236/0x2e0
[  157.285749][ T5196]  ? __sys_sendmsg+0x2a0/0x2a0
[  157.290573][ T5196]  ? vfs_write+0x8b2/0xd60
[  157.295048][ T5196]  __se_sys_sendmsg+0x1af/0x290
[  157.299998][ T5196]  ? __x64_sys_sendmsg+0x80/0x80
[  157.303864][ T5195] hpfs: filesystem error: unable to find root dir
[  157.304976][ T5196]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  157.305021][ T5196]  ? lockdep_hardirqs_on+0x94/0x140
[  157.322695][ T5196]  do_syscall_64+0x4c/0xa0
[  157.327153][ T5196]  ? clear_bhb_loop+0x30/0x80
[  157.331878][ T5196]  ? clear_bhb_loop+0x30/0x80
[  157.336614][ T5196]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  157.342551][ T5196] RIP: 0033:0x7f6005970e59
[  157.347014][ T5196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.353724][ T5195] 
[  157.366668][ T5196] RSP: 002b:00007f6003bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  157.366700][ T5196] RAX: ffffffffffffffda RBX: 00007f6005be9fa0 RCX: 00007f6005970e59
[  157.366716][ T5196] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  157.366729][ T5196] RBP: 00007f6003bca090 R08: 0000000000000000 R09: 0000000000000000
[  157.366743][ T5196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  157.366755][ T5196] R13: 00007f6005bea038 R14: 00007f6005be9fa0 R15: 00007ffdeef14008
[  157.366787][ T5196]  </TASK>
[  157.366830][    C0] vkms_vblank_simulate: vblank timer overrun
[  157.464421][ T5199] netlink: 'syz.0.263': attribute type 10 has an invalid length.
[  157.517610][ T5199] team0: Port device netdevsim0 added
[  157.597543][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  157.624684][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  157.645738][ T4234] Bluetooth: hci1: command 0x0419 tx timeout
[  157.858536][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  157.884542][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  157.997528][ T5063] device veth0_vlan entered promiscuous mode
[  158.076612][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  158.126000][ T4233] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  158.257510][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  158.287381][ T4279] rtl8150 5-1:1.0: couldn't reset the device
[  158.304933][ T4279] rtl8150: probe of 5-1:1.0 failed with error -5
[  158.486611][ T5063] device veth1_vlan entered promiscuous mode
[  158.500612][ T5185] loop4: detected capacity change from 0 to 32768
[  158.515920][ T4233] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  158.538280][ T4279] usb 5-1: USB disconnect, device number 5
[  158.554124][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.573513][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  158.624561][ T4233] usb 2-1: config 0 descriptor??
[  158.696213][ T5185] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  158.713218][ T4233] gspca_main: cpia1-2.14.0 probing 0813:0001
[  158.752265][ T5185] BTRFS error (device loop4): unrecognized mount option 'subj_user=trusted.overlay.origin'
[  158.806912][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  158.828767][ T5185] BTRFS error (device loop4): open_ctree failed: -22
[  158.837068][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  158.859036][ T5063] device veth0_macvtap entered promiscuous mode
[  158.904632][ T5063] device veth1_macvtap entered promiscuous mode
[  158.954956][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4179)
[  159.008739][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.048639][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.065985][ T5185] afs: Unknown parameter 'dynfs'
[  159.086043][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.135731][ T4233] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  159.153251][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.195162][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.252044][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.311739][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  159.375552][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  159.470346][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0
[  159.546725][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  159.565891][ T4233] gspca_cpia1: usb_control_msg 02, error -71
[  159.583303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  159.591071][ T4233] gspca_cpia1: usb_control_msg 05, error -71
[  159.607481][ T4233] cpia1 2-1:0.0: unexpected systemstate: 00
[  159.621424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  159.657017][ T4233] usb 2-1: USB disconnect, device number 3
[  159.676333][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  159.773995][ T5229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'.
[  159.917996][ T5229] device hsr_slave_1 left promiscuous mode
[  159.953900][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  159.983040][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.014465][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.017345][ T5226] loop2: detected capacity change from 0 to 8192
[  160.060214][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.080619][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.101553][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.124203][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.154963][ T5226] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  160.155679][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.195496][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.206332][ T5226] REISERFS (device loop2): using ordered data mode
[  160.212878][ T5226] reiserfs: using flush barriers
[  160.225536][ T5226] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  160.247608][ T5226] REISERFS (device loop2): checking transaction log (loop2)
[  160.255250][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.267764][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.269370][ T5226] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[261889 2 2147483520(127) DIR], item_len 48, item_location 4004, free_space(entry_count) 15
[  160.293820][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  160.316059][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  160.325623][ T5226] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  160.345816][ T5226] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  160.376076][ T5063] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.387160][ T5063] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.419341][ T5063] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.439538][ T5063] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.686199][ T4372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  160.694087][ T4372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  160.747696][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  160.768005][ T5248] loop1: detected capacity change from 0 to 512
[  160.986575][ T5248] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.035633][ T4372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.050381][ T5248] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.233642][ T4372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.456466][ T2298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  161.700007][ T5248] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.278: No space for directory leaf checksum. Please run e2fsck -D.
[  161.746054][ T5248] EXT4-fs error (device loop1): ext4_empty_dir:3139: inode #2: comm syz.1.278: Directory block failed checksum
[  161.951528][ T5248] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.278: No space for directory leaf checksum. Please run e2fsck -D.
[  161.985861][ T5248] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.278: path /55/file0: directory fails checksum at offset 0
[  162.398786][ T5265] xt_hashlimit: max too large, truncated to 1048576
[  163.229731][ T5275] netlink: 32 bytes leftover after parsing attributes in process `syz.5.287'.
[  164.227315][ T1325] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  164.729884][ T5290] loop1: detected capacity change from 0 to 1024
[  164.825726][ T1325] usb 1-1: config 0 has an invalid interface number: 32 but max is 0
[  164.834233][ T1325] usb 1-1: config 0 has no interface number 0
[  164.880594][ T1325] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  164.914621][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.977197][ T1325] usb 1-1: config 0 descriptor??
[  165.044762][  T144] hfsplus: b-tree write err: -5, ino 25
[  165.058403][ T1325] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  165.063219][  T144] hfsplus: b-tree write err: -5, ino 4
[  165.106494][  T144] hfsplus: b-tree write err: -5, ino 2
[  165.244903][ T5273] loop2: detected capacity change from 0 to 32768
[  165.255668][   T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  165.300168][ T5269] loop0: detected capacity change from 0 to 512
[  165.358142][ T5298] 9pnet: Insufficient options for proto=fd
[  165.505586][   T21] usb 6-1: Using ep0 maxpacket: 32
[  165.567053][ T5269] EXT4-fs error (device loop0): ext4_fill_super:4872: inode #2: comm syz.0.283: iget: checksum invalid
[  165.603630][ T5305] loop1: detected capacity change from 0 to 128
[  165.681515][ T5305] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  165.705980][ T5269] EXT4-fs (loop0): get root inode failed
[  165.711688][ T5269] EXT4-fs (loop0): mount failed
[  165.736795][ T5305] hpfs: filesystem error: improperly stopped
[  165.742857][ T5305] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  165.780232][ T5305] hpfs: You really don't want any checks? You are crazy...
[  165.920615][ T5305] hpfs: hpfs_map_sector(): read error
[  166.011994][ T5305] hpfs: code page support is disabled
[  166.161324][ T5305] hpfs: hpfs_map_sector(): read error
[  166.415929][ T5305] hpfs: hpfs_map_sector(): read error
[  166.423869][   T21] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.434879][ T4233] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  166.443924][ T5305] hpfs: filesystem error: unable to find root dir
[  166.465053][   T21] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.515623][ T1325] gp8psk: usb in 128 operation failed.
[  166.545737][ T1325] gp8psk: usb in 137 operation failed.
[  166.564677][ T1325] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  166.646221][ T1325] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  166.695810][   T21] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  166.711566][ T1325] usb 1-1: USB disconnect, device number 5
[  166.750682][   T21] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  166.766113][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'.
[  166.786709][   T21] usb 6-1: Product: syz
[  166.815541][   T21] usb 6-1: Manufacturer: syz
[  166.831870][ T5312] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  166.864807][ T5312] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  166.887090][   T21] hub 6-1:4.0: USB hub found
[  166.926778][ T4233] usb 3-1: device not accepting address 5, error -71
[  167.105838][   T21] hub 6-1:4.0: 2 ports detected
[  167.311877][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.5.290'.
[  167.966674][ T5294] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.290'.
[  167.996726][ T5326] FAULT_INJECTION: forcing a failure.
[  167.996726][ T5326] name failslab, interval 1, probability 0, space 0, times 0
[  168.049381][ T5326] CPU: 1 PID: 5326 Comm: syz.1.301 Not tainted syzkaller #0
[  168.056758][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  168.066849][ T5326] Call Trace:
[  168.070158][ T5326]  <TASK>
[  168.073122][ T5326]  dump_stack_lvl+0x188/0x250
[  168.077833][ T5326]  ? show_regs_print_info+0x20/0x20
[  168.083058][ T5326]  ? load_image+0x400/0x400
[  168.087599][ T5326]  should_fail+0x38c/0x4c0
[  168.092060][ T5326]  should_failslab+0x5/0x20
[  168.096605][ T5326]  slab_pre_alloc_hook+0x51/0xc0
[  168.101573][ T5326]  ? __build_skb+0x26/0x2e0
[  168.106106][ T5326]  kmem_cache_alloc+0x3d/0x290
[  168.110907][ T5326]  __build_skb+0x26/0x2e0
[  168.115281][ T5326]  build_skb+0x1e/0x170
[  168.119479][ T5326]  __tun_build_skb+0x32/0x240
[  168.124210][ T5326]  tun_get_user+0x19f7/0x3a70
[  168.128935][ T5326]  ? tun_ring_recv+0xc40/0xc40
[  168.133743][ T5326]  ? rcu_lock_release+0x5/0x20
[  168.138627][ T5326]  ? __lock_acquire+0x7d10/0x7d10
[  168.143788][ T5326]  tun_chr_write_iter+0x112/0x1e0
[  168.148858][ T5326]  vfs_write+0x745/0xd60
[  168.153171][ T5326]  ? file_end_write+0x250/0x250
[  168.158065][ T5326]  ? __fget_files+0x40f/0x480
[  168.162786][ T5326]  ? __fdget_pos+0x1e2/0x370
[  168.167407][ T5326]  ? ksys_write+0x71/0x260
[  168.171868][ T5326]  ksys_write+0x152/0x260
[  168.176230][ T5326]  ? __ia32_sys_read+0x80/0x80
[  168.181032][ T5326]  ? lockdep_hardirqs_on+0x94/0x140
[  168.186284][ T5326]  do_syscall_64+0x4c/0xa0
[  168.190731][ T5326]  ? clear_bhb_loop+0x30/0x80
[  168.195447][ T5326]  ? clear_bhb_loop+0x30/0x80
[  168.200168][ T5326]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  168.206101][ T5326] RIP: 0033:0x7fc8be4e768e
[  168.210661][ T5326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  168.230300][ T5326] RSP: 002b:00007fc8bc77ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  168.238760][ T5326] RAX: ffffffffffffffda RBX: 00007fc8bc7806c0 RCX: 00007fc8be4e768e
[  168.246771][ T5326] RDX: 0000000000000036 RSI: 00002000000002c0 RDI: 00000000000000c8
[  168.254777][ T5326] RBP: 00007fc8bc780090 R08: 0000000000000000 R09: 0000000000000000
[  168.262783][ T5326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.270790][ T5326] R13: 00007fc8be7a0038 R14: 00007fc8be79ffa0 R15: 00007ffc3d06d098
[  168.278823][ T5326]  </TASK>
[  168.406245][   T21] hub 6-1:4.0: hub_hub_status failed (err = -71)
[  168.413218][   T21] hub 6-1:4.0: config failed, can't get hub status (err -71)
[  168.430911][ T5331] capability: warning: `syz.2.302' uses 32-bit capabilities (legacy support in use)
[  168.496908][   T21] usb 6-1: USB disconnect, device number 2
[  168.702993][ T5313] loop0: detected capacity change from 0 to 32768
[  168.828212][ T5313] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  168.860285][ T5336] loop2: detected capacity change from 0 to 8192
[  168.876488][ T5313] BTRFS error (device loop0): unrecognized mount option 'subj_user=trusted.overlay.origin'
[  168.916673][ T5336] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  168.931777][ T5313] BTRFS error (device loop0): open_ctree failed: -22
[  168.947993][ T5336] REISERFS (device loop2): using ordered data mode
[  168.954566][ T5336] reiserfs: using flush barriers
[  168.995974][ T5313] afs: Unknown parameter 'dynfs'
[  169.031788][ T4179] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4179)
[  169.137430][ T5336] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.366301][ T5336] REISERFS (device loop2): checking transaction log (loop2)
[  169.645813][ T5353] xt_hashlimit: max too large, truncated to 1048576
[  170.017971][ T5336] REISERFS warning: reiserfs-5086 is_leaf: item location seems wrong (second one): *3.5*[1 2 0x0 SD], item_len 44, item_location 980, free_space(entry_count) 0
[  170.019549][ T5357] loop5: detected capacity change from 0 to 64
[  170.046653][ T5336] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  170.835735][ T5336] REISERFS error (device loop2): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD]
[  173.111339][ T4195] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  173.122416][ T4195] CPU: 1 PID: 4195 Comm: kworker/u5:2 Not tainted syzkaller #0
[  173.130022][ T4195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  173.140219][ T4195] Workqueue: hci3 hci_rx_work
[  173.144942][ T4195] Call Trace:
[  173.148243][ T4195]  <TASK>
[  173.151198][ T4195]  dump_stack_lvl+0x188/0x250
[  173.155909][ T4195]  ? show_regs_print_info+0x20/0x20
[  173.161141][ T4195]  ? load_image+0x400/0x400
[  173.165690][ T4195]  ? sysfs_create_dir_ns+0x23f/0x290
[  173.171015][ T4195]  sysfs_create_dir_ns+0x26a/0x290
[  173.176177][ T4195]  ? sysfs_warn_dup+0xa0/0xa0
[  173.180993][ T4195]  ? lockdep_hardirqs_on+0x94/0x140
[  173.186247][ T4195]  ? do_raw_spin_unlock+0x11d/0x230
[  173.191718][ T4195]  kobject_add_internal+0x6e0/0xd90
[  173.196965][ T4195]  kobject_add+0x160/0x230
[  173.201420][ T4195]  ? kobject_init+0x1d0/0x1d0
[  173.206137][ T4195]  ? klist_children_get+0x50/0x50
[  173.211193][ T4195]  ? get_device_parent+0x121/0x3f0
[  173.216342][ T4195]  device_add+0x483/0xfb0
[  173.220803][ T4195]  hci_conn_add_sysfs+0xd1/0x1e0
[  173.225792][ T4195]  le_conn_complete_evt+0xc48/0x15c0
[  173.231126][ T4195]  ? cs_le_create_conn+0x5e0/0x5e0
[  173.236273][ T4195]  ? preempt_schedule_common+0xa5/0xd0
[  173.241854][ T4195]  ? preempt_schedule+0xbc/0xd0
[  173.246732][ T4195]  ? schedule_preempt_disabled+0x20/0x20
[  173.252394][ T4195]  ? __mutex_trylock_common+0x155/0x260
[  173.257982][ T4195]  hci_le_meta_evt+0x285/0x3c90
[  173.262862][ T4195]  ? hci_event_packet+0x37b/0x1370
[  173.268017][ T4195]  ? __lock_acquire+0x7d10/0x7d10
[  173.273107][ T4195]  ? release_firmware_map_entry+0x190/0x190
[  173.279043][ T4195]  ? hci_remote_host_features_evt+0x280/0x280
[  173.285146][ T4195]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  173.291071][ T4195]  ? mark_lock+0x94/0x320
[  173.295874][ T4195]  ? mutex_unlock+0x10/0x10
[  173.300427][ T4195]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  173.306457][ T4195]  ? lock_chain_count+0x20/0x20
[  173.311358][ T4195]  hci_event_packet+0xe48/0x1370
[  173.316350][ T4195]  ? rcu_lock_release+0x20/0x20
[  173.321269][ T4195]  ? hci_send_to_monitor+0x36/0x4a0
[  173.326507][ T4195]  ? audit_tree_destroy_watch+0x20/0x20
[  173.332089][ T4195]  ? hci_send_to_monitor+0x9c/0x4a0
[  173.337323][ T4195]  hci_rx_work+0x255/0xa10
[  173.341789][ T4195]  process_one_work+0x85f/0x1010
[  173.346779][ T4195]  ? worker_detach_from_pool+0x240/0x240
[  173.352446][ T4195]  ? lockdep_hardirqs_off+0x70/0x100
[  173.357773][ T4195]  ? _raw_spin_lock_irq+0xb7/0xf0
[  173.362828][ T4195]  ? _raw_spin_lock_irqsave+0x100/0x100
[  173.368839][ T4195]  ? wq_worker_running+0x97/0x170
[  173.373895][ T4195]  worker_thread+0xaa6/0x1290
[  173.378650][ T4195]  kthread+0x436/0x520
[  173.382838][ T4195]  ? rcu_lock_release+0x20/0x20
[  173.387803][ T4195]  ? kthread_blkcg+0xd0/0xd0
[  173.392441][ T4195]  ret_from_fork+0x1f/0x30
[  173.397035][ T4195]  </TASK>
[  173.441590][ T4195] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  173.456088][ T4195] Bluetooth: hci3: failed to register connection device
[  173.742598][ T5383] loop0: detected capacity change from 0 to 1024
[  173.844483][ T5383] EXT4-fs (loop0): Unrecognized mount option "smackfsfloor=bridge_slave_0" or missing value
[  174.085841][   T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  174.281736][ T5377] loop2: detected capacity change from 0 to 32768
[  174.343337][ T5377] (syz.2.316,5377,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.357027][   T13] usb 2-1: Using ep0 maxpacket: 32
[  174.397367][ T5377] (syz.2.316,5377,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  174.463638][ T5377] JBD2: Ignoring recovery information on journal
[  174.505686][   T13] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  174.525226][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.547885][   T13] usb 2-1: config 0 descriptor??
[  174.662544][ T5389] loop0: detected capacity change from 0 to 32768
[  174.678573][   T13] as10x_usb: device has been detected
[  174.697459][   T13] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  174.736141][ T5377] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  174.758986][   T13] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  174.892666][ T5389] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  174.911169][ T5395] overlayfs: failed to resolve './file1': -2
[  174.918969][ T5389] BTRFS error (device loop0): unrecognized mount option 'subj_user=trusted.overlay.origin'
[  174.941590][   T13] as10x_usb: error during firmware upload part1
[  174.957930][ T5387] loop5: detected capacity change from 0 to 40427
[  174.979412][   T13] Registered device nBox DVB-T Dongle
[  174.991688][ T5389] BTRFS error (device loop0): open_ctree failed: -22
[  175.052057][ T4404] usb 2-1: USB disconnect, device number 4
[  175.056656][ T4181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4181)
[  175.082455][ T5389] afs: Unknown parameter 'dynfs'
[  175.107109][ T4194] ocfs2: Unmounting device (7,2) on (node local)
[  175.115064][ T4404] Unregistered device nBox DVB-T Dongle
[  175.122401][ T4404] as10x_usb: device has been disconnected
[  175.150764][ T5387] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  175.187596][ T5387] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  175.261216][ T5387] F2FS-fs (loop5): invalid crc value
[  175.340846][ T5387] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  175.587324][ T5387] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  175.594529][ T5387] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  175.614309][ T5409] loop1: detected capacity change from 0 to 128
[  175.679679][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  175.679696][   T26] audit: type=1800 audit(1779535148.792:2): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="file1" dev="loop5" ino=10 res=0 errno=0
[  175.733312][ T5409] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  175.820391][ T5409] hpfs: filesystem error: improperly stopped
[  175.845600][ T5409] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  175.918020][   T26] audit: type=1800 audit(1779535148.832:3): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="file1" dev="loop5" ino=10 res=0 errno=0
[  175.959550][ T5409] hpfs: You really don't want any checks? You are crazy...
[  175.998354][   T26] audit: type=1800 audit(1779535148.832:4): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="file1" dev="loop5" ino=10 res=0 errno=0
[  176.018708][   T26] audit: type=1800 audit(1779535148.842:5): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.319" name="file1" dev="loop5" ino=10 res=0 errno=0
[  176.044078][ T5409] hpfs: hpfs_map_sector(): read error
[  176.085668][ T5409] hpfs: code page support is disabled
[  176.213272][ T5409] hpfs: hpfs_map_sector(): read error
[  176.387106][ T5409] hpfs: hpfs_map_sector(): read error
[  176.511933][ T5409] hpfs: filesystem error: unable to find root dir
[  176.698200][ T5063] attempt to access beyond end of device
[  176.698200][ T5063] loop5: rw=524288, want=45072, limit=40427
[  176.747762][ T5063] attempt to access beyond end of device
[  176.747762][ T5063] loop5: rw=0, want=45072, limit=40427
[  176.779109][ T5063] attempt to access beyond end of device
[  176.779109][ T5063] loop5: rw=2049, want=45104, limit=40427
[  176.996151][ T5417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  177.089771][ T5417] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  177.111766][ T5417] sch_tbf: burst 12 is lower than device lo mtu (65550) !
[  177.123891][ T5407] loop0: detected capacity change from 0 to 32768
[  177.156465][ T5420] loop1: detected capacity change from 0 to 64
[  177.241827][ T5427] loop2: detected capacity change from 0 to 64
[  177.346435][ T5407] XFS (loop0): Mounting V5 Filesystem
[  177.747417][ T5407] XFS (loop0): Ending clean mount
[  178.527464][ T5438] FAULT_INJECTION: forcing a failure.
[  178.527464][ T5438] name failslab, interval 1, probability 0, space 0, times 0
[  178.560372][ T5438] CPU: 1 PID: 5438 Comm: syz.2.329 Not tainted syzkaller #0
[  178.567747][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  178.577868][ T5438] Call Trace:
[  178.581184][ T5438]  <TASK>
[  178.584148][ T5438]  dump_stack_lvl+0x188/0x250
[  178.588863][ T5438]  ? show_regs_print_info+0x20/0x20
[  178.594095][ T5438]  ? load_image+0x400/0x400
[  178.598650][ T5438]  should_fail+0x38c/0x4c0
[  178.603112][ T5438]  should_failslab+0x5/0x20
[  178.607658][ T5438]  slab_pre_alloc_hook+0x51/0xc0
[  178.612635][ T5438]  ? skb_clone+0x1bd/0x350
[  178.617087][ T5438]  kmem_cache_alloc+0x3d/0x290
[  178.621905][ T5438]  skb_clone+0x1bd/0x350
[  178.626193][ T5438]  __netlink_deliver_tap+0x3cd/0x7c0
[  178.631529][ T5438]  netlink_deliver_tap+0x16c/0x180
[  178.636676][ T5438]  netlink_unicast+0x74f/0x920
[  178.641484][ T5438]  netlink_sendmsg+0x8ba/0xbe0
[  178.646304][ T5438]  ? netlink_getsockopt+0x570/0x570
[  178.651543][ T5438]  ? aa_sock_msg_perm+0x94/0x150
[  178.656522][ T5438]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  178.661849][ T5438]  ? security_socket_sendmsg+0x7c/0xa0
[  178.667344][ T5438]  ? netlink_getsockopt+0x570/0x570
[  178.672583][ T5438]  ____sys_sendmsg+0x5b7/0x8f0
[  178.677408][ T5438]  ? __sys_sendmsg_sock+0x30/0x30
[  178.682477][ T5438]  ? import_iovec+0x6f/0xa0
[  178.687027][ T5438]  ___sys_sendmsg+0x236/0x2e0
[  178.691747][ T5438]  ? __sys_sendmsg+0x2a0/0x2a0
[  178.696555][ T5438]  ? vfs_write+0x8b2/0xd60
[  178.701036][ T5438]  __se_sys_sendmsg+0x1af/0x290
[  178.706036][ T5438]  ? __x64_sys_sendmsg+0x80/0x80
[  178.711027][ T5438]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  178.717073][ T5438]  ? lockdep_hardirqs_on+0x94/0x140
[  178.722337][ T5438]  do_syscall_64+0x4c/0xa0
[  178.726780][ T5438]  ? clear_bhb_loop+0x30/0x80
[  178.731499][ T5438]  ? clear_bhb_loop+0x30/0x80
[  178.736225][ T5438]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.742165][ T5438] RIP: 0033:0x7f6005970e59
[  178.746605][ T5438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.766238][ T5438] RSP: 002b:00007f6003bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.774741][ T5438] RAX: ffffffffffffffda RBX: 00007f6005be9fa0 RCX: 00007f6005970e59
[  178.784237][ T5438] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  178.792484][ T5438] RBP: 00007f6003bca090 R08: 0000000000000000 R09: 0000000000000000
[  178.800487][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.808489][ T5438] R13: 00007f6005bea038 R14: 00007f6005be9fa0 R15: 00007ffdeef14008
[  178.816510][ T5438]  </TASK>
[  179.183149][ T4200] XFS (loop0): Unmounting Filesystem
[  179.799260][ T4232] Bluetooth: hci3: command 0x0406 tx timeout
[  180.633866][ T5446] loop1: detected capacity change from 0 to 32768
[  180.668097][ T5451] loop2: detected capacity change from 0 to 32768
[  180.694479][ T5451] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 scanned by syz.2.332 (5451)
[  180.733390][ T5464] loop0: detected capacity change from 0 to 128
[  180.756583][ T5451] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  180.766735][ T5451] BTRFS error (device loop2): superblock checksum mismatch
[  180.783067][ T5451] BTRFS error (device loop2): open_ctree failed: -22
[  180.853895][ T4179] udevd[4179]: incorrect btrfs checksum on /dev/loop2
[  180.891825][ T5464] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  180.937977][ T5464] hpfs: filesystem error: improperly stopped
[  180.944224][ T5464] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  180.960929][ T5451] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0)
[  181.005874][ T5464] 
[  181.014803][ T5464] hpfs: You really don't want any checks? You are crazy...
[  181.023097][ T5446] XFS (loop1): Mounting V5 Filesystem
[  181.056831][ T5464] hpfs: hpfs_map_sector(): read error
[  181.062280][ T5464] hpfs: code page support is disabled
[  181.121281][ T5464] hpfs: hpfs_map_sector(): read error
[  181.140945][ T5464] hpfs: hpfs_map_sector(): read error
[  181.205579][ T5464] hpfs: filesystem error: unable to find root dir
[  181.264171][ T5446] XFS (loop1): Ending clean mount
[  182.321418][ T5480] loop2: detected capacity change from 0 to 64
[  182.356869][ T5474] delete_channel: no stack
[  182.412176][ T4189] XFS (loop1): Unmounting Filesystem
[  182.944398][ T5488] device wg1 entered promiscuous mode
[  183.599658][ T5491] overlayfs: failed to resolve './file1': -2
[  183.845304][ T5498] genirq: Flags mismatch irq 1. 00000000 (comedi_parport) vs. 00000080 (i8042)
[  184.992443][ T5518] loop1: detected capacity change from 0 to 256
[  185.034903][ T5518] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.110244][ T5521] loop2: detected capacity change from 0 to 64
[  186.064185][   T21] Bluetooth: hci0: command 0x0406 tx timeout
[  186.098284][ T5503] loop5: detected capacity change from 0 to 32768
[  186.125277][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  186.143857][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  186.165729][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  186.296801][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  186.370093][ T5503] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop5 scanned by syz.5.348 (5503)
[  186.451280][ T5529] loop2: detected capacity change from 0 to 128
[  186.466888][ T5503] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  186.489975][ T5503] BTRFS error (device loop5): superblock checksum mismatch
[  186.511740][ T5503] BTRFS error (device loop5): open_ctree failed: -22
[  186.570033][ T5529] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  186.585488][ T4234] usb 2-1: Using ep0 maxpacket: 8
[  186.609255][ T5529] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.627148][ T4179] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop5 scanned by udevd (4179)
[  186.733794][ T5529] syz.2.356 (pid 5529) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  186.803857][ T4234] usb 2-1: unable to get BOS descriptor or descriptor too short
[  186.907714][ T5529] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  186.925793][ T4234] usb 2-1: config 9 interface 0 has no altsetting 0
[  187.032663][   T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  187.125868][ T4234] usb 2-1: New USB device found, idVendor=0711, idProduct=0903, bcdDevice=fe.d9
[  187.137091][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.145096][ T4234] usb 2-1: Product: syz
[  187.152920][ T4234] usb 2-1: Manufacturer: syz
[  187.166023][   T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  187.485772][   T21] usb 6-1: Using ep0 maxpacket: 32
[  187.955921][ T4234] usb 2-1: SerialNumber: syz
[  187.988221][   T21] usb 6-1: string descriptor 0 read error: -22
[  188.000171][   T21] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  188.028001][   T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.076898][   T13] usb 1-1: Using ep0 maxpacket: 16
[  188.105876][ T4234] usb 2-1: can't set config #9, error -71
[  188.113906][ T4234] usb 2-1: USB disconnect, device number 5
[  188.136162][   T21] usb 6-1: MIDIStreaming interface descriptor not found
[  188.215827][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  188.245785][   T13] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  188.277602][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.298381][   T13] usb 1-1: config 0 descriptor??
[  188.354582][ T5538] netlink: 16 bytes leftover after parsing attributes in process `syz.5.359'.
[  188.397707][   T21] usb 6-1: USB disconnect, device number 3
[  188.628104][ T5556] loop2: detected capacity change from 0 to 32768
[  188.698829][ T5556] XFS (loop2): Mounting V5 Filesystem
[  188.786248][   T13] hid (null): unknown global tag 0xc
[  188.811462][ T5556] XFS (loop2): Ending clean mount
[  188.877867][ T5582] loop1: detected capacity change from 0 to 128
[  188.945983][ T5582] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  188.959833][ T5582] hpfs: filesystem error: improperly stopped
[  188.966919][ T4194] XFS (loop2): Unmounting Filesystem
[  188.979750][ T5578] XFS (loop2): SB summary counter sanity check failed
[  188.990429][ T5536] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  189.000325][ T5582] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  189.017669][ T5578] XFS (loop2): Metadata corruption detected at xfs_sb_write_verify+0xf8/0x2c0, xfs_sb block 0x0 
[  189.031278][ T5582] hpfs: You really don't want any checks? You are crazy...
[  189.039566][ T5578] XFS (loop2): Unmount and run xfs_repair
[  189.059481][ T5578] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  189.068196][ T5582] hpfs: hpfs_map_sector(): read error
[  189.073877][ T5582] hpfs: code page support is disabled
[  189.079786][ T5578] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  189.095947][   T13] usb 1-1: string descriptor 0 read error: -71
[  189.096836][ T5582] hpfs: hpfs_map_sector(): read error
[  189.113033][ T5578] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  189.133166][ T5582] hpfs: hpfs_map_sector(): read error
[  189.135749][   T13] uclogic 0003:5543:0045.0001: failed retrieving string descriptor #200: -71
[  189.147573][ T5578] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  189.147597][ T5578] 00000030: 00 00 00 00 00 00 00 08 00 00 00 00 00 00 18 00  ................
[  189.147613][ T5578] 00000040: 00 00 00 00 00 00 18 01 00 00 00 00 00 00 18 02  ................
[  189.147630][ T5578] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[  189.147644][ T5578] 00000060: 00 00 0b e8 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  189.147660][ T5578] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  189.148136][ T5578] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x20c/0x670 (fs/xfs/xfs_buf.c:1515).  Shutting down filesystem.
[  189.148183][ T5578] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  189.161009][ T5582] hpfs: filesystem error: unable to find root dir
[  189.167774][   T13] uclogic 0003:5543:0045.0001: failed retrieving pen parameters: -71
[  189.255287][   T13] uclogic 0003:5543:0045.0001: failed probing pen v2 parameters: -71
[  189.264407][   T13] uclogic 0003:5543:0045.0001: failed probing parameters: -71
[  189.274555][ T5582] 
[  189.277208][   T13] uclogic: probe of 0003:5543:0045.0001 failed with error -71
[  189.326866][   T13] usb 1-1: USB disconnect, device number 6
[  190.155020][ T5604] overlayfs: failed to resolve './file1': -2
[  190.265574][ T4234] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  190.538480][ T5609] loop0: detected capacity change from 0 to 128
[  190.686058][ T4234] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.696842][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  190.745520][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  190.755407][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.808867][ T4234] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  190.829939][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.852614][ T4234] usb 6-1: config 0 descriptor??
[  191.175656][ T5590] udc-core: couldn't find an available UDC or it's busy
[  191.182683][ T5590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  191.258366][ T5624] loop0: detected capacity change from 0 to 256
[  191.334800][ T5624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.379'.
[  191.372624][ T5590] udc-core: couldn't find an available UDC or it's busy
[  191.396359][ T5590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  191.501121][ T5627] netlink: 'syz.0.380': attribute type 1 has an invalid length.
[  191.805689][ T5550] Bluetooth: hci1: command 0x0405 tx timeout
[  192.707013][ T4234] usb 6-1: USB disconnect, device number 4
[  192.782027][ T5634] loop2: detected capacity change from 0 to 32768
[  192.859530][ T5641] overlayfs: failed to clone upperpath
[  192.908520][ T5634] XFS (loop2): Mounting V5 Filesystem
[  192.955125][ T5646] loop5: detected capacity change from 0 to 512
[  193.054719][ T5634] XFS (loop2): Ending clean mount
[  193.107429][ T5646] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nobarrier,stripe=0x0000000000000042,,errors=continue. Quota mode: writeback.
[  193.125691][ T5646] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.144126][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.155810][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.220600][ T5662] loop1: detected capacity change from 0 to 1024
[  194.261837][ T5644] delete_channel: no stack
[  194.347274][ T5662] hfsplus: unable to parse mount options
[  194.565903][ T4194] XFS (loop2): Unmounting Filesystem
[  195.864067][ T5683] overlayfs: failed to resolve './file1': -2
[  195.906347][ T5685] loop5: detected capacity change from 0 to 256
[  196.010383][ T5685] FAT-fs (loop5): Directory bread(block 64) failed
[  196.040543][ T5685] FAT-fs (loop5): Directory bread(block 65) failed
[  196.080814][ T5685] FAT-fs (loop5): Directory bread(block 66) failed
[  196.116002][ T5685] FAT-fs (loop5): Directory bread(block 67) failed
[  196.135687][ T5685] FAT-fs (loop5): Directory bread(block 68) failed
[  196.154731][ T5685] FAT-fs (loop5): Directory bread(block 69) failed
[  196.225834][ T5685] FAT-fs (loop5): Directory bread(block 70) failed
[  196.256849][ T5685] FAT-fs (loop5): Directory bread(block 71) failed
[  196.263887][ T5685] FAT-fs (loop5): Directory bread(block 72) failed
[  196.323824][ T5685] FAT-fs (loop5): Directory bread(block 73) failed
[  196.786665][   T21] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  197.070513][ T5701] device syzkaller0 entered promiscuous mode
[  197.395778][   T21] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  197.432337][   T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.458472][   T21] usb 1-1: Product: syz
[  197.467768][   T21] usb 1-1: Manufacturer: syz
[  197.472417][   T21] usb 1-1: SerialNumber: syz
[  197.527058][   T21] usb 1-1: config 0 descriptor??
[  197.587856][   T21] usb 1-1: selecting invalid altsetting 1
[  197.593653][   T21] technisat-usb2: could not set alternate setting to 0
[  197.619339][ T5711] loop5: detected capacity change from 0 to 64
[  197.795682][   T21] technisat-usb2: firmware version: 0.0
[  197.801564][   T21] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  198.793509][   T21] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  198.961105][   T21] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  199.234701][ T4277] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  199.615809][ T4277] usb 3-1: Using ep0 maxpacket: 8
[  199.966678][ T4277] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  200.000037][   T13] usb 1-1: USB disconnect, device number 7
[  200.043938][ T4277] usb 3-1: config 1 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  200.088551][ T4277] usb 3-1: config 1 interface 0 has no altsetting 0
[  200.269980][ T4277] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  200.281927][ T4277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.291823][ T4277] usb 3-1: Product: syz
[  200.308453][ T4277] usb 3-1: Manufacturer: syz
[  200.392026][ T4277] usb 3-1: SerialNumber: syz
[  200.586750][ T5732] could not allocate digest TFM handle blake2s-128-x86
[  200.761683][ T5746] device syzkaller0 entered promiscuous mode
[  200.846401][ T4277] cdc_ether: probe of 3-1:1.0 failed with error -22
[  200.893632][ T4277] usb 3-1: USB disconnect, device number 7
[  200.985765][ T5754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  201.082675][ T5750] loop1: detected capacity change from 0 to 4096
[  201.111702][ T5750] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  201.173034][ T5750] ntfs3: loop1: mft corrupted
[  201.185812][ T5750] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  201.235927][ T5750] ntfs3: loop1: Failed to load $BadClus.
[  201.440425][ T5764] netlink: 'syz.2.418': attribute type 3 has an invalid length.
[  201.478828][ T5764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.418'.
[  201.641983][ T5768] FAULT_INJECTION: forcing a failure.
[  201.641983][ T5768] name failslab, interval 1, probability 0, space 0, times 0
[  201.691654][ T5768] CPU: 1 PID: 5768 Comm: syz.0.419 Not tainted syzkaller #0
[  201.699030][ T5768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  201.709124][ T5768] Call Trace:
[  201.712433][ T5768]  <TASK>
[  201.715386][ T5768]  dump_stack_lvl+0x188/0x250
[  201.720330][ T5768]  ? show_regs_print_info+0x20/0x20
[  201.725565][ T5768]  ? load_image+0x400/0x400
[  201.730121][ T5768]  ? __might_sleep+0xf0/0xf0
[  201.734766][ T5768]  ? __lock_acquire+0x7d10/0x7d10
[  201.739916][ T5768]  should_fail+0x38c/0x4c0
[  201.744376][ T5768]  should_failslab+0x5/0x20
[  201.748914][ T5768]  slab_pre_alloc_hook+0x51/0xc0
[  201.753888][ T5768]  __kmalloc_node_track_caller+0x68/0x3a0
[  201.759636][ T5768]  ? netlink_sendmsg+0x654/0xbe0
[  201.764603][ T5768]  ? kmem_cache_alloc_node+0x162/0x2d0
[  201.770094][ T5768]  ? __alloc_skb+0xf4/0x750
[  201.774631][ T5768]  ? netlink_sendmsg+0x654/0xbe0
[  201.779602][ T5768]  __alloc_skb+0x22c/0x750
[  201.784065][ T5768]  netlink_sendmsg+0x654/0xbe0
[  201.788874][ T5768]  ? netlink_getsockopt+0x570/0x570
[  201.794109][ T5768]  ? aa_sock_msg_perm+0x94/0x150
[  201.799087][ T5768]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  201.804406][ T5768]  ? security_socket_sendmsg+0x7c/0xa0
[  201.809891][ T5768]  ? netlink_getsockopt+0x570/0x570
[  201.815117][ T5768]  ____sys_sendmsg+0x5b7/0x8f0
[  201.820030][ T5768]  ? __sys_sendmsg_sock+0x30/0x30
[  201.825100][ T5768]  ? import_iovec+0x6f/0xa0
[  201.829733][ T5768]  ___sys_sendmsg+0x236/0x2e0
[  201.834453][ T5768]  ? __sys_sendmsg+0x2a0/0x2a0
[  201.839260][ T5768]  ? vfs_write+0x8b2/0xd60
[  201.843747][ T5768]  __se_sys_sendmsg+0x1af/0x290
[  201.848638][ T5768]  ? __x64_sys_sendmsg+0x80/0x80
[  201.853608][ T5768]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  201.859795][ T5768]  ? lockdep_hardirqs_on+0x94/0x140
[  201.865051][ T5768]  do_syscall_64+0x4c/0xa0
[  201.869497][ T5768]  ? clear_bhb_loop+0x30/0x80
[  201.874206][ T5768]  ? clear_bhb_loop+0x30/0x80
[  201.878912][ T5768]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  201.884834][ T5768] RIP: 0033:0x7f10c892be59
[  201.889278][ T5768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  201.908975][ T5768] RSP: 002b:00007f10c6b85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  201.917431][ T5768] RAX: ffffffffffffffda RBX: 00007f10c8ba4fa0 RCX: 00007f10c892be59
[  201.925526][ T5768] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  201.933557][ T5768] RBP: 00007f10c6b85090 R08: 0000000000000000 R09: 0000000000000000
[  201.941567][ T5768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  201.949583][ T5768] R13: 00007f10c8ba5038 R14: 00007f10c8ba4fa0 R15: 00007ffdffa41fb8
[  201.957603][ T5768]  </TASK>
[  202.054845][ T5770] netlink: 44 bytes leftover after parsing attributes in process `syz.2.420'.
[  202.171608][ T5770] loop2: detected capacity change from 0 to 4096
[  202.216877][ T5770] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  202.303930][ T5770] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  202.342090][ T5770] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  202.392728][ T5760] loop5: detected capacity change from 0 to 40427
[  202.407503][ T5770] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  202.609678][ T5770] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  202.735556][ T5770] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  202.821228][ T5770] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  202.942709][ T5770] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  202.981887][ T5770] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  203.002085][ T5770] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  203.025242][ T5770] ntfs: volume version 3.1.
[  203.254046][ T5790] device syzkaller0 entered promiscuous mode
[  204.445706][ T5805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'.
[  204.526077][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  204.637423][ T5811] loop0: detected capacity change from 0 to 1024
[  204.716845][ T5811] hfsplus: unable to parse mount options
[  205.916160][ T4230] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  205.925494][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.933524][ T4230] usb 2-1: Product: syz
[  205.974883][ T4230] usb 2-1: Manufacturer: syz
[  205.985743][ T4230] usb 2-1: SerialNumber: syz
[  206.021053][ T4230] usb 2-1: config 0 descriptor??
[  206.366178][ T5840] device syzkaller0 entered promiscuous mode
[  206.421709][ T4230] usb 2-1: USB disconnect, device number 6
[  208.208168][ T4230] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  208.225587][ T4230] Bluetooth: hci0: Injecting HCI hardware error event
[  208.235559][ T4191] Bluetooth: hci0: hardware error 0x00
[  208.823236][ T5852] loop2: detected capacity change from 0 to 32768
[  209.218786][ T5894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'.
[  209.266368][ T5894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.454'.
[  209.293877][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'.
[  209.841980][ T5912] loop1: detected capacity change from 0 to 16
[  209.940410][ T5912] erofs: (device loop1): mounted with root inode @ nid 36.
[  210.069525][ T5912] attempt to access beyond end of device
[  210.069525][ T5912] loop1: rw=0, want=40, limit=16
[  210.082540][ T5912] attempt to access beyond end of device
[  210.082540][ T5912] loop1: rw=0, want=40, limit=16
[  210.145225][ T5912] attempt to access beyond end of device
[  210.145225][ T5912] loop1: rw=524288, want=48, limit=16
[  210.205043][ T5912] attempt to access beyond end of device
[  210.205043][ T5912] loop1: rw=524288, want=40, limit=16
[  210.303472][ T5912] attempt to access beyond end of device
[  210.303472][ T5912] loop1: rw=0, want=40, limit=16
[  210.362473][ T5915] attempt to access beyond end of device
[  210.362473][ T5915] loop1: rw=0, want=40, limit=16
[  210.407191][ T5915] attempt to access beyond end of device
[  210.407191][ T5915] loop1: rw=0, want=40, limit=16
[  210.496560][ T5912] attempt to access beyond end of device
[  210.496560][ T5912] loop1: rw=0, want=40, limit=16
[  210.574556][ T5923] device wg1 entered promiscuous mode
[  210.808343][ T5927] device syzkaller0 entered promiscuous mode
[  210.862046][ T5902] afs: Unknown parameter 'dynfs'
[  211.106245][ T5932] FAULT_INJECTION: forcing a failure.
[  211.106245][ T5932] name failslab, interval 1, probability 0, space 0, times 0
[  211.145148][ T5929] loop1: detected capacity change from 0 to 8192
[  211.183400][ T5932] CPU: 1 PID: 5932 Comm: syz.0.467 Not tainted syzkaller #0
[  211.190774][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  211.196168][ T5929] __ntfs_error: 10 callbacks suppressed
[  211.196190][ T5929] ntfs: (device loop1): parse_options(): Unrecognized mount option .
[  211.201035][ T5932] Call Trace:
[  211.201045][ T5932]  <TASK>
[  211.201054][ T5932]  dump_stack_lvl+0x188/0x250
[  211.225624][ T5932]  ? show_regs_print_info+0x20/0x20
[  211.230864][ T5932]  ? load_image+0x400/0x400
[  211.235402][ T5932]  ? __might_sleep+0xf0/0xf0
[  211.240026][ T5932]  ? __lock_acquire+0x7d10/0x7d10
[  211.245086][ T5932]  ? mark_lock+0x94/0x320
[  211.249462][ T5932]  should_fail+0x38c/0x4c0
[  211.254275][ T5932]  should_failslab+0x5/0x20
[  211.258829][ T5932]  slab_pre_alloc_hook+0x51/0xc0
[  211.263808][ T5932]  __kmalloc+0x6b/0x330
[  211.267999][ T5932]  ? tomoyo_realpath_from_path+0x118/0x610
[  211.273856][ T5932]  tomoyo_realpath_from_path+0x118/0x610
[  211.279741][ T5932]  tomoyo_path_number_perm+0x242/0x660
[  211.285254][ T5932]  ? verify_lock_unused+0x140/0x140
[  211.290510][ T5932]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  211.296010][ T5932]  ? ksys_write+0x1c6/0x260
[  211.301295][ T5932]  security_file_ioctl+0x6c/0xa0
[  211.306279][ T5932]  __se_sys_ioctl+0x48/0x170
[  211.311082][ T5932]  do_syscall_64+0x4c/0xa0
[  211.315545][ T5932]  ? clear_bhb_loop+0x30/0x80
[  211.320262][ T5932]  ? clear_bhb_loop+0x30/0x80
[  211.325391][ T5932]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  211.331581][ T5932] RIP: 0033:0x7f10c892be59
[  211.336031][ T5932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  211.355677][ T5932] RSP: 002b:00007f10c6b85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  211.364145][ T5932] RAX: ffffffffffffffda RBX: 00007f10c8ba4fa0 RCX: 00007f10c892be59
[  211.372161][ T5932] RDX: 0000200000005700 RSI: 000000004080aebf RDI: 0000000000000005
[  211.380169][ T5932] RBP: 00007f10c6b85090 R08: 0000000000000000 R09: 0000000000000000
[  211.388175][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.396180][ T5932] R13: 00007f10c8ba5038 R14: 00007f10c8ba4fa0 R15: 00007ffdffa41fb8
[  211.404210][ T5932]  </TASK>
[  212.062933][ T5932] ERROR: Out of memory at tomoyo_realpath_from_path.
[  212.845253][ T5960] loop1: detected capacity change from 0 to 64
[  212.913040][ T5962] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  212.920164][ T5962] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  213.003631][ T5962] vhci_hcd vhci_hcd.0: Device attached
[  213.782604][ T5962] loop0: detected capacity change from 0 to 2048
[  213.809454][ T5982] FAULT_INJECTION: forcing a failure.
[  213.809454][ T5982] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.841122][ T5982] CPU: 1 PID: 5982 Comm: syz.2.479 Not tainted syzkaller #0
[  213.848487][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  213.858576][ T5982] Call Trace:
[  213.861889][ T5982]  <TASK>
[  213.864859][ T5982]  dump_stack_lvl+0x188/0x250
[  213.869583][ T5982]  ? show_regs_print_info+0x20/0x20
[  213.874817][ T5982]  ? load_image+0x400/0x400
[  213.879363][ T5982]  ? __lock_acquire+0x7d10/0x7d10
[  213.884439][ T5982]  should_fail+0x38c/0x4c0
[  213.889009][ T5982]  _copy_from_user+0x2e/0x170
[  213.893905][ T5982]  __copy_msghdr_from_user+0xc9/0x630
[  213.899323][ T5982]  ? verify_lock_unused+0x140/0x140
[  213.900206][ T4240] usb 34-1: SetAddress Request (2) to port 0
[  213.904565][ T5982]  ? __ia32_sys_shutdown+0x1d0/0x1d0
[  213.904609][ T5982]  ___sys_sendmsg+0x19a/0x2e0
[  213.920827][ T5982]  ? __sys_sendmsg+0x2a0/0x2a0
[  213.925649][ T5982]  ? vfs_write+0x8b2/0xd60
[  213.930124][ T5982]  __se_sys_sendmsg+0x1af/0x290
[  213.935010][ T5982]  ? __x64_sys_sendmsg+0x80/0x80
[  213.940067][ T5982]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  213.946106][ T5982]  ? lockdep_hardirqs_on+0x94/0x140
[  213.951347][ T5982]  do_syscall_64+0x4c/0xa0
[  213.955796][ T5982]  ? clear_bhb_loop+0x30/0x80
[  213.960507][ T5982]  ? clear_bhb_loop+0x30/0x80
[  213.965225][ T5982]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  213.965664][ T4240] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd
[  213.971153][ T5982] RIP: 0033:0x7f6005970e59
[  213.983048][ T5982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  214.002687][ T5982] RSP: 002b:00007f6003bca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  214.011142][ T5982] RAX: ffffffffffffffda RBX: 00007f6005be9fa0 RCX: 00007f6005970e59
[  214.019157][ T5982] RDX: 0000000004000050 RSI: 0000200000000000 RDI: 0000000000000006
[  214.027168][ T5982] RBP: 00007f6003bca090 R08: 0000000000000000 R09: 0000000000000000
[  214.035178][ T5982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  214.043186][ T5982] R13: 00007f6005bea038 R14: 00007f6005be9fa0 R15: 00007ffdeef14008
[  214.051212][ T5982]  </TASK>
[  214.132976][ T5962] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.206372][ T5990] loop2: detected capacity change from 0 to 32768
[  216.310942][ T5990] (syz.2.481,5990,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.327673][ T5990] (syz.2.481,5990,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.432397][ T5990] JBD2: Ignoring recovery information on journal
[  216.632713][ T5990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  217.059046][ T5963] vhci_hcd: connection reset by peer
[  217.107870][ T4509] vhci_hcd: stop threads
[  217.113214][ T4509] vhci_hcd: release socket
[  217.127411][ T4194] ocfs2: Unmounting device (7,2) on (node local)
[  217.192984][ T4509] vhci_hcd: disconnect device
[  217.830093][ T5997] loop1: detected capacity change from 0 to 32768
[  217.960304][ T5997] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.482 (5997)
[  218.009175][ T5997] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  218.051537][ T5997] BTRFS info (device loop1): using free space tree
[  218.077290][ T5997] BTRFS info (device loop1): has skinny extents
[  218.442719][ T5997] BTRFS error (device loop1): open_ctree failed: -12
[  218.538036][ T6050] fuse: Bad value for 'fd'
[  218.716778][ T6056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  218.941395][ T6063] netlink: 'syz.1.501': attribute type 1 has an invalid length.
[  219.166493][ T6070] bond1: (slave bridge2): making interface the new active one
[  219.176307][ T4240] usb 34-1: device descriptor read/8, error -110
[  219.217464][ T6070] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  219.404607][ T6083] 9pnet_virtio: no channels available for device syz
[  219.440610][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.509'.
[  219.621765][ T4240] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  219.657103][ T4240] usb usb34-port1: attempt power cycle
[  219.949841][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.958372][ T1325] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  220.016844][ T4240] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  220.315802][ T4240] usb usb34-port1: Cannot enable. Maybe the USB cable is bad?
[  220.323737][ T4240] usb usb34-port1: unable to enumerate USB device
[  220.355766][ T1325] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  220.367335][ T1325] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  220.435987][ T1325] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  220.472474][ T1325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.535905][ T6094] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  220.768596][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'.
[  220.787344][ T1325] usb 3-1: USB disconnect, device number 8
[  220.851794][ T6134] device bond0 entered promiscuous mode
[  220.878046][ T6134] device bond_slave_0 entered promiscuous mode
[  220.908557][ T6134] device bond_slave_1 entered promiscuous mode
[  220.939376][ T6134] device batadv0 entered promiscuous mode
[  220.970271][ T6134] device hsr1 entered promiscuous mode
[  220.991796][ T6134] 8021q: adding VLAN 0 to HW filter on device hsr1
[  221.020748][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  221.753845][ T6161] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  221.779448][ T6167] tmpfs: Unknown parameter 'usrquota'
[  221.798424][ T6165] device syzkaller0 entered promiscuous mode
[  221.844120][ T6161] kvm: pic: non byte read
[  221.868564][ T6161] kvm: pic: level sensitive irq not supported
[  221.869404][ T6161] kvm: pic: non byte read
[  221.913451][ T6161] kvm: pic: level sensitive irq not supported
[  221.913775][ T6161] kvm: pic: non byte read
[  221.978464][ T6161] kvm: pic: level sensitive irq not supported
[  221.979188][ T6161] kvm: pic: non byte read
[  222.010726][ T6161] kvm: pic: level sensitive irq not supported
[  222.010808][ T6161] kvm: pic: non byte read
[  222.032965][ T6161] kvm: pic: level sensitive irq not supported
[  222.033040][ T6161] kvm: pic: non byte read
[  222.043036][ T6172] autofs4:pid:6172:autofs_fill_super: called with bogus options
[  222.056849][ T6161] kvm: pic: level sensitive irq not supported
[  222.057174][ T6161] kvm: pic: non byte read
[  222.103198][ T6161] kvm: pic: level sensitive irq not supported
[  222.103928][ T6161] kvm: pic: non byte read
[  222.161367][ T6172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.546'.
[  222.180698][ T6161] kvm: pic: level sensitive irq not supported
[  222.181383][ T6161] kvm: pic: non byte read
[  222.511260][  T154] Bluetooth: hci5: Frame reassembly failed (-84)
[  222.853020][ T6198] mmap: syz.5.557 (6198) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  223.134382][ T6208] 
[  223.136781][ T6208] ======================================================
[  223.143834][ T6208] WARNING: possible circular locking dependency detected
[  223.150898][ T6208] syzkaller #0 Not tainted
[  223.155341][ T6208] ------------------------------------------------------
[  223.162381][ T6208] syz.5.562/6208 is trying to acquire lock:
[  223.168296][ T6208] ffff88805a82e320 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xf5e/0x1ca0
[  223.177929][ T6208] 
[  223.177929][ T6208] but task is already holding lock:
[  223.185317][ T6208] ffffc900018d9808 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0
[  223.194928][ T6208] 
[  223.194928][ T6208] which lock already depends on the new lock.
[  223.194928][ T6208] 
[  223.205356][ T6208] 
[  223.205356][ T6208] the existing dependency chain (in reverse order) is:
[  223.214399][ T6208] 
[  223.214399][ T6208] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}:
[  223.222345][ T6208]        _raw_spin_lock+0x2a/0x40
[  223.227407][ T6208]        __inet_hash+0xe3/0x960
[  223.232297][ T6208]        inet_csk_listen_start+0x22f/0x320
[  223.238151][ T6208]        inet_listen+0x2e1/0x590
[  223.243127][ T6208]        __sys_listen+0x19d/0x220
[  223.248185][ T6208]        __x64_sys_listen+0x56/0x60
[  223.253458][ T6208]        do_syscall_64+0x4c/0xa0
[  223.258427][ T6208]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  223.264883][ T6208] 
[  223.264883][ T6208] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  223.272651][ T6208]        __lock_acquire+0x2c42/0x7d10
[  223.278060][ T6208]        lock_acquire+0x19e/0x400
[  223.283115][ T6208]        mptcp_diag_get_info+0x1f2/0x9e0
[  223.288775][ T6208]        inet_sk_diag_fill+0xf5e/0x1ca0
[  223.294348][ T6208]        mptcp_diag_dump+0xce6/0x12b0
[  223.299738][ T6208]        __inet_diag_dump+0x1f6/0x380
[  223.305122][ T6208]        netlink_dump+0x694/0xcf0
[  223.310167][ T6208]        __netlink_dump_start+0x523/0x700
[  223.315899][ T6208]        inet_diag_handler_cmd+0x1d3/0x2b0
[  223.321721][ T6208]        sock_diag_rcv_msg+0x164/0x3e0
[  223.327191][ T6208]        netlink_rcv_skb+0x1f5/0x440
[  223.332661][ T6208]        sock_diag_rcv+0x26/0x40
[  223.337613][ T6208]        netlink_unicast+0x774/0x920
[  223.342916][ T6208]        netlink_sendmsg+0x8ba/0xbe0
[  223.348218][ T6208]        sock_write_iter+0x2a6/0x3a0
[  223.353517][ T6208]        do_iter_readv_writev+0x47e/0x5f0
[  223.359247][ T6208]        do_iter_write+0x205/0x7b0
[  223.364373][ T6208]        do_writev+0x281/0x480
[  223.369148][ T6208]        do_syscall_64+0x4c/0xa0
[  223.374100][ T6208]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  223.380530][ T6208] 
[  223.380530][ T6208] other info that might help us debug this:
[  223.380530][ T6208] 
[  223.390763][ T6208]  Possible unsafe locking scenario:
[  223.390763][ T6208] 
[  223.398225][ T6208]        CPU0                    CPU1
[  223.403599][ T6208]        ----                    ----
[  223.408972][ T6208]   lock(&h->lhash2[i].lock);
[  223.413664][ T6208]                                lock(sk_lock-AF_INET6);
[  223.420700][ T6208]                                lock(&h->lhash2[i].lock);
[  223.427906][ T6208]   lock(sk_lock-AF_INET6);
[  223.432428][ T6208] 
[  223.432428][ T6208]  *** DEADLOCK ***
[  223.432428][ T6208] 
[  223.440577][ T6208] 6 locks held by syz.5.562/6208:
[  223.445612][ T6208]  #0: ffffffff8d447768 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40
[  223.455073][ T6208]  #1: ffffffff8d447628 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x217/0x3e0
[  223.465464][ T6208]  #2: ffff88801bfc1698 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x700
[  223.476194][ T6208]  #3: ffffffff8d521828 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380
[  223.486477][ T6208]  #4: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  223.495894][ T6208]  #5: ffffc900018d9808 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x917/0x12b0
[  223.505922][ T6208] 
[  223.505922][ T6208] stack backtrace:
[  223.511832][ T6208] CPU: 1 PID: 6208 Comm: syz.5.562 Not tainted syzkaller #0
[  223.519127][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  223.529224][ T6208] Call Trace:
[  223.532524][ T6208]  <TASK>
[  223.535468][ T6208]  dump_stack_lvl+0x188/0x250
[  223.540164][ T6208]  ? load_image+0x400/0x400
[  223.544685][ T6208]  ? show_regs_print_info+0x20/0x20
[  223.549913][ T6208]  ? print_circular_bug+0x12b/0x1a0
[  223.555132][ T6208]  check_noncircular+0x296/0x330
[  223.560086][ T6208]  ? add_chain_block+0x940/0x940
[  223.565033][ T6208]  ? lockdep_lock+0xf1/0x1f0
[  223.569644][ T6208]  ? __lock_acquire+0x13bc/0x7d10
[  223.574684][ T6208]  ? mark_lock+0x94/0x320
[  223.579026][ T6208]  __lock_acquire+0x2c42/0x7d10
[  223.583910][ T6208]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  223.589914][ T6208]  ? verify_lock_unused+0x140/0x140
[  223.595131][ T6208]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  223.601129][ T6208]  ? verify_lock_unused+0x140/0x140
[  223.606347][ T6208]  ? __local_bh_enable_ip+0xd7/0x1c0
[  223.611643][ T6208]  ? __local_bh_enable_ip+0x136/0x1c0
[  223.617032][ T6208]  ? lockdep_hardirqs_on+0x94/0x140
[  223.622249][ T6208]  ? __local_bh_enable_ip+0x136/0x1c0
[  223.627636][ T6208]  ? _local_bh_enable+0xa0/0xa0
[  223.632503][ T6208]  ? nla_put+0x130/0x1e0
[  223.636758][ T6208]  lock_acquire+0x19e/0x400
[  223.641280][ T6208]  ? inet_sk_diag_fill+0xf5e/0x1ca0
[  223.646503][ T6208]  ? read_lock_is_recursive+0x10/0x10
[  223.651898][ T6208]  ? rcu_lock_release+0x5/0x20
[  223.656684][ T6208]  ? __lock_acquire+0x7d10/0x7d10
[  223.661722][ T6208]  ? inet_sk_diag_fill+0xf5e/0x1ca0
[  223.666937][ T6208]  mptcp_diag_get_info+0x1f2/0x9e0
[  223.672070][ T6208]  ? inet_sk_diag_fill+0xf5e/0x1ca0
[  223.677291][ T6208]  inet_sk_diag_fill+0xf5e/0x1ca0
[  223.682339][ T6208]  ? inet_diag_msg_attrs_fill+0x930/0x930
[  223.688074][ T6208]  ? do_raw_spin_lock+0x128/0x2f0
[  223.693118][ T6208]  ? __rwlock_init+0x140/0x140
[  223.697918][ T6208]  ? inet_diag_bc_sk+0x18b/0x1120
[  223.702967][ T6208]  mptcp_diag_dump+0xce6/0x12b0
[  223.707843][ T6208]  ? mptcp_token_join_cookie_init_state+0x460/0x460
[  223.714454][ T6208]  __inet_diag_dump+0x1f6/0x380
[  223.719328][ T6208]  netlink_dump+0x694/0xcf0
[  223.723851][ T6208]  ? netlink_lookup+0x1d0/0x1d0
[  223.728716][ T6208]  ? __inet_diag_dump_start+0x805/0x970
[  223.734320][ T6208]  __netlink_dump_start+0x523/0x700
[  223.739545][ T6208]  inet_diag_handler_cmd+0x1d3/0x2b0
[  223.744847][ T6208]  ? rcu_lock_release+0x20/0x20
[  223.749721][ T6208]  ? inet_diag_handler_get_info+0xb90/0xb90
[  223.755631][ T6208]  ? inet_diag_dump_start+0x20/0x20
[  223.760844][ T6208]  ? inet_diag_dump+0x50/0x50
[  223.765549][ T6208]  ? rcu_lock_release+0x20/0x20
[  223.770413][ T6208]  sock_diag_rcv_msg+0x164/0x3e0
[  223.775364][ T6208]  netlink_rcv_skb+0x1f5/0x440
[  223.780145][ T6208]  ? sock_diag_bind+0xa0/0xa0
[  223.784833][ T6208]  ? netlink_ack+0xb50/0xb50
[  223.789445][ T6208]  ? __lock_acquire+0x7d10/0x7d10
[  223.794493][ T6208]  sock_diag_rcv+0x26/0x40
[  223.798924][ T6208]  netlink_unicast+0x774/0x920
[  223.803709][ T6208]  netlink_sendmsg+0x8ba/0xbe0
[  223.808504][ T6208]  ? netlink_getsockopt+0x570/0x570
[  223.813737][ T6208]  ? aa_sock_msg_perm+0x94/0x150
[  223.818716][ T6208]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  223.824025][ T6208]  ? security_socket_sendmsg+0x7c/0xa0
[  223.829508][ T6208]  sock_write_iter+0x2a6/0x3a0
[  223.834293][ T6208]  ? sock_read_iter+0x380/0x380
[  223.839180][ T6208]  do_iter_readv_writev+0x47e/0x5f0
[  223.844395][ T6208]  ? aa_path_link+0x880/0x880
[  223.849088][ T6208]  ? generic_file_rw_checks+0x280/0x280
[  223.854655][ T6208]  ? common_file_perm+0x171/0x1c0
[  223.859701][ T6208]  ? fsnotify_perm+0x5d/0x560
[  223.864393][ T6208]  ? security_file_permission+0x75/0xa0
[  223.869962][ T6208]  do_iter_write+0x205/0x7b0
[  223.874569][ T6208]  ? import_iovec+0x6f/0xa0
[  223.879091][ T6208]  do_writev+0x281/0x480
[  223.883377][ T6208]  ? do_readv+0x460/0x460
[  223.887732][ T6208]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  223.893734][ T6208]  ? lock_chain_count+0x20/0x20
[  223.898605][ T6208]  ? vtime_user_exit+0x2c8/0x3e0
[  223.903557][ T6208]  ? lockdep_hardirqs_on+0x94/0x140
[  223.908770][ T6208]  do_syscall_64+0x4c/0xa0
[  223.913224][ T6208]  ? clear_bhb_loop+0x30/0x80
[  223.917921][ T6208]  ? clear_bhb_loop+0x30/0x80
[  223.922629][ T6208]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  223.928583][ T6208] RIP: 0033:0x7f6ca2671e59
[  223.933022][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.952649][ T6208] RSP: 002b:00007f6ca08cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  223.961085][ T6208] RAX: ffffffffffffffda RBX: 00007f6ca28eafa0 RCX: 00007f6ca2671e59
[  223.969073][ T6208] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[  223.977057][ T6208] RBP: 00007f6ca2707d6f R08: 0000000000000000 R09: 0000000000000000
[  223.986609][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.994970][ T6208] R13: 00007f6ca28eb038 R14: 00007f6ca28eafa0 R15: 00007ffd28795cc8
[  224.002970][ T6208]  </TASK>
[  224.008237][ T6208] BUG: sleeping function called from invalid context at net/core/sock.c:3291
[  224.017303][ T6208] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6208, name: syz.5.562
[  224.026305][ T6208] INFO: lockdep is turned off.
[  224.031090][ T6208] Preemption disabled at:
[  224.031101][ T6208] [<0000000000000000>] 0x0
[  224.039913][ T6208] CPU: 1 PID: 6208 Comm: syz.5.562 Not tainted syzkaller #0
[  224.047221][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  224.057301][ T6208] Call Trace:
[  224.060602][ T6208]  <TASK>
[  224.063561][ T6208]  dump_stack_lvl+0x188/0x250
[  224.068278][ T6208]  ? show_regs_print_info+0x20/0x20
[  224.073507][ T6208]  ? load_image+0x400/0x400
[  224.078044][ T6208]  ___might_sleep+0x493/0x610
[  224.082752][ T6208]  ? __might_sleep+0xf0/0xf0
[  224.087369][ T6208]  ? read_lock_is_recursive+0x10/0x10
[  224.092773][ T6208]  ? rcu_lock_release+0x5/0x20
[  224.097579][ T6208]  __lock_sock_fast+0x2f/0xe0
[  224.102296][ T6208]  ? inet_sk_diag_fill+0xf5e/0x1ca0
[  224.107538][ T6208]  mptcp_diag_get_info+0x1fe/0x9e0
[  224.112688][ T6208]  inet_sk_diag_fill+0xf5e/0x1ca0
[  224.117766][ T6208]  ? inet_diag_msg_attrs_fill+0x930/0x930
[  224.123531][ T6208]  ? do_raw_spin_lock+0x128/0x2f0
[  224.129027][ T6208]  ? __rwlock_init+0x140/0x140
[  224.133820][ T6208]  ? inet_diag_bc_sk+0x18b/0x1120
[  224.138886][ T6208]  mptcp_diag_dump+0xce6/0x12b0
[  224.143783][ T6208]  ? mptcp_token_join_cookie_init_state+0x460/0x460
[  224.150414][ T6208]  __inet_diag_dump+0x1f6/0x380
[  224.155311][ T6208]  netlink_dump+0x694/0xcf0
[  224.159856][ T6208]  ? netlink_lookup+0x1d0/0x1d0
[  224.164745][ T6208]  ? __inet_diag_dump_start+0x805/0x970
[  224.170337][ T6208]  __netlink_dump_start+0x523/0x700
[  224.175575][ T6208]  inet_diag_handler_cmd+0x1d3/0x2b0
[  224.180902][ T6208]  ? rcu_lock_release+0x20/0x20
[  224.185783][ T6208]  ? inet_diag_handler_get_info+0xb90/0xb90
[  224.191723][ T6208]  ? inet_diag_dump_start+0x20/0x20
[  224.196954][ T6208]  ? inet_diag_dump+0x50/0x50
[  224.201666][ T6208]  ? rcu_lock_release+0x20/0x20
[  224.206550][ T6208]  sock_diag_rcv_msg+0x164/0x3e0
[  224.211530][ T6208]  netlink_rcv_skb+0x1f5/0x440
[  224.216329][ T6208]  ? sock_diag_bind+0xa0/0xa0
[  224.221037][ T6208]  ? netlink_ack+0xb50/0xb50
[  224.225660][ T6208]  ? __lock_acquire+0x7d10/0x7d10
[  224.230723][ T6208]  sock_diag_rcv+0x26/0x40
[  224.235173][ T6208]  netlink_unicast+0x774/0x920
[  224.239972][ T6208]  netlink_sendmsg+0x8ba/0xbe0
[  224.244772][ T6208]  ? netlink_getsockopt+0x570/0x570
[  224.250002][ T6208]  ? aa_sock_msg_perm+0x94/0x150
[  224.254979][ T6208]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  224.260301][ T6208]  ? security_socket_sendmsg+0x7c/0xa0
[  224.265796][ T6208]  sock_write_iter+0x2a6/0x3a0
[  224.270597][ T6208]  ? sock_read_iter+0x380/0x380
[  224.275489][ T6208]  do_iter_readv_writev+0x47e/0x5f0
[  224.280765][ T6208]  ? aa_path_link+0x880/0x880
[  224.285482][ T6208]  ? generic_file_rw_checks+0x280/0x280
[  224.291078][ T6208]  ? common_file_perm+0x171/0x1c0
[  224.296149][ T6208]  ? fsnotify_perm+0x5d/0x560
[  224.300875][ T6208]  ? security_file_permission+0x75/0xa0
[  224.306453][ T6208]  do_iter_write+0x205/0x7b0
[  224.311073][ T6208]  ? import_iovec+0x6f/0xa0
[  224.315599][ T6208]  do_writev+0x281/0x480
[  224.319859][ T6208]  ? do_readv+0x460/0x460
[  224.324194][ T6208]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  224.330189][ T6208]  ? lock_chain_count+0x20/0x20
[  224.335066][ T6208]  ? vtime_user_exit+0x2c8/0x3e0
[  224.340045][ T6208]  ? lockdep_hardirqs_on+0x94/0x140
[  224.345252][ T6208]  do_syscall_64+0x4c/0xa0
[  224.349674][ T6208]  ? clear_bhb_loop+0x30/0x80
[  224.354365][ T6208]  ? clear_bhb_loop+0x30/0x80
[  224.359050][ T6208]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  224.364960][ T6208] RIP: 0033:0x7f6ca2671e59
[  224.369388][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.389023][ T6208] RSP: 002b:00007f6ca08cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  224.397464][ T6208] RAX: ffffffffffffffda RBX: 00007f6ca28eafa0 RCX: 00007f6ca2671e59
[  224.405457][ T6208] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[  224.413558][ T6208] RBP: 00007f6ca2707d6f R08: 0000000000000000 R09: 0000000000000000
[  224.422252][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.430421][ T6208] R13: 00007f6ca28eb038 R14: 00007f6ca28eafa0 R15: 00007ffd28795cc8
[  224.438425][ T6208]  </TASK>
[  224.441535][ T6208] BUG: scheduling while atomic: syz.5.562/6208/0x00000002
[  224.448683][ T6208] INFO: lockdep is turned off.
[  224.453499][ T6208] Modules linked in:
[  224.457418][ T6208] Preemption disabled at:
[  224.457426][ T6208] [<0000000000000000>] 0x0
[  224.466203][ T6208] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ...
[  224.474984][ T6208] CPU: 1 PID: 6208 Comm: syz.5.562 Tainted: G        W         syzkaller #0
[  224.483656][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  224.493712][ T6208] Call Trace:
[  224.496998][ T6208]  <TASK>
[  224.499943][ T6208]  dump_stack_lvl+0x188/0x250
[  224.504627][ T6208]  ? show_regs_print_info+0x20/0x20
[  224.509826][ T6208]  ? load_image+0x400/0x400
[  224.514348][ T6208]  panic+0x2e5/0x810
[  224.518262][ T6208]  ? bpf_jit_dump+0xd0/0xd0
[  224.522784][ T6208]  ? vprintk_emit+0xf9/0x150
[  224.527387][ T6208]  ? _printk+0xda/0x130
[  224.531569][ T6208]  check_panic_on_warn+0x80/0xa0
[  224.536528][ T6208]  __schedule_bug+0x193/0x1f0
[  224.541232][ T6208]  ? raw_spin_rq_unlock_irq+0x90/0x90
[  224.546617][ T6208]  ? 0xffffffffa00183c8
[  224.550817][ T6208]  __schedule+0x1324/0x43c0
[  224.555334][ T6208]  ? trace_hardirqs_off_finish+0xca/0x1f0
[  224.561065][ T6208]  ? prepare_to_wait_exclusive+0xc5/0x220
[  224.566805][ T6208]  ? do_raw_spin_lock+0x128/0x2f0
[  224.571844][ T6208]  ? __kthread_should_park+0xa2/0xe0
[  224.577130][ T6208]  ? lock_chain_count+0x20/0x20
[  224.581989][ T6208]  ? lock_release+0xb5/0x8a0
[  224.586582][ T6208]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  224.592575][ T6208]  ? __lock_sock+0x159/0x2b0
[  224.597165][ T6208]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  224.603067][ T6208]  ? release_firmware_map_entry+0x190/0x190
[  224.608961][ T6208]  ? __lock_sock+0x159/0x2b0
[  224.613647][ T6208]  ? __local_bh_enable_ip+0x136/0x1c0
[  224.619030][ T6208]  ? _local_bh_enable+0xa0/0xa0
[  224.623893][ T6208]  schedule+0x11b/0x1e0
[  224.628060][ T6208]  __lock_sock+0x15e/0x2b0
[  224.632503][ T6208]  ? sk_page_frag_refill+0x200/0x200
[  224.637801][ T6208]  ? do_raw_spin_lock+0x128/0x2f0
[  224.642852][ T6208]  ? init_wait_entry+0xd0/0xd0
[  224.647636][ T6208]  ? __rwlock_init+0x140/0x140
[  224.652414][ T6208]  ? rcu_lock_release+0x5/0x20
[  224.657188][ T6208]  ? __lock_sock_fast+0x43/0xe0
[  224.662050][ T6208]  __lock_sock_fast+0x78/0xe0
[  224.666765][ T6208]  ? inet_sk_diag_fill+0xf5e/0x1ca0
[  224.671975][ T6208]  mptcp_diag_get_info+0x1fe/0x9e0
[  224.677092][ T6208]  inet_sk_diag_fill+0xf5e/0x1ca0
[  224.682187][ T6208]  ? inet_diag_msg_attrs_fill+0x930/0x930
[  224.687910][ T6208]  ? do_raw_spin_lock+0x128/0x2f0
[  224.692944][ T6208]  ? __rwlock_init+0x140/0x140
[  224.697709][ T6208]  ? inet_diag_bc_sk+0x18b/0x1120
[  224.702766][ T6208]  mptcp_diag_dump+0xce6/0x12b0
[  224.707634][ T6208]  ? mptcp_token_join_cookie_init_state+0x460/0x460
[  224.714235][ T6208]  __inet_diag_dump+0x1f6/0x380
[  224.719091][ T6208]  netlink_dump+0x694/0xcf0
[  224.723605][ T6208]  ? netlink_lookup+0x1d0/0x1d0
[  224.728462][ T6208]  ? __inet_diag_dump_start+0x805/0x970
[  224.734026][ T6208]  __netlink_dump_start+0x523/0x700
[  224.739242][ T6208]  inet_diag_handler_cmd+0x1d3/0x2b0
[  224.744631][ T6208]  ? rcu_lock_release+0x20/0x20
[  224.749495][ T6208]  ? inet_diag_handler_get_info+0xb90/0xb90
[  224.755440][ T6208]  ? inet_diag_dump_start+0x20/0x20
[  224.760663][ T6208]  ? inet_diag_dump+0x50/0x50
[  224.765353][ T6208]  ? rcu_lock_release+0x20/0x20
[  224.770208][ T6208]  sock_diag_rcv_msg+0x164/0x3e0
[  224.775158][ T6208]  netlink_rcv_skb+0x1f5/0x440
[  224.779930][ T6208]  ? sock_diag_bind+0xa0/0xa0
[  224.784614][ T6208]  ? netlink_ack+0xb50/0xb50
[  224.789213][ T6208]  ? __lock_acquire+0x7d10/0x7d10
[  224.794261][ T6208]  sock_diag_rcv+0x26/0x40
[  224.798675][ T6208]  netlink_unicast+0x774/0x920
[  224.803451][ T6208]  netlink_sendmsg+0x8ba/0xbe0
[  224.808226][ T6208]  ? netlink_getsockopt+0x570/0x570
[  224.813435][ T6208]  ? aa_sock_msg_perm+0x94/0x150
[  224.818391][ T6208]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  224.823687][ T6208]  ? security_socket_sendmsg+0x7c/0xa0
[  224.829155][ T6208]  sock_write_iter+0x2a6/0x3a0
[  224.833942][ T6208]  ? sock_read_iter+0x380/0x380
[  224.838815][ T6208]  do_iter_readv_writev+0x47e/0x5f0
[  224.844034][ T6208]  ? aa_path_link+0x880/0x880
[  224.848719][ T6208]  ? generic_file_rw_checks+0x280/0x280
[  224.854280][ T6208]  ? common_file_perm+0x171/0x1c0
[  224.859306][ T6208]  ? fsnotify_perm+0x5d/0x560
[  224.863992][ T6208]  ? security_file_permission+0x75/0xa0
[  224.869545][ T6208]  do_iter_write+0x205/0x7b0
[  224.874148][ T6208]  ? import_iovec+0x6f/0xa0
[  224.878656][ T6208]  do_writev+0x281/0x480
[  224.882912][ T6208]  ? do_readv+0x460/0x460
[  224.887259][ T6208]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  224.893256][ T6208]  ? lock_chain_count+0x20/0x20
[  224.898110][ T6208]  ? vtime_user_exit+0x2c8/0x3e0
[  224.903061][ T6208]  ? lockdep_hardirqs_on+0x94/0x140
[  224.908262][ T6208]  do_syscall_64+0x4c/0xa0
[  224.912685][ T6208]  ? clear_bhb_loop+0x30/0x80
[  224.917363][ T6208]  ? clear_bhb_loop+0x30/0x80
[  224.922063][ T6208]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  224.928046][ T6208] RIP: 0033:0x7f6ca2671e59
[  224.932475][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.952085][ T6208] RSP: 002b:00007f6ca08cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  224.960498][ T6208] RAX: ffffffffffffffda RBX: 00007f6ca28eafa0 RCX: 00007f6ca2671e59
[  224.968483][ T6208] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000004
[  224.976468][ T6208] RBP: 00007f6ca2707d6f R08: 0000000000000000 R09: 0000000000000000
[  224.984706][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.992705][ T6208] R13: 00007f6ca28eb038 R14: 00007f6ca28eafa0 R15: 00007ffd28795cc8
[  225.000692][ T6208]  </TASK>
[  225.004011][ T6208] Kernel Offset: disabled
[  225.008356][ T6208] Rebooting in 86400 seconds..