last executing test programs:

14.121686934s ago: executing program 1 (id=591):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x160}}, 0x24004000)
socket$inet6(0xa, 0x3, 0x6)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x400000b4, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0x1c4, 0x0, 0x39}]})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x3c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, 0x0)

10.687496243s ago: executing program 0 (id=596):
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/97, 0x61, <r0=>0x0, &(0x7f0000000200)=""/40, 0x28}}, 0x10)
r1 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r2, r2}, &(0x7f0000000540)=""/204, 0xcc, &(0x7f00000003c0)={&(0x7f0000000340)={'streebog512\x00'}})
r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0xfffffffffffffd25, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r6=>0x0})
bind$alg(r3, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x9, 0x10000, @vifc_lcl_ifindex=r6, @empty}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x5, 0x0, 0x0)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000080))
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000000340)={&(0x7f00000002c0)=""/79, 0x4f})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffff50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

10.460746952s ago: executing program 1 (id=597):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readahead(r0, 0x3ff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000140)="bad330fbc9b554", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1)
listen(r4, 0x5)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0xe}], 0x10}, 0x0)

10.293360079s ago: executing program 2 (id=598):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

9.704265007s ago: executing program 2 (id=600):
r0 = socket(0x1d, 0x2, 0x6)
r1 = socket$inet6(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1}, 0x18)
sendmsg$tipc(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000005c0)="2bb603537e", 0x5}], 0x2, 0x0, 0x0, 0x40080}, 0x4000)
chmod(&(0x7f0000000180)='./file0\x00', 0x8)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003008400000000000000ff10850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$P9_RLERRORu(r4, &(0x7f0000000280)=ANY=[], 0x10)
mprotect(&(0x7f0000630000/0x2000)=nil, 0x2000, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003c80)="64c7", 0x0, 0x3, r6}, 0x38)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x200002f, 0x10012, r4, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000100)=@req3={0x388f, 0x0, 0x0, 0x3, 0x79e, 0x7f, 0x17a27636}, 0x1c)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x4c00, &(0x7f0000000480)={[{@fat=@showexec}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_winnt}, {@fat=@errors_continue}, {@shortname_mixed}, {@utf8}]}, 0x1, 0x21a, &(0x7f0000000180)="$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")
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
syz_genetlink_get_family_id$smc(&(0x7f0000000400), r4)
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000003c0)={&(0x7f000037d000/0x1000)=nil, &(0x7f00003d7000/0x3000)=nil, 0x1000, 0x2})
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000440)={0x80e9000})
getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000038c0)={r5, 0xe0, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000035c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003640), 0x0, 0xf1, &(0x7f0000003680), 0x30, 0x10, &(0x7f0000003700), &(0x7f0000003740), 0x6, 0x28, 0x8, 0x8, &(0x7f0000003780)}}, 0x10)

9.482068946s ago: executing program 0 (id=601):
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x105, &(0x7f0000000200)={0x5, 0xf, 0x105, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7ffffc0, 0xf00, 0x8, [0x0, 0x3f00, 0xc0ff, 0x3f00, 0xc00f]}, @generic={0xe0, 0x10, 0x2, "1d5aa7bfdcabe9d4fb3ee0cafd87cba32cb01e76363cb32e80f55059f26e6a5dc84c6c52d7e277ee70e8a1eb6851128133c0844b470045b2d2bcc7ee871d81e03101b353f0fdf65f6b2499882da1d3768b0d53e20de4c20374e23898875acb99c31384a214372d04496a4320a25a6405934deb485134301ab872680dc02d8498146764d71bb4fd77773d3ab48433525cab07305c8e319b56aa28ccc6f4058d2d98ac6ddd484fb05c5ebb12fff2840b916fdcfa4cd599b3ecf19ee751666d6669697de7bda9c44dfeff37044452069eb30071219a69640726ee9b61a70e"}]}, 0x1, [{0x60, &(0x7f0000000340)=@string={0x60, 0x3, "04e4d302459b659a8afd32c4c8a42820a0ed37a45250f93caad94f045fcea2dac609766078a342988e59397413871bd9e17d341f9fe24bffd606c00ef1b28290647899919ee6f9505926f19350d7527f81cb67ca646e6dc82878863f96ef"}}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

9.07182066s ago: executing program 2 (id=603):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x2, @empty, 0x3}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x8, 0x1}, 0xc)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000600)={0x80, 0x6, 0x306, 0xb8e, 0x0, 0x5, 0x0})

8.816648365s ago: executing program 4 (id=605):
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x105, &(0x7f0000000200)={0x5, 0xf, 0x105, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7ffffc0, 0xf00, 0x8, [0x0, 0x3f00, 0xc0ff, 0x3f00, 0xc00f]}, @generic={0xe0, 0x10, 0x2, "1d5aa7bfdcabe9d4fb3ee0cafd87cba32cb01e76363cb32e80f55059f26e6a5dc84c6c52d7e277ee70e8a1eb6851128133c0844b470045b2d2bcc7ee871d81e03101b353f0fdf65f6b2499882da1d3768b0d53e20de4c20374e23898875acb99c31384a214372d04496a4320a25a6405934deb485134301ab872680dc02d8498146764d71bb4fd77773d3ab48433525cab07305c8e319b56aa28ccc6f4058d2d98ac6ddd484fb05c5ebb12fff2840b916fdcfa4cd599b3ecf19ee751666d6669697de7bda9c44dfeff37044452069eb30071219a69640726ee9b61a70e"}]}, 0x1, [{0x60, &(0x7f0000000340)=@string={0x60, 0x3, "04e4d302459b659a8afd32c4c8a42820a0ed37a45250f93caad94f045fcea2dac609766078a342988e59397413871bd9e17d341f9fe24bffd606c00ef1b28290647899919ee6f9505926f19350d7527f81cb67ca646e6dc82878863f96ef"}}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7, '\x00', @value64=0x101}})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

8.590737801s ago: executing program 0 (id=606):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000406d0486c0000000000001090224005a0000000b0904000001030002000921fd7f000122e30109058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7, '\x00', @value64=0x101}})
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

8.50867464s ago: executing program 1 (id=607):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

7.872686669s ago: executing program 2 (id=608):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (fail_nth: 1)

7.81242971s ago: executing program 4 (id=609):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
syz_open_procfs(r0, &(0x7f0000000080)='wchan\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
semop(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000280))
r4 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r4, &(0x7f0000003540)=[{{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)="e7b315ee", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x44810}}], 0x1, 0x0)

7.517791171s ago: executing program 3 (id=610):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

7.322042348s ago: executing program 3 (id=611):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000e80)={[{@dioread_nolock}, {@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe}}, {@init_itable}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x340}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nolazytime}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa3'}}, {@euid_lt={'euid<', 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x580, &(0x7f0000000900)="$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")
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')
close(r1)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000001140)={0x10, 0x0, 0x200000, 0x2ffffffff}, 0x25)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)

6.521230957s ago: executing program 3 (id=612):
r0 = memfd_secret(0x0)
ioctl$int_out(r0, 0x5460, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2c3)
connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="001602000040c69d"], 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x0, 0x0)
close(0xffffffffffffffff)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1ff)
symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000680)='dummy_udc.0', 0xb)

6.055698378s ago: executing program 0 (id=613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f00000002c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x50, 0x6, {0x8, 0xb, 0x0, 0x1, 0x1, 0x26, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x6, 0x5, {0xa, 0x25, 0x25, 0xffff0001, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x9, 0x1, {0xa, 0x25, 0x25, 0xff, 0x6, 0x8651}}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000005c0)=""/258, 0x26, 0x102, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000f1be00851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x20, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xf}, 0x10}, 0x94)
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r2, 0x400, 0x1)
fremovexattr(r2, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r3 = socket$kcm(0x10, 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000000030018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002004000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7d0600000020f800009ba66a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.269430875s ago: executing program 1 (id=614):
r0 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001"], 0x88}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3fff}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x84, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x970a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5cf}, @CTA_SEQADJ_CORRECTION_POS={0x63, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4b000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x84}}, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = socket(0x11, 0x3, 0xffff)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x18, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000240)='syzkaller0\x00', 0x6, 0xa, 0x9})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x3c, 0x65, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x2, 0x0, 0xef, {[@md5sig={0x13, 0x12, "a0c57bcc2c0fbabfae790043740a652c"}]}}}}}}}, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r6, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000240))
recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/81, 0xffffff98}, {&(0x7f00000002c0)=""/94, 0x53}], 0x2}, 0x0)

3.976610946s ago: executing program 1 (id=615):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_usb_connect(0x2, 0x2d, 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000240), &(0x7f0000000700), 0x2, 0x1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x100})
syz_usb_control_io$lan78xx(r1, &(0x7f0000000200)={0x14, &(0x7f0000000140)={0x40, 0x4, 0x12, {0x12, 0x24, "3375bd44d776f76b0a02646b33c745af"}}, &(0x7f0000000180)={0x0, 0x3, 0x41, @string={0x41, 0x3, "fcabc38f5fc4dc74c2c9995e712c17245d50cbd127c1f947e2379bd0fe0cd1d7d3e2a104df65b16a97667d2b26f5314d0ebed6a3e8527137475e3efc20f10e"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000340)={0x0, 0xf, 0x96, "9f4288fd7c9198718c35d0f4319cc0669ed26269ffa6565100af6de2c5ebf8101840e326865a2ec0362f54c2e78660da416821da4a8e24abb9f29a9ba62e3f5d967655be084c0793181e4f127ca1fd091345cd8a56df4269c8a2a02a1ff46a95ccc17e3d38e92813fd8e539c08e537529466f14eaeff42d6acdd0455068dbc6a1b868a15e2dc51e1367898a4e6a05319fe51c213f0ed"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000480)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "8e07e3cc931ed56e96fc305940166723016fd38697ca8512af47ffe2b163e6abcff6f878d450bf0b469e1d4b9c820c"}})
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x166, &(0x7f00000004c0)="$eJzs2zGr01AUB/ATm6dVlzeLQ8DFqaiToyJPEAOK0kEnherSSsEu0an4SVz9cIJ06iBcsZFWS0vREvNof7+lB/699Jzh9nIDeXX93XAwnrwdP51FN8sivxdFzLM4jQvRido0AIBDMk8pvqWU0qVpXP4cKaW2OwIAmub8B4Djs/P8v9tSYwBAY9z/AeD4PH/x8vH9sjx7VhTdiK/Tql/16886f/ioPLtVLJyuVs2qqt9Z5rfrvPgzP4krv/I7G/OLcfNGnf/MHjwp1/KrMWh+fAAAADgKvWJp4/2+19uW19VvzwfW7u95XMv/2xgAwF+YfPg4fD0avXl/4EWcjzYUDRTfU0r/sPzTl8UOyHd9uRstzHWy549mEbFfG23/MwFNW236tjsBAAAAAAAAAAAAAAC2afZlpk7b4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBGPwIAAP//wUpMGQ==")
truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
dup3(r3, r2, 0x0)

3.936825248s ago: executing program 2 (id=616):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="240000001a000100aba22c08fbdbdf25"], 0x24}}, 0x20000050)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000000c0))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f000000c380)='./file0\x00', 0x632100, 0x14)
fcntl$setstatus(r2, 0x4, 0x42000)
read$FUSE(r2, &(0x7f0000000d00)={0x2020}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
inotify_init()
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x4, 0xfffffffffffffffe)
r4 = socket(0x2d, 0x2, 0x0)
connect$netlink(r4, &(0x7f0000000140)=@unspec={0x2d}, 0xc)

3.873348453s ago: executing program 4 (id=617):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
readahead(r0, 0x3ff, 0x8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000140)="bad330fbc9b554", 0x7, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r2, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000040)='\x00', 0x1)
listen(r4, 0x5)
sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}, {0x10, 0x110, 0xe}], 0x20}, 0x0)

3.118453795s ago: executing program 0 (id=618):
r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x105, &(0x7f0000000200)={0x5, 0xf, 0x105, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7ffffc0, 0xf00, 0x8, [0x0, 0x3f00, 0xc0ff, 0x3f00, 0xc00f]}, @generic={0xe0, 0x10, 0x2, "1d5aa7bfdcabe9d4fb3ee0cafd87cba32cb01e76363cb32e80f55059f26e6a5dc84c6c52d7e277ee70e8a1eb6851128133c0844b470045b2d2bcc7ee871d81e03101b353f0fdf65f6b2499882da1d3768b0d53e20de4c20374e23898875acb99c31384a214372d04496a4320a25a6405934deb485134301ab872680dc02d8498146764d71bb4fd77773d3ab48433525cab07305c8e319b56aa28ccc6f4058d2d98ac6ddd484fb05c5ebb12fff2840b916fdcfa4cd599b3ecf19ee751666d6669697de7bda9c44dfeff37044452069eb30071219a69640726ee9b61a70e"}]}, 0x1, [{0x60, &(0x7f0000000340)=@string={0x60, 0x3, "04e4d302459b659a8afd32c4c8a42820a0ed37a45250f93caad94f045fcea2dac609766078a342988e59397413871bd9e17d341f9fe24bffd606c00ef1b28290647899919ee6f9505926f19350d7527f81cb67ca646e6dc82878863f96ef"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2.64247294s ago: executing program 3 (id=619):
syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x105, &(0x7f0000000200)={0x5, 0xf, 0x105, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7ffffc0, 0xf00, 0x8, [0x0, 0x3f00, 0xc0ff, 0x3f00, 0xc00f]}, @generic={0xe0, 0x10, 0x2, "1d5aa7bfdcabe9d4fb3ee0cafd87cba32cb01e76363cb32e80f55059f26e6a5dc84c6c52d7e277ee70e8a1eb6851128133c0844b470045b2d2bcc7ee871d81e03101b353f0fdf65f6b2499882da1d3768b0d53e20de4c20374e23898875acb99c31384a214372d04496a4320a25a6405934deb485134301ab872680dc02d8498146764d71bb4fd77773d3ab48433525cab07305c8e319b56aa28ccc6f4058d2d98ac6ddd484fb05c5ebb12fff2840b916fdcfa4cd599b3ecf19ee751666d6669697de7bda9c44dfeff37044452069eb30071219a69640726ee9b61a70e"}]}, 0x1, [{0x60, &(0x7f0000000340)=@string={0x60, 0x3, "04e4d302459b659a8afd32c4c8a42820a0ed37a45250f93caad94f045fcea2dac609766078a342988e59397413871bd9e17d341f9fe24bffd606c00ef1b28290647899919ee6f9505926f19350d7527f81cb67ca646e6dc82878863f96ef"}}]})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7, '\x00', @value64=0x101}})
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

2.332418207s ago: executing program 2 (id=620):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@ref_verify}]}, 0x1, 0x559a, &(0x7f000000ac40)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180))
r2 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'veth0_to_bridge\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = syz_open_dev$video(&(0x7f0000000140), 0x42281d45, 0x8000)
ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f00000001c0)={0x800, 0x3})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1412, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x0, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x8800)
connect$tipc(r4, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff)
symlinkat(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00')
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0)
sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="21042abd7000fedbdf251a00800007002100626200001c00228004"], 0x38}, 0x1, 0x0, 0x0, 0x2080098}, 0x54)
setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f0000000200)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1ffd, 0x0)

2.253551443s ago: executing program 4 (id=621):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8010)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

1.853578908s ago: executing program 4 (id=622):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1.708767014s ago: executing program 0 (id=623):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x4, 0x55a8, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x11c)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000180)={0x3, 0x1, 0x1, 0x6, 0x1, 0x0, [{0x9, 0x4, 0x5, '\x00', 0x2903}]})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x851a, @loopback}, 0x10)
listen(r1, 0x5)
r2 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:6789:/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000001c0)='ms_mode\x00', &(0x7f0000000200)='legacy\x00', 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000280)={0x5, <r3=>r2, 0x1})
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='mount_timeout\x00', &(0x7f0000000580)='\xae\x82', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r4 = accept4(r1, 0x0, 0x0, 0x0)
write(r4, &(0x7f0000000300)="63657068207630323700000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001a857f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ffffffffffffffff010000000100000000000000000000000007010000000000000000000000000004000000000000000000000000001000000000000100"/360, 0x16a)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r5, &(0x7f0000002500)="306663353a313232373a6b644140ca7568b7f9238255f82748367dc1d36b6667", 0x20)

1.437326821s ago: executing program 3 (id=624):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]})
socket(0x2, 0xa, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0xff)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0x256}}], 0x1, 0x0, 0x0)

1.421429359s ago: executing program 1 (id=625):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$packet(0x11, 0x3, 0x300)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x0, 0x0)
mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x40000)
r4 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa090400"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a020000000000555d8feb314bea82031952305fe55e6484b907bb65a6401bef60529838bff1cff7b545386e2a4a7aff0b1090517a67847a05d16d0400f8925f2faefd1cd6c90da8320000000000e36f8ce10000000000000000000081e24c2d5c9847a9a8312e03ba4b31"], 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x450, &(0x7f0000000100), 0x1, 0x4b9, &(0x7f0000000480)="$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")
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1)
lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

786.781956ms ago: executing program 4 (id=626):
r0 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001"], 0x88}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3fff}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x84, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_SEQ_ADJ_REPLY={0x4c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x970a}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5cf}, @CTA_SEQADJ_CORRECTION_POS={0x63, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4b000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}]}, 0x84}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20)
r2 = socket(0x11, 0x3, 0xffff)
ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @broadcast}, 0x18, 0x0, 0x0, 0x0, 0x401, &(0x7f0000000240)='syzkaller0\x00', 0x6, 0xa, 0x9})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x3c, 0x65, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x2, 0x0, 0xef, {[@md5sig={0x13, 0x12, "a0c57bcc2c0fbabfae790043740a652c"}]}}}}}}}, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x800)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r6, 0x6, 0x4, 0xffffffffffffffff, &(0x7f0000000240))
recvmsg(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/81, 0xffffff98}, {&(0x7f00000002c0)=""/94, 0x53}], 0x2}, 0x0)

0s ago: executing program 3 (id=627):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs(r0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xd, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
semop(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syslog(0x4, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000280))
r4 = socket(0xa, 0x3, 0x87)
sendmmsg$unix(r4, &(0x7f0000003540)=[{{&(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000540)="e7b315ee", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x44810}}], 0x1, 0x0)

kernel console output (not intermixed with test programs):

elayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  208.311002][ T6881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  208.425835][ T5739] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  208.473332][ T6881] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.271: invalid indirect mapped block 4294967295 (level 0)
[  208.473388][ T6881] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  208.477435][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  208.477456][    C1] EXT4-fs (loop4): initial error at time 1787615666: ext4_free_branches:1023: inode 16
[  208.477484][    C1] EXT4-fs (loop4): last error at time 1787615666: ext4_free_branches:1023: inode 16
[  208.499954][ T6881] EXT4-fs (loop4): Remounting filesystem read-only
[  208.500572][ T6881] EXT4-fs (loop4): 1 orphan inode deleted
[  208.500591][ T6881] EXT4-fs (loop4): 1 truncate cleaned up
[  208.502436][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.612719][ T5739] usb 1-1: Using ep0 maxpacket: 32
[  208.635945][ T5739] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  208.708448][ T5739] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  208.708500][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.708540][ T5739] usb 1-1: config 0 has no interface number 0
[  208.708587][ T5739] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  208.708610][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  208.708633][ T5739] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  208.708655][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  208.708678][ T5739] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  208.708699][ T5739] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  208.708721][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  208.708744][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  208.708764][ T5739] usb 1-1: config 0 interface 239 has no altsetting 0
[  208.812526][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.812553][ T5739] usb 1-1: Product: syz
[  208.812567][ T5739] usb 1-1: Manufacturer: syz
[  208.812580][ T5739] usb 1-1: SerialNumber: syz
[  208.817558][ T5739] usb 1-1: config 0 descriptor??
[  208.822737][ T6871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.822933][ T6871] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  208.839050][ T5626] Bluetooth: hci5: urb ffff888077b8dd00 submission failed (90)
[  209.834233][ T6871] loop0: detected capacity change from 0 to 32768
[  209.897310][ T6871] (syz.0.265,6871,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.897700][ T6871] (syz.0.265,6871,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  209.924630][ T6871] JBD2: Ignoring recovery information on journal
[  210.155911][ T6871] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  210.238257][ T6871] ocfs2: Unmounting device (7,0) on (node local)
[  210.509687][ T5739] usb 1-1: USB disconnect, device number 5
[  211.763512][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.797640][ T6915] program syz.2.275 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  211.836879][ T6911] loop3: detected capacity change from 0 to 128
[  212.254956][ T6918] loop0: detected capacity change from 0 to 1024
[  212.398593][ T6918] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  212.398966][ T6918] System zones: 0-1, 3-12
[  212.425705][ T6918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.627538][ T6918] netlink: 'syz.0.278': attribute type 10 has an invalid length.
[  212.740234][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.090879][ T6930] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  213.419451][ T6938] loop1: detected capacity change from 0 to 512
[  213.450029][ T6932] loop3: detected capacity change from 0 to 8
[  213.514517][ T6938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  213.517794][ T6938] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal
[  213.630470][ T6932] SQUASHFS error: Failed to read block 0x62: -5
[  213.630663][ T6932] squashfs image failed sanity check
[  213.694619][ T6922] loop4: detected capacity change from 0 to 32768
[  213.741643][ T6922] (syz.4.279,6922,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.768786][ T6922] (syz.4.279,6922,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  213.832596][ T6930] md/raid10:md0: not enough operational mirrors.
[  214.172893][ T6930] md: pers->run() failed ...
[  214.603220][   T10] hid_parser_main: 46 callbacks suppressed
[  214.610941][   T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  214.665735][   T10] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  214.941595][ T6922] JBD2: Ignoring recovery information on journal
[  215.187216][ T6946] fido_id[6946]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  215.526737][ T6950] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  215.625320][ T6922] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  215.817414][ T6950] md/raid10:md0: not enough operational mirrors.
[  216.155071][ T6922] ocfs2: Unmounting device (7,4) on (node local)
[  216.236687][ T6955] program syz.0.288 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  216.271760][ T6950] md: pers->run() failed ...
[  216.594454][ T6965] openvswitch: ovs-system: Dropping previously announced user features
[  218.492621][ T6981] loop0: detected capacity change from 0 to 1024
[  218.579270][ T6981] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  218.579601][ T6981] System zones: 0-1, 3-12
[  218.672738][ T6981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.946566][ T6981] netlink: 'syz.0.292': attribute type 10 has an invalid length.
[  219.135991][ T6992] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  219.321824][ T5617] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.762350][ T7001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  219.924446][ T5753] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  220.137501][ T5753] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  220.183590][ T5753] usb 4-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  220.183638][ T5753] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 90
[  220.183701][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.183730][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.183773][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.252444][ T5753] usb 4-1: config 0 descriptor??
[  220.384678][ T7001] md/raid10:md0: not enough operational mirrors.
[  220.454510][ T7001] md: pers->run() failed ...
[  220.780030][ T5753] usbhid 4-1:0.0: can't add hid device: -71
[  220.780155][ T5753] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  220.783292][ T5753] usb 4-1: USB disconnect, device number 5
[  221.747318][ T7005] loop0: detected capacity change from 0 to 32768
[  221.788018][ T7021] program syz.4.300 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.801433][ T7005] (syz.0.296,7005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.828438][ T7005] (syz.0.296,7005,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  221.860950][ T7005] JBD2: Ignoring recovery information on journal
[  221.937462][ T7028] loop3: detected capacity change from 0 to 764
[  222.018182][ T7005] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  222.240647][ T7028] netlink: 64 bytes leftover after parsing attributes in process `syz.3.302'.
[  222.322247][ T7005] ocfs2: Unmounting device (7,0) on (node local)
[  222.368175][ T7028] syzkaller1: entered promiscuous mode
[  222.368230][ T7028] syzkaller1: entered allmulticast mode
[  222.409338][ T7031] loop2: detected capacity change from 0 to 764
[  222.650367][ T7037] netlink: 64 bytes leftover after parsing attributes in process `syz.2.303'.
[  223.567885][ T7049] loop4: detected capacity change from 0 to 1024
[  223.673809][ T7049] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  223.673958][ T7049] System zones: 0-1, 3-12
[  223.747244][ T7049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.961742][ T7055] netlink: 'syz.4.306': attribute type 10 has an invalid length.
[  224.065661][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.307'.
[  224.249606][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.657963][ T7066] loop4: detected capacity change from 0 to 128
[  225.483917][ T7072] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  225.710920][ T7072] md/raid10:md0: not enough operational mirrors.
[  225.764217][ T7072] md: pers->run() failed ...
[  225.909910][ T7047] loop0: detected capacity change from 0 to 32768
[  226.145264][ T7047] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR
[  226.248787][ T7082] netlink: 'syz.2.314': attribute type 2 has an invalid length.
[  226.452647][ T5753] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  226.666555][ T5753] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  226.680066][ T5753] usb 4-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  226.680195][ T5753] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 90
[  226.680358][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.680426][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.680558][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.774948][ T5753] usb 4-1: config 0 descriptor??
[  227.168817][ T7086] loop2: detected capacity change from 0 to 8
[  227.190072][ T7086] SQUASHFS error: Failed to read block 0x62: -5
[  227.190141][ T7086] squashfs image failed sanity check
[  227.397032][ T5753] usbhid 4-1:0.0: can't add hid device: -71
[  227.397175][ T5753] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  227.399742][ T5753] usb 4-1: USB disconnect, device number 6
[  227.712180][ T7091] netlink: 'syz.1.318': attribute type 2 has an invalid length.
[  227.856896][ T7093] loop2: detected capacity change from 0 to 764
[  228.095353][ T7094] netlink: 64 bytes leftover after parsing attributes in process `syz.2.317'.
[  228.225313][ T7093] syzkaller1: entered promiscuous mode
[  228.225362][ T7093] syzkaller1: entered allmulticast mode
[  228.329268][ T7097] xt_hashlimit: size too large, truncated to 1048576
[  228.348529][ T7098] loop0: detected capacity change from 0 to 764
[  228.514737][ T7101] netlink: 'syz.1.321': attribute type 1 has an invalid length.
[  228.627817][ T7104] netlink: 64 bytes leftover after parsing attributes in process `syz.0.319'.
[  229.191140][ T7101] 8021q: adding VLAN 0 to HW filter on device bond1
[  232.207651][ T7098] syzkaller1: entered promiscuous mode
[  232.207782][ T7098] syzkaller1: entered allmulticast mode
[  232.939671][ T7116] netlink: 'syz.2.323': attribute type 1 has an invalid length.
[  233.596880][ T7116] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.616840][ T7120] program syz.1.324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  235.218925][ T7125] loop3: detected capacity change from 0 to 512
[  235.262557][ T7125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  235.300481][ T7125] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  235.300645][ T7125] System zones: 1-12
[  235.323973][ T7125] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.326: bad orphan inode 131072
[  235.324049][ T7125] loop3: lost filesystem error report for type 5 error -117
[  235.337254][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  235.337280][    C0] EXT4-fs (loop3): initial error at time 1787615692: ext4_orphan_get:1429
[  235.337305][    C0] EXT4-fs (loop3): last error at time 1787615692: ext4_orphan_get:1429
[  235.454708][ T7125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  235.827016][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.046635][ T5753] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  237.249294][ T5753] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  237.289415][ T5753] usb 5-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  237.289474][ T5753] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 90
[  237.289548][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.289574][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.289609][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.293625][ T5753] usb 5-1: config 0 descriptor??
[  237.574047][ T7161] loop0: detected capacity change from 0 to 764
[  237.680197][ T7163] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  237.729732][ T7164] netlink: 64 bytes leftover after parsing attributes in process `syz.0.334'.
[  237.767238][ T7163] md: array md0 already has disks!
[  237.831862][ T5753] usbhid 5-1:0.0: can't add hid device: -71
[  237.832008][ T5753] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  237.834648][ T5753] usb 5-1: USB disconnect, device number 4
[  237.927536][ T7161] syzkaller1: entered promiscuous mode
[  237.927594][ T7161] syzkaller1: entered allmulticast mode
[  238.211518][ T7163] md/raid10:md0: not enough operational mirrors.
[  238.238725][ T7152] loop1: detected capacity change from 0 to 32768
[  238.279076][ T7152] ocfs2: Unknown parameter 'dataRordered'
[  238.330671][ T7171] xt_hashlimit: size too large, truncated to 1048576
[  238.342116][ T7163] md: pers->run() failed ...
[  238.387138][ T7168] md: could not open device unknown-block(1,2).
[  238.387229][ T7168] md: error, md_import_device() returned -16
[  238.723632][ T7176] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  238.982946][ T7180] openvswitch: ovs-system: Dropping previously announced user features
[  239.120562][ T7176] md/raid10:md0: not enough operational mirrors.
[  239.200351][ T7176] md: pers->run() failed ...
[  240.293704][ T7183] program syz.2.339 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.378582][ T7186] program syz.1.341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  240.399785][ T7191] openvswitch: ovs-system: Dropping previously announced user features
[  240.425729][ T7191] tipc: New replicast peer: 255.255.255.255
[  240.448276][ T7191] tipc: Enabled bearer <udp:syz2>, priority 10
[  241.421327][ T7197] loop1: detected capacity change from 0 to 764
[  241.534345][ T7197] netlink: 64 bytes leftover after parsing attributes in process `syz.1.345'.
[  241.607815][ T7197] syzkaller1: entered promiscuous mode
[  241.607872][ T7197] syzkaller1: entered allmulticast mode
[  242.434600][   T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  242.533554][ T7211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  242.544922][ T5626] Bluetooth: hci0: Malformed LE Event: 0x02
[  242.557859][ T7213] loop3: detected capacity change from 0 to 256
[  242.563661][ T7213] exfat: Bad value for 'gid'
[  242.563680][ T7213] exfat: Bad value for 'gid'
[  242.595611][ T7213] loop3: detected capacity change from 0 to 128
[  242.628746][ T7213] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  242.635669][   T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  242.677704][   T44] usb 3-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  242.677758][   T44] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 90
[  242.677822][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.677846][   T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.677882][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.682378][   T44] usb 3-1: config 0 descriptor??
[  243.085704][ T7213] fuse: Bad value for 'fd'
[  243.248638][ T7217] program syz.1.349 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  243.268864][   T44] hid (null): unknown global tag 0xc
[  243.268988][   T44] hid (null): unknown global tag 0xd
[  243.291583][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291647][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291692][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291722][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291757][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291787][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291816][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291846][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291876][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.291905][   T44] logitech-hidpp-device 0003:046D:C086.0003: unknown main item tag 0x0
[  243.292359][   T44] logitech-hidpp-device 0003:046D:C086.0003: unexpected long global item
[  243.293052][   T44] logitech-hidpp-device 0003:046D:C086.0003: hidpp_probe:parse failed
[  243.293149][   T44] logitech-hidpp-device 0003:046D:C086.0003: probe with driver logitech-hidpp-device failed with error -22
[  243.295633][ T7211] md/raid10:md0: not enough operational mirrors.
[  243.410159][ T7211] md: pers->run() failed ...
[  243.506852][   T44] usb 3-1: USB disconnect, device number 5
[  243.725949][ T7225] xt_hashlimit: size too large, truncated to 1048576
[  243.992781][ T7224] loop4: detected capacity change from 0 to 4096
[  244.015251][ T7224] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  244.394729][ T7224] ntfs3(loop4): mft corrupted
[  244.394848][ T7224] ntfs3(loop4): Failed to load $Extend (-22).
[  244.394883][ T7224] ntfs3(loop4): Failed to initialize $Extend.
[  245.163598][ T7244] loop0: detected capacity change from 0 to 764
[  245.178994][   T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  245.211446][ T7244] netlink: 64 bytes leftover after parsing attributes in process `syz.0.359'.
[  245.275959][ T7244] syzkaller1: entered promiscuous mode
[  245.281665][ T7244] syzkaller1: entered allmulticast mode
[  245.386629][   T44] usb 5-1: Using ep0 maxpacket: 8
[  245.408483][   T44] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  245.539363][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.539420][   T44] usb 5-1: Product: syz
[  245.539452][   T44] usb 5-1: Manufacturer: syz
[  245.539471][   T44] usb 5-1: SerialNumber: syz
[  245.542590][   T44] usb 5-1: config 0 descriptor??
[  245.574647][   T44] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  245.912174][ T7250] openvswitch: ovs-system: Dropping previously announced user features
[  245.926484][ T7248] loop0: detected capacity change from 0 to 4096
[  245.928561][ T7242] program syz.1.357 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.940942][ T7250] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  245.975915][ T7248] ntfs3: Unknown parameter '0xffffffffffffffff'
[  246.231856][ T5739] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  246.412687][ T5739] usb 1-1: Using ep0 maxpacket: 32
[  246.434359][ T5739] usb 1-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  246.493896][ T5739] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  246.493945][ T5739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.493984][ T5739] usb 1-1: config 0 has no interface number 0
[  246.494033][ T5739] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  246.494063][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  246.494092][ T5739] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  246.494121][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  246.494150][ T5739] usb 1-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  246.494177][ T5739] usb 1-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  246.494206][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  246.494234][ T5739] usb 1-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  246.494259][ T5739] usb 1-1: config 0 interface 239 has no altsetting 0
[  246.682893][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.682939][ T5739] usb 1-1: Product: syz
[  246.682986][ T5739] usb 1-1: Manufacturer: syz
[  246.683004][ T5739] usb 1-1: SerialNumber: syz
[  246.716248][ T5739] usb 1-1: config 0 descriptor??
[  246.731796][ T7248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  246.732611][ T7248] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  246.778508][ T5626] Bluetooth: hci5: urb ffff888028700f00 submission failed (90)
[  247.699048][   T44] gspca_sonixj: i2c_w8 err -110
[  247.722740][   T44] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[  248.004676][ T5626] Bluetooth: hci3: Malformed LE Event: 0x02
[  248.023011][ T7260] loop1: detected capacity change from 0 to 256
[  248.048252][ T7248] loop0: detected capacity change from 0 to 32768
[  248.057936][ T7248] (syz.0.361,7248,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.058569][ T7248] (syz.0.361,7248,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  248.075407][ T7260] exfat: Bad value for 'gid'
[  248.075473][ T7260] exfat: Bad value for 'gid'
[  248.093297][ T7248] JBD2: Ignoring recovery information on journal
[  248.215945][ T7248] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  248.299108][ T7248] ocfs2: Unmounting device (7,0) on (node local)
[  248.347730][ T7260] loop1: detected capacity change from 0 to 128
[  248.738636][ T7260] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  248.800779][ T7260] fuse: Bad value for 'fd'
[  250.336556][ T7279] openvswitch: ovs-system: Dropping previously announced user features
[  250.388185][ T7279] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  250.533146][ T7278] program syz.2.367 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  250.864799][ T5811] usb 1-1: USB disconnect, device number 6
[  250.886044][ T7283] xt_hashlimit: size too large, truncated to 1048576
[  252.285840][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.370'.
[  252.292238][ T7294] netlink: 312 bytes leftover after parsing attributes in process `syz.1.370'.
[  252.409245][ T5739] usb 5-1: USB disconnect, device number 5
[  252.803432][ T7299] nfs: Unknown parameter '�����'
[  253.155161][ T7299] program syz.3.371 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.744358][ T7287] loop0: detected capacity change from 0 to 32768
[  253.755941][ T7287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.379 (7287)
[  253.776743][ T7287] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.776814][ T7287] BTRFS info (device loop0): using sha256 checksum algorithm
[  253.859479][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[  253.966566][ T7287] BTRFS info (device loop0): enabling ssd optimizations
[  253.966696][ T7287] BTRFS info (device loop0): turning on sync discard
[  253.966791][ T7287] BTRFS info (device loop0): enabling free space tree
[  253.966857][ T7287] BTRFS info (device loop0): use zlib compression, level 3
[  254.162974][ T7320] openvswitch: ovs-system: Dropping previously announced user features
[  254.229356][ T7320] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  254.794090][   T31] audit: type=1800 audit(1787615711.890:3): pid=7324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.379" name="file1" dev="loop0" ino=260 res=0 errno=0
[  255.332456][ T7326] loop4: detected capacity change from 0 to 1024
[  255.396254][ T7326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  255.428994][ T7326] System zones: 0-1, 3-12
[  255.445568][ T7326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.586243][ T7322] netlink: 'syz.4.373': attribute type 10 has an invalid length.
[  255.896215][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.267377][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  256.267584][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  256.628878][ T5617] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.800967][ T5739] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  257.002645][ T5739] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  257.285747][ T5739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.301706][ T5739] usb 5-1: config 0 descriptor??
[  257.323917][ T5739] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  257.455202][ T7344] program syz.2.382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  257.536459][ T5739] gp8psk: usb in 128 operation failed.
[  257.767224][ T5739] gp8psk: FW Version = 0.00.0 (0x0)  Build 2000/00/00
[  257.900347][ T7347] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  258.173093][ T7354] FAULT_INJECTION: forcing a failure.
[  258.173093][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.173223][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.1.384 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  258.173253][ T7354] Tainted: [L]=SOFTLOCKUP
[  258.173259][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  258.173270][ T7354] Call Trace:
[  258.173277][ T7354]  <TASK>
[  258.173285][ T7354]  dump_stack_lvl+0xe8/0x150
[  258.173317][ T7354]  should_fail_ex+0x410/0x560
[  258.173348][ T7354]  _copy_from_user+0x2d/0xb0
[  258.173368][ T7354]  ___sys_sendmsg+0x1c6/0x360
[  258.173388][ T7354]  ? __lock_acquire+0x6df/0x2e50
[  258.173410][ T7354]  ? __pfx____sys_sendmsg+0x10/0x10
[  258.173461][ T7354]  ? __fget_files+0x2a/0x420
[  258.173483][ T7354]  ? __fget_files+0x3a2/0x420
[  258.173515][ T7354]  __x64_sys_sendmsg+0x1b1/0x290
[  258.173534][ T7354]  ? net_tx_action+0x5bb/0xc30
[  258.173561][ T7354]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  258.173588][ T7354]  ? handle_softirqs+0x720/0x860
[  258.173620][ T7354]  do_syscall_64+0x166/0x520
[  258.173646][ T7354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.173664][ T7354]  ? clear_bhb_loop+0x70/0xc0
[  258.173686][ T7354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.173712][ T7354] RIP: 0033:0x7f59fd79e0d9
[  258.173728][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  258.173743][ T7354] RSP: 002b:00007f59fe61d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  258.173764][ T7354] RAX: ffffffffffffffda RBX: 00007f59fda25fa0 RCX: 00007f59fd79e0d9
[  258.173777][ T7354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  258.173788][ T7354] RBP: 00007f59fe61d090 R08: 0000000000000000 R09: 0000000000000000
[  258.173799][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.173810][ T7354] R13: 00007f59fda26038 R14: 00007f59fda25fa0 R15: 00007ffe60bba1e8
[  258.173838][ T7354]  </TASK>
[  258.588333][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'.
[  258.616164][ T7358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'.
[  258.680559][ T7358] loop2: detected capacity change from 0 to 512
[  258.750771][ T7358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.769157][ T7358] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.599858][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.386'.
[  259.965925][ T5739] gp8psk: usb in 149 operation failed.
[  259.965968][ T5739] gp8psk: failed to get FPGA version
[  259.976196][ T5739] gp8psk: usb in 138 operation failed.
[  259.976215][ T5739] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  259.976258][ T5739] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  262.376370][ T5739] usb 5-1: USB disconnect, device number 6
[  262.536806][ T7367] loop1: detected capacity change from 0 to 1024
[  262.592174][ T7367] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  262.592325][ T7367] System zones: 0-1, 3-12
[  262.611210][ T7369] nfs: Unknown parameter '�����'
[  262.644101][ T7367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.765471][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.929135][ T7367] netlink: 'syz.1.387': attribute type 10 has an invalid length.
[  262.943039][ T7369] program syz.3.388 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  263.149971][ T7374] loop4: detected capacity change from 0 to 4096
[  263.151025][ T7374] ntfs3: Unknown parameter '0xffffffffffffffff'
[  263.158545][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.475262][ T5811] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  263.667694][ T7381] openvswitch: ovs-system: Dropping previously announced user features
[  263.667767][ T5811] usb 5-1: Using ep0 maxpacket: 32
[  263.688136][ T5811] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  263.716548][ T7381] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  263.730541][ T5811] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  263.730594][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.730628][ T5811] usb 5-1: config 0 has no interface number 0
[  263.730675][ T5811] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  263.730703][ T5811] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  263.730733][ T5811] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  263.730762][ T5811] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  263.730791][ T5811] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  263.730818][ T5811] usb 5-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  263.730845][ T5811] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  263.730874][ T5811] usb 5-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  263.730899][ T5811] usb 5-1: config 0 interface 239 has no altsetting 0
[  263.816884][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.816910][ T5811] usb 5-1: Product: syz
[  263.816924][ T5811] usb 5-1: Manufacturer: syz
[  263.816936][ T5811] usb 5-1: SerialNumber: syz
[  263.819880][ T5811] usb 5-1: config 0 descriptor??
[  263.826789][ T7374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.826995][ T7374] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  263.848836][ T5626] Bluetooth: hci5: urb ffff888077c41900 submission failed (90)
[  264.495138][ T7374] loop4: detected capacity change from 0 to 32768
[  264.513989][ T7374] (syz.4.389,7374,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  264.529752][ T7374] (syz.4.389,7374,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  264.579216][ T7374] JBD2: Ignoring recovery information on journal
[  264.628309][ T7374] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  264.707102][ T7374] ocfs2: Unmounting device (7,4) on (node local)
[  266.300100][ T7395] netlink: 'syz.3.395': attribute type 1 has an invalid length.
[  266.744785][ T5755] usb 5-1: USB disconnect, device number 7
[  267.432860][ T7395] 8021q: adding VLAN 0 to HW filter on device bond2
[  269.461368][ T7402] xt_hashlimit: size too large, truncated to 1048576
[  270.554348][ T7409] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[  270.651516][ T7415] FAULT_INJECTION: forcing a failure.
[  270.651516][ T7415] name failslab, interval 1, probability 0, space 0, times 1
[  270.716867][ T7415] CPU: 0 UID: 0 PID: 7415 Comm: syz.3.399 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  270.716904][ T7415] Tainted: [L]=SOFTLOCKUP
[  270.716912][ T7415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  270.716930][ T7415] Call Trace:
[  270.716939][ T7415]  <TASK>
[  270.716948][ T7415]  dump_stack_lvl+0xe8/0x150
[  270.716985][ T7415]  should_fail_ex+0x410/0x560
[  270.717021][ T7415]  should_failslab+0xa8/0x100
[  270.717048][ T7415]  __kmalloc_noprof+0xfe/0x720
[  270.717080][ T7415]  ? copy_splice_read+0x16f/0xaa0
[  270.717107][ T7415]  ? copy_splice_read+0x16f/0xaa0
[  270.717141][ T7415]  copy_splice_read+0x16f/0xaa0
[  270.717170][ T7415]  ? __lock_acquire+0x6df/0x2e50
[  270.717198][ T7415]  ? __pfx_aa_file_perm+0x10/0x10
[  270.717222][ T7415]  ? __pfx_copy_splice_read+0x10/0x10
[  270.717251][ T7415]  ? __pfx___mutex_lock+0x10/0x10
[  270.717280][ T7415]  ? __lock_acquire+0x6df/0x2e50
[  270.717311][ T7415]  ? sock_splice_read+0xca/0x100
[  270.717341][ T7415]  ? __pfx_sock_splice_read+0x10/0x10
[  270.717366][ T7415]  splice_file_to_pipe+0x444/0x6b0
[  270.717408][ T7415]  do_splice+0x11c2/0x1970
[  270.717442][ T7415]  ? lock_acquire+0x115/0x350
[  270.717480][ T7415]  ? __pfx_do_splice+0x10/0x10
[  270.717520][ T7415]  __se_sys_splice+0x353/0x490
[  270.717556][ T7415]  ? __pfx___se_sys_splice+0x10/0x10
[  270.717585][ T7415]  ? sched_core_idle_cpu+0x15d/0x1f0
[  270.717612][ T7415]  ? __x64_sys_splice+0x21/0xf0
[  270.717645][ T7415]  do_syscall_64+0x166/0x520
[  270.717672][ T7415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.717692][ T7415]  ? clear_bhb_loop+0x70/0xc0
[  270.717717][ T7415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.717736][ T7415] RIP: 0033:0x7f11c899e0d9
[  270.717755][ T7415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  270.717770][ T7415] RSP: 002b:00007f11c97cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  270.717793][ T7415] RAX: ffffffffffffffda RBX: 00007f11c8c26090 RCX: 00007f11c899e0d9
[  270.717807][ T7415] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005
[  270.717818][ T7415] RBP: 00007f11c97cb090 R08: 000000000004ff9c R09: 0000000000000000
[  270.717831][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.717842][ T7415] R13: 00007f11c8c26128 R14: 00007f11c8c26090 R15: 00007fff82600ae8
[  270.717874][ T7415]  </TASK>
[  271.773857][ T7410] loop2: detected capacity change from 0 to 131072
[  271.783251][ T7410] F2FS-fs (loop2): invalid crc value
[  271.954178][ T7410] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  271.969654][ T7410] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  272.396382][ T7423] loop1: detected capacity change from 0 to 1024
[  272.480980][ T7423] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  272.515016][ T7423] System zones: 0-1, 3-12
[  272.529396][ T7423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.559085][ T7423] netlink: 'syz.1.401': attribute type 10 has an invalid length.
[  272.765671][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.743826][ T7437] loop3: detected capacity change from 0 to 32768
[  273.764021][ T7437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.402 (7437)
[  273.834103][ T7437] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  273.834155][ T7437] BTRFS info (device loop3): using sha256 checksum algorithm
[  274.047548][ T7437] BTRFS info (device loop3): enabling ssd optimizations
[  274.047623][ T7437] BTRFS info (device loop3): turning on sync discard
[  274.047708][ T7437] BTRFS info (device loop3): enabling free space tree
[  274.047749][ T7437] BTRFS info (device loop3): use zlib compression, level 3
[  274.542956][ T7448] program syz.1.404 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.011682][   T31] audit: type=1800 audit(1787615732.166:4): pid=7425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.402" name="file1" dev="loop3" ino=260 res=0 errno=0
[  275.436193][ T7463] loop4: detected capacity change from 0 to 8192
[  276.430803][ T5615] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  276.610028][ T7471] syzkaller0: entered promiscuous mode
[  276.620963][ T7471] syzkaller0: entered allmulticast mode
[  278.639384][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.4.410'.
[  280.301728][ T7492] netlink: 'syz.0.415': attribute type 1 has an invalid length.
[  280.455080][ T7492] 8021q: adding VLAN 0 to HW filter on device bond1
[  280.794303][ T7493] veth3: entered allmulticast mode
[  280.815230][ T7493] bond1: (slave veth3): Enslaving as an active interface with a down link
[  281.027785][ T7494] bond1: (slave veth0_to_bond): making interface the new active one
[  281.035685][ T7494] veth0_to_bond: entered promiscuous mode
[  281.037484][ T7494] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  281.171086][ T7492] bond1: entered promiscuous mode
[  281.171312][ T7492] bond1: entered allmulticast mode
[  281.171662][ T7492] veth0_to_bond: entered allmulticast mode
[  281.375650][ T7505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  281.518477][   T31] audit: type=1326 audit(1787615738.664:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.4.417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bf9e0d9 code=0x7ffc0000
[  281.573329][   T31] audit: type=1326 audit(1787615738.724:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.4.417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bf9e0d9 code=0x7ffc0000
[  281.606888][   T31] audit: type=1326 audit(1787615738.754:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.4.417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd1bf5e90e code=0x7ffc0000
[  281.652179][   T31] audit: type=1326 audit(1787615738.754:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.4.417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bf9e0d9 code=0x7ffc0000
[  281.686048][   T31] audit: type=1326 audit(1787615738.754:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7506 comm="syz.4.417" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1bf9e0d9 code=0x7ffc0000
[  282.026248][   T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  282.219733][   T44] usb 5-1: Using ep0 maxpacket: 16
[  282.239463][   T44] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  282.369043][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.369090][   T44] usb 5-1: Product: syz
[  282.369109][   T44] usb 5-1: Manufacturer: syz
[  282.369128][   T44] usb 5-1: SerialNumber: syz
[  282.460579][   T44] r8152-cfgselector 5-1: Unknown version 0x0000
[  282.460635][   T44] r8152-cfgselector 5-1: config 0 descriptor??
[  282.729815][ T7525] loop1: detected capacity change from 0 to 512
[  282.842825][ T7525] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.423: iget: bad i_size value: 38620345925642
[  282.842954][ T7525] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  282.846125][ T7525] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.423: couldn't read orphan inode 15 (err -117)
[  282.846192][ T7525] loop1: lost filesystem error report for type 5 error -117
[  282.863235][ T7525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.935956][   T44] r8152-cfgselector 5-1: USB disconnect, device number 8
[  283.455438][   T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  283.601936][ T5618] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.865066][   T44] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  283.907412][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  283.907499][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.910212][   T44] usb 1-1: config 0 descriptor??
[  283.942125][ T7529] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  284.166364][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[  284.176713][ T6105] Bluetooth: hci5: Frame reassembly failed (-84)
[  284.278154][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.428'.
[  284.490587][   T44] hid_parser_main: 46 callbacks suppressed
[  284.500773][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.507710][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.521940][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.531874][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538770][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538826][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538857][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538885][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538913][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.538942][   T44] asus 0003:0B05:1ABE.0004: unknown main item tag 0x0
[  284.661273][   T44] asus 0003:0B05:1ABE.0004: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.0-1/input0
[  285.121227][ T5811] usb 1-1: USB disconnect, device number 7
[  285.247256][ T7553] fido_id[7553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  285.273263][ T7559] program syz.4.433 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  285.815380][ T7572] FAULT_INJECTION: forcing a failure.
[  285.815380][ T7572] name failslab, interval 1, probability 0, space 0, times 0
[  285.846410][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.4.437 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  285.846448][ T7572] Tainted: [L]=SOFTLOCKUP
[  285.846457][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  285.846469][ T7572] Call Trace:
[  285.846477][ T7572]  <TASK>
[  285.846486][ T7572]  dump_stack_lvl+0xe8/0x150
[  285.846523][ T7572]  should_fail_ex+0x410/0x560
[  285.846560][ T7572]  should_failslab+0xa8/0x100
[  285.846587][ T7572]  __kmalloc_noprof+0xfe/0x720
[  285.846615][ T7572]  ? rcu_is_watching+0x16/0xb0
[  285.846640][ T7572]  ? tomoyo_realpath_from_path+0xef/0x640
[  285.846663][ T7572]  ? tomoyo_realpath_from_path+0xef/0x640
[  285.846694][ T7572]  tomoyo_realpath_from_path+0xef/0x640
[  285.846728][ T7572]  ? tomoyo_path_number_perm+0x219/0x5f0
[  285.846759][ T7572]  tomoyo_path_number_perm+0x246/0x5f0
[  285.846791][ T7572]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  285.846820][ T7572]  ? __lock_acquire+0x6df/0x2e50
[  285.846847][ T7572]  ? taprio_dequeue+0x26/0x540
[  285.846881][ T7572]  ? hook_file_ioctl+0x1f2/0x600
[  285.846923][ T7572]  ? __fget_files+0x2a/0x420
[  285.846953][ T7572]  ? __fget_files+0x2a/0x420
[  285.846978][ T7572]  ? __fget_files+0x3a2/0x420
[  285.847003][ T7572]  ? __fget_files+0x2a/0x420
[  285.847034][ T7572]  security_file_ioctl+0xc3/0x2a0
[  285.847066][ T7572]  __se_sys_ioctl+0x47/0x170
[  285.847099][ T7572]  do_syscall_64+0x166/0x520
[  285.847130][ T7572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.847151][ T7572]  ? clear_bhb_loop+0x70/0xc0
[  285.847176][ T7572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.847198][ T7572] RIP: 0033:0x7fcd1bf9e0d9
[  285.847218][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  285.847237][ T7572] RSP: 002b:00007fcd1cdcb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  285.847262][ T7572] RAX: ffffffffffffffda RBX: 00007fcd1c226090 RCX: 00007fcd1bf9e0d9
[  285.847277][ T7572] RDX: 0000200000001080 RSI: 00000000c0502100 RDI: 0000000000000003
[  285.847291][ T7572] RBP: 00007fcd1cdcb090 R08: 0000000000000000 R09: 0000000000000000
[  285.847304][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  285.847317][ T7572] R13: 00007fcd1c226128 R14: 00007fcd1c226090 R15: 00007ffdebec7418
[  285.847351][ T7572]  </TASK>
[  285.955657][ T7572] ERROR: Out of memory at tomoyo_realpath_from_path.
[  286.196191][ T5624] Bluetooth: hci5: command 0xfc11 tx timeout
[  286.198586][ T5626] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  286.490536][ T7578] openvswitch: ovs-system: Dropping previously announced user features
[  286.540752][ T7578] tipc: Started in network mode
[  286.540811][ T7578] tipc: Node identity ac14140f, cluster identity 4711
[  286.541083][ T7578] tipc: New replicast peer: 255.255.255.255
[  286.541727][ T7578] tipc: Enabled bearer <udp:syz2>, priority 10
[  286.809238][   T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  287.077883][   T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  287.132682][   T44] usb 2-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  287.132735][   T44] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 90
[  287.134667][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.134698][   T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.134738][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.247846][   T44] usb 2-1: config 0 descriptor??
[  287.653428][   T25] tipc: Node number set to 2886997007
[  287.936208][   T44] usbhid 2-1:0.0: can't add hid device: -71
[  287.937216][   T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  287.968335][   T44] usb 2-1: USB disconnect, device number 3
[  288.203897][ T7588] netlink: 59 bytes leftover after parsing attributes in process `syz.2.443'.
[  288.624404][ T7591] loop2: detected capacity change from 0 to 64
[  288.716951][ T7591] program syz.2.445 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.784990][ T7591] hfs: cannot create new inode: folder count exceeds limit
[  288.844687][ T7592] loop3: detected capacity change from 0 to 4096
[  288.853387][ T7592] ntfs3: Unknown parameter '0xffffffffffffffff'
[  288.864933][ T7594] program syz.1.446 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  289.097071][ T7596] loop4: detected capacity change from 0 to 512
[  289.107161][ T7596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  289.247461][   T44] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  289.258459][ T7596] EXT4-fs (loop4): 1 truncate cleaned up
[  289.260318][ T7596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  289.313040][ T7602] SQUASHFS error: Failed to read block 0x0: -5
[  289.356057][ T7602] x_tables: duplicate underflow at hook 2
[  289.430774][   T44] usb 4-1: Using ep0 maxpacket: 32
[  289.454227][   T44] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  289.496692][   T44] usb 4-1: config 0 has an invalid interface number: 239 but max is 0
[  289.496754][   T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.496792][   T44] usb 4-1: config 0 has no interface number 0
[  289.496840][   T44] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  289.496866][   T44] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  289.496890][   T44] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  289.496913][   T44] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  289.496936][   T44] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  289.496957][   T44] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  289.496979][   T44] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  289.497002][   T44] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  289.497031][   T44] usb 4-1: config 0 interface 239 has no altsetting 0
[  289.548624][   T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  289.591047][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.591075][   T44] usb 4-1: Product: syz
[  289.591089][   T44] usb 4-1: Manufacturer: syz
[  289.591102][   T44] usb 4-1: SerialNumber: syz
[  289.594213][   T44] usb 4-1: config 0 descriptor??
[  289.622315][ T7592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  289.622503][ T7592] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  289.681418][ T5624] Bluetooth: hci5: urb ffff888077ec3600 submission failed (90)
[  289.706824][   T25] usb 3-1: device descriptor read/64, error -71
[  289.865342][ T7606] FAULT_INJECTION: forcing a failure.
[  289.865342][ T7606] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.880593][ T7606] CPU: 0 UID: 0 PID: 7606 Comm: syz.0.450 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  289.880628][ T7606] Tainted: [L]=SOFTLOCKUP
[  289.880645][ T7606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.880658][ T7606] Call Trace:
[  289.880667][ T7606]  <TASK>
[  289.880676][ T7606]  dump_stack_lvl+0xe8/0x150
[  289.880713][ T7606]  should_fail_ex+0x410/0x560
[  289.880751][ T7606]  _copy_from_user+0x2d/0xb0
[  289.880774][ T7606]  ___sys_sendmsg+0x1c6/0x360
[  289.880797][ T7606]  ? __lock_acquire+0x6df/0x2e50
[  289.880823][ T7606]  ? __pfx____sys_sendmsg+0x10/0x10
[  289.880851][ T7606]  ? lockdep_hardirqs_on+0x7b/0x110
[  289.880880][ T7606]  ? irqentry_exit+0x218/0x910
[  289.880935][ T7606]  ? __fget_files+0x2a/0x420
[  289.880961][ T7606]  ? __fget_files+0x3a2/0x420
[  289.880999][ T7606]  __x64_sys_sendmsg+0x1b1/0x290
[  289.881025][ T7606]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  289.881069][ T7606]  do_syscall_64+0x166/0x520
[  289.881095][ T7606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.881115][ T7606]  ? clear_bhb_loop+0x70/0xc0
[  289.881138][ T7606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.881158][ T7606] RIP: 0033:0x7f044f59e0d9
[  289.881177][ T7606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.881194][ T7606] RSP: 002b:00007f045040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  289.881217][ T7606] RAX: ffffffffffffffda RBX: 00007f044f825fa0 RCX: 00007f044f59e0d9
[  289.881231][ T7606] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000e
[  289.881245][ T7606] RBP: 00007f045040f090 R08: 0000000000000000 R09: 0000000000000000
[  289.881259][ T7606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.881272][ T7606] R13: 00007f044f826038 R14: 00007f044f825fa0 R15: 00007ffdc944d0d8
[  289.881314][ T7606]  </TASK>
[  290.219861][ T7592] loop3: detected capacity change from 0 to 32768
[  290.229318][   T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  290.250252][ T7592] (syz.3.444,7592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  290.260671][ T7592] (syz.3.444,7592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  290.306480][ T7592] JBD2: Ignoring recovery information on journal
[  290.356141][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'.
[  290.387698][   T25] usb 3-1: device descriptor read/64, error -71
[  290.408599][ T7592] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  290.488880][   T25] usb usb3-port1: attempt power cycle
[  290.532114][ T7592] ocfs2: Unmounting device (7,3) on (node local)
[  291.348530][   T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  291.419530][   T25] usb 3-1: device descriptor read/8, error -71
[  291.675630][   T25] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  291.736907][   T25] usb 3-1: device descriptor read/8, error -71
[  291.842508][   T25] usb usb3-port1: unable to enumerate USB device
[  292.476362][ T5352] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  292.491854][    T9] usb 4-1: USB disconnect, device number 7
[  292.711529][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.723465][ T5352] usb 1-1: Using ep0 maxpacket: 8
[  292.742243][ T5352] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  292.768100][ T5352] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.768227][ T5352] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 122, changing to 10
[  292.768358][ T5352] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x2 has invalid wMaxPacketSize 0
[  292.768455][ T5352] usb 1-1: config 0 interface 0 has no altsetting 0
[  292.768563][ T5352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.952406][ T5352] usb 1-1: config 0 descriptor??
[  293.148229][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  293.324210][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  293.340238][   T10] usb 3-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  293.350427][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 90
[  293.360292][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.360329][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.360383][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.428723][   T10] usb 3-1: config 0 descriptor??
[  293.617005][ T7628] FAULT_INJECTION: forcing a failure.
[  293.617005][ T7628] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.636878][ T7628] CPU: 0 UID: 0 PID: 7628 Comm: syz.3.457 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  293.636903][ T7628] Tainted: [L]=SOFTLOCKUP
[  293.636908][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.636916][ T7628] Call Trace:
[  293.636924][ T7628]  <TASK>
[  293.636930][ T7628]  dump_stack_lvl+0xe8/0x150
[  293.636952][ T7628]  should_fail_ex+0x410/0x560
[  293.636974][ T7628]  _copy_from_user+0x2d/0xb0
[  293.636987][ T7628]  __sys_connect+0x155/0x450
[  293.637008][ T7628]  ? __pfx___sys_connect+0x10/0x10
[  293.637033][ T7628]  ? __pfx_ksys_write+0x10/0x10
[  293.637055][ T7628]  __x64_sys_connect+0x7a/0x90
[  293.637074][ T7628]  do_syscall_64+0x166/0x520
[  293.637091][ T7628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.637104][ T7628]  ? clear_bhb_loop+0x70/0xc0
[  293.637118][ T7628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.637130][ T7628] RIP: 0033:0x7f11c899e0d9
[  293.637142][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.637154][ T7628] RSP: 002b:00007f11c97ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  293.637168][ T7628] RAX: ffffffffffffffda RBX: 00007f11c8c25fa0 RCX: 00007f11c899e0d9
[  293.637178][ T7628] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000006
[  293.637186][ T7628] RBP: 00007f11c97ec090 R08: 0000000000000000 R09: 0000000000000000
[  293.637194][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.637201][ T7628] R13: 00007f11c8c26038 R14: 00007f11c8c25fa0 R15: 00007fff82600ae8
[  293.637220][ T7628]  </TASK>
[  293.864797][   T10] hid (null): unknown global tag 0xc
[  293.872986][   T10] hid (null): unknown global tag 0xd
[  293.923329][   T10] hid_parser_main: 447 callbacks suppressed
[  293.931218][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.941944][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.952490][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.952716][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.952784][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.952912][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.953019][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.953112][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.953216][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  293.953375][   T10] logitech-hidpp-device 0003:046D:C086.0005: unknown main item tag 0x0
[  294.025728][   T10] logitech-hidpp-device 0003:046D:C086.0005: unexpected long global item
[  294.026518][   T10] logitech-hidpp-device 0003:046D:C086.0005: hidpp_probe:parse failed
[  294.026628][   T10] logitech-hidpp-device 0003:046D:C086.0005: probe with driver logitech-hidpp-device failed with error -22
[  294.065248][ T7632] program syz.3.459 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  294.085430][   T10] usb 3-1: USB disconnect, device number 10
[  294.256589][ T5352] usb 1-1: string descriptor 0 read error: -71
[  294.296243][ T5352] usbhid 1-1:0.0: can't add hid device: -71
[  294.315342][ T5352] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  294.366893][ T5352] usb 1-1: USB disconnect, device number 8
[  294.536244][ T7640] openvswitch: ovs-system: Dropping previously announced user features
[  294.542502][ T7640] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  294.934349][ T7645] openvswitch: ovs-system: Dropping previously announced user features
[  294.991503][ T7645] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  296.042534][ T7651] netlink: 'syz.0.465': attribute type 1 has an invalid length.
[  296.174541][ T7651] 8021q: adding VLAN 0 to HW filter on device bond2
[  298.152951][ T7654] loop1: detected capacity change from 0 to 4096
[  298.170189][ T7654] ntfs3: Unknown parameter '0xffffffffffffffff'
[  298.470572][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  298.507343][ T7666] loop3: detected capacity change from 0 to 1024
[  298.638432][   T10] usb 2-1: Using ep0 maxpacket: 32
[  298.650314][   T10] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  298.664185][   T10] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  298.675237][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.690235][   T10] usb 2-1: config 0 has no interface number 0
[  298.690309][   T10] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  298.690341][   T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  298.690371][   T10] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  298.690400][   T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  298.690430][   T10] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  298.690458][   T10] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  298.690487][   T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  298.690516][   T10] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  298.690541][   T10] usb 2-1: config 0 interface 239 has no altsetting 0
[  298.810910][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.810940][   T10] usb 2-1: Product: syz
[  298.810962][   T10] usb 2-1: Manufacturer: syz
[  298.810977][   T10] usb 2-1: SerialNumber: syz
[  298.857085][   T10] usb 2-1: config 0 descriptor??
[  298.878483][ T7654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.878744][ T7654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  298.985546][ T5624] Bluetooth: hci5: urb ffff888036d40400 submission failed (90)
[  299.128989][ T7670] program syz.4.470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  299.543615][ T7654] loop1: detected capacity change from 0 to 32768
[  299.572552][ T7654] (syz.1.466,7654,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  299.602168][ T7654] (syz.1.466,7654,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  299.669727][ T7654] JBD2: Ignoring recovery information on journal
[  299.747874][ T7673] FAULT_INJECTION: forcing a failure.
[  299.747874][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  299.763426][ T7673] CPU: 0 UID: 0 PID: 7673 Comm: syz.0.471 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  299.763462][ T7673] Tainted: [L]=SOFTLOCKUP
[  299.763470][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  299.763482][ T7673] Call Trace:
[  299.763491][ T7673]  <TASK>
[  299.763500][ T7673]  dump_stack_lvl+0xe8/0x150
[  299.763547][ T7673]  should_fail_ex+0x410/0x560
[  299.763583][ T7673]  _copy_from_user+0x2d/0xb0
[  299.763606][ T7673]  keyctl_pkey_params_get_2+0x11f/0x4b0
[  299.763636][ T7673]  ? __pfx_keyctl_pkey_params_get_2+0x10/0x10
[  299.763667][ T7673]  ? __lock_acquire+0x6df/0x2e50
[  299.763701][ T7673]  keyctl_pkey_e_d_s+0xce/0x310
[  299.763728][ T7673]  ? __pfx_keyctl_pkey_e_d_s+0x10/0x10
[  299.763762][ T7673]  ? taprio_dequeue+0x26/0x540
[  299.763790][ T7673]  __se_sys_keyctl+0x494/0x9d0
[  299.763823][ T7673]  ? __pfx___se_sys_keyctl+0x10/0x10
[  299.763849][ T7673]  ? kvm_sched_clock_read+0x11/0x20
[  299.763875][ T7673]  ? sched_clock+0x41/0x60
[  299.763900][ T7673]  ? sched_clock_cpu+0x74/0x440
[  299.763923][ T7673]  ? __pfx_xfrm_dev_backlog+0x10/0x10
[  299.763947][ T7673]  ? __pfx_sched_clock_cpu+0x10/0x10
[  299.763969][ T7673]  ? net_tx_action+0x5bb/0xc30
[  299.764004][ T7673]  ? __irq_exit_rcu+0xcb/0x220
[  299.764029][ T7673]  ? lockdep_softirqs_on+0x11e/0x190
[  299.764050][ T7673]  ? handle_softirqs+0x720/0x860
[  299.764080][ T7673]  ? __x64_sys_keyctl+0x20/0xc0
[  299.764111][ T7673]  do_syscall_64+0x166/0x520
[  299.764158][ T7673]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.764180][ T7673]  ? clear_bhb_loop+0x70/0xc0
[  299.764205][ T7673]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.764225][ T7673] RIP: 0033:0x7f044f59e0d9
[  299.764245][ T7673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  299.764262][ T7673] RSP: 002b:00007f045040f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[  299.764286][ T7673] RAX: ffffffffffffffda RBX: 00007f044f825fa0 RCX: 00007f044f59e0d9
[  299.764300][ T7673] RDX: 00002000000008c0 RSI: 0000200000000180 RDI: 000000000000001a
[  299.764313][ T7673] RBP: 00007f045040f090 R08: 0000000000000000 R09: 0000000000000000
[  299.764325][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.764338][ T7673] R13: 00007f044f826038 R14: 00007f044f825fa0 R15: 00007ffdc944d0d8
[  299.764369][ T7673]  </TASK>
[  299.805789][ T7675] loop2: detected capacity change from 0 to 16
[  299.900126][ T7675] erofs (device loop2): DAX unsupported by block device. Turning off DAX.
[  299.907265][ T7654] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  300.024278][ T7654] ocfs2: Unmounting device (7,1) on (node local)
[  300.999331][ T7684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  301.158868][ T5352] usb 2-1: USB disconnect, device number 4
[  302.687394][ T7698] loop4: detected capacity change from 0 to 32768
[  302.836185][ T7698] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  303.201399][ T7698] (syz.4.478,7698,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  303.828396][ T7698] syz.4.478 (7698) used greatest stack depth: 18864 bytes left
[  305.032510][ T7710] program syz.1.483 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.182202][ T7713] fuse: Unknown parameter 'useE�`2����rhid'
[  305.286959][ T5616] ocfs2: Unmounting device (7,4) on (node local)
[  305.837831][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.482'.
[  306.341656][ T7675] erofs (device loop2): mounted with root inode @ nid 36.
[  306.446045][ T5811] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  306.631602][ T5811] usb 5-1: Using ep0 maxpacket: 8
[  306.650544][ T5811] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  306.695036][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  306.695086][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  306.798569][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.798615][ T5811] usb 5-1: Product: syz
[  306.798648][ T5811] usb 5-1: Manufacturer: syz
[  306.798668][ T5811] usb 5-1: SerialNumber: syz
[  306.804104][ T5811] usb 5-1: config 0 descriptor??
[  306.835626][ T5811] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  306.835655][ T5811] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22
[  306.836011][ T5811] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  307.224826][ T5811] usb 5-1: USB disconnect, device number 9
[  308.988908][ T7746] FAULT_INJECTION: forcing a failure.
[  308.988908][ T7746] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.008913][ T7746] CPU: 1 UID: 0 PID: 7746 Comm: syz.2.492 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.008948][ T7746] Tainted: [L]=SOFTLOCKUP
[  309.008955][ T7746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.008967][ T7746] Call Trace:
[  309.008975][ T7746]  <TASK>
[  309.008984][ T7746]  dump_stack_lvl+0xe8/0x150
[  309.009018][ T7746]  should_fail_ex+0x410/0x560
[  309.009051][ T7746]  _copy_from_user+0x2d/0xb0
[  309.009075][ T7746]  ___sys_recvmsg+0x173/0x5a0
[  309.009104][ T7746]  ? __pfx____sys_recvmsg+0x10/0x10
[  309.009132][ T7746]  ? lock_acquire+0x115/0x350
[  309.009169][ T7746]  ? __fget_files+0x3a2/0x420
[  309.009206][ T7746]  do_recvmmsg+0x31a/0x7f0
[  309.009237][ T7746]  ? __pfx_do_recvmmsg+0x10/0x10
[  309.009271][ T7746]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  309.009301][ T7746]  ? __fget_files+0x3a2/0x420
[  309.009337][ T7746]  __x64_sys_recvmmsg+0x198/0x250
[  309.009363][ T7746]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  309.009396][ T7746]  do_syscall_64+0x166/0x520
[  309.009424][ T7746]  ? trace_irq_disable+0x3b/0x140
[  309.009443][ T7746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.009463][ T7746]  ? clear_bhb_loop+0x70/0xc0
[  309.009487][ T7746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.009507][ T7746] RIP: 0033:0x7fc15ed9e0d9
[  309.009525][ T7746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.009543][ T7746] RSP: 002b:00007fc15fc0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  309.009566][ T7746] RAX: ffffffffffffffda RBX: 00007fc15f026090 RCX: 00007fc15ed9e0d9
[  309.009581][ T7746] RDX: 0000000000000001 RSI: 0000200000000780 RDI: 0000000000000003
[  309.009594][ T7746] RBP: 00007fc15fc0d090 R08: 0000000000000000 R09: 0000000000000000
[  309.009607][ T7746] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001
[  309.009620][ T7746] R13: 00007fc15f026128 R14: 00007fc15f026090 R15: 00007fff573b5e68
[  309.009649][ T7746]  </TASK>
[  309.570539][ T7750] program syz.1.494 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  309.872670][ T7752] FAULT_INJECTION: forcing a failure.
[  309.872670][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.872733][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.1.498 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  309.872762][ T7752] Tainted: [L]=SOFTLOCKUP
[  309.872770][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.872782][ T7752] Call Trace:
[  309.872790][ T7752]  <TASK>
[  309.872799][ T7752]  dump_stack_lvl+0xe8/0x150
[  309.872833][ T7752]  should_fail_ex+0x410/0x560
[  309.872868][ T7752]  _copy_from_user+0x2d/0xb0
[  309.872890][ T7752]  ___sys_sendmsg+0x1c6/0x360
[  309.872912][ T7752]  ? __lock_acquire+0x6df/0x2e50
[  309.872937][ T7752]  ? __pfx____sys_sendmsg+0x10/0x10
[  309.872964][ T7752]  ? kstrtouint+0x6e/0xe0
[  309.873012][ T7752]  ? __fget_files+0x2a/0x420
[  309.873037][ T7752]  ? __fget_files+0x3a2/0x420
[  309.873072][ T7752]  __sys_sendmmsg+0x273/0x4d0
[  309.873100][ T7752]  ? __pfx___sys_sendmmsg+0x10/0x10
[  309.873131][ T7752]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  309.873175][ T7752]  ? ksys_write+0x242/0x270
[  309.873205][ T7752]  ? __pfx_ksys_write+0x10/0x10
[  309.873240][ T7752]  __x64_sys_sendmmsg+0xa0/0xc0
[  309.873265][ T7752]  do_syscall_64+0x166/0x520
[  309.873292][ T7752]  ? trace_irq_disable+0x3b/0x140
[  309.873320][ T7752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.873340][ T7752]  ? clear_bhb_loop+0x70/0xc0
[  309.873364][ T7752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.873385][ T7752] RIP: 0033:0x7f59fd79e0d9
[  309.873404][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.873422][ T7752] RSP: 002b:00007f59fe61d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  309.873445][ T7752] RAX: ffffffffffffffda RBX: 00007f59fda25fa0 RCX: 00007f59fd79e0d9
[  309.873460][ T7752] RDX: 0000000000000002 RSI: 0000200000000f00 RDI: 0000000000000004
[  309.873474][ T7752] RBP: 00007f59fe61d090 R08: 0000000000000000 R09: 0000000000000000
[  309.873486][ T7752] R10: 0000000004008440 R11: 0000000000000246 R12: 0000000000000001
[  309.873499][ T7752] R13: 00007f59fda26038 R14: 00007f59fda25fa0 R15: 00007ffe60bba1e8
[  309.873530][ T7752]  </TASK>
[  310.181928][ T7755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.495'.
[  310.741555][ T7768] fuse: Bad value for 'fd'
[  311.295237][ T7776] FAULT_INJECTION: forcing a failure.
[  311.295237][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  311.295368][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.4.504 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  311.295398][ T7776] Tainted: [L]=SOFTLOCKUP
[  311.295405][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  311.295416][ T7776] Call Trace:
[  311.295423][ T7776]  <TASK>
[  311.295432][ T7776]  dump_stack_lvl+0xe8/0x150
[  311.295463][ T7776]  should_fail_ex+0x410/0x560
[  311.295495][ T7776]  _copy_to_user+0x31/0xb0
[  311.295517][ T7776]  simple_read_from_buffer+0xe1/0x170
[  311.295548][ T7776]  proc_fail_nth_read+0x1bb/0x230
[  311.295573][ T7776]  ? common_file_perm+0x20e/0x2b0
[  311.295595][ T7776]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  311.295624][ T7776]  ? rw_verify_area+0x24a/0x4c0
[  311.295648][ T7776]  ? trace_irq_disable+0x3b/0x140
[  311.295668][ T7776]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  311.295694][ T7776]  vfs_read+0x213/0xa80
[  311.295724][ T7776]  ? __pfx___mutex_lock+0x10/0x10
[  311.295751][ T7776]  ? __pfx_vfs_read+0x10/0x10
[  311.295784][ T7776]  ? __fget_files+0x3a2/0x420
[  311.295807][ T7776]  ? __fget_files+0x2a/0x420
[  311.295838][ T7776]  ksys_read+0x150/0x270
[  311.295866][ T7776]  ? __pfx_ksys_read+0x10/0x10
[  311.295902][ T7776]  do_syscall_64+0x166/0x520
[  311.295926][ T7776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.295945][ T7776]  ? clear_bhb_loop+0x70/0xc0
[  311.295967][ T7776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.295985][ T7776] RIP: 0033:0x7fcd1bf5e90e
[  311.296002][ T7776] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  311.296018][ T7776] RSP: 002b:00007fcd1cdebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  311.296040][ T7776] RAX: ffffffffffffffda RBX: 00007fcd1cdec6c0 RCX: 00007fcd1bf5e90e
[  311.296053][ T7776] RDX: 000000000000000f RSI: 00007fcd1cdec0a0 RDI: 0000000000000005
[  311.296065][ T7776] RBP: 00007fcd1cdec090 R08: 0000000000000000 R09: 0000000000000000
[  311.296076][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  311.296087][ T7776] R13: 00007fcd1c226038 R14: 00007fcd1c225fa0 R15: 00007ffdebec7418
[  311.296117][ T7776]  </TASK>
[  312.644828][ T7794] program syz.1.508 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  312.984820][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.510'.
[  313.109365][ T7800] netlink: 'syz.1.511': attribute type 1 has an invalid length.
[  313.209423][ T7800] 8021q: adding VLAN 0 to HW filter on device bond2
[  313.236272][ T7798] md: array md0 already has disks!
[  313.518349][ T7791] program syz.4.506 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  313.548007][ T7798] md/raid10:md0: not enough operational mirrors.
[  314.772590][ T7798] md: pers->run() failed ...
[  315.229684][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  315.289359][ T7817] FAULT_INJECTION: forcing a failure.
[  315.289359][ T7817] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.289476][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.2.514 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  315.289505][ T7817] Tainted: [L]=SOFTLOCKUP
[  315.289513][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  315.289525][ T7817] Call Trace:
[  315.289534][ T7817]  <TASK>
[  315.289551][ T7817]  dump_stack_lvl+0xe8/0x150
[  315.289586][ T7817]  should_fail_ex+0x410/0x560
[  315.289623][ T7817]  copy_fpstate_to_sigframe+0xa83/0xd20
[  315.289654][ T7817]  ? copy_fpstate_to_sigframe+0x188/0xd20
[  315.289688][ T7817]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  315.289722][ T7817]  ? do_raw_spin_unlock+0xf5/0x200
[  315.289760][ T7817]  ? timerqueue_linked_add+0x2b6/0x2e0
[  315.289788][ T7817]  ? fpu__alloc_mathframe+0xac/0x130
[  315.289819][ T7817]  get_sigframe+0x603/0x830
[  315.289856][ T7817]  ? __pfx_get_sigframe+0x10/0x10
[  315.289883][ T7817]  ? irqentry_exit+0x218/0x910
[  315.289909][ T7817]  ? trace_irq_disable+0x3b/0x140
[  315.289942][ T7817]  x64_setup_rt_frame+0x163/0xc50
[  315.289976][ T7817]  ? _raw_spin_unlock_irq+0x29/0x50
[  315.290004][ T7817]  ? _raw_spin_unlock_irq+0x2e/0x50
[  315.290029][ T7817]  ? get_signal+0x10dd/0x12c0
[  315.290063][ T7817]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  315.290103][ T7817]  arch_do_signal_or_restart+0x456/0x860
[  315.290136][ T7817]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  315.290184][ T7817]  exit_to_user_mode_loop+0x10e/0x770
[  315.290206][ T7817]  ? rcu_is_watching+0x16/0xb0
[  315.290234][ T7817]  do_syscall_64+0x328/0x520
[  315.290263][ T7817]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.290284][ T7817]  ? clear_bhb_loop+0x70/0xc0
[  315.290309][ T7817]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  315.290330][ T7817] RIP: 0033:0x7fc15ed9e0d7
[  315.290349][ T7817] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  315.290367][ T7817] RSP: 002b:00007fc15fc2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  315.290391][ T7817] RAX: 000000000000002d RBX: 00007fc15f025fa0 RCX: 00007fc15ed9e0d9
[  315.290406][ T7817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  315.290418][ T7817] RBP: 00007fc15fc2e090 R08: 0000000000000000 R09: 0000000000000000
[  315.290431][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.290444][ T7817] R13: 00007fc15f026038 R14: 00007fc15f025fa0 R15: 00007fff573b5e68
[  315.290476][ T7817]  </TASK>
[  315.421072][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  315.426340][    T9] usb 1-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  315.426435][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 90
[  315.426538][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.426598][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.426694][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.463758][    T9] usb 1-1: config 0 descriptor??
[  316.034350][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  316.034651][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  316.103929][    T9] usb 1-1: USB disconnect, device number 9
[  316.972866][ T7823] netlink: 'syz.3.518': attribute type 1 has an invalid length.
[  317.210074][ T7819] loop1: detected capacity change from 0 to 131072
[  317.213236][ T7819] f2fs: Unknown parameter '000000000000000000000030000000000000000000000001777777777777777777777Wv?��̵E�F}�����?I��w.�k���?�t*藈ƥ:�>\F%���'
[  317.724245][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  317.766779][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  319.228180][ T7823] 8021q: adding VLAN 0 to HW filter on device bond3
[  321.114206][ T7836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.522'.
[  321.435836][ T7838] program syz.2.523 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  326.634118][ T7859] FAULT_INJECTION: forcing a failure.
[  326.634118][ T7859] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  326.651160][ T7859] CPU: 0 UID: 0 PID: 7859 Comm: syz.0.530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  326.651194][ T7859] Tainted: [L]=SOFTLOCKUP
[  326.651201][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  326.651213][ T7859] Call Trace:
[  326.651221][ T7859]  <TASK>
[  326.651230][ T7859]  dump_stack_lvl+0xe8/0x150
[  326.651266][ T7859]  should_fail_ex+0x410/0x560
[  326.651302][ T7859]  _copy_from_user+0x2d/0xb0
[  326.651325][ T7859]  ___sys_sendmsg+0x1c6/0x360
[  326.651347][ T7859]  ? __lock_acquire+0x6df/0x2e50
[  326.651374][ T7859]  ? __pfx____sys_sendmsg+0x10/0x10
[  326.651432][ T7859]  ? __fget_files+0x2a/0x420
[  326.651467][ T7859]  ? __fget_files+0x3a2/0x420
[  326.651505][ T7859]  __x64_sys_sendmsg+0x1b1/0x290
[  326.651531][ T7859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  326.651575][ T7859]  do_syscall_64+0x166/0x520
[  326.651606][ T7859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.651627][ T7859]  ? clear_bhb_loop+0x70/0xc0
[  326.651653][ T7859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.651673][ T7859] RIP: 0033:0x7f044f59e0d9
[  326.651693][ T7859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  326.651711][ T7859] RSP: 002b:00007f045040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  326.651735][ T7859] RAX: ffffffffffffffda RBX: 00007f044f825fa0 RCX: 00007f044f59e0d9
[  326.651750][ T7859] RDX: 0000000020050800 RSI: 00002000000002c0 RDI: 0000000000000003
[  326.651764][ T7859] RBP: 00007f045040f090 R08: 0000000000000000 R09: 0000000000000000
[  326.651777][ T7859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  326.651796][ T7859] R13: 00007f044f826038 R14: 00007f044f825fa0 R15: 00007ffdc944d0d8
[  326.651828][ T7859]  </TASK>
[  326.926283][ T5811] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  327.129354][ T5811] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  327.170882][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  327.172775][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.533'.
[  327.258143][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.263864][ T5811] usb 3-1: Product: syz
[  327.263883][ T5811] usb 3-1: Manufacturer: syz
[  327.263896][ T5811] usb 3-1: SerialNumber: syz
[  327.295640][ T5754] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  327.471606][ T5754] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  327.495003][ T5754] usb 4-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  327.495132][ T5754] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 90
[  327.495305][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.495365][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.495499][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.557925][ T5754] usb 4-1: config 0 descriptor??
[  327.990261][ T5811] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  327.990440][ T5811] cdc_ncm 3-1:1.0: bind() failure
[  327.995566][ T5811] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  327.995611][ T5811] cdc_ncm 3-1:1.1: bind() failure
[  328.019732][ T5754] usbhid 4-1:0.0: can't add hid device: -71
[  328.019972][ T5754] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  328.025276][ T5811] usb 3-1: USB disconnect, device number 11
[  328.053231][ T5754] usb 4-1: USB disconnect, device number 8
[  328.172140][   T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  328.383511][   T25] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  328.426203][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.426265][   T25] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  328.426333][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.440476][   T25] usb 5-1: config 0 descriptor??
[  328.628730][ T7884] program syz.0.536 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  328.935512][ T7880] loop4: detected capacity change from 0 to 1024
[  328.966012][ T7880] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  328.982802][ T7889] jffs2: notice: (7889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  329.706059][ T7878] loop1: detected capacity change from 0 to 40427
[  329.733215][ T7878] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  329.741214][ T7880] vlan2: entered promiscuous mode
[  329.741237][ T7880] bridge0: entered promiscuous mode
[  329.763251][ T7878] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  329.838431][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.529'.
[  329.842065][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.843158][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state
[  330.136384][   T25] Bluetooth: Can't get state to change to load configuration err
[  330.136432][   T25] Bluetooth: Loading sysconfig file failed
[  330.136477][   T25] ath3k 5-1:0.0: probe with driver ath3k failed with error -16
[  330.174688][   T25] usb 5-1: USB disconnect, device number 10
[  330.398096][ T7878] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  330.469628][ T7896] process 'syz.0.538' launched './file0' with NULL argv: empty string added
[  330.483395][ T7896] loop0: detected capacity change from 0 to 512
[  330.484818][ T7896] EXT4-fs: Ignoring removed oldalloc option
[  330.484923][ T7896] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  330.543144][ T5811] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  330.794456][ T5811] usb 3-1: Using ep0 maxpacket: 8
[  330.822843][ T5811] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  330.876330][ T5811] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  330.876370][ T5811] usb 3-1: config 179 has no interface number 0
[  330.876432][ T5811] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  330.876464][ T5811] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  330.876496][ T5811] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  330.876525][ T5811] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  330.876556][ T5811] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  330.876604][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.887330][ T7902] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  331.321589][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'.
[  331.337688][ T5811] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14
[  331.938451][ T7909] loop4: detected capacity change from 0 to 1024
[  332.067086][ T7909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  332.067448][ T7909] System zones: 0-1, 3-12
[  332.117680][ T7909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.327253][ T7909] netlink: 'syz.4.542': attribute type 10 has an invalid length.
[  332.470611][ T5616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.706319][ T7914] FAULT_INJECTION: forcing a failure.
[  332.706319][ T7914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  332.734616][ T7914] CPU: 1 UID: 0 PID: 7914 Comm: syz.0.545 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  332.734651][ T7914] Tainted: [L]=SOFTLOCKUP
[  332.734659][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  332.734670][ T7914] Call Trace:
[  332.734678][ T7914]  <TASK>
[  332.734687][ T7914]  dump_stack_lvl+0xe8/0x150
[  332.734731][ T7914]  should_fail_ex+0x410/0x560
[  332.734767][ T7914]  _copy_from_user+0x2d/0xb0
[  332.734790][ T7914]  ___sys_sendmsg+0x1c6/0x360
[  332.734812][ T7914]  ? __lock_acquire+0x6df/0x2e50
[  332.734838][ T7914]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.734895][ T7914]  ? __fget_files+0x2a/0x420
[  332.734922][ T7914]  ? __fget_files+0x3a2/0x420
[  332.734958][ T7914]  __x64_sys_sendmsg+0x1b1/0x290
[  332.734984][ T7914]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  332.735026][ T7914]  do_syscall_64+0x166/0x520
[  332.735055][ T7914]  ? trace_irq_disable+0x3b/0x140
[  332.735075][ T7914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.735096][ T7914]  ? clear_bhb_loop+0x70/0xc0
[  332.735121][ T7914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  332.735141][ T7914] RIP: 0033:0x7f044f59e0d9
[  332.735160][ T7914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  332.735178][ T7914] RSP: 002b:00007f045040f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  332.735201][ T7914] RAX: ffffffffffffffda RBX: 00007f044f825fa0 RCX: 00007f044f59e0d9
[  332.735216][ T7914] RDX: 00000000000084c2 RSI: 0000200000000280 RDI: 0000000000000003
[  332.735229][ T7914] RBP: 00007f045040f090 R08: 0000000000000000 R09: 0000000000000000
[  332.735241][ T7914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  332.735254][ T7914] R13: 00007f044f826038 R14: 00007f044f825fa0 R15: 00007ffdc944d0d8
[  332.735285][ T7914]  </TASK>
[  333.208100][ T5811] usb 3-1: USB disconnect, device number 12
[  333.220627][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  333.245255][ T7917] netlink: 16 bytes leftover after parsing attributes in process `syz.4.544'.
[  333.424103][ T7919] loop2: detected capacity change from 0 to 512
[  333.473435][ T7919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  333.572826][ T7919] EXT4-fs (loop2): 1 truncate cleaned up
[  333.590543][ T7919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.733816][ T7925] jffs2: notice: (7925) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  333.765175][ T7927] program syz.4.548 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  333.920300][ T7919] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  333.941627][ T7919] EXT4-fs (loop2): Remounting filesystem read-only
[  334.110496][ T5811] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  334.260416][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.341410][ T7933] syz.1.551 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  334.454766][ T7937] netlink: 24 bytes leftover after parsing attributes in process `syz.3.553'.
[  334.502110][  T146] bond0: (slave netdevsim1): link status definitely down, disabling slave
[  335.242781][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  335.284819][ T5811] usb 5-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  335.284868][ T5811] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 90
[  335.284931][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.284954][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.284990][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.287798][ T5811] usb 5-1: config 0 descriptor??
[  335.412238][ T7942] loop1: detected capacity change from 0 to 1024
[  335.715839][ T7935] loop0: detected capacity change from 0 to 131072
[  335.720458][ T7944] loop2: detected capacity change from 0 to 2048
[  335.830804][ T7948] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  335.852762][ T7935] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  335.869006][ T7935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  335.890394][ T7935] F2FS-fs (loop0): recover xattr in inode (7), error(0)
[  335.890491][ T7935] F2FS-fs (loop0): set inode (7) has corrupted xattr
[  336.869637][ T5811] hid_parser_main: 46 callbacks suppressed
[  336.871395][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871443][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871485][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871516][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871545][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871574][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871603][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871641][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871671][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.871701][ T5811] logitech-hidpp-device 0003:046D:C086.0006: unknown main item tag 0x0
[  336.884088][ T5811] logitech-hidpp-device 0003:046D:C086.0006: hidraw0: USB HID v7f.fd Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0
[  336.896970][   T25] usb 5-1: USB disconnect, device number 11
[  337.348464][ T7959] fido_id[7959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  338.223714][ T5754] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  338.235175][ T7967] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  338.389403][ T5754] usb 4-1: device descriptor read/64, error -71
[  338.631917][ T7969] program syz.1.559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  338.644803][ T5754] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  338.802252][ T5754] usb 4-1: device descriptor read/64, error -71
[  338.827654][ T7948] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  338.827775][ T7948] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  338.894063][ T7948] Remounting filesystem read-only
[  338.907114][ T7977] FAULT_INJECTION: forcing a failure.
[  338.907114][ T7977] name failslab, interval 1, probability 0, space 0, times 0
[  338.908289][ T5625] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  338.921718][ T7977] CPU: 0 UID: 0 PID: 7977 Comm: syz.4.564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  338.921750][ T7977] Tainted: [L]=SOFTLOCKUP
[  338.921758][ T7977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  338.921770][ T7977] Call Trace:
[  338.921779][ T7977]  <TASK>
[  338.921788][ T7977]  dump_stack_lvl+0xe8/0x150
[  338.921823][ T7977]  should_fail_ex+0x410/0x560
[  338.921860][ T7977]  should_failslab+0xa8/0x100
[  338.921886][ T7977]  __kmalloc_noprof+0xfe/0x720
[  338.921915][ T7977]  ? rcu_is_watching+0x16/0xb0
[  338.921940][ T7977]  ? tomoyo_realpath_from_path+0xef/0x640
[  338.921963][ T7977]  ? tomoyo_realpath_from_path+0xef/0x640
[  338.921993][ T7977]  tomoyo_realpath_from_path+0xef/0x640
[  338.922027][ T7977]  ? tomoyo_path_number_perm+0x219/0x5f0
[  338.922057][ T7977]  tomoyo_path_number_perm+0x246/0x5f0
[  338.922107][ T7977]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  338.922136][ T7977]  ? __lock_acquire+0x6df/0x2e50
[  338.922174][ T7977]  ? hook_file_ioctl+0x1f2/0x600
[  338.922224][ T7977]  ? __fget_files+0x2a/0x420
[  338.922254][ T7977]  ? __fget_files+0x2a/0x420
[  338.922279][ T7977]  ? __fget_files+0x3a2/0x420
[  338.922304][ T7977]  ? __fget_files+0x2a/0x420
[  338.922334][ T7977]  security_file_ioctl+0xc3/0x2a0
[  338.922366][ T7977]  __se_sys_ioctl+0x47/0x170
[  338.922391][ T7977]  do_syscall_64+0x166/0x520
[  338.922419][ T7977]  ? trace_irq_disable+0x3b/0x140
[  338.922439][ T7977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.922461][ T7977]  ? clear_bhb_loop+0x70/0xc0
[  338.922486][ T7977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.922506][ T7977] RIP: 0033:0x7fcd1bf9e0d9
[  338.922526][ T7977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  338.922544][ T7977] RSP: 002b:00007fcd1cdec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.922567][ T7977] RAX: ffffffffffffffda RBX: 00007fcd1c225fa0 RCX: 00007fcd1bf9e0d9
[  338.922583][ T7977] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004
[  338.922596][ T7977] RBP: 00007fcd1cdec090 R08: 0000000000000000 R09: 0000000000000000
[  338.922609][ T7977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.922622][ T7977] R13: 00007fcd1c226038 R14: 00007fcd1c225fa0 R15: 00007ffdebec7418
[  338.922656][ T7977]  </TASK>
[  338.922664][ T7977] ERROR: Out of memory at tomoyo_realpath_from_path.
[  339.007190][ T5754] usb usb4-port1: attempt power cycle
[  339.331814][   T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  339.747352][   T25] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  339.918229][   T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  339.918364][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.982347][ T7980] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  340.005896][   T25] opticon 2-1:1.0: opticon converter detected
[  340.279643][ T5754] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  340.451905][ T5754] usb 4-1: device descriptor read/8, error -71
[  340.629307][   T25] usb 2-1: opticon converter now attached to ttyUSB0
[  341.931858][ T5754] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  341.975827][ T5754] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  341.981854][ T5754] usb 4-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  341.981919][ T5754] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 90
[  341.982053][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.982114][ T5754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.982215][ T5754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.008268][ T5754] usb 4-1: config 0 descriptor??
[  342.144296][   T10] usb 2-1: USB disconnect, device number 5
[  342.309817][ T7993] syz.4.567 (7993): /proc/7992/oom_adj is deprecated, please use /proc/7992/oom_score_adj instead.
[  342.481650][   T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  342.489584][   T10] opticon 2-1:1.0: device disconnected
[  342.741291][ T5754] hid_parser_main: 470 callbacks suppressed
[  342.742618][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.742717][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.742780][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.742824][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.742886][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.742948][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.743010][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.743053][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.743115][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.743183][ T5754] logitech-hidpp-device 0003:046D:C086.0007: unknown main item tag 0x0
[  342.857769][ T5754] logitech-hidpp-device 0003:046D:C086.0007: hidraw0: USB HID v7f.fd Device [HID 046d:c086] on usb-dummy_hcd.3-1/input0
[  342.930124][ T5754] usb 4-1: USB disconnect, device number 12
[  343.048519][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  343.268893][ T8000] netlink: 'syz.4.569': attribute type 10 has an invalid length.
[  343.268938][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz.4.569'.
[  343.375722][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  343.418126][   T10] usb 2-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  343.418253][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 90
[  343.418446][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.418519][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  343.418646][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.611337][   T10] usb 2-1: config 0 descriptor??
[  343.738191][ T8006] loop2: detected capacity change from 0 to 1024
[  343.739319][ T8006] ext4: Unknown parameter 'no'
[  343.758137][ T8003] fido_id[8003]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  343.784523][ T8006] loop2: detected capacity change from 0 to 128
[  343.821575][ T8006] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  343.856455][ T8006] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  343.919822][ T8010] program syz.4.572 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  344.138187][   T10] logitech-hidpp-device 0003:046D:C086.0008: hidraw0: USB HID v7f.fd Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0
[  344.272672][ T5753] usb 2-1: USB disconnect, device number 6
[  344.539637][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  344.575949][ T5625] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.603841][ T8018] fido_id[8018]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  344.723018][   T10] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  344.736945][   T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  344.748572][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.784339][ T8015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  344.809069][   T10] opticon 1-1:1.0: opticon converter detected
[  344.872279][   T10] usb 1-1: opticon converter now attached to ttyUSB0
[  345.249016][ T8030] loop1: detected capacity change from 0 to 1024
[  346.082358][ T8034] Bluetooth: hci0: unsupported parameter 5135
[  346.082409][ T8034] Bluetooth: hci0: unsupported parameter 8192
[  346.082440][ T8034] Bluetooth: hci0: unsupported parameter 5135
[  346.082457][ T8034] Bluetooth: hci0: unsupported parameter 8192
[  347.285193][ T5753] usb 1-1: USB disconnect, device number 10
[  347.298866][ T5753] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  347.299515][ T5753] opticon 1-1:1.0: device disconnected
[  347.608101][ T8048] program syz.4.584 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.672565][ T8064] FAULT_INJECTION: forcing a failure.
[  349.672565][ T8064] name fail_futex, interval 1, probability 0, space 0, times 1
[  349.672680][ T8064] CPU: 0 UID: 0 PID: 8064 Comm: syz.0.589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  349.672710][ T8064] Tainted: [L]=SOFTLOCKUP
[  349.672718][ T8064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  349.672730][ T8064] Call Trace:
[  349.672785][ T8064]  <TASK>
[  349.672838][ T8064]  dump_stack_lvl+0xe8/0x150
[  349.673006][ T8064]  should_fail_ex+0x410/0x560
[  349.673129][ T8064]  get_futex_key+0x1b4/0x1580
[  349.673189][ T8064]  ? __pfx_get_futex_key+0x10/0x10
[  349.673237][ T8064]  ? __pfx___mutex_trylock_common+0x10/0x10
[  349.673290][ T8064]  futex_wake+0x119/0x5f0
[  349.673327][ T8064]  ? __pfx_futex_wake+0x10/0x10
[  349.673366][ T8064]  ? mm_exit_exec_release+0x20/0x290
[  349.673418][ T8064]  do_futex+0x458/0x4e0
[  349.673450][ T8064]  ? __pfx_do_futex+0x10/0x10
[  349.673482][ T8064]  ? __might_fault+0xaf/0x130
[  349.673548][ T8064]  mm_exit_exec_release+0x10d/0x290
[  349.673579][ T8064]  exit_mm+0x4d/0x2d0
[  349.673615][ T8064]  do_exit+0x6cd/0x2360
[  349.673645][ T8064]  ? __pfx_do_exit+0x10/0x10
[  349.673671][ T8064]  ? do_raw_spin_lock+0x12b/0x2f0
[  349.673710][ T8064]  do_group_exit+0x22d/0x2f0
[  349.673731][ T8064]  ? _raw_spin_unlock_irq+0x23/0x50
[  349.673848][ T8064]  get_signal+0x121b/0x12c0
[  349.673897][ T8064]  arch_do_signal_or_restart+0xbb/0x860
[  349.673948][ T8064]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  349.673975][ T8064]  ? vm_mmap_pgoff+0x23d/0x4e0
[  349.674016][ T8064]  ? ksys_write+0x242/0x270
[  349.674070][ T8064]  exit_to_user_mode_loop+0x10e/0x770
[  349.674102][ T8064]  ? rcu_is_watching+0x16/0xb0
[  349.674130][ T8064]  do_syscall_64+0x328/0x520
[  349.674178][ T8064]  ? trace_irq_disable+0x3b/0x140
[  349.674203][ T8064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.674240][ T8064]  ? clear_bhb_loop+0x70/0xc0
[  349.674264][ T8064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.674284][ T8064] RIP: 0033:0x7f044f59e0d9
[  349.674326][ T8064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.674344][ T8064] RSP: 002b:00007f045040f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  349.674389][ T8064] RAX: fffffffffffffffc RBX: 00007f044f825fa0 RCX: 00007f044f59e0d9
[  349.674404][ T8064] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000
[  349.674425][ T8064] RBP: 00007f045040f090 R08: ffffffffffffffff R09: 00000000ec776000
[  349.674440][ T8064] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001
[  349.674453][ T8064] R13: 00007f044f826038 R14: 00007f044f825fa0 R15: 00007ffdc944d0d8
[  349.674486][ T8064]  </TASK>
[  349.802741][ T8069] loop1: detected capacity change from 0 to 32768
[  349.820584][ T8069] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.591 (8069)
[  349.939821][ T8069] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  349.939903][ T8069] BTRFS info (device loop1): using sha256 checksum algorithm
[  349.946223][ T5753] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  350.147191][ T5753] usb 5-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  350.188698][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  350.188855][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.194065][ T5753] usb 5-1: config 0 descriptor??
[  350.199289][ T8071] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  350.430044][ T8071] loop4: detected capacity change from 0 to 128
[  350.512504][ T8069] BTRFS info (device loop1): enabling ssd optimizations
[  350.512570][ T8069] BTRFS info (device loop1): turning on sync discard
[  350.512602][ T8069] BTRFS info (device loop1): enabling free space tree
[  350.512735][ T8069] BTRFS info (device loop1): use zlib compression, level 3
[  350.532522][ T8071] ufs: You didn't specify the type of your ufs filesystem
[  350.532522][ T8071] 
[  350.532522][ T8071] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  350.532522][ T8071] 
[  350.532522][ T8071] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  350.603070][   T31] audit: type=1800 audit(1787616063.741:10): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.593" name="idProduct" dev="configfs" ino=31362 res=0 errno=0
[  350.634366][ T8071] ufs: ufs_fill_super(): bad magic number
[  351.012700][ T5753] hid (null): global environment stack underflow
[  351.065499][ T5753] hid_parser_main: 950 callbacks suppressed
[  351.065604][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.065690][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.065744][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.065819][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.065872][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.065924][ T5753] asus 0003:0B05:1ABE.0009: unknown main item tag 0x0
[  351.066004][ T5753] asus 0003:0B05:1ABE.0009: unexpected long global item
[  351.079430][ T5753] asus 0003:0B05:1ABE.0009: Asus hid parse failed: -22
[  351.079745][ T5753] asus 0003:0B05:1ABE.0009: probe with driver asus failed with error -22
[  352.261054][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.333822][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.976800][ T5618] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.117243][ T5753] usb 5-1: USB disconnect, device number 12
[  353.198518][ T8101] dvmrp1: entered allmulticast mode
[  353.250517][ T8103] dvmrp1: left allmulticast mode
[  353.400710][ T8108] program syz.2.598 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  354.260033][ T8124] FAULT_INJECTION: forcing a failure.
[  354.260033][ T8124] name failslab, interval 1, probability 0, space 0, times 0
[  354.260096][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.4.602 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.260126][ T8124] Tainted: [L]=SOFTLOCKUP
[  354.260133][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.260145][ T8124] Call Trace:
[  354.260153][ T8124]  <TASK>
[  354.260164][ T8124]  dump_stack_lvl+0xe8/0x150
[  354.260199][ T8124]  should_fail_ex+0x410/0x560
[  354.260237][ T8124]  should_failslab+0xa8/0x100
[  354.260293][ T8124]  __kmalloc_noprof+0xfe/0x720
[  354.260324][ T8124]  ? kernfs_fop_write_iter+0x157/0x540
[  354.260365][ T8124]  ? kernfs_fop_write_iter+0x157/0x540
[  354.260397][ T8124]  kernfs_fop_write_iter+0x157/0x540
[  354.260428][ T8124]  vfs_write+0x612/0xba0
[  354.260467][ T8124]  ? __pfx_vfs_write+0x10/0x10
[  354.260507][ T8124]  ? __fget_files+0x2a/0x420
[  354.260554][ T8124]  ksys_write+0x150/0x270
[  354.260587][ T8124]  ? __pfx_ksys_write+0x10/0x10
[  354.260629][ T8124]  do_syscall_64+0x166/0x520
[  354.260660][ T8124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.260682][ T8124]  ? clear_bhb_loop+0x70/0xc0
[  354.260708][ T8124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.260729][ T8124] RIP: 0033:0x7fcd1bf9e0d9
[  354.260750][ T8124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.260768][ T8124] RSP: 002b:00007fcd1cdec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  354.260800][ T8124] RAX: ffffffffffffffda RBX: 00007fcd1c225fa0 RCX: 00007fcd1bf9e0d9
[  354.260816][ T8124] RDX: 0000000000000020 RSI: 0000200000002500 RDI: 0000000000000003
[  354.260832][ T8124] RBP: 00007fcd1cdec090 R08: 0000000000000000 R09: 0000000000000000
[  354.260847][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.260859][ T8124] R13: 00007fcd1c226038 R14: 00007fcd1c225fa0 R15: 00007ffdebec7418
[  354.260894][ T8124]  </TASK>
[  354.901185][ T8134] FAULT_INJECTION: forcing a failure.
[  354.901185][ T8134] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  354.940344][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.3.604 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  354.940381][ T8134] Tainted: [L]=SOFTLOCKUP
[  354.940389][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  354.940401][ T8134] Call Trace:
[  354.940409][ T8134]  <TASK>
[  354.940418][ T8134]  dump_stack_lvl+0xe8/0x150
[  354.940454][ T8134]  should_fail_ex+0x410/0x560
[  354.940489][ T8134]  _copy_from_user+0x2d/0xb0
[  354.940585][ T8134]  core_sys_select+0x509/0xb40
[  354.940610][ T8134]  ? get_pid_task+0x20/0x1f0
[  354.940646][ T8134]  ? __pfx_core_sys_select+0x10/0x10
[  354.940694][ T8134]  ? __pfx_set_user_sigmask+0x10/0x10
[  354.940723][ T8134]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  354.940789][ T8134]  __se_sys_pselect6+0x267/0x320
[  354.940820][ T8134]  ? __pfx___se_sys_pselect6+0x10/0x10
[  354.940845][ T8134]  ? __pfx_ksys_write+0x10/0x10
[  354.940879][ T8134]  ? __x64_sys_pselect6+0x21/0xf0
[  354.940907][ T8134]  do_syscall_64+0x166/0x520
[  354.940935][ T8134]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.940957][ T8134]  ? clear_bhb_loop+0x70/0xc0
[  354.940981][ T8134]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.941002][ T8134] RIP: 0033:0x7f11c899e0d9
[  354.941023][ T8134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  354.941042][ T8134] RSP: 002b:00007f11c97cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e
[  354.941066][ T8134] RAX: ffffffffffffffda RBX: 00007f11c8c26090 RCX: 00007f11c899e0d9
[  354.941081][ T8134] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000040
[  354.941095][ T8134] RBP: 00007f11c97cb090 R08: 0000000000000000 R09: 0000000000000000
[  354.941109][ T8134] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  354.941122][ T8134] R13: 00007f11c8c26128 R14: 00007f11c8c26090 R15: 00007fff82600ae8
[  354.941155][ T8134]  </TASK>
[  355.215795][ T5739] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  355.519666][ T5739] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  355.569819][ T5739] usb 1-1: config 0 has too many interfaces: 90, using maximum allowed: 32
[  355.569867][ T5739] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 90
[  355.569934][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.569963][ T5739] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.570009][ T5739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.682192][ T5739] usb 1-1: config 0 descriptor??
[  355.876795][ T8144] program syz.3.610 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  355.976991][ T8146] loop3: detected capacity change from 0 to 1024
[  356.097974][ T8146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c028, mo2=0002]
[  356.098120][ T8146] System zones: 0-1, 3-12
[  356.221543][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.316926][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.316996][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317040][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317071][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317101][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317131][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317160][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317190][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317220][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.317249][ T5739] logitech-hidpp-device 0003:046D:C086.000A: unknown main item tag 0x0
[  356.470975][ T5739] logitech-hidpp-device 0003:046D:C086.000A: hidraw0: USB HID v7f.fd Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0
[  356.538841][ T5739] usb 1-1: USB disconnect, device number 11
[  356.569526][ T8146] netlink: 'syz.3.611': attribute type 10 has an invalid length.
[  356.807188][ T5615] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.092529][ T8150] fido_id[8150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  357.257012][ T8153] mmap: syz.1.607 (8153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  357.538829][ T5739] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  357.732338][ T5739] usb 4-1: Using ep0 maxpacket: 16
[  357.762979][ T5739] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  357.801433][ T8158] FAULT_INJECTION: forcing a failure.
[  357.801433][ T8158] name failslab, interval 1, probability 0, space 0, times 0
[  357.801568][ T8158] CPU: 0 UID: 0 PID: 8158 Comm: syz.2.608 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  357.801598][ T8158] Tainted: [L]=SOFTLOCKUP
[  357.801605][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  357.801616][ T8158] Call Trace:
[  357.801624][ T8158]  <TASK>
[  357.801633][ T8158]  dump_stack_lvl+0xe8/0x150
[  357.801665][ T8158]  should_fail_ex+0x410/0x560
[  357.801698][ T8158]  should_failslab+0xa8/0x100
[  357.801719][ T8158]  ? mas_alloc_nodes+0x291/0x350
[  357.801850][ T8158]  kmem_cache_alloc_noprof+0xa1/0x600
[  357.801878][ T8158]  ? mas_alloc_nodes+0x291/0x350
[  357.801908][ T8158]  mas_alloc_nodes+0x291/0x350
[  357.801937][ T8158]  mas_preallocate+0x42a/0x840
[  357.801967][ T8158]  ? __pfx_mas_preallocate+0x10/0x10
[  357.802001][ T8158]  ? __asan_memset+0x22/0x50
[  357.802041][ T8158]  ? init_multi_vma_prep+0x463/0x550
[  357.802069][ T8158]  commit_merge+0x20c/0x630
[  357.802095][ T8158]  ? __pfx_commit_merge+0x10/0x10
[  357.802122][ T8158]  ? vma_modify+0xfd2/0x1f40
[  357.802146][ T8158]  ? __vma_start_write+0x1b4/0x290
[  357.802176][ T8158]  vma_modify+0x1493/0x1f40
[  357.802210][ T8158]  vma_modify_policy+0x289/0x340
[  357.802234][ T8158]  ? __pfx_vma_modify_policy+0x10/0x10
[  357.802289][ T8158]  mbind_range+0x2c1/0x800
[  357.802321][ T8158]  __se_sys_mbind+0xacd/0x10e0
[  357.802350][ T8158]  ? __pfx___se_sys_mbind+0x10/0x10
[  357.802379][ T8158]  ? net_tx_action+0x5bb/0xc30
[  357.802492][ T8158]  ? lockdep_softirqs_on+0x11e/0x190
[  357.802519][ T8158]  ? __x64_sys_mbind+0x21/0xf0
[  357.802543][ T8158]  do_syscall_64+0x166/0x520
[  357.802568][ T8158]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.802587][ T8158]  ? clear_bhb_loop+0x70/0xc0
[  357.802610][ T8158]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.802628][ T8158] RIP: 0033:0x7fc15ed9e0d9
[  357.802645][ T8158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  357.802661][ T8158] RSP: 002b:00007fc15fc0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  357.802683][ T8158] RAX: ffffffffffffffda RBX: 00007fc15f026090 RCX: 00007fc15ed9e0d9
[  357.802697][ T8158] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000
[  357.802709][ T8158] RBP: 00007fc15fc0d090 R08: 0000000000000000 R09: 0000000000000002
[  357.802721][ T8158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  357.802732][ T8158] R13: 00007fc15f026128 R14: 00007fc15f026090 R15: 00007fff573b5e68
[  357.802762][ T8158]  </TASK>
[  357.820041][ T5739] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  357.820074][ T5739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  357.939551][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  357.942932][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.942958][ T5739] usb 4-1: Product: syz
[  357.942973][ T5739] usb 4-1: Manufacturer: syz
[  357.942987][ T5739] usb 4-1: SerialNumber: syz
[  357.946029][ T5739] usb 4-1: config 0 descriptor??
[  357.970867][ T5739] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  357.970926][ T5739] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  358.109564][   T10] usb 1-1: Using ep0 maxpacket: 32
[  358.127119][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  358.127246][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  358.166871][   T10] usb 1-1: string descriptor 0 read error: -22
[  358.167262][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.308461][   T10] usb 1-1: BAAD SPEAKERPHONE c_chmask mismatch
[  358.622182][ T5739] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  358.645963][ T5739] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  358.795020][ T8157] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.613'.
[  359.222060][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  359.332164][   T10] usb 1-1: USB disconnect, device number 12
[  359.476648][ T8166] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  359.516076][ T8155] Config c/1 of g1 needs at least one function.
[  359.516424][ T8155] udc dummy_udc.0: failed to start g1: -22
[  359.516478][ T8155] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22
[  359.518128][ T8155] UDC core: g1: couldn't find an available UDC or it's busy
[  359.534642][ T5739] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  359.557091][ T5739] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  359.569741][ T5739] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  359.580512][ T5739] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  359.599498][ T5739] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  359.599726][ T5753] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  359.609867][ T5739] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  359.632408][ T5739] usb 4-1: USB disconnect, device number 13
[  359.806952][ T5753] usb 2-1: Using ep0 maxpacket: 16
[  359.828081][ T5753] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  359.962341][ T5753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.962468][ T5753] usb 2-1: Product: syz
[  359.962501][ T5753] usb 2-1: Manufacturer: syz
[  359.962521][ T5753] usb 2-1: SerialNumber: syz
[  360.029555][ T5753] usb 2-1: config 0 descriptor??
[  360.056148][ T5753] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  360.072381][ T5753] usb 2-1: Detected FT-X
[  360.808338][ T8164] loop1: detected capacity change from 0 to 128
[  361.337834][ T5753] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  361.339951][ T8184] program syz.4.621 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  361.360654][ T5753] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  361.362856][ T5753] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  361.398829][ T5753] usb 2-1: USB disconnect, device number 7
[  361.432670][ T5753] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  361.459561][ T5753] ftdi_sio 2-1:0.0: device disconnected
[  362.025546][ T8182] loop2: detected capacity change from 0 to 32768
[  362.040162][ T8182] btrfs: Unknown parameter 'ref_verify'
[  362.731846][ T5739] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  362.948178][ T5739] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  362.993900][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.093768][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.093815][ T5739] usb 2-1: Product: syz
[  363.093845][ T5739] usb 2-1: Manufacturer: syz
[  363.093864][ T5739] usb 2-1: SerialNumber: syz
[  363.166633][ T8189] loop0: detected capacity change from 0 to 40427
[  363.194778][ T8189] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  363.211554][ T8189] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  363.226895][ T8189] F2FS-fs (loop0): invalid crc value
[  363.694585][ T5739] usb 2-1: Invalid number of CPorts: 0
[  363.694643][ T5739] es2_ap_driver 2-1:1.0: probe with driver es2_ap_driver failed with error -22
[  364.540340][ T8206] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI
[  364.552338][ T8206] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7]
[  364.560848][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.2.620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  364.571636][ T8206] Tainted: [L]=SOFTLOCKUP
[  364.575971][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  364.586052][ T8206] RIP: 0010:configfs_symlink+0x5fc/0x1030
[  364.591797][ T8206] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 be 82 bc ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 96 82 bc ff 4d 8b 2c 24 4c 89 ef e8
[  364.611417][ T8206] RSP: 0018:ffffc9000304fc80 EFLAGS: 00010202
[  364.617497][ T8206] RAX: 0000000000000016 RBX: ffff88803290b048 RCX: dffffc0000000000
[  364.625476][ T8206] RDX: 0000000000000001 RSI: ffffffff8c6d8d60 RDI: 00000000ffffffff
[  364.633458][ T8206] RBP: ffffc9000304fd88 R08: ffffffff907a4b7f R09: 1ffffffff20f496f
[  364.641437][ T8206] R10: dffffc0000000000 R11: fffffbfff20f4970 R12: 00000000000000b0
[  364.649418][ T8206] R13: 0000000000000000 R14: ffffffff8cd5baa8 R15: 1ffff92000609fa0
[  364.657397][ T8206] FS:  00007fc15fbec6c0(0000) GS:ffff888124dd7000(0000) knlGS:0000000000000000
[  364.666334][ T8206] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  364.672923][ T8206] CR2: 0000200000404000 CR3: 0000000077894000 CR4: 00000000003526f0
[  364.680917][ T8206] Call Trace:
[  364.684205][ T8206]  <TASK>
[  364.687146][ T8206]  ? lookup_one_qstr_excl+0x1d4/0x360
[  364.692541][ T8206]  ? make_vfsuid+0x49/0xa0
[  364.696988][ T8206]  ? __pfx_configfs_symlink+0x10/0x10
[  364.702369][ T8206]  ? bpf_lsm_inode_symlink+0x9/0x20
[  364.707603][ T8206]  vfs_symlink+0x18b/0x330
[  364.712035][ T8206]  ? security_path_symlink+0xfd/0x360
[  364.717488][ T8206]  filename_symlinkat+0x1cd/0x410
[  364.722530][ T8206]  ? __pfx_filename_symlinkat+0x10/0x10
[  364.728088][ T8206]  ? do_getname+0x151/0x250
[  364.732600][ T8206]  __se_sys_symlinkat+0x4e/0x2b0
[  364.737549][ T8206]  do_syscall_64+0x166/0x520
[  364.742155][ T8206]  ? trace_irq_disable+0x3b/0x140
[  364.747188][ T8206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.753296][ T8206]  ? clear_bhb_loop+0x70/0xc0
[  364.758016][ T8206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.763928][ T8206] RIP: 0033:0x7fc15ed9e0d9
[  364.768360][ T8206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  364.787987][ T8206] RSP: 002b:00007fc15fbec028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[  364.796428][ T8206] RAX: ffffffffffffffda RBX: 00007fc15f026180 RCX: 00007fc15ed9e0d9
[  364.804426][ T8206] RDX: 0000200000000800 RSI: ffffffffffffff9c RDI: 00002000000007c0
[  364.812415][ T8206] RBP: 00007fc15ee35024 R08: 0000000000000000 R09: 0000000000000000
[  364.820404][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.828383][ T8206] R13: 00007fc15f026218 R14: 00007fc15f026180 R15: 00007fff573b5e68
[  364.836372][ T8206]  </TASK>
[  364.839401][ T8206] Modules linked in:
[  364.887518][ T8206] ---[ end trace 0000000000000000 ]---
[  364.908033][ T8194] loop1: detected capacity change from 0 to 512
[  364.978489][ T8189] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  365.034061][ T8206] RIP: 0010:configfs_symlink+0x5fc/0x1030
[  365.064349
** replaying previous printk message **
[  365.064349][ T8206] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 be 82 bc ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 96 82 bc ff 4d 8b 2c 24 4c 89 ef e8
[  365.064407][ T8206] RSP: 0018:ffffc9000304fc80 EFLAGS: 00010202
[  365.064436][ T8206] RAX: 0000000000000016 RBX: ffff88803290b048 RCX: dffffc0000000000
[  365.064453][ T8206] RDX: 0000000000000001 RSI: ffffffff8c6d8d60 RDI: 00000000ffffffff
[  365.064467][ T8206] RBP: ffffc9000304fd88 R08: ffffffff907a4b7f R09: 1ffffffff20f496f
[  365.064480][ T8206] R10: dffffc0000000000 R11: fffffbfff20f4970 R12: 00000000000000b0
[  365.064493][ T8206] R13: 0000000000000000 R14: ffffffff8cd5baa8 R15: 1ffff92000609fa0
[  365.064506][ T8206] FS:  00007fc15fbec6c0(0000) GS:ffff888124dd7000(0000) knlGS:0000000000000000
[  365.064522][ T8206] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  365.064536][ T8206] CR2: 00007f11c8bef2f8 CR3: 0000000077894000 CR4: 00000000003526f0
[  365.064607][ T8206] Kernel panic - not syncing: Fatal exception
[  365.164699][ T8206] Kernel Offset: disabled
[  365.169026][ T8206] Rebooting in 86400 seconds..