last executing test programs:

26m37.566181116s ago: executing program 32 (id=86):
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[], 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x1000)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="63726561746f723d91b212f72c6e6c733d63703433372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c747970653dabe89a7a2c6e6f626172726965722c00e749ee745e13f49b1e10072dcea1fd4ab6d517083bae1cf7be18ac381ae3b1da2a704e"], 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101041, 0xf0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)

25m28.861831087s ago: executing program 33 (id=230):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = socket(0xa, 0x2, 0x0)
connect$inet6(r2, 0x0, 0x0)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x4000410000002)
fsmount(0xffffffffffffffff, 0x0, 0x8c)
write(r0, &(0x7f0000000400)='!*:', 0x3)

24m36.588485262s ago: executing program 34 (id=307):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
io_uring_setup(0x403939, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/fail_usercopy/task-filter\x00', 0x2, 0x0)
write(r1, &(0x7f0000000300)='Y', 0x1)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x400, 0x0, 'queue0\x00', 0x800000})

24m29.842953832s ago: executing program 3 (id=338):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000142b0000000000000000000000ffffac1414bbfe80f2ffffff000000000000"], 0x0)
io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
socket$inet_udp(0x2, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0xfff, {0x7, 0x29, 0xcf940281, 0xa00010, 0x1, 0x3a76, 0x10, 0x1801, 0x0, 0x0, 0x2, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

24m28.129820371s ago: executing program 3 (id=339):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4)
syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x3, 0xff, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x1, 0xf8, 0x3, 0x1, 0x0, 0x7, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

24m27.5103832s ago: executing program 3 (id=340):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x4)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00004dd000/0x4000)=nil, &(0x7f0000816000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ef5000/0x3000)=nil, &(0x7f0000000300)="62e6add7c070b33aab53afbfe45135bf4cc77ce5a9908ff1f43345019c66dfa5585d1209d119c693fc1076ecb209465a1d2d74ae59aa5a2b457419d0c07817b254c7653c3c2679bf4a26f3707b99ff84a0534c76ce7ff6724141232ae1b115c8af1b83e1a7400cb8cd1ca0de620ac8a352119d219f72beb0dd4a5e538ed8c545efd1352fe654bf229b501c46f2c09906edfefbc5e33bee372df037ed2b93fcdd852f0feadcb8d997b56a3aa32c42b9879245479f0e3daa3d61943feae9e1b6bcc78cbb6c32e619132187ce01a6210be45158bd425581eb0772a7c775daf58323757971c4fff04ea737bf1c", 0xeb, r2}, 0x68)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2a442, 0x0)

24m25.97161732s ago: executing program 3 (id=350):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
write$P9_RVERSION(r2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})
setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x1)
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@random={'trusted.', '+\x00'}, 0x0, 0x0)

24m14.492528099s ago: executing program 35 (id=337):
mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x406, r2)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4)
write$FUSE_ATTR(r3, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000a, 0x0, 0x7ff, 0x2, 0x4, 0xd, 0x5, 0xa000, 0x6, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff74)

24m14.471110399s ago: executing program 3 (id=344):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x4000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_clone(0x68411, 0x0, 0x17, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r1}, 0xc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)

24m13.57979507s ago: executing program 3 (id=347):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000600)={0x7fff, {{0xa, 0x4e24, 0x5, @empty, 0xffffffff}}, {{0xa, 0x4e20, 0x1000009, @loopback, 0xfffffffa}}}, 0x108)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@local, 0x4e25, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

23m57.94423174s ago: executing program 36 (id=347):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8044)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wlc\x00', 0x1, 0xa88, 0x8}, 0x2c)
socket$kcm(0xa, 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000600)={0x7fff, {{0xa, 0x4e24, 0x5, @empty, 0xffffffff}}, {{0xa, 0x4e20, 0x1000009, @loopback, 0xfffffffa}}}, 0x108)
syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@local, 0x4e25, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz1\x00', 0x1ff)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

20m43.330364854s ago: executing program 8 (id=654):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
syz_open_procfs(0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x5, 0x80, 0x4bd, 0x8103, 0x15})
ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000f40))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

20m40.543922382s ago: executing program 8 (id=658):
socket$nl_generic(0x10, 0x3, 0x10)
setns(0xc9, 0x0)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0xfffd}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020000000000000008400000008000000200100"/56], 0x38, 0x4855}, 0x24000052)

20m38.424069869s ago: executing program 8 (id=661):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xc3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x40)

20m37.158287127s ago: executing program 8 (id=665):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

20m36.806211654s ago: executing program 8 (id=667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
listen(0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

20m35.58242047s ago: executing program 8 (id=668):
r0 = socket$kcm(0x21, 0x7, 0x2)
sendmsg$kcm(r0, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8000000000000009, 0xaed, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x7c}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)

20m18.696725827s ago: executing program 37 (id=668):
r0 = socket$kcm(0x21, 0x7, 0x2)
sendmsg$kcm(r0, 0x0, 0x0)
sendmsg$kcm(r0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x8000000000000009, 0xaed, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x7c}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2)

19m2.808994188s ago: executing program 9 (id=790):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22282, 0x0)
ioctl$TCSETSW2(r3, 0x5408, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x12)
write$9p(0xffffffffffffffff, &(0x7f0000000140)="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", 0x106)
socket$inet6(0xa, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)

19m1.462738451s ago: executing program 9 (id=792):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000f00)={0x2, 0x0, 0x16, 0x19, 0xcc, &(0x7f0000000b00)="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"})
keyctl$clear(0x3, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40880, 0x0)
r4 = dup(r3)
readv(r4, &(0x7f0000000240)=[{&(0x7f0000000100)=""/60, 0x3c}], 0x1)

18m59.918186552s ago: executing program 9 (id=794):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000180)={r0, 0x1, 0x400})
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2)
write(0xffffffffffffffff, &(0x7f0000001000)="4f4f4f4fff", 0x5)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2})
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000})
ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x2)

18m58.529337425s ago: executing program 9 (id=795):
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x14, 0x1, 0x2, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8046}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x20000800)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2}, 0x94)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18m57.12033467s ago: executing program 9 (id=797):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000)
sched_setaffinity(r2, 0x0, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x100000000)
socket$key(0xf, 0x3, 0x2)

18m54.74190379s ago: executing program 9 (id=800):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
pwritev(r0, &(0x7f0000000880), 0x0, 0x403, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x40)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

18m38.269469037s ago: executing program 38 (id=800):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
pwritev(r0, &(0x7f0000000880), 0x0, 0x403, 0x20000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50)
r2 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_disconnect(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x40)
syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802)

16m26.690236339s ago: executing program 2 (id=983):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2)
keyctl$clear(0x3, 0xfffffffffffffffd)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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")
open(0x0, 0x145142, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0)
write(r4, &(0x7f0000000180)='hist:keys=common_ti', 0x13)

16m24.162856464s ago: executing program 2 (id=986):
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x10, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x5, 0x80, 0x4bd, 0x8103, 0x15})
write$binfmt_aout(r2, 0x0, 0xff2e)
r3 = syz_open_pts(r2, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0x17)
write(r1, &(0x7f0000000400), 0x0)
r5 = openat$audio(0xffffff9c, &(0x7f0000000f00), 0x8000, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000f40))

16m22.977929619s ago: executing program 2 (id=988):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)

16m21.740765616s ago: executing program 2 (id=990):
socket$inet6(0xa, 0x2, 0x0)
syz_open_dev$loop(&(0x7f0000000000), 0xe, 0x200)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)

16m16.765015254s ago: executing program 2 (id=998):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfffd, 0xfffd, 0x24c, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa98, 0xa2b9, 0x100, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x9f, 0xb69b, 0x9, 0xf9a2, 0x1, 0xff, 0x0, 0x2, 0x5a7, 0x2, 0x1000000, 0x489, 0x7ff, 0x7, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xffffffff, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x6, 0x808, 0x40, 0xa6, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x2004, 0x1c, 0x80000000, 0x6, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d6, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1f9, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x0, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0xffd, 0x2, 0xc], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0xffffffff, 0x8000048d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000006, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x2, 0xd, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0xa, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0xfc33, 0x55, 0x7ff, 0xfffffff8, 0x1005, 0x10000001, 0x7, 0x21, 0x4000006, 0x81, 0x7, 0x9d86, 0x8, 0x8, 0x4, 0x140f1, 0xd, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffffa, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x800)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000002090101000000001b00000001000001000100ac"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040085}, 0x8000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8971, &(0x7f0000000440)={'sit0\x00', 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

16m11.142250403s ago: executing program 2 (id=1009):
mount$9p_fd(0x400000000000000, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}, 0x86})
write$sndseq(r4, &(0x7f0000000140), 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x83, 0x5f9, &(0x7f0000001200)="$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")

16m9.847859982s ago: executing program 39 (id=1009):
mount$9p_fd(0x400000000000000, 0x0, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}, 0x86})
write$sndseq(r4, &(0x7f0000000140), 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000240), 0x83, 0x5f9, &(0x7f0000001200)="$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")

5m51.744357783s ago: executing program 0 (id=2545):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000001100)='./file1\x00', 0x10000c0, &(0x7f0000001140)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp855,errors=remount-ro,utf8,fmask=00000000000000000000004,iocharset=koi8-ru,time_offset=0x0000000000000006,gid=', @ANYRESHEX=0xee00, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303430302c646d61736b3d30303030303030303030303034303030303030303030302c616c6c6f775f7574696d653d3030303030303030303030303030303030521e303030312c00b5efd5a5c49860e6033d86a1062aa410763a35d6358f3ec56140261c6ce5becee4b76d651a129b77d4e52b37ca8fdc9a7a3d08e55f6bfc2fdd3440ba22085c942503c30e11081ad5fa75126938c97d581a5cce2f6488388f66fa7e0e33b5b36d"], 0x1, 0x1531, &(0x7f00000014c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0)

5m51.243377046s ago: executing program 0 (id=2551):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil})

5m50.991861538s ago: executing program 0 (id=2554):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0xA', 0x3)

5m50.801395817s ago: executing program 0 (id=2556):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller\n', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

5m50.603492046s ago: executing program 0 (id=2558):
syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x73})
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000003380)={&(0x7f00000004c0)=[{0xa, 0x9000, 0x0, 0x0}, {0x0, 0x4010, 0x0, 0x0}, {0x9, 0x5800, 0x0, 0x0}], 0x3})

5m49.877453379s ago: executing program 0 (id=2562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

5m33.488801192s ago: executing program 40 (id=2562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff)
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

32.241872149s ago: executing program 7 (id=3485):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xc}}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)

31.896877995s ago: executing program 7 (id=3488):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0xb)
chown(&(0x7f0000002140)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f000000ae80)="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", 0x2000, &(0x7f000000adc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a640)={0x78, 0x0, 0x7fffffff, {0x9, 0x3, 0x0, {0x5, 0x7, 0x5, 0xfffffffffffffffd, 0x8, 0x1, 0x6, 0x80000000, 0x8, 0x6000, 0x747, r2, 0x0, 0x7, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$tcp_congestion(r3, 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, 0x0)

30.798400085s ago: executing program 7 (id=3495):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000780)={r3, 0x0, 0x4, 0x0, 0x0, [<r4=>0x0], [0x8001, 0x0, 0x400, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x7]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [<r6=>0x0], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffffb, 0xa679, 0x1, 0x7f]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

30.4702984s ago: executing program 7 (id=3499):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@discard}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x563, &(0x7f0000001240)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x5)
io_setup(0x400, &(0x7f0000000080)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="0300ffff0000", 0x6}])
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x9c42, 0x140)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000240)=ANY=[], 0xfff5)

29.350251732s ago: executing program 7 (id=3504):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='1\n', 0x2)
syz_emit_ethernet(0x3a, &(0x7f0000000600)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200e2f90000000101000001ef0101010a000001"], 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[@ANYBLOB="01005e00001600112233445508004600002c0000400001024303c0a8010ae0000016940400002200ddf90000000106000001ef0101010a000001"], 0x0)

28.399474936s ago: executing program 7 (id=3509):
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f0000000080))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

27.739319296s ago: executing program 41 (id=3509):
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81})
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
pipe(&(0x7f0000000080))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0x1, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10.153012213s ago: executing program 4 (id=3558):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x129241, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
unshare(0x2a020400)
r1 = syz_open_procfs(0x0, 0x0)
openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x2, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0})
r2 = epoll_create1(0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
close(r3)
syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r4, &(0x7f0000000040)="e2", 0x918)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0xa002a014})

9.333495801s ago: executing program 6 (id=3561):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f0000000180)={[{@noload}, {}, {@data_err_ignore}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@auto_da_alloc}, {@usrquota}, {@dioread_nolock}]}, 0xb, 0x572, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f0000000280)='./file1\x00', 0x54927e, 0x10)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000)
fallocate(r0, 0x0, 0x0, 0x8800000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x2000, 0x20)
syz_fuse_handle_req(r1, &(0x7f0000008200)="2510dd22ed6f6856e7c0638803c7c4fa4c85a92be4d9f3e2d5830a0ca08c6796dc1f160dcf56f3a77cc11a52d41845eefbcd79b51177ec868291a964fabe09967d95466549899218e7bc0346441849653d808b2097e331b5432488d5015599f54e84744c7482d01c823b152939da7688920d58b4ac664972addc710e5957198732c6ed0973e7f70770ed22734940c19b0bce9f0aecd7541dd6448b98f5416042183baeb436913c11ac5a76916f77747d19ad8df692ba93dabd6764f91284461344e6fbc17ca9162275bd0a76ab18ea9c6d1f328bdc43118f11fda90284eb6010c571ba510853854780069dce6452efe4ad6bde493c647675956fc8eff2b197196bb692d10cfad96102b804d8983a10d748f9069f88f058920a040dc75be65a991d83f67b5b1d8713d8ff1f4ca09d3816e5864505079f7b9802763f4f0ae16d7d12aedf155e50a192479da0c2f37bb810c6d89ef23cecfb888e3ed7d550e4802049dc8614c04ce92467c4eec46e1b9424e857bb649e6e0fcc34f90ab8ff8615e48acd551568db3576c69cba9a7c9ba566a0f2c6b15919f6e1d66d27ea9587095be2544f2691df4aada6a35c85b860cc0bf4e6eb9ab67e4634d26b84936539b7e0481663c9c7db2bdca46be3876792547508811b0983c8360972ddae1cc5662153d983a6659faad7cc13653afeda6dbe2f32f93c9655ad786ae26bd4971305ee4ec03decee9b4b8bed3669a21cf4435cb86ceb9a0ef04d02c026b6e4433d9ad599a4758f08fe5638d7046baa31f03f0327411d84e581e2e15bcb1f136798241e1bd3f801ae5fc6818592f21b7e6c252888922a044554d237aa325d619b2f4adcde20a3fa8c62a443e248f2c7db9c14decda6f3086beeb42ebea771d08f50d6b17043ff648bbb92158b8d4e4bdfd0447411b20483678d5561b8086f00b558853222fce758103beb32dd9edab36b02deec46db6d74e709c3948dd12e795edb51551a8f6933601d879ac96fe894bd6ddbc24aeda0cb0f30114ed8b915793dde8119873bf58a8ef07bcfa6f69551f85d87022d22798e923cf4c7ae109ffe303f3bb0d66be1ae732892bf25c558fc440f878207fc4e337fa92e2648549a62b4a03a57a09e67ac16b8066f777d302c8f5c273743b8d6006b4b10e649d5ad6e2e1d5150c998fb6f8c390629626169ee78b98808cc87b2413d12d53b16f45be20d2f033f933e24fc11402e333a623735fad5402224d72743837cbb374ee655b923c1f7aefc509d6f648976c807bec7be712d89ed96f688056c2a362b1801cd9e56c03dc186c09119e1b82fe7a956a931f3301195f9fb9bd995fd3674c11c75af034f82ff362262823533f3e7fc52c0f2e8796f763e724bcdd1cf2d54cec279a0944483bf4d1843b633eb6588147473b0f5d983e7ba7902a7e3a8e75da6141d7fe67f66e2e581719f207286a16e526d24b6910b46a5bd577b65f16ec6929149ec617ec768ca1e5f17fb5bd40bcab43821ca47f5af5f22ba7130deef10e2552c4cf2f67e7b10c75e3ba01523ddfaaf0fab499cdb8082c2d592c43ab2710bce3600017ea7d6c90973a0dc899ec2727f9677d6518bbcab7fd932ed5f42ee5af0467a7294abd9c699662f42dab4933bba9087a963c41fef1ad482f0466bd19426d22f57964ba4c08ef8376433acbbbd0b1d4b0b7ce9c653b1c5d66db3efd91a07b844613e0cefb69cf5273c3a4118bcb3e4504c182d4fa6292acd71ea62b18f6e234f43be2ae0b93ed6d68864e5b8e11d0d5971d8b89572519bab43894d1e91837529097b0ca6e3a1d213e3cfdac5fb80c88981c46cacbe53f659a9e30714729ccbcbff08e726d50ef0b799ec8c38357a26075a3d4011556be96e470ca9acc4e02d76004b607cea55ad4962abae960777a625aa7af9ab9d8955f17894ddd1ed99ad3feb844db2ec637149ba57f9d73664ca7a0f8800afd2173df3490bafe7170ce24b1810a82c5b132bf0ebf4cfba6c8a1dd6d79acbee919d9ad27a53c0fe68e928bfa4fbb38eb8eb8960bcf670cd33fd144ae8df9e172c73d035493a6fc2b019ee2a7b0ebb7d0577aed6179ce72a3b513cb21aa16030c7dee079a4f7718fff126d071243c7299f43988f56e7b3696f562d957dccacc1d741434301bf8ffebaafbc641aaf993f55036a7c637270f7743ab569591a1105a17f7b671019449be17130ccd804c4a2ce20d52c8d9ccb0366338eb3446f7e259821dcc286c6405bfbaf1bba4bdefd8e2999211d59ad94bd213890234f84331bf6ecfc91f1490955aa24f78ca5105dde2c0f297663ff364b235abd64d0f6caf27043dfd63a291d8b6980502cf8d7f0cbce312f394e1e16799b502eac920ec0074f15845ccfdb04b10f99d710cc5515dbb5efd93ae79e30baad7895725c807c36508d7d4d9a6e687c9b69fe15c890b568219f14adbfe7fde1424691c57c07cb66fcdeaa9b35598b411a82ccaf47c57a27ca2d0e2353588aac4a9099166bd762b64474c689d5c1b948904185842bc8716c50cf78a876ad7a4d09d7fbc7e00375ecf11ad9d830534c8bfe2d7e17a7660ac8a297a6b7a25132004fc6c17ce406536accf9ee4617ef4e5a728a83d2726f4f37636ff765276c7f227909088c9203736fdfc44565a6a7cc25419761999f5b2b17bcc9ffdf60cc0e05d672ae785111bc1b312368d3596a14a9e7ef26bd6cb71da00161fb79c2c76252068f87aa6939e84637b7a07745f7cada5ac8c62ef7f38aaa5cfc5ee6077e710b29b6be818ac600b3650be051cfc56f1e545bb880f6aa336899c1d638a494459ee066e30e9ec940887f5f925db86ecf14ed2492a9d52534267a28ce958f0514f7cc3859a34912b40bc464ff88761357f395724f3e111e651aa2cdd48280468fec45a48c6e63cae09de02005c2e2e5702a67f80277d69b807a649ff1f074187d88dd3adf98b80896d1a682104aae13e13112bcced4c0ac2ff3ae6588452eca59beb19f1f009f1e302779a7b2f824b76a3ad2356d233b2c43c9724941a8d8179e4160f701bab4b060cd96373110f9a468f076063e867d15b48b3c074ff570256e7bdc76a26a2cebddb5c1de23824003225d02214ad28867c712e058d5fa25dab5ec13eaec15b32b0e8197598d503011d31c3020436492e7a42dc28e8144510611937912bf8877c19da3ac79971162c21faf1e3193dbe58f940fbaaf98e17bcee86a651cd124b8952d843bff849d7093b62491a34825f85fee69fb9d9fe727a6ce046b2ae5acbf8d54b5a8201a6ff0e8c22a5544ba54ff1932023df4cdc4aadfc7b371f8bd7f7ea1027d580e3a274aff5a980aa9e9265d332f61ffb4a664a339c02bc1acd339ab2262746874ee5e07e712e9ff37234ac9108b80f6f24f28a69f047412cdfd4d27b01834e34c2272fb24a29c6ede0ea821be7802653cefd3622ba5b8b63882238cd18081852b4e67e5be7fe0055f4915d97c234124b9434beec0269c660badddd6fcd6a6d625be7ca1f100f78474848b71de42cb4b9739ee1d3e16a98fde9994764f02d6512b62dbae65aff8829fcf2c4094629e05a8f35ad9c515263ea5dcfd14ced6cbc65b26ded946a942332b4bc81843408a809ae68c1be29fe0db5025d3ecf9125374dbef6ead96c4226023abdb56f2f6ee777f59bf033687a2913953581d40a1b261d052853379f4b5d803a293a4b3c77ca527a4ca2c5ff726d0634d3339113ff4c5ff3d1c77fa2c569e11ebe557103d05413cf76ea497d3588e8ba68714a9ae6ba0fcb5320e16c96b6c1444d3e8a72b7cd3d53d968a79ac7fd74d76c6b1b8901f8575879de7435db874840c42cfbcc52ee60e707d313e7c31802460e83409a39ce8d7b2670258faf9d1d32ee90919c548f018ce96933f3360ee852f383cd2abd9037ca73393862e8cb0ce6416aa2bda3fdea021d2001de08b6f2509fc171e4a247c292a335efc22174789786464dbe0b6249c554cb98e33bc2c1f41fef327c4d8e40eea169deffecf001eb4b7ba9126d5e2f61f4074be2a3d341fac229df396a3680f91bb8123e6a5d3241438e7b24f5c61f9b1ce541be35ad1a9285a29d237027c29c5145de28489ca19894692277b3a9164e764c246ff978183beaa73acc6e5255cace85767c1299d48e0a5a047aceb606ec05f12d6c93b642a94c374eb25848b0efc8796e411b729c174d4f9e11990d32bda2bd6a86e1f6548beb86532302da3d56d786444287c68a36e29f8bf8a9a8f3800580706cc0cc6cf21559a214da994128acaba36dca13ffc2e50f7b4d51015f24f0a5f383ee5c532f1f1e82aac606a2d08069080fee5ebb93be3793a606fddc07418f385988822f5664e613a82b7dce218f73dba86b730b0abb3dd36f30f6f1dfc0854b3988ead9ab22a06bd68770144d1cea624b7addc034cedb700929c4b5b6a6a80974a244baf212906be7e16b788d88a15fd5d17851c72409d6a5cb89c62b5e0f7fcc35fd9efec753fa57bf01680d394fb86685fbb2c5f149d699a3e657e1cb01fde095362f0a1fee642f90ebcb2f4f3d9078ba13e06bd39773b68caab2fd828e78d0be21b76f4ade638d5de8f1148512503fe0c30502d16c8a337716a9a44120f389db6080e2a83d3a72b2b96446a0e6ed17239210ba20afdc59e217ed2a9154367b6b3efb5c3df0888d45b869d90374dbcf1b369d175c1adad59936fdbaa3a450db17e0a4ba16fed1cd7494690287671ee7e6a5c51df6f68268372cfab78ac36711a743c60e9e785880ff68c17518f8e8340485c12b15d55e1fc46182216d2ec86b027d3e600640b02240fc5758ec966a3ae92aec3148505e775a3b20dd4911948ba8a36c71a6568624241c6877853d0f6ccc37d8ea7a607667b5ee735c1485326c49c7f674ffd08340d024ef63a9ed40584dd77772989b0359e5b086d81490ebd615d4a6760e70baf3ee4f47144350b6b17d5fba4bc87d56173664376760a97259a8090eefba0c28f885cce16839b79d1623affe8b4cbcb7f938c9957a37ce5380cd763b5cf16f5234a292f7a5a3ffa551edf74648abdc02218a88660c867dfbcdb56fb2889dbf4dddafc68dc530f7e6e8a1a2279749a2e77b7668146e82f7d3dfb45397da77991b6d018855a7533e312125a716bb0e19c5b9925e9dc21b0c8cc68057b4e039988024267742028a752ea6c9be00ec9799f6c7102cf398e824efe2cd187141276c0889e5185cb04124ba000eb3ae27af79c5b71b15fc290cd0668847a5e30b9ad636fde7ca2b804676c0ad3a0a0cb5407fd9bd0585db860bb351e2acf8d99a030472f4c56e3e0f896476cd4e679bca8fe516867db46aa513b32cecbf0c5e71afb2d515289e7160b7191008555acef03990a5dcdeedbeac7a27a8324c42ba0e79b0dc58d4f3f8e4b7d8370da4bdd20ee47525deef55908a341cd05373956691170f69600a7b9cfb2ee6adec90ca7293e527e2b4f4497acee63481c2492294cfc48415aa24dabec555700f0761c51db87a53f2fd74eea2e6fb99b99c6020f344ab96970b620c379136e6db980d2d6f10fb046e195b1421e5b6eb5046976e7817eb69676b5b892f7afff70cd69892367847a9d43fb6dfcfe783b8366143d4b24ca0080ac52fec9b0521e5046b1e08c0f8e0e8f60b5f79fb98bf1ee1c31a786a12f600922ab95ceec82c75ee3b0d893a21ea617bcd2ff63b87111df01f60bae9422106093a92d63bffd2231fe92487e6c8e2162a8af39bfa85e5e98569c04bdfcec0cce175f1be415889ba8fe619c3b542997d1ac2096bdc0d75a3ae5ce25b23e07faf69042e2669d3eafade4db32de12f0e7d269fc441e2fd94a14045e59fba3c900e107881d5b1a486734aa57247bde18c8c7d4e63ca44f693b900cc7dad221f17dc8895907c9446e6a0eb9783a6699f10bdc81193d818be0f32a49107bfa60cc038e21defe8d962ed9dc3f1e8bef5c1bad2d4ddd36ff7b272d3d6b12a206cae015306d5b80c772325b4e96c086a8fc05665b1ad13bdaea601bebb94b2d2e90a81611d1c72918c761dddb5ab711b64f1acfcc7b247acf5c6ed0c58bb538eda618de2eb50e57cb67cabdb2dfec31ed298cbf6cd24408f0f38d048bb678f079371af190402552f2c30fca696bf63dd01203eaa89e70bdd445d0bdb9d2ceee35dc8570c61d020476b5571ec60ecc47e15a3c58625e6b888db8d9707d78d5a019f90e1d3824f2e35a2aa16b4a995a0b49ff3cd45daff5640722bdc2eb596f83c46379258d552425caefccedac6a57a4fbc16844dab67fb2106d863b6f45f3cfa3780ae7a2dc29d20c347a4bd1f355b7a439b24b2fde6575aa7bf976f601d248d8eca45d07d09b882255d3271db488647d8e70204408bc45af372bcdf41499d0baf3b66fd7113a94b5ed59cdd56b8b221f3e41eff8a6820a48733517e245d19f933406b1458133b7727e5cdf9e2e14d99f7121b52229230b5643a34e23c61d3855b7290d6bbed00db84312de4a3c9605000746aa524638c40c7db5fde69a137dde00730c0c53343eaa560c2fa169ab619154829c2d991d66bce8c7361fbc197adc046b9ceb0c8bce488bda0a6f10c1530da81b71c6e75eb18cb88839c1e79e1807350c0aecbdcada7990bd65c04cf5abd7edfa4ad2aeece1e6a14906d27a8f0ae202bc5fd41c99e64f4e1c331f4b77d1e1945fdc509e214702e67e8e4f2f4d515a6e399452b8fbc190f3e32d214d254e26f0b56c32ee0c3fd78b906334e48e5a856f0c38a99e10868a1da139866d4fff6aacff92f0f04ebc2096e08417e5e78683ec42cf10d6a40fa0774d125701d0c1fbaee133fe23b8333399ab9a4bb1d11ba4808651237da9eb7d889ef1e4e34dc5345b1e85273dfaaaf8195efe97966ac595a91d587b1a70508c6d5b91589eacc9cdf9cf408830ce039b1927d2ba57a29808aa32b1523bf0e8ce87a579160cee07a368c4d76e30147cc1d58f66c1e8003a8b289aabb1eb3950759b83f1a5b8246e2a0b20b4a95c7b9f1f4a4d77378e3b2a885d5ec168d4b262963dbf10159ec271641f5b1ebd3fa5269e28bf9aacf5ec91cbf0b1970143827b71a451c927aa3a965197439743481d03e34db5cf8790d0eab19f1642c25614d62fa3793cce8b89891ceeb3e7ef285020f31059117e7a3cf2777493a16f1ac35af09ae1b1786c9d8cbf353772ad764c4f8b9aed43132949a8aea00ce90399abdb8806c0c94ed3154fa914a0cb5adfc35922a85593057db407b8ebcaf59662d2b09751e7346a23b98903d69816fefe24b9c3c2843dd6293e3ffed3aa15c2bbe84082f7f8c501cf304109296054da7546472b71d5c840334444becd762f963e3ecdbfd4b3daa357ee0141d2d2ecf2e9b045ce2a986a8cb836036f9d182c08de9a25f52c7aeee1e2f0cc7e0af98b5a853b6f4a5e73decd2e189e76cfbb472b490eeeb279332faa6d49fa39e661787e5ff40e34fade13b0c5c241cc5da22f550e229793a1b2761b7c3ba8d8aceae8f1ae37fa7779aa4bb75d956c8cd84e8704890ea06e0f43785cf64c1e86d750e4409061c6406e2831e0c5bef8faf9ca8a2ba937dc436fc80f9138786f99630c3ed810d98367196af5addd2e9bbeb64d49696b654e76c4e2dc01547d1eb4b87dbbe6e51ef24678d6fe1951a93c7546a6a9eda30ec53010d4db3ea6eb39eedf07a9387aee1bd92e924476d2ead4c2907a83d28460c4cfca62baac8df8799fdc529d6d90e937e71ed24b700d1c84aa5f2a4e06633a3cb329bbf008398204fc3edea05dd6e2363f1cfe3546837bf876b1bc4cc74b6d09f6f0d78aebbb35bc073aa72a7840c5cfc441dff418aba7d422d3921364b8b06aaab7ec84ccd534ed4cec124c8bd0ad42e1e018ea0456a7c305366e53bda311ce37378abfe979cffa8be8f70cc7a9b0adc92ea9ef6e4988170f386e5227c20bd36a923850dc1a5c0f8f3d900dd248ac1b29f83e4f9f62222a0fafa6cf94ece60927e056388036674a8a729d3c72ba8b595ecfd661573e47f5924759ecd5aa400f8d282a4e6bb7de6972adb8541f39f39a5f1e54e705874f99dafac90b43e45577229af7e0178b2194e8625bd56396dd836d255e68386195b1646ad2e9003f408188cf523c6e2997205b4376294d2b1cfdff3866911a467980d7a753a05b4516642e38e1000476c58521d60696c10d92997accb917bd2ffff48a7d6a3d69b70d85a4781b834c06ace9a7f5c084fd14fe7e954321793d02d8a38b65181a2a26f6a26e5ccff9cdf52226ceffc2c9d8f8135c2cab1557ee021745ca47302255d5986227fd5d545db743c1fd70b1edb21cd140ce49a6e8169f5c286c326de61bf5df40bddc6f5accdb0afad6fa98977ecce65e83d12b0d9616a3f423d8faa1c5805bfa68a2483357a35ccecce32c997d3770817eb65a0b1429afd8623c37e3fd5715360a282de5207ef7e8fde639a11b1c67bc908c8fa5be4527e04a35acc540c9e454484f015fbdb67f4969e125b9cf1f3287f95fcd6c8e18650d6601ec63cd5bf14d0ed314a43805806860df508c1a4a61f093c07c57d3ee4a87159c5ad91a22d26264dc8766a5b6a89ed1dc1bd8ce52eef5a376c38b90698a5648d244c7e83751b1a850342ab2bf06d5e2690576f00c5d35bf6d91157d48ed99d88b4b89144601094c0435011223bf1f807171a8621ba55ca307f275ff048b6595908315a563877cf7bacd72be4a8ca9147e7ef9b6c837c120d6c674b0739f1031454d553b8f9b1e950d90158665112edc1ae4c24b752e24281292b67cdfba6b073b35545c890bdb13b606362670393f16f3490a2caa733f2f4877cd4743a80698a3b6ce8d01268e9de6c510dc2690b153e7721e80cc2243231eb0599d04ab1191c3cefb630f2ebfb024ad39236c81d7ba1f550c9cc0f5516c62bb192b879f5a6329ea937070c2838b8aa193e3f48233e97172bd6ff8a63f87c345bfc73a680d09a4c61c170ed377c4f5b332b5288ae599befb91f2053450e90ee24e712c40de7d360961bb07718b6da06d968c42ce0f70de210d97a7e07cd6061cf3301117499ceaafda5f70a049d4be8a3f7babed335b55148129a4e21cbf19340a7597ed170e2d99a81fac6ba61df0d09469d39a6e10f30e254e4eebc8c9ab647e179eabdb750c3d3a97e3d755228666ef6dbfa1b8dcb828e8702dc9d924b99f1cd58298a67283d965ff0bea311b9ea243a9523e7f01303a349b7460a95fc8f45b277f1ab38a4d88389fdbc68be56c5208fcfad377f4bd5c4b33d390ac750a2fc163d345e414f1035364b2f7ff799947db9823709c419ccb05b0d72d52101b305fd90ad5cd699636b287544cee8e892202754684d1ee2f5d953b4996cdd69262414a1b35f1e78622c9ece4524323fdb31a54f294a0bdcec224ab1df8044be9f84084d6c9e3abcbb83c30690a44585d6cc1a9d9b0e926b8c27d2c4d6644c0974a1ba8060236059f1dfdb87a558a6df344e6ca7b6dcf8013a48ab57de22a13af064ddd576d72f95c7d236c505838ccffac77a2d6bd2b4de7b59f553d3f7b5c15fb65f4f925374860cdce4bf8aac194f12c5d67612cad25f07d902e37cd0b07e21353b748636fc44e8676c33692f6b6f0dd7ac138aef6cd6f0fd3aecd00ef9d7823cee8b766dab22a11b8d43eaea4627c4155319c135bd85dfc2ffdd7f12748f1678e1e4129093ff76a5907d666ca39d52b0c8569bc28b4dbb4b67fa997700d3fe2c00721581594bd2ac0a5690847f183cb85aeccf3ef103d92be8ae235bea5de17dfa2f34cf7caa86232956ea0838fed7ddc350709b3541e892734d6a891079d1d33fc11e6b98decd4da8c00c52a3a73ca004332ec9cf501310f02edcb3e984f41b5130a5aea058a755f91260850cb8045928fab66dd511b6a14cb4ccc2e3ee9f2dd88ba1f5916fdc11410f6861339e6547711e12d818d5de1f7722d1469dac8fba1f454793bdbbe999d3d99ddebfbd7767c2751b77363d374d4c4afff5ba11b6ff5196c1423030aa9a7b7862222750467918e896f4293db1282e69d18d25e019916d8ca4285dfb2c3fb3ae8090dc6eb3410e15cc12b397a2c05cd6880c5932e31538ca01c47763d13549145347ddc5f47dfbbda984cd3f1085e9436167e5120452e59f3b107e11390f67181e2ae58ecbaaf02138f8e9495ad120ac3c0b19ebf4d56e70ad472498bd0107c81c5371b2aa0937a80e3d5e8ea820f2323cd9bbc9cb5141b7824d32217ca1ef45530ee3c4c6a96a7a7aa18b8c8af207d892b5439c3c1ca69598e12a909579a7dd591248caaaa9bb639a34611d97aee62763a47ab8401fc7d14183321aa5a9a72c7b7815c1fafc51d6224fa4f7f484f1a1fc4f09a022554d494c3b1cfe0f6e0241ce8cc5b4e9211ccd697620ab8aafee4f6017f37706a5b8bb4c0b8a260a95d7a905fadc48a5f0078047867765d42f13307f310efd93eeb5944cc8679c0f0f03c5f5e37b671a8f28b3a96eab68610c2219234d2f5002e2f9621b54b77e4a9dd9d43da79fb927577ca6c4f8965dd428ece62a92b9fc07bd9f12c1ccf86feefb5e9708dfa87caccd2c0a333894efe424fb914f1d276fdeba7b5d296779213ab27792c6abe1f872263e10f683411b5d655002913d6cd532b0d89f49f75c01afb448e1e0cba41b79ff6d2730ce33032318c70266699c2aadea7ad9df23032e5b307ee27a174ba7584452f6ab00e3452ba5d873d0650d19ed5c3d0774c2a84c4dfd975226f8f71e095b5ff3a7214cc3af4c12df04b26b54d2b1bcbec30ad5fcccdbbf56b0a3b668ce87c3db8354d1684571b8b8ff93976c02b5455f23f532610fa808b10f3efe86656663d11b72f59ed95b5a03bbb00522566c15fa05d9af45f2ec84844b5aad75d91bcb9066348268967907bb516397b94a94e420df22f3c29d97d76d76f6f16d4d05d36b257564ab204bc1d69362128b81d5873dceaaac66252d495ee91ce32bddda6824d1f69699b71405e8fabbbde65b67b5693164948a2ac47d6e3d76cc288032d201982330b6d2d05074fcfab7a8e0e8601a6e6566f0142ad0d355d82c4633e58289072db1bb5f5d72abcc35d10708aa0bd533ed325ff70aeb2b82c429c3c347d6a7a8f05f233e55c63a177a95232abfe0e8e4d1b1d24d47296be15d7d15fe8e2546f324287dabb2f312fb2b6bf6889669056eb56f7711ecae342115659268648b679ec8ed36e5f149f4f018df10dba2afa00c2870f50cebad18807164ee5373398f60368529f5e12be49c4ed1b41b91c7079bf06a9d0e7e220da63dac3da952252ba75688c7f1a0d856ae85f4855c02aa10238d0163ba3401c7ba0ec92d1aba99309c6a130d7247466cac187ce60ed73c73799964e12780e833809a64e54dc81e8a61d7c278b307baa7f0e772c3e61f5593de90932fa231676954a56764761ce2a35303454b151fcc1fe08d380af0af32abe0804efc6dc6e04947ae3e533d36caf25884f88fc5471d7c68ef996c749be710af0501fed78737a705bb861f2287d711b727e4e4eb04598fd57d882b007967f479f64283ae1aa57d3a36d2c44adb8d0406420a9b1cea607ea93e2f4", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a580)={0x90, 0x0, 0x1, {0x1, 0x2, 0x0, 0x400, 0x800, 0x6, {0x6, 0xf97, 0xd459, 0x5, 0xd360, 0xffffffffffffffff, 0xffffffff, 0x938, 0x5, 0xc000, 0x80, r3, r4, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000000c0)='./file0\x00', 0x1de840, 0x316)

8.995886447s ago: executing program 4 (id=3563):
openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xb, 0x11, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

8.166345895s ago: executing program 4 (id=3565):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller\n', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

8.145951706s ago: executing program 6 (id=3566):
setitimer(0x0, 0x0, 0x0)
clock_gettime(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x169100, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2)
io_setup(0x239f, &(0x7f0000000380)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r2, 0x0}])
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)

5.711834298s ago: executing program 5 (id=3571):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
epoll_create1(0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
pipe(&(0x7f0000000200))
socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0)

5.397152172s ago: executing program 6 (id=3572):
openat(0xffffffffffffff9c, 0x0, 0x40, 0x6e)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x1, 0x0, 0x0, 0xff, r0})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
wait4(r2, 0x0, 0x2, 0x0)
ptrace$getenv(0x4201, r2, 0x8000010003, 0xffffffffffffffff)
getrusage(0x0, &(0x7f0000000000))

5.22267939s ago: executing program 4 (id=3574):
prlimit64(0x0, 0xe, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)

5.21152036s ago: executing program 6 (id=3575):
mmap(&(0x7f0000e2c000/0x4000)=nil, 0x4000, 0x1, 0x4110, 0xffffffffffffffff, 0x7ddaa000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
openat$rtc(0xffffffffffffff9c, 0x0, 0x80382, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffffff)
ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.672127385s ago: executing program 5 (id=3576):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000814}, 0x24004014)

4.624376338s ago: executing program 1 (id=3577):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
socket(0x2, 0x805, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0x2c, 0x0, &(0x7f0000000480)="63eced8e46dc3fcd8bc91d4128f4423a2d83f871462ddf33c9e9b986f77384e87dfe6435d6edbcb8c4327860f96b65725f8fb514263302fe6a8ebadd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0xa7bc, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mkdir(&(0x7f0000000040)='./config\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='1\x00', 0x2)

3.833921114s ago: executing program 5 (id=3578):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0x4000})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1}], 0x10)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xf, 0x7ffffffe}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.504925879s ago: executing program 4 (id=3579):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000027c0)={0x2020}, 0x2020)

3.297579929s ago: executing program 4 (id=3580):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/kmsg\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0)
write(r1, &(0x7f00000000c0)='/dev/ram0,131072\x00', 0x11)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl(r2, 0x40186f40, &(0x7f0000000140)="000000000100"/24)
read(r0, &(0x7f0000000240)=""/1024, 0x400)
read(r0, &(0x7f0000000640)=""/1024, 0x400)
read(r0, &(0x7f0000000a40)=""/1024, 0x400)
read(r0, &(0x7f0000000e40)=""/1024, 0x400)

3.018324081s ago: executing program 1 (id=3581):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001})
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x2c87}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x42)
r7 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb)
sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10)

1.94928762s ago: executing program 5 (id=3582):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.909270152s ago: executing program 6 (id=3583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller\n', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1', 0x1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

1.553123049s ago: executing program 1 (id=3584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789', 0xa)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller\n', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

1.480153432s ago: executing program 6 (id=3585):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040402000c60001010203010902200001010080320904000002ff0000000705020240000007058102400000"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="fc61")
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000140)="fa08")
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)="fc61")
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f00000001c0)="fa08")
nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x2)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1})
r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1})
syz_open_dev$I2C(&(0x7f0000000280), 0x2, 0x2)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1})
syz_open_dev$I2C(&(0x7f0000000280), 0x3, 0x2)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000300)={&(0x7f0000000340)=[{0x50, 0x1, 0x1, &(0x7f0000000380)='\x00'}], 0x1})

1.143035838s ago: executing program 1 (id=3586):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller', 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

1.046327762s ago: executing program 5 (id=3587):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x29)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={<r2=>0x0}, &(0x7f0000000200)=0xc)
move_pages(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f00000003c0), 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0xc8, 0x8, 0x280, 0x5803, 0x280, 0x2e8, 0x2e8, 0x280, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x43a14c66, 0xe, 'syz0\x00', {0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

696.955478ms ago: executing program 1 (id=3588):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)='0x0200\n', 0x7)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/bcdDevice\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0x0100\n', 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0)
write(r1, &(0x7f0000000380)='0123456789\n', 0xb)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='syzkaller\n', 0xa)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f00000006c0)='1\n', 0x2)
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r3, &(0x7f0000000740)='1\n', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a40)='dummy_udc.0\n', 0xc)

147.717973ms ago: executing program 1 (id=3589):
syz_io_uring_setup(0x1082, &(0x7f0000000080)={0x0, 0x6b92, 0x4, 0x2, 0xa9}, &(0x7f0000000100), &(0x7f0000000140), 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_vs_stats\x00')
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

0s ago: executing program 5 (id=3590):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x4, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
pread64(r4, &(0x7f0000000180)=""/109, 0x6d, 0x1000)

kernel console output (not intermixed with test programs):

x40/0x40
[ 1466.454261][T16905]  ? lock_chain_count+0x20/0x20
[ 1466.459093][T16905]  ? syscall_enter_from_user_mode+0x21/0x80
[ 1466.464973][T16905]  __x64_sys_unshare+0x34/0x40
[ 1466.469713][T16905]  do_syscall_64+0x4c/0xa0
[ 1466.474113][T16905]  ? clear_bhb_loop+0x60/0xb0
[ 1466.478764][T16905]  ? clear_bhb_loop+0x60/0xb0
[ 1466.483417][T16905]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1466.489312][T16905] RIP: 0033:0x7f58a839e159
[ 1466.493708][T16905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1466.513305][T16905] RSP: 002b:00007f58a65f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[ 1466.521704][T16905] RAX: ffffffffffffffda RBX: 00007f58a8625fa0 RCX: 00007f58a839e159
[ 1466.529656][T16905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400
[ 1466.537606][T16905] RBP: 00007f58a843506b R08: 0000000000000000 R09: 0000000000000000
[ 1466.545561][T16905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1466.553515][T16905] R13: 00007f58a8626038 R14: 00007f58a8625fa0 R15: 00007ffddf09a348
[ 1466.561484][T16905]  </TASK>
[ 1468.095852][T16926] user requested TSC rate below hardware speed
[ 1468.464850][T13962] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1468.693846][T13962] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 1468.734709][T13962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1469.316157][T16957] loop6: detected capacity change from 0 to 131072
[ 1469.345710][T13962] cdc_acm 6-1:1.0: ttyACM0: USB ACM device
[ 1469.351890][T16957] F2FS-fs (loop6): invalid crc value
[ 1469.376033][T16957] F2FS-fs (loop6): Found nat_bits in checkpoint
[ 1469.418783][T16957] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1472.092292][T16979] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[ 1472.597070][T16987] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1474.013838][ T4288] Bluetooth: hci1: command 0x1003 tx timeout
[ 1474.023653][T15162] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1474.293682][    C0] vcan0: j1939_tp_rxtimer: 0xffff888055ae0800: rx timeout, send abort
[ 1474.305768][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055ae0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1475.321295][T15428] usb 6-1: USB disconnect, device number 17
[ 1478.059010][T17030] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1480.500917][T17050] input: syz1 as /devices/virtual/input/input18
[ 1482.443481][   T27] audit: type=1804 audit(1790127440.593:75): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.2937" name="/newroot/517/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=26957 res=1 errno=0
[ 1483.573103][T17081] 9pnet_fd: Insufficient options for proto=fd
[ 1483.910671][T17076] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1484.906822][T17090] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1492.710830][T17141] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1496.035000][T17169] FAULT_INJECTION: forcing a failure.
[ 1496.035000][T17169] name failslab, interval 1, probability 0, space 0, times 0
[ 1496.047886][T17169] CPU: 0 PID: 17169 Comm: syz.4.2944 Not tainted syzkaller #0
[ 1496.055339][T17169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1496.065371][T17169] Call Trace:
[ 1496.068637][T17169]  <TASK>
[ 1496.071548][T17169]  dump_stack_lvl+0x188/0x24e
[ 1496.076230][T17169]  ? show_regs_print_info+0x12/0x12
[ 1496.081498][T17169]  ? load_image+0x410/0x410
[ 1496.085996][T17169]  ? __lock_acquire+0x7c40/0x7c40
[ 1496.091021][T17169]  ? do_futex+0x310/0x320
[ 1496.095330][T17169]  should_fail_ex+0x390/0x4c0
[ 1496.100014][T17169]  should_failslab+0x5/0x20
[ 1496.104493][T17169]  slab_pre_alloc_hook+0x59/0x300
[ 1496.109512][T17169]  ? make_kuid+0x1d7/0x680
[ 1496.113925][T17169]  kmem_cache_alloc+0x56/0x2f0
[ 1496.118670][T17169]  ? prepare_creds+0x3c/0x610
[ 1496.123443][T17169]  prepare_creds+0x3c/0x610
[ 1496.128385][T17169]  __sys_setuid+0x92/0x580
[ 1496.132813][T17169]  ? lockdep_hardirqs_on+0x94/0x140
[ 1496.138000][T17169]  do_syscall_64+0x4c/0xa0
[ 1496.142413][T17169]  ? clear_bhb_loop+0x60/0xb0
[ 1496.147066][T17169]  ? clear_bhb_loop+0x60/0xb0
[ 1496.151738][T17169]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1496.157620][T17169] RIP: 0033:0x7f7adf19e159
[ 1496.162019][T17169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1496.181623][T17169] RSP: 002b:00007f7ae00c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069
[ 1496.190023][T17169] RAX: ffffffffffffffda RBX: 00007f7adf425fa0 RCX: 00007f7adf19e159
[ 1496.198067][T17169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01
[ 1496.206022][T17169] RBP: 00007f7adf23506b R08: 0000000000000000 R09: 0000000000000000
[ 1496.213971][T17169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1496.221925][T17169] R13: 00007f7adf426038 R14: 00007f7adf425fa0 R15: 00007ffe75fa1e98
[ 1496.229886][T17169]  </TASK>
[ 1498.199015][T17183] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1498.475464][T17180] md0: detected capacity change from 2048 to 0
[ 1498.482006][T17180] md: md0 stopped.
[ 1498.526645][T17194] Config c1/1 of g1 needs at least one function.
[ 1498.568608][T17194] udc dummy_udc.0: failed to start g1: -22
[ 1498.635143][T17194] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1498.735186][T17194] UDC core: g1: couldn't find an available UDC or it's busy
[ 1498.914969][T17204] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1498.962383][T13428] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1499.211317][T13428] usb 2-1: Using ep0 maxpacket: 8
[ 1500.356825][T13428] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1501.153120][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1501.159392][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1501.519983][T13428] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1501.590393][T13428] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00
[ 1501.733603][T13428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1503.864235][T13428] usb 2-1: can't set config #1, error -71
[ 1503.940897][T13428] usb 2-1: USB disconnect, device number 5
[ 1503.989692][T17234] loop5: detected capacity change from 0 to 128
[ 1504.829857][T17234] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1504.868933][T17242] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1504.969616][T17234] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1506.632576][ T4871] EXT4-fs (loop5): unmounting filesystem.
[ 1506.791096][T17261] Config c1/1 of g1 needs at least one function.
[ 1506.862033][T17261] udc dummy_udc.0: failed to start g1: -22
[ 1506.913863][T17261] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1506.927622][T17265] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1506.978864][T17261] UDC core: g1: couldn't find an available UDC or it's busy
[ 1507.158076][T17272] Config c1/1 of g1 needs at least one function.
[ 1507.205377][T17272] udc dummy_udc.0: failed to start g1: -22
[ 1507.279391][T17272] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1507.341802][T17272] UDC core: g1: couldn't find an available UDC or it's busy
[ 1512.488212][T17296] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1512.816625][T17312] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1514.578583][T17322] Config c1/1 of g1 needs at least one function.
[ 1514.653272][T17322] udc dummy_udc.0: failed to start g1: -22
[ 1516.053170][T17322] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1517.463437][T17322] UDC core: g1: couldn't find an available UDC or it's busy
[ 1518.232190][T17330] Config c1/1 of g1 needs at least one function.
[ 1518.260037][T17330] udc dummy_udc.0: failed to start g1: -22
[ 1518.335575][T17330] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1518.427185][T17330] UDC core: g1: couldn't find an available UDC or it's busy
[ 1518.711893][T15442] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1519.880177][T15442] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1520.195293][T15442] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1520.202866][T15442] usb 8-1: can't read configurations, error -71
[ 1520.455577][T17352] loop5: detected capacity change from 0 to 2048
[ 1520.490806][T17354] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1520.544868][T17352] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1522.008916][T17352] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1522.237986][T17367] bridge0: port 3(vlan2) entered blocking state
[ 1522.310307][T17367] bridge0: port 3(vlan2) entered disabled state
[ 1523.611698][T17367] device vlan2 entered promiscuous mode
[ 1524.649303][T17375] Config c1/1 of g1 needs at least one function.
[ 1524.995794][T17367] device geneve0 entered promiscuous mode
[ 1525.037821][T17375] udc dummy_udc.0: failed to start g1: -22
[ 1525.075660][T17375] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1525.189920][T17375] UDC core: g1: couldn't find an available UDC or it's busy
[ 1525.273816][T17382] Config c1/1 of g1 needs at least one function.
[ 1525.349782][T17382] udc dummy_udc.0: failed to start g1: -22
[ 1525.416056][T17382] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1525.498354][T17382] UDC core: g1: couldn't find an available UDC or it's busy
[ 1525.601362][T15162] Bluetooth: hci5: command 0x0406 tx timeout
[ 1527.105668][T17405] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1531.928080][T17440] Config c1/1 of g1 needs at least one function.
[ 1532.009224][T17440] udc dummy_udc.0: failed to start g1: -22
[ 1532.015268][T17450] FAULT_INJECTION: forcing a failure.
[ 1532.015268][T17450] name failslab, interval 1, probability 0, space 0, times 0
[ 1532.068164][T17440] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1532.101017][T17450] CPU: 0 PID: 17450 Comm: syz.7.3038 Not tainted syzkaller #0
[ 1532.108483][T17450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1532.118518][T17450] Call Trace:
[ 1532.121778][T17450]  <TASK>
[ 1532.124707][T17450]  dump_stack_lvl+0x188/0x24e
[ 1532.129383][T17450]  ? show_regs_print_info+0x12/0x12
[ 1532.134561][T17450]  ? load_image+0x410/0x410
[ 1532.139051][T17450]  ? __lock_acquire+0x7c40/0x7c40
[ 1532.144059][T17450]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1532.150021][T17450]  ? __lock_acquire+0x7c40/0x7c40
[ 1532.155028][T17450]  should_fail_ex+0x390/0x4c0
[ 1532.159702][T17450]  should_failslab+0x5/0x20
[ 1532.164187][T17450]  slab_pre_alloc_hook+0x59/0x300
[ 1532.169192][T17450]  ? _raw_spin_unlock_irq+0x2a/0x40
[ 1532.174376][T17450]  ? alloc_mnt_ns+0xaf/0x3b0
[ 1532.178964][T17450]  __kmem_cache_alloc_node+0x4f/0x270
[ 1532.184330][T17450]  ? alloc_mnt_ns+0xaf/0x3b0
[ 1532.188900][T17450]  kmalloc_trace+0x26/0xe0
[ 1532.193297][T17450]  alloc_mnt_ns+0xaf/0x3b0
[ 1532.197714][T17450]  __se_sys_fsmount+0x5ac/0x9a0
[ 1532.202564][T17450]  ? __x64_sys_fsmount+0x80/0x80
[ 1532.207492][T17450]  ? lockdep_hardirqs_on+0x94/0x140
[ 1532.212679][T17450]  do_syscall_64+0x4c/0xa0
[ 1532.217085][T17450]  ? clear_bhb_loop+0x60/0xb0
[ 1532.221743][T17450]  ? clear_bhb_loop+0x60/0xb0
[ 1532.226402][T17450]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1532.232281][T17450] RIP: 0033:0x7f58a839e159
[ 1532.236678][T17450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1532.256267][T17450] RSP: 002b:00007f58a65f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0
[ 1532.264663][T17450] RAX: ffffffffffffffda RBX: 00007f58a8625fa0 RCX: 00007f58a839e159
[ 1532.272614][T17450] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003
[ 1532.280562][T17450] RBP: 00007f58a843506b R08: 0000000000000000 R09: 0000000000000000
[ 1532.288514][T17450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1532.296463][T17450] R13: 00007f58a8626038 R14: 00007f58a8625fa0 R15: 00007ffddf09a348
[ 1532.304424][T17450]  </TASK>
[ 1532.332923][T17440] UDC core: g1: couldn't find an available UDC or it's busy
[ 1535.138003][T17442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1535.272896][T17462] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1535.560538][T17473] FAULT_INJECTION: forcing a failure.
[ 1535.560538][T17473] name failslab, interval 1, probability 0, space 0, times 0
[ 1537.006814][T17473] CPU: 0 PID: 17473 Comm: syz.5.3044 Not tainted syzkaller #0
[ 1537.014297][T17473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1537.024343][T17473] Call Trace:
[ 1537.027607][T17473]  <TASK>
[ 1537.030521][T17473]  dump_stack_lvl+0x188/0x24e
[ 1537.035187][T17473]  ? sctp_sendmsg+0x1686/0x2940
[ 1537.040015][T17473]  ? __x64_sys_sendto+0xda/0xf0
[ 1537.044859][T17473]  ? show_regs_print_info+0x12/0x12
[ 1537.050035][T17473]  ? load_image+0x410/0x410
[ 1537.054532][T17473]  should_fail_ex+0x390/0x4c0
[ 1537.059199][T17473]  should_failslab+0x5/0x20
[ 1537.063686][T17473]  slab_pre_alloc_hook+0x59/0x300
[ 1537.068694][T17473]  ? sctp_add_bind_addr+0x89/0x350
[ 1537.073784][T17473]  __kmem_cache_alloc_node+0x4f/0x270
[ 1537.079136][T17473]  ? sctp_add_bind_addr+0x89/0x350
[ 1537.084224][T17473]  kmalloc_trace+0x26/0xe0
[ 1537.088619][T17473]  sctp_add_bind_addr+0x89/0x350
[ 1537.093543][T17473]  sctp_copy_local_addr_list+0x317/0x4d0
[ 1537.099154][T17473]  ? sctp_copy_local_addr_list+0xa0/0x4d0
[ 1537.104867][T17473]  ? sctp_do_8_2_transport_strike+0x900/0x900
[ 1537.110916][T17473]  ? sctp_v6_is_any+0x60/0x70
[ 1537.115580][T17473]  ? sctp_copy_one_addr+0x93/0x660
[ 1537.120688][T17473]  sctp_bind_addr_copy+0xaf/0x3c0
[ 1537.125712][T17473]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[ 1537.132019][T17473]  sctp_connect_new_asoc+0x2f5/0x6a0
[ 1537.137284][T17473]  ? __sctp_connect+0xd80/0xd80
[ 1537.142123][T17473]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1537.147487][T17473]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[ 1537.153015][T17473]  ? security_sctp_bind_connect+0x85/0xb0
[ 1537.158718][T17473]  sctp_sendmsg+0x1686/0x2940
[ 1537.163381][T17473]  ? sctp_getsockopt+0x8a0/0x8a0
[ 1537.168295][T17473]  ? __lock_acquire+0x7c40/0x7c40
[ 1537.173302][T17473]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[ 1537.179697][T17473]  ? aa_sock_msg_perm+0x94/0x150
[ 1537.184637][T17473]  ? inet_sendmsg+0xca/0x2a0
[ 1537.189230][T17473]  __sys_sendto+0x497/0x650
[ 1537.193725][T17473]  ? __ia32_sys_getpeername+0x80/0x80
[ 1537.199090][T17473]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1537.204719][T17473]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1537.210688][T17473]  ? lock_chain_count+0x20/0x20
[ 1537.215532][T17473]  __x64_sys_sendto+0xda/0xf0
[ 1537.220196][T17473]  do_syscall_64+0x4c/0xa0
[ 1537.224599][T17473]  ? clear_bhb_loop+0x60/0xb0
[ 1537.229255][T17473]  ? clear_bhb_loop+0x60/0xb0
[ 1537.233913][T17473]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1537.239790][T17473] RIP: 0033:0x7f18b0f9e159
[ 1537.244187][T17473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1537.263788][T17473] RSP: 002b:00007f18b1e61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1537.272211][T17473] RAX: ffffffffffffffda RBX: 00007f18b1225fa0 RCX: 00007f18b0f9e159
[ 1537.280173][T17473] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000004
[ 1537.288131][T17473] RBP: 00007f18b103506b R08: 0000200000000140 R09: 000000000000001c
[ 1537.296085][T17473] R10: 0000000000008081 R11: 0000000000000246 R12: 0000000000000000
[ 1537.304049][T17473] R13: 00007f18b1226038 R14: 00007f18b1225fa0 R15: 00007ffed8e40148
[ 1537.312011][T17473]  </TASK>
[ 1538.527226][T17504] Config c1/1 of g1 needs at least one function.
[ 1538.578424][T17504] udc dummy_udc.0: failed to start g1: -22
[ 1539.951410][T17504] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1539.976426][T17507] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1540.028003][T17504] UDC core: g1: couldn't find an available UDC or it's busy
[ 1542.940887][T17518] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1543.065876][   T27] audit: type=1326 audit(1790127496.536:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1545.395761][   T27] audit: type=1326 audit(1790127496.583:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1545.625022][T17544] bridge0: port 3(syz_tun) entered blocking state
[ 1545.726867][T17544] bridge0: port 3(syz_tun) entered disabled state
[ 1545.748692][   T27] audit: type=1326 audit(1790127496.583:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1545.832032][T17544] FAULT_INJECTION: forcing a failure.
[ 1545.832032][T17544] name failslab, interval 1, probability 0, space 0, times 0
[ 1546.720426][T17544] CPU: 0 PID: 17544 Comm: syz.1.3062 Not tainted syzkaller #0
[ 1546.727904][T17544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1546.737943][T17544] Call Trace:
[ 1546.741202][T17544]  <TASK>
[ 1546.744113][T17544]  dump_stack_lvl+0x188/0x24e
[ 1546.748774][T17544]  ? show_regs_print_info+0x12/0x12
[ 1546.753951][T17544]  ? load_image+0x410/0x410
[ 1546.758437][T17544]  ? __might_sleep+0xd0/0xd0
[ 1546.763004][T17544]  ? __lock_acquire+0x7c40/0x7c40
[ 1546.768015][T17544]  should_fail_ex+0x390/0x4c0
[ 1546.772678][T17544]  should_failslab+0x5/0x20
[ 1546.777158][T17544]  slab_pre_alloc_hook+0x59/0x300
[ 1546.782164][T17544]  kmem_cache_alloc+0x56/0x2f0
[ 1546.786905][T17544]  ? __kernfs_new_node+0xe1/0x7f0
[ 1546.791912][T17544]  __kernfs_new_node+0xe1/0x7f0
[ 1546.796744][T17544]  ? __lock_acquire+0x7c40/0x7c40
[ 1546.801750][T17544]  ? kernfs_new_node+0x250/0x250
[ 1546.806682][T17544]  kernfs_new_node+0x148/0x250
[ 1546.811428][T17544]  __kernfs_create_file+0x47/0x2e0
[ 1546.816537][T17544]  sysfs_add_file_mode_ns+0x233/0x2f0
[ 1546.821987][T17544]  sysfs_create_file_ns+0x128/0x1b0
[ 1546.827166][T17544]  ? sysfs_add_bin_file_mode_ns+0x200/0x200
[ 1546.833052][T17544]  ? kernfs_create_link+0x186/0x200
[ 1546.838322][T17544]  br_sysfs_addif+0xc4/0x220
[ 1546.842899][T17544]  br_add_if+0x397/0xee0
[ 1546.847140][T17544]  ? bpf_lsm_capable+0x5/0x10
[ 1546.851797][T17544]  ? security_capable+0x85/0xb0
[ 1546.856635][T17544]  br_ioctl_stub+0x6c4/0xcf0
[ 1546.861222][T17544]  ? rcu_is_watching+0x11/0xa0
[ 1546.865970][T17544]  ? rcu_read_unlock+0xa0/0xa0
[ 1546.870714][T17544]  ? __mutex_lock+0x1ab/0xae0
[ 1546.875378][T17544]  ? mutex_lock_nested+0x10/0x10
[ 1546.880300][T17544]  ? rcu_read_unlock+0xa0/0xa0
[ 1546.885042][T17544]  sock_ioctl+0x453/0x700
[ 1546.889353][T17544]  ? sock_poll+0x420/0x420
[ 1546.893751][T17544]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1546.898668][T17544]  ? security_file_ioctl+0x7c/0xa0
[ 1546.903761][T17544]  ? sock_poll+0x420/0x420
[ 1546.908155][T17544]  __se_sys_ioctl+0xfa/0x170
[ 1546.912732][T17544]  do_syscall_64+0x4c/0xa0
[ 1546.917128][T17544]  ? clear_bhb_loop+0x60/0xb0
[ 1546.921780][T17544]  ? clear_bhb_loop+0x60/0xb0
[ 1546.926478][T17544]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1546.932360][T17544] RIP: 0033:0x7f8b6d99e159
[ 1546.936769][T17544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1546.956355][T17544] RSP: 002b:00007f8b6e8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1546.964750][T17544] RAX: ffffffffffffffda RBX: 00007f8b6dc25fa0 RCX: 00007f8b6d99e159
[ 1546.972698][T17544] RDX: 0000200000000000 RSI: 00000000000089a2 RDI: 0000000000000004
[ 1546.980661][T17544] RBP: 00007f8b6da3506b R08: 0000000000000000 R09: 0000000000000000
[ 1546.988617][T17544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1546.996577][T17544] R13: 00007f8b6dc26038 R14: 00007f8b6dc25fa0 R15: 00007fff4446a1d8
[ 1547.004536][T17544]  </TASK>
[ 1547.070909][   T27] audit: type=1326 audit(1790127496.583:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1547.114828][T17562] Config c1/1 of g1 needs at least one function.
[ 1548.257577][T17562] udc dummy_udc.0: failed to start g1: -22
[ 1548.514119][T17562] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1548.521944][T17562] UDC core: g1: couldn't find an available UDC or it's busy
[ 1548.598961][   T27] audit: type=1326 audit(1790127496.583:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1548.850081][   T27] audit: type=1326 audit(1790127496.583:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1548.886937][T17577] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1549.074924][T17582] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1549.082793][   T27] audit: type=1326 audit(1790127496.583:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1550.794998][   T27] audit: type=1326 audit(1790127496.583:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1550.965133][   T27] audit: type=1326 audit(1790127496.583:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1551.090608][   T27] audit: type=1326 audit(1790127496.583:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1551.192459][   T27] audit: type=1326 audit(1790127496.583:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.5.3057" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18b0f9e159 code=0x7ffc0000
[ 1553.844428][T15428] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1554.968706][T17612] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1555.075106][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3071'.
[ 1555.157073][T15428] usb 5-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00
[ 1555.224837][T15428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.291005][T17619] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1556.915443][T15428] net1080 5-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.4-1, NetChip TurboCONNECT, 7a:38:96:a0:08:20
[ 1556.988217][T17632] sg_write: data in/out 3223822/217 bytes for SCSI command 0x0-- guessing data in;
[ 1556.988217][T17632]    program syz.1.3085 not setting count and/or reply_len properly
[ 1557.681399][T15430] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1557.910693][T15430] usb 2-1: Using ep0 maxpacket: 16
[ 1557.923044][T15430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1557.950195][T15430] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1557.982431][T15430] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1558.008231][T15430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.034970][T15430] usb 2-1: Product: syz
[ 1558.039559][T13962] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1558.058529][T15430] usb 2-1: Manufacturer: syz
[ 1558.069053][T15430] usb 2-1: SerialNumber: syz
[ 1558.257796][T13962] usb 8-1: Using ep0 maxpacket: 32
[ 1558.266029][T13962] usb 8-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40
[ 1558.279626][T13962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.287617][T13962] usb 8-1: Product: syz
[ 1558.293367][T13962] usb 8-1: Manufacturer: syz
[ 1558.297965][T13962] usb 8-1: SerialNumber: syz
[ 1558.326493][T15430] usb 2-1: 0:2 : does not exist
[ 1558.342921][T15430] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1558.367713][T15430] usb 2-1: USB disconnect, device number 6
[ 1558.540880][T13962] snd-usb-audio: probe of 8-1:1.0 failed with error -71
[ 1558.558035][T13962] snd-usb-audio: probe of 8-1:1.1 failed with error -71
[ 1558.576749][T13962] snd-usb-audio: probe of 8-1:1.2 failed with error -71
[ 1558.589878][T13962] usb 8-1: USB disconnect, device number 18
[ 1558.603655][ T9463] udevd[9463]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1563.230884][T17680] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1563.249063][T15430] usb 5-1: USB disconnect, device number 14
[ 1563.306260][T15430] net1080 5-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.4-1, NetChip TurboCONNECT
[ 1563.450122][T17690] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1563.686870][T17695] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1563.743058][T17693] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 1564.052554][T17706] Config c1/1 of g1 needs at least one function.
[ 1564.101651][T17706] udc dummy_udc.0: failed to start g1: -22
[ 1564.139288][T17706] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1564.191354][T17706] UDC core: g1: couldn't find an available UDC or it's busy
[ 1564.203718][T17692] tipc: Resetting bearer <eth:syzkaller0>
[ 1564.451500][T17692] tipc: Disabling bearer <eth:syzkaller0>
[ 1566.048821][T17715] netlink: 'syz.4.3105': attribute type 10 has an invalid length.
[ 1566.190495][T17715] team0: Port device netdevsim0 added
[ 1566.196199][T13428] tipc: Node number set to 3214074962
[ 1567.631388][T17725] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1567.741028][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1567.747338][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1567.790345][T17732] Config c1/1 of g1 needs at least one function.
[ 1567.854468][T17732] udc dummy_udc.0: failed to start g1: -22
[ 1567.890662][T17734] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1567.903143][T17732] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1567.952490][T17732] UDC core: g1: couldn't find an available UDC or it's busy
[ 1568.407992][T17747] Config c1/1 of g1 needs at least one function.
[ 1568.440168][T17747] udc dummy_udc.0: failed to start g1: -22
[ 1568.469550][T17747] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1568.545349][T17747] UDC core: g1: couldn't find an available UDC or it's busy
[ 1568.602161][T17749] Config c1/1 of g1 needs at least one function.
[ 1568.651766][T17749] udc dummy_udc.0: failed to start g1: -22
[ 1569.420434][T17749] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1569.518832][T17749] UDC core: g1: couldn't find an available UDC or it's busy
[ 1571.421959][T17779] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1573.424708][T17791] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1573.472933][T17798] Config c1/1 of g1 needs at least one function.
[ 1573.479356][T17798] udc dummy_udc.0: failed to start g1: -22
[ 1573.539911][T17798] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1573.616802][T17798] UDC core: g1: couldn't find an available UDC or it's busy
[ 1574.616308][T17810] Config c1/1 of g1 needs at least one function.
[ 1574.707318][T17810] udc dummy_udc.0: failed to start g1: -22
[ 1574.757177][T17810] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1574.810271][T17810] UDC core: g1: couldn't find an available UDC or it's busy
[ 1574.869382][T17816] Config c1/1 of g1 needs at least one function.
[ 1574.918984][T17816] udc dummy_udc.0: failed to start g1: -22
[ 1574.975429][T17816] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1575.073272][T17816] UDC core: g1: couldn't find an available UDC or it's busy
[ 1575.170003][T17827] qfq: no options
[ 1577.552942][T17839] FAULT_INJECTION: forcing a failure.
[ 1577.552942][T17839] name failslab, interval 1, probability 0, space 0, times 0
[ 1577.696240][T17839] CPU: 0 PID: 17839 Comm: syz.1.3138 Not tainted syzkaller #0
[ 1577.703718][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1577.713767][T17839] Call Trace:
[ 1577.717056][T17839]  <TASK>
[ 1577.719972][T17839]  dump_stack_lvl+0x188/0x24e
[ 1577.724637][T17839]  ? show_regs_print_info+0x12/0x12
[ 1577.729838][T17839]  ? load_image+0x410/0x410
[ 1577.734334][T17839]  ? __might_sleep+0xd0/0xd0
[ 1577.738907][T17839]  ? __lock_acquire+0x7c40/0x7c40
[ 1577.743921][T17839]  should_fail_ex+0x390/0x4c0
[ 1577.748590][T17839]  should_failslab+0x5/0x20
[ 1577.753086][T17839]  slab_pre_alloc_hook+0x59/0x300
[ 1577.758096][T17839]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1577.764244][T17839]  ? alloc_tty_struct+0xa3/0x770
[ 1577.769170][T17839]  __kmem_cache_alloc_node+0x4f/0x270
[ 1577.774525][T17839]  ? alloc_tty_struct+0xa3/0x770
[ 1577.779441][T17839]  kmalloc_trace+0x26/0xe0
[ 1577.783839][T17839]  alloc_tty_struct+0xa3/0x770
[ 1577.788586][T17839]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[ 1577.794202][T17839]  ? ptmx_open+0xcc/0x2c0
[ 1577.798516][T17839]  ? tty_init_dev+0x4c0/0x4c0
[ 1577.803175][T17839]  ? devpts_acquire+0x228/0x280
[ 1577.808007][T17839]  ? devpts_mntget+0x310/0x310
[ 1577.812756][T17839]  tty_init_dev+0x55/0x4c0
[ 1577.817160][T17839]  ptmx_open+0xdb/0x2c0
[ 1577.821296][T17839]  ? pty_start+0x140/0x140
[ 1577.825697][T17839]  chrdev_open+0x585/0x5f0
[ 1577.830101][T17839]  ? cd_forget+0x160/0x160
[ 1577.834526][T17839]  ? fsnotify_perm+0x39b/0x550
[ 1577.839275][T17839]  ? cd_forget+0x160/0x160
[ 1577.843682][T17839]  do_dentry_open+0x7dd/0x10b0
[ 1577.848433][T17839]  path_openat+0x2674/0x2f10
[ 1577.853031][T17839]  ? verify_lock_unused+0x140/0x140
[ 1577.858220][T17839]  ? do_sys_openat2+0xdd/0x4f0
[ 1577.862974][T17839]  ? do_filp_open+0x420/0x420
[ 1577.867644][T17839]  do_filp_open+0x1ee/0x420
[ 1577.872133][T17839]  ? vfs_tmpfile+0x470/0x470
[ 1577.876720][T17839]  ? _raw_spin_unlock+0x24/0x40
[ 1577.881564][T17839]  ? alloc_fd+0x590/0x640
[ 1577.885882][T17839]  do_sys_openat2+0x14b/0x4f0
[ 1577.890546][T17839]  ? do_sys_open+0xe0/0xe0
[ 1577.894943][T17839]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1577.900909][T17839]  ? lock_chain_count+0x20/0x20
[ 1577.905745][T17839]  __x64_sys_openat+0x135/0x160
[ 1577.910603][T17839]  do_syscall_64+0x4c/0xa0
[ 1577.915018][T17839]  ? clear_bhb_loop+0x60/0xb0
[ 1577.919675][T17839]  ? clear_bhb_loop+0x60/0xb0
[ 1577.924344][T17839]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1577.930219][T17839] RIP: 0033:0x7f8b6d99e159
[ 1577.934639][T17839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1577.954224][T17839] RSP: 002b:00007f8b6e8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1577.962616][T17839] RAX: ffffffffffffffda RBX: 00007f8b6dc25fa0 RCX: 00007f8b6d99e159
[ 1577.970567][T17839] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 1577.978521][T17839] RBP: 00007f8b6da3506b R08: 0000000000000000 R09: 0000000000000000
[ 1577.986481][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1577.994434][T17839] R13: 00007f8b6dc26038 R14: 00007f8b6dc25fa0 R15: 00007fff4446a1d8
[ 1578.002406][T17839]  </TASK>
[ 1579.479484][T17863] Config c1/1 of g1 needs at least one function.
[ 1579.512949][T17863] udc dummy_udc.0: failed to start g1: -22
[ 1579.550260][T17863] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1579.591962][T17863] UDC core: g1: couldn't find an available UDC or it's busy
[ 1579.957038][T17871] Config c1/1 of g1 needs at least one function.
[ 1581.390248][T17871] udc dummy_udc.0: failed to start g1: -22
[ 1581.472652][T17871] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1581.541719][T17871] UDC core: g1: couldn't find an available UDC or it's busy
[ 1582.295880][T17881] Config c1/1 of g1 needs at least one function.
[ 1582.322094][T17881] udc dummy_udc.0: failed to start g1: -22
[ 1582.361146][T17881] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1582.469202][T17881] UDC core: g1: couldn't find an available UDC or it's busy
[ 1583.942213][T17891] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1584.994694][T17900] nvme_fabrics: missing parameter 'transport=%s'
[ 1585.042148][T17900] nvme_fabrics: missing parameter 'nqn=%s'
[ 1586.933999][T17921] Config c1/1 of g1 needs at least one function.
[ 1586.995493][T17921] udc dummy_udc.0: failed to start g1: -22
[ 1587.045054][T17921] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1587.823835][T17921] UDC core: g1: couldn't find an available UDC or it's busy
[ 1588.118002][T17928] Config c1/1 of g1 needs at least one function.
[ 1588.179738][T17928] udc dummy_udc.0: failed to start g1: -22
[ 1588.202991][T17928] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1588.253526][T17928] UDC core: g1: couldn't find an available UDC or it's busy
[ 1588.313372][T17932] Config c1/1 of g1 needs at least one function.
[ 1588.350939][T17932] udc dummy_udc.0: failed to start g1: -22
[ 1588.394116][T17932] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1588.475811][T17932] UDC core: g1: couldn't find an available UDC or it's busy
[ 1589.306350][T17942] Config c1/1 of g1 needs at least one function.
[ 1589.378874][T17942] udc dummy_udc.0: failed to start g1: -22
[ 1589.422569][T17942] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1589.540399][T17942] UDC core: g1: couldn't find an available UDC or it's busy
[ 1589.861179][T17956] loop4: detected capacity change from 0 to 512
[ 1589.919130][T17956] EXT4-fs: Ignoring removed i_version option
[ 1591.336088][T17958] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1591.352401][T17956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1591.519011][T17956] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.3169: invalid indirect mapped block 32768 (level 2)
[ 1591.560590][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'.
[ 1591.645228][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3172'.
[ 1591.670942][T17956] EXT4-fs (loop4): 1 orphan inode deleted
[ 1591.711391][T17956] EXT4-fs (loop4): 1 truncate cleaned up
[ 1591.743374][T17973] Config c1/1 of g1 needs at least one function.
[ 1591.754617][T17956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[ 1591.792314][T17973] udc dummy_udc.0: failed to start g1: -22
[ 1591.846754][T17973] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1591.931439][T17973] UDC core: g1: couldn't find an available UDC or it's busy
[ 1592.268053][T17984] Config c1/1 of g1 needs at least one function.
[ 1592.274445][T17984] udc dummy_udc.0: failed to start g1: -22
[ 1593.006516][ T9991] EXT4-fs (loop4): unmounting filesystem.
[ 1593.029436][T17984] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1593.105936][T17984] UDC core: g1: couldn't find an available UDC or it's busy
[ 1593.313015][T17998] Config c1/1 of g1 needs at least one function.
[ 1593.382814][T17998] udc dummy_udc.0: failed to start g1: -22
[ 1593.425959][T17998] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1593.486086][T17998] UDC core: g1: couldn't find an available UDC or it's busy
[ 1596.365557][T18013] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1596.510115][T18020] IPVS: rr: TCP [fe80::aa]:80 - no destination available
[ 1596.716563][T18025] Config c1/1 of g1 needs at least one function.
[ 1596.752392][T18025] udc dummy_udc.0: failed to start g1: -22
[ 1596.790356][T18025] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1596.805415][T13427] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1596.836330][T18025] UDC core: g1: couldn't find an available UDC or it's busy
[ 1597.022234][T13427] usb 7-1: Using ep0 maxpacket: 8
[ 1597.051135][T13427] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[ 1597.814443][T13427] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1597.851979][T13427] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1597.923472][T13427] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1598.045752][T13427] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1598.088932][T13427] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1598.146064][T13427] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1598.178879][T13427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1598.424263][T18051] device syzkaller0 entered promiscuous mode
[ 1598.440398][T13427] usb 7-1: usb_control_msg returned -32
[ 1598.474407][T13427] usbtmc 7-1:16.0: can't read capabilities
[ 1598.575969][T18055] Config c1/1 of g1 needs at least one function.
[ 1598.599774][T18055] udc dummy_udc.0: failed to start g1: -22
[ 1598.633584][T18055] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1598.681513][T18055] UDC core: g1: couldn't find an available UDC or it's busy
[ 1598.866016][    C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1598.889999][T18060] usbtmc 7-1:16.0: Unable to send data, error -71
[ 1600.630170][T13428] usb 7-1: USB disconnect, device number 17
[ 1602.129189][T18080] Config c1/1 of g1 needs at least one function.
[ 1603.528317][T18078] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1603.543646][T18080] udc dummy_udc.0: failed to start g1: -22
[ 1604.315738][T18080] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1604.401697][T18080] UDC core: g1: couldn't find an available UDC or it's busy
[ 1604.716281][T18105] Config c1/1 of g1 needs at least one function.
[ 1604.775071][T18105] udc dummy_udc.0: failed to start g1: -22
[ 1604.839348][T18105] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1605.630904][T18105] UDC core: g1: couldn't find an available UDC or it's busy
[ 1605.830110][T18113] loop7: detected capacity change from 0 to 4096
[ 1605.885279][T18113] ntfs3: Unknown parameter 'windows_names'
[ 1609.166227][T18131] loop4: detected capacity change from 0 to 4096
[ 1609.274755][T18131] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[ 1610.700164][T18137] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1611.024143][T18144] Config c1/1 of g1 needs at least one function.
[ 1611.074843][T18144] udc dummy_udc.0: failed to start g1: -22
[ 1611.141775][T18144] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1611.229766][T18144] UDC core: g1: couldn't find an available UDC or it's busy
[ 1611.601071][T18159] Config c1/1 of g1 needs at least one function.
[ 1611.688036][T18159] udc dummy_udc.0: failed to start g1: -22
[ 1611.758943][T18159] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1611.829733][T18159] UDC core: g1: couldn't find an available UDC or it's busy
[ 1611.853469][T18167] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1612.021589][T13428] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1612.292426][T13428] usb 6-1: Using ep0 maxpacket: 16
[ 1613.562583][T13428] usb 6-1: config 0 has no interfaces?
[ 1613.617887][T13428] usb 6-1: New USB device found, idVendor=0bd3, idProduct=0569, bcdDevice= 0.5b
[ 1613.673166][T13428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1613.750261][T13428] usb 6-1: config 0 descriptor??
[ 1613.929618][T18196] Config c1/1 of g1 needs at least one function.
[ 1613.994921][T18196] udc dummy_udc.0: failed to start g1: -22
[ 1614.050612][T18196] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1614.144762][T18196] UDC core: g1: couldn't find an available UDC or it's busy
[ 1614.230532][T18206] Config c1/1 of g1 needs at least one function.
[ 1614.273330][T18206] udc dummy_udc.0: failed to start g1: -22
[ 1614.313598][T18206] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1614.353759][T18210] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1614.405580][T18206] UDC core: g1: couldn't find an available UDC or it's busy
[ 1614.458828][T18214] FAULT_INJECTION: forcing a failure.
[ 1614.458828][T18214] name failslab, interval 1, probability 0, space 0, times 0
[ 1614.577458][T18214] CPU: 0 PID: 18214 Comm: syz.4.3235 Not tainted syzkaller #0
[ 1614.584937][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1614.594973][T18214] Call Trace:
[ 1614.598236][T18214]  <TASK>
[ 1614.601149][T18214]  dump_stack_lvl+0x188/0x24e
[ 1614.605811][T18214]  ? show_regs_print_info+0x12/0x12
[ 1614.610989][T18214]  ? load_image+0x410/0x410
[ 1614.615476][T18214]  ? __might_sleep+0xd0/0xd0
[ 1614.620054][T18214]  ? __lock_acquire+0x7c40/0x7c40
[ 1614.625066][T18214]  should_fail_ex+0x390/0x4c0
[ 1614.629729][T18214]  should_failslab+0x5/0x20
[ 1614.634209][T18214]  slab_pre_alloc_hook+0x59/0x300
[ 1614.639218][T18214]  ? tcf_idr_create+0x595/0x6f0
[ 1614.644053][T18214]  ? tcf_pedit_init+0x574/0xe40
[ 1614.648887][T18214]  __kmem_cache_alloc_node+0x4f/0x270
[ 1614.654242][T18214]  ? tcf_pedit_init+0x574/0xe40
[ 1614.659077][T18214]  kmalloc_trace+0x26/0xe0
[ 1614.663479][T18214]  tcf_pedit_init+0x574/0xe40
[ 1614.668146][T18214]  ? tcf_pedit_cleanup+0x60/0x60
[ 1614.673074][T18214]  tcf_action_init_1+0x454/0x6d0
[ 1614.677997][T18214]  ? tc_action_load_ops+0x540/0x540
[ 1614.683173][T18214]  ? _raw_read_unlock+0x24/0x40
[ 1614.688006][T18214]  ? tc_action_load_ops+0x237/0x540
[ 1614.693193][T18214]  ? __nla_parse+0x3c/0x50
[ 1614.697592][T18214]  tcf_action_init+0x283/0x970
[ 1614.702340][T18214]  ? tcf_action_init_1+0x6d0/0x6d0
[ 1614.707466][T18214]  tc_ctl_action+0x43b/0xbc0
[ 1614.712059][T18214]  ? tca_get_fill+0x550/0x550
[ 1614.716721][T18214]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1614.722876][T18214]  ? tca_get_fill+0x550/0x550
[ 1614.727541][T18214]  rtnetlink_rcv_msg+0x863/0xfb0
[ 1614.732461][T18214]  ? rtnetlink_rcv_msg+0x220/0xfb0
[ 1614.737552][T18214]  ? rtnetlink_bind+0x80/0x80
[ 1614.742203][T18214]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1614.747557][T18214]  ? lockdep_hardirqs_on+0x94/0x140
[ 1614.752740][T18214]  ? __local_bh_enable_ip+0x136/0x1c0
[ 1614.758108][T18214]  ? _local_bh_enable+0xa0/0xa0
[ 1614.762951][T18214]  ? __dev_queue_xmit+0x281/0x3810
[ 1614.768041][T18214]  ? __dev_queue_xmit+0x281/0x3810
[ 1614.773130][T18214]  ? __dev_queue_xmit+0x1d84/0x3810
[ 1614.778312][T18214]  ? __dev_queue_xmit+0x281/0x3810
[ 1614.783437][T18214]  ? ref_tracker_free+0x682/0x830
[ 1614.788455][T18214]  ? refcount_inc+0x70/0x70
[ 1614.792937][T18214]  ? memcpy+0x3c/0x60
[ 1614.796901][T18214]  ? __copy_skb_header+0x3ba/0x4f0
[ 1614.801992][T18214]  ? __skb_clone+0x446/0x6c0
[ 1614.806562][T18214]  netlink_rcv_skb+0x1ef/0x440
[ 1614.811307][T18214]  ? rtnetlink_bind+0x80/0x80
[ 1614.815985][T18214]  ? netlink_ack+0x1160/0x1160
[ 1614.820735][T18214]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1614.825925][T18214]  netlink_unicast+0x7ad/0x920
[ 1614.830671][T18214]  netlink_sendmsg+0x8ad/0xbd0
[ 1614.835421][T18214]  ? netlink_getsockopt+0x550/0x550
[ 1614.840604][T18214]  ? apparmor_socket_sendmsg+0x16c/0x330
[ 1614.846222][T18214]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1614.851487][T18214]  ? security_socket_sendmsg+0x7c/0xa0
[ 1614.856926][T18214]  ? netlink_getsockopt+0x550/0x550
[ 1614.862104][T18214]  ____sys_sendmsg+0x5ed/0x9a0
[ 1614.866853][T18214]  ? __sys_sendmsg_sock+0x30/0x30
[ 1614.871853][T18214]  ? __import_iovec+0x306/0x510
[ 1614.876690][T18214]  ? import_iovec+0x6f/0xa0
[ 1614.881176][T18214]  ___sys_sendmsg+0x2a2/0x360
[ 1614.885832][T18214]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1614.890627][T18214]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1614.895469][T18214]  ? __x64_sys_sendmsg+0x80/0x80
[ 1614.900391][T18214]  ? lockdep_hardirqs_on+0x94/0x140
[ 1614.905571][T18214]  do_syscall_64+0x4c/0xa0
[ 1614.909970][T18214]  ? clear_bhb_loop+0x60/0xb0
[ 1614.914625][T18214]  ? clear_bhb_loop+0x60/0xb0
[ 1614.919283][T18214]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1614.925162][T18214] RIP: 0033:0x7f7adf19e159
[ 1614.929563][T18214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1614.949154][T18214] RSP: 002b:00007f7ae00c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1614.957550][T18214] RAX: ffffffffffffffda RBX: 00007f7adf425fa0 RCX: 00007f7adf19e159
[ 1614.965500][T18214] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000005
[ 1614.973452][T18214] RBP: 00007f7adf23506b R08: 0000000000000000 R09: 0000000000000000
[ 1614.981402][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1614.989352][T18214] R13: 00007f7adf426038 R14: 00007f7adf425fa0 R15: 00007ffe75fa1e98
[ 1614.997308][T18214]  </TASK>
[ 1616.596194][T15427] usb 6-1: USB disconnect, device number 18
[ 1616.768231][T18230] Config c1/1 of g1 needs at least one function.
[ 1616.787401][T18232] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1616.811953][T18230] udc dummy_udc.0: failed to start g1: -22
[ 1616.817770][T18230] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1616.833702][T18233] user requested TSC rate below hardware speed
[ 1616.879921][T18230] UDC core: g1: couldn't find an available UDC or it's busy
[ 1617.141418][T18246] Config c1/1 of g1 needs at least one function.
[ 1617.179252][T18246] udc dummy_udc.0: failed to start g1: -22
[ 1617.208339][T18246] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1617.240677][T18250] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1617.273160][T18246] UDC core: g1: couldn't find an available UDC or it's busy
[ 1617.479431][T18258] FAULT_INJECTION: forcing a failure.
[ 1617.479431][T18258] name failslab, interval 1, probability 0, space 0, times 0
[ 1617.504826][T18258] CPU: 0 PID: 18258 Comm: syz.6.3248 Not tainted syzkaller #0
[ 1617.512300][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1617.522343][T18258] Call Trace:
[ 1617.525603][T18258]  <TASK>
[ 1617.528520][T18258]  dump_stack_lvl+0x188/0x24e
[ 1617.533180][T18258]  ? show_regs_print_info+0x12/0x12
[ 1617.538368][T18258]  ? load_image+0x410/0x410
[ 1617.542853][T18258]  ? __might_sleep+0xd0/0xd0
[ 1617.547420][T18258]  ? __lock_acquire+0x7c40/0x7c40
[ 1617.552426][T18258]  should_fail_ex+0x390/0x4c0
[ 1617.557085][T18258]  should_failslab+0x5/0x20
[ 1617.561563][T18258]  slab_pre_alloc_hook+0x59/0x300
[ 1617.566594][T18258]  ? snd_pcm_hw_rule_add+0x45b/0x7f0
[ 1617.571880][T18258]  ? dummy_hrtimer_create+0x4f/0x150
[ 1617.577146][T18258]  __kmem_cache_alloc_node+0x4f/0x270
[ 1617.582503][T18258]  ? snd_pcm_post_pause+0x290/0x290
[ 1617.587683][T18258]  ? dummy_hrtimer_create+0x4f/0x150
[ 1617.592948][T18258]  kmalloc_trace+0x26/0xe0
[ 1617.597342][T18258]  dummy_hrtimer_create+0x4f/0x150
[ 1617.602436][T18258]  dummy_pcm_open+0xb0/0x4c0
[ 1617.607020][T18258]  snd_pcm_open_substream+0x109a/0x26a0
[ 1617.612550][T18258]  ? snd_pcm_drop+0x250/0x250
[ 1617.617207][T18258]  snd_pcm_open+0x1cc/0x600
[ 1617.621698][T18258]  ? snd_pcm_mmap_control_fault+0x270/0x270
[ 1617.627571][T18258]  ? do_task_dead+0xd0/0xd0
[ 1617.632066][T18258]  snd_pcm_playback_open+0x6b/0xd0
[ 1617.637157][T18258]  chrdev_open+0x585/0x5f0
[ 1617.641553][T18258]  ? cd_forget+0x160/0x160
[ 1617.645965][T18258]  ? fsnotify_perm+0x39b/0x550
[ 1617.650709][T18258]  ? cd_forget+0x160/0x160
[ 1617.655106][T18258]  do_dentry_open+0x7dd/0x10b0
[ 1617.659859][T18258]  path_openat+0x2674/0x2f10
[ 1617.664435][T18258]  ? verify_lock_unused+0x140/0x140
[ 1617.669613][T18258]  ? do_sys_openat2+0xdd/0x4f0
[ 1617.674359][T18258]  ? do_filp_open+0x420/0x420
[ 1617.679147][T18258]  do_filp_open+0x1ee/0x420
[ 1617.683631][T18258]  ? vfs_tmpfile+0x470/0x470
[ 1617.688222][T18258]  ? _raw_spin_unlock+0x24/0x40
[ 1617.693055][T18258]  ? alloc_fd+0x590/0x640
[ 1617.697369][T18258]  do_sys_openat2+0x14b/0x4f0
[ 1617.702027][T18258]  ? do_sys_open+0xe0/0xe0
[ 1617.706424][T18258]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1617.712398][T18258]  ? lock_chain_count+0x20/0x20
[ 1617.717242][T18258]  __x64_sys_openat+0x135/0x160
[ 1617.722073][T18258]  do_syscall_64+0x4c/0xa0
[ 1617.726470][T18258]  ? clear_bhb_loop+0x60/0xb0
[ 1617.731132][T18258]  ? clear_bhb_loop+0x60/0xb0
[ 1617.735815][T18258]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1617.741701][T18258] RIP: 0033:0x7fb1ba15e98e
[ 1617.746100][T18258] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1617.765693][T18258] RSP: 002b:00007fb1bb12db28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1617.774154][T18258] RAX: ffffffffffffffda RBX: 00007fb1bb12e6c0 RCX: 00007fb1ba15e98e
[ 1617.782125][T18258] RDX: 0000000000101080 RSI: 00007fb1bb12dc00 RDI: ffffffffffffff9c
[ 1617.790083][T18258] RBP: 00007fb1bb12dc00 R08: 0000000000000000 R09: 0000000000000000
[ 1617.798052][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1617.806026][T18258] R13: 00007fb1ba426038 R14: 00007fb1ba425fa0 R15: 00007ffef0cc7ea8
[ 1617.813989][T18258]  </TASK>
[ 1617.879657][T18259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1618.000911][T18259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1618.044185][T18269] Config c1/1 of g1 needs at least one function.
[ 1618.098496][T18269] udc dummy_udc.0: failed to start g1: -22
[ 1618.129025][T18269] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1618.176887][T18269] UDC core: g1: couldn't find an available UDC or it's busy
[ 1619.930112][T18278] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1621.385030][T18284] Config c1/1 of g1 needs at least one function.
[ 1621.425236][T18283] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1621.465722][T18284] udc dummy_udc.0: failed to start g1: -22
[ 1621.539354][T18284] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1621.619029][T18284] UDC core: g1: couldn't find an available UDC or it's busy
[ 1621.694406][T18300] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1621.737651][T18302] Config c1/1 of g1 needs at least one function.
[ 1621.798763][T18302] udc dummy_udc.0: failed to start g1: -22
[ 1621.856633][T18302] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1622.667005][T18302] UDC core: g1: couldn't find an available UDC or it's busy
[ 1623.238392][T18325] Config c1/1 of g1 needs at least one function.
[ 1623.290867][T18325] udc dummy_udc.0: failed to start g1: -22
[ 1623.349095][T18325] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1623.427159][T18325] UDC core: g1: couldn't find an available UDC or it's busy
[ 1625.341607][T18343] Config c1/1 of g1 needs at least one function.
[ 1625.347992][T18343] udc dummy_udc.0: failed to start g1: -22
[ 1625.457653][T18343] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1625.485338][T18350] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1625.517592][T18343] UDC core: g1: couldn't find an available UDC or it's busy
[ 1627.783508][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3276'.
[ 1627.901962][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3276'.
[ 1627.914331][T18378] Config c1/1 of g1 needs at least one function.
[ 1627.952265][T18378] udc dummy_udc.0: failed to start g1: -22
[ 1627.978800][T18380] bond1 (unregistering): Released all slaves
[ 1627.994235][T18378] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1628.055487][T18378] UDC core: g1: couldn't find an available UDC or it's busy
[ 1628.882541][T18399] Config c1/1 of g1 needs at least one function.
[ 1628.919899][T18399] udc dummy_udc.0: failed to start g1: -22
[ 1628.963478][T18399] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1629.008122][T18399] UDC core: g1: couldn't find an available UDC or it's busy
[ 1629.052193][T18400] Config c1/1 of g1 needs at least one function.
[ 1629.106817][T18400] udc dummy_udc.0: failed to start g1: -22
[ 1629.148506][T18400] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1629.240678][T18400] UDC core: g1: couldn't find an available UDC or it's busy
[ 1630.112723][T18434] loop4: detected capacity change from 0 to 128
[ 1630.176545][T18434] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[ 1630.245827][T18434] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1630.470233][ T9991] EXT4-fs (loop4): unmounting filesystem.
[ 1632.088889][T18448] Config c1/1 of g1 needs at least one function.
[ 1632.108706][T18446] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1633.254043][T18448] udc dummy_udc.0: failed to start g1: -22
[ 1633.259930][T18448] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1633.657324][T18448] UDC core: g1: couldn't find an available UDC or it's busy
[ 1633.705825][T18460] Config c1/1 of g1 needs at least one function.
[ 1633.763906][T18460] udc dummy_udc.0: failed to start g1: -22
[ 1633.780727][T18462] loop7: detected capacity change from 0 to 2048
[ 1633.812082][T18460] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1633.885504][T18462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1633.917938][T18460] UDC core: g1: couldn't find an available UDC or it's busy
[ 1633.997329][T18465] Config c1/1 of g1 needs at least one function.
[ 1634.032011][T18465] udc dummy_udc.0: failed to start g1: -22
[ 1634.106450][T18465] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1634.193169][T18465] UDC core: g1: couldn't find an available UDC or it's busy
[ 1634.236511][T18461] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 139264 lbcount: 143360 extent 129+107520
[ 1634.327561][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1634.333871][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1634.378194][T18478] 0: reclassify loop, rule prio 0, protocol 03
[ 1634.463442][T18481] Config c1/1 of g1 needs at least one function.
[ 1634.546130][T18481] udc dummy_udc.0: failed to start g1: -22
[ 1634.611139][T18481] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1634.621147][T18484] loop6: detected capacity change from 0 to 128
[ 1634.684612][T18481] UDC core: g1: couldn't find an available UDC or it's busy
[ 1634.730671][T18484] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1634.834005][T18484] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1635.110528][T18496] 0: reclassify loop, rule prio 0, protocol 800
[ 1635.117771][T18498] TC_ACT_REPEAT abuse ?
[ 1635.211885][ T6160] EXT4-fs (loop6): unmounting filesystem.
[ 1638.167984][T18513] Config c1/1 of g1 needs at least one function.
[ 1638.225309][T18513] udc dummy_udc.0: failed to start g1: -22
[ 1638.316130][T18513] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1638.371226][T18513] UDC core: g1: couldn't find an available UDC or it's busy
[ 1638.439560][T18516] Config c1/1 of g1 needs at least one function.
[ 1638.477013][T18516] udc dummy_udc.0: failed to start g1: -22
[ 1638.555854][T18516] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1638.633474][T18516] UDC core: g1: couldn't find an available UDC or it's busy
[ 1638.723450][T18527] Config c1/1 of g1 needs at least one function.
[ 1638.778486][T18527] udc dummy_udc.0: failed to start g1: -22
[ 1638.843202][T18527] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1638.940865][T18527] UDC core: g1: couldn't find an available UDC or it's busy
[ 1638.997982][T18531] Config c1/1 of g1 needs at least one function.
[ 1639.006466][T18534] FAULT_INJECTION: forcing a failure.
[ 1639.006466][T18534] name failslab, interval 1, probability 0, space 0, times 0
[ 1639.048117][T18531] udc dummy_udc.0: failed to start g1: -22
[ 1639.077068][T18531] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1639.126399][T18534] CPU: 0 PID: 18534 Comm: syz.5.3317 Not tainted syzkaller #0
[ 1639.133874][T18534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1639.143906][T18534] Call Trace:
[ 1639.147167][T18534]  <TASK>
[ 1639.150083][T18534]  dump_stack_lvl+0x188/0x24e
[ 1639.154745][T18534]  ? show_regs_print_info+0x12/0x12
[ 1639.159922][T18534]  ? load_image+0x410/0x410
[ 1639.164406][T18534]  ? __might_sleep+0xd0/0xd0
[ 1639.168973][T18534]  ? __lock_acquire+0x7c40/0x7c40
[ 1639.173980][T18534]  should_fail_ex+0x390/0x4c0
[ 1639.178640][T18534]  should_failslab+0x5/0x20
[ 1639.183136][T18534]  slab_pre_alloc_hook+0x59/0x300
[ 1639.188146][T18534]  ? ipv6_add_addr+0x42d/0xfc0
[ 1639.192890][T18534]  __kmem_cache_alloc_node+0x4f/0x270
[ 1639.198265][T18534]  ? ipv6_add_addr+0x42d/0xfc0
[ 1639.203018][T18534]  kmalloc_trace+0x26/0xe0
[ 1639.207421][T18534]  ipv6_add_addr+0x42d/0xfc0
[ 1639.212000][T18534]  ? ipv6_count_addresses+0x190/0x190
[ 1639.217365][T18534]  ? __lock_acquire+0x7c40/0x7c40
[ 1639.222382][T18534]  inet6_addr_add+0x43e/0x9c0
[ 1639.227048][T18534]  addrconf_add_ifaddr+0x156/0x1b0
[ 1639.232145][T18534]  ? addrconf_set_dstaddr+0x320/0x320
[ 1639.237504][T18534]  ? __lock_acquire+0x7c40/0x7c40
[ 1639.242527][T18534]  ? slab_free_freelist_hook+0x133/0x1b0
[ 1639.248146][T18534]  inet6_ioctl+0x16b/0x280
[ 1639.252544][T18534]  ? __kmem_cache_free+0xb6/0x200
[ 1639.257549][T18534]  ? inet6_getname+0x670/0x670
[ 1639.262297][T18534]  ? tomoyo_path_number_perm+0x205/0x650
[ 1639.267917][T18534]  ? tomoyo_path_number_perm+0x5a4/0x650
[ 1639.273546][T18534]  ? tomoyo_path_number_perm+0x205/0x650
[ 1639.279157][T18534]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1639.284607][T18534]  sock_do_ioctl+0xfb/0x320
[ 1639.289098][T18534]  ? sock_show_fdinfo+0xb0/0xb0
[ 1639.293937][T18534]  sock_ioctl+0x48a/0x700
[ 1639.298248][T18534]  ? sock_poll+0x420/0x420
[ 1639.302652][T18534]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1639.307569][T18534]  ? security_file_ioctl+0x7c/0xa0
[ 1639.312660][T18534]  ? sock_poll+0x420/0x420
[ 1639.317058][T18534]  __se_sys_ioctl+0xfa/0x170
[ 1639.321631][T18534]  do_syscall_64+0x4c/0xa0
[ 1639.326026][T18534]  ? clear_bhb_loop+0x60/0xb0
[ 1639.330679][T18534]  ? clear_bhb_loop+0x60/0xb0
[ 1639.335333][T18534]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1639.341211][T18534] RIP: 0033:0x7f18b0f9e159
[ 1639.345609][T18534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1639.365228][T18534] RSP: 002b:00007f18b1e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1639.373641][T18534] RAX: ffffffffffffffda RBX: 00007f18b1225fa0 RCX: 00007f18b0f9e159
[ 1639.381596][T18534] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000004
[ 1639.389549][T18534] RBP: 00007f18b103506b R08: 0000000000000000 R09: 0000000000000000
[ 1639.397499][T18534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1639.405450][T18534] R13: 00007f18b1226038 R14: 00007f18b1225fa0 R15: 00007ffed8e40148
[ 1639.413422][T18534]  </TASK>
[ 1639.455921][T18531] UDC core: g1: couldn't find an available UDC or it's busy
[ 1639.595237][T15428] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1639.692612][   T27] audit: type=1804 audit(1790127588.696:87): pid=18547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3320" name="/newroot/644/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=26957 res=1 errno=0
[ 1639.727329][T18544] kvm: pic: non byte write
[ 1639.838630][T15428] usb 2-1: Using ep0 maxpacket: 8
[ 1639.854928][T15428] usb 2-1: config index 0 descriptor too short (expected 1060, got 36)
[ 1639.902450][T15428] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1639.946786][T15428] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1640.011269][T15428] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00
[ 1640.046117][T15428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.081406][T15428] usb 2-1: config 0 descriptor??
[ 1640.491307][T18571] Config c1/1 of g1 needs at least one function.
[ 1640.543080][T18571] udc dummy_udc.0: failed to start g1: -22
[ 1640.630920][T18571] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1640.723596][T18571] UDC core: g1: couldn't find an available UDC or it's busy
[ 1640.789997][T18574] Config c1/1 of g1 needs at least one function.
[ 1640.826475][T18574] udc dummy_udc.0: failed to start g1: -22
[ 1640.865784][T18574] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1640.939050][T18574] UDC core: g1: couldn't find an available UDC or it's busy
[ 1641.015583][T18583] Config c1/1 of g1 needs at least one function.
[ 1641.052438][T18583] udc dummy_udc.0: failed to start g1: -22
[ 1641.078931][T15428] sony 0003:1345:3008.0013: can't set operational mode: step 3, ignoring
[ 1641.124844][T18583] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1641.134457][T15428] input: HID 1345:3008 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1345:3008.0013/input/input20
[ 1641.190839][T18583] UDC core: g1: couldn't find an available UDC or it's busy
[ 1641.247560][T18586] Config c1/1 of g1 needs at least one function.
[ 1641.282696][T18586] udc dummy_udc.0: failed to start g1: -22
[ 1641.322973][T18586] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1641.405370][T18586] UDC core: g1: couldn't find an available UDC or it's busy
[ 1641.462885][T15428] input: HID 1345:3008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1345:3008.0013/input/input19
[ 1641.590157][T18591] loop4: detected capacity change from 0 to 2048
[ 1641.677082][T18591] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1641.692577][T15428] sony 0003:1345:3008.0013: input,hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.1-1/input0
[ 1641.842977][T15428] usb 2-1: USB disconnect, device number 7
[ 1642.132501][T18590] UDF-fs: warning (device loop4): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 258048 lbcount: 262144 extent 129+226304
[ 1642.344975][T18601] fido_id[18601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1643.166879][T18632] Config c1/1 of g1 needs at least one function.
[ 1643.210876][T18632] udc dummy_udc.0: failed to start g1: -22
[ 1643.243179][T18632] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1643.301828][T18632] UDC core: g1: couldn't find an available UDC or it's busy
[ 1643.353283][T18634] Config c1/1 of g1 needs at least one function.
[ 1643.383084][T18634] udc dummy_udc.0: failed to start g1: -22
[ 1643.689464][T15162] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1644.687748][T18634] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1646.039693][T18634] UDC core: g1: couldn't find an available UDC or it's busy
[ 1646.306245][T18648] Config c1/1 of g1 needs at least one function.
[ 1646.345855][T18648] udc dummy_udc.0: failed to start g1: -22
[ 1646.389001][T18648] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1646.467089][T18648] UDC core: g1: couldn't find an available UDC or it's busy
[ 1646.572349][T13963] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1646.615727][T15428] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1646.728322][T18670] binder: 18669:18670 ioctl 4018620d 0 returned -22
[ 1646.805161][T18673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3353'.
[ 1646.815622][T13963] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[ 1646.862702][T13963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.877499][T18673] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0
[ 1646.888012][T15428] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1646.913315][T15428] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.181800][T13963] usb 5-1: Product: syz
[ 1648.186040][T13963] usb 5-1: Manufacturer: syz
[ 1648.336692][T15428] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1648.349706][T13963] usb 5-1: SerialNumber: syz
[ 1648.379285][T13963] usb 5-1: config 0 descriptor??
[ 1648.388520][T15428] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1648.412323][T13963] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 015
[ 1648.440693][T15428] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1648.472364][T15428] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1648.493694][T15428] usb 8-1: Product: syz
[ 1648.504943][T15428] usb 8-1: Manufacturer: syz
[ 1648.550546][T15428] cdc_wdm 8-1:1.0: skipping garbage
[ 1648.593857][T15428] cdc_wdm 8-1:1.0: skipping garbage
[ 1648.630915][T18647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1648.674235][T15428] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device
[ 1648.685830][T18647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1648.725431][T15428] cdc_wdm 8-1:1.0: Unknown control protocol
[ 1648.738348][T18688] Config c1/1 of g1 needs at least one function.
[ 1648.796896][T18688] udc dummy_udc.0: failed to start g1: -22
[ 1648.855398][T15428] usb 8-1: USB disconnect, device number 19
[ 1648.861751][T18688] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1648.909102][T18688] UDC core: g1: couldn't find an available UDC or it's busy
[ 1649.271879][T18647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1649.317352][T18647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1649.339661][T18698] Config c1/1 of g1 needs at least one function.
[ 1649.355567][T13963] i2c i2c-1: failure reading functionality
[ 1649.376516][T18698] udc dummy_udc.0: failed to start g1: -22
[ 1649.396910][T13963] i2c i2c-1: connected i2c-tiny-usb device
[ 1649.426194][T18698] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1649.475395][T13963] usb 5-1: USB disconnect, device number 15
[ 1649.509731][T18698] UDC core: g1: couldn't find an available UDC or it's busy
[ 1651.364260][T18713] Config c1/1 of g1 needs at least one function.
[ 1651.370836][T18713] udc dummy_udc.0: failed to start g1: -22
[ 1651.478992][T18713] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1651.545020][T18713] UDC core: g1: couldn't find an available UDC or it's busy
[ 1653.660317][ T4288] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1653.933841][T18739] Config c1/1 of g1 needs at least one function.
[ 1653.978783][T18739] udc dummy_udc.0: failed to start g1: -22
[ 1654.013463][T18739] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1654.060888][T18739] UDC core: g1: couldn't find an available UDC or it's busy
[ 1654.107231][T18741] Config c1/1 of g1 needs at least one function.
[ 1654.157381][T18741] udc dummy_udc.0: failed to start g1: -22
[ 1654.196190][T18741] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1654.294469][T18741] UDC core: g1: couldn't find an available UDC or it's busy
[ 1657.613840][T18796] kvm: pic: single mode not supported
[ 1657.614056][T18796] kvm: pic: single mode not supported
[ 1657.650809][T18802] Config c1/1 of g1 needs at least one function.
[ 1657.670948][T18796] kvm: pic: single mode not supported
[ 1657.671334][T18796] kvm: pic: level sensitive irq not supported
[ 1657.700751][T18796] kvm: pic: level sensitive irq not supported
[ 1657.732896][T18802] udc dummy_udc.0: failed to start g1: -22
[ 1659.104143][T18806] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1659.154033][T18802] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1659.230991][T18802] UDC core: g1: couldn't find an available UDC or it's busy
[ 1659.374766][T18815] loop4: detected capacity change from 0 to 8
[ 1659.459292][T18818] FAULT_INJECTION: forcing a failure.
[ 1659.459292][T18818] name failslab, interval 1, probability 0, space 0, times 0
[ 1659.508123][T18815] SQUASHFS error: Unable to read directory block [1d0:62]
[ 1659.539235][T18821] Config c1/1 of g1 needs at least one function.
[ 1659.589148][T18821] udc dummy_udc.0: failed to start g1: -22
[ 1659.608741][T18818] CPU: 0 PID: 18818 Comm: syz.6.3387 Not tainted syzkaller #0
[ 1659.616206][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1659.626245][T18818] Call Trace:
[ 1659.629507][T18818]  <TASK>
[ 1659.632434][T18818]  dump_stack_lvl+0x188/0x24e
[ 1659.637095][T18818]  ? show_regs_print_info+0x12/0x12
[ 1659.642274][T18818]  ? load_image+0x410/0x410
[ 1659.646763][T18818]  ? __might_sleep+0xd0/0xd0
[ 1659.651332][T18818]  ? __lock_acquire+0x7c40/0x7c40
[ 1659.656432][T18818]  should_fail_ex+0x390/0x4c0
[ 1659.661101][T18818]  should_failslab+0x5/0x20
[ 1659.665581][T18818]  slab_pre_alloc_hook+0x59/0x300
[ 1659.670588][T18818]  ? hugetlbfs_fill_super+0x75/0x910
[ 1659.675882][T18818]  __kmem_cache_alloc_node+0x4f/0x270
[ 1659.681272][T18818]  ? hugetlbfs_get_tree+0x530/0x530
[ 1659.686486][T18818]  ? hugetlbfs_fill_super+0x75/0x910
[ 1659.691775][T18818]  kmalloc_trace+0x26/0xe0
[ 1659.696175][T18818]  ? hugetlbfs_get_tree+0x530/0x530
[ 1659.701358][T18818]  hugetlbfs_fill_super+0x75/0x910
[ 1659.706456][T18818]  ? sget_fc+0x6a8/0x750
[ 1659.710683][T18818]  ? kill_litter_super+0xa0/0xa0
[ 1659.715603][T18818]  ? hugetlbfs_get_tree+0x530/0x530
[ 1659.720784][T18818]  get_tree_nodev+0xb0/0x160
[ 1659.725356][T18818]  vfs_get_tree+0x88/0x270
[ 1659.729752][T18818]  vfs_fsconfig_locked+0x22f/0x400
[ 1659.734847][T18818]  __se_sys_fsconfig+0x69e/0x7e0
[ 1659.739767][T18818]  ? __x64_sys_fsconfig+0xc0/0xc0
[ 1659.744784][T18818]  ? lockdep_hardirqs_on+0x94/0x140
[ 1659.749968][T18818]  ? __x64_sys_fsconfig+0x1c/0xc0
[ 1659.754971][T18818]  do_syscall_64+0x4c/0xa0
[ 1659.759367][T18818]  ? clear_bhb_loop+0x60/0xb0
[ 1659.764021][T18818]  ? clear_bhb_loop+0x60/0xb0
[ 1659.768678][T18818]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1659.774556][T18818] RIP: 0033:0x7fb1ba19e159
[ 1659.778951][T18818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1659.798541][T18818] RSP: 002b:00007fb1bb12e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 1659.806934][T18818] RAX: ffffffffffffffda RBX: 00007fb1ba425fa0 RCX: 00007fb1ba19e159
[ 1659.814886][T18818] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[ 1659.822840][T18818] RBP: 00007fb1ba23506b R08: 0000000000000000 R09: 0000000000000000
[ 1659.830792][T18818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1659.838743][T18818] R13: 00007fb1ba426038 R14: 00007fb1ba425fa0 R15: 00007ffef0cc7ea8
[ 1659.846703][T18818]  </TASK>
[ 1659.881119][T18821] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1659.952089][T18821] UDC core: g1: couldn't find an available UDC or it's busy
[ 1663.287790][T18849] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1663.671112][T18836] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1663.792924][T18865] Config c1/1 of g1 needs at least one function.
[ 1664.955748][T18865] udc dummy_udc.0: failed to start g1: -22
[ 1665.241893][T18865] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1665.285703][T18865] UDC core: g1: couldn't find an available UDC or it's busy
[ 1665.798525][T15162] Bluetooth: hci1: Opcode 0x1003 failed: -110
[ 1666.913567][T18874] Config c1/1 of g1 needs at least one function.
[ 1666.954698][T18874] udc dummy_udc.0: failed to start g1: -22
[ 1667.026453][T18874] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1667.108485][T18874] UDC core: g1: couldn't find an available UDC or it's busy
[ 1667.118355][   T27] audit: type=1804 audit(1790127613.996:88): pid=18883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3404" name="/newroot/450/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=26957 res=1 errno=0
[ 1669.120204][T18901] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1669.138147][T18897] block device autoloading is deprecated and will be removed.
[ 1669.240804][T18910] loop7: detected capacity change from 0 to 1024
[ 1669.331955][ T9463] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 1669.363598][T18915] Config c1/1 of g1 needs at least one function.
[ 1669.385510][T18915] udc dummy_udc.0: failed to start g1: -22
[ 1669.465206][T18915] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1669.564606][T18915] UDC core: g1: couldn't find an available UDC or it's busy
[ 1669.673559][T18923] Config c1/1 of g1 needs at least one function.
[ 1669.743123][T18923] udc dummy_udc.0: failed to start g1: -22
[ 1669.832690][T18923] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1669.917610][T18923] UDC core: g1: couldn't find an available UDC or it's busy
[ 1670.364307][T18942] loop5: detected capacity change from 0 to 2048
[ 1670.457393][T18942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1670.508360][T18951] loop6: detected capacity change from 0 to 1024
[ 1670.614670][T18951] hfsplus: unable to parse mount options
[ 1672.569170][T18964] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100
[ 1672.951939][T18987] Config c1/1 of g1 needs at least one function.
[ 1673.023222][T18987] udc dummy_udc.0: failed to start g1: -22
[ 1673.076159][T18987] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1673.115218][   T27] audit: type=1326 audit(1790127619.532:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18978 comm="syz.7.3430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a839e159 code=0x7fc00000
[ 1673.200114][T18987] UDC core: g1: couldn't find an available UDC or it's busy
[ 1673.739594][T19009] syz.5.3439 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[ 1673.840062][T19009] CPU: 0 PID: 19009 Comm: syz.5.3439 Not tainted syzkaller #0
[ 1673.847539][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1673.857580][T19009] Call Trace:
[ 1673.860843][T19009]  <TASK>
[ 1673.863757][T19009]  dump_stack_lvl+0x188/0x24e
[ 1673.868418][T19009]  ? ___ratelimit+0x14e/0x610
[ 1673.873077][T19009]  ? show_regs_print_info+0x12/0x12
[ 1673.878257][T19009]  ? load_image+0x410/0x410
[ 1673.882745][T19009]  ? ___ratelimit+0x474/0x610
[ 1673.887404][T19009]  ? radix_tree_cpu_dead+0x160/0x160
[ 1673.892668][T19009]  dump_header+0xd8/0x820
[ 1673.897009][T19009]  oom_kill_process+0x361/0x550
[ 1673.901842][T19009]  out_of_memory+0xe25/0x1220
[ 1673.906506][T19009]  ? mutex_lock_nested+0x10/0x10
[ 1673.911428][T19009]  ? unregister_oom_notifier+0x20/0x20
[ 1673.916887][T19009]  mem_cgroup_out_of_memory+0x2c0/0x390
[ 1673.922418][T19009]  ? mem_cgroup_oom_trylock+0x210/0x210
[ 1673.927951][T19009]  ? do_raw_spin_unlock+0x11d/0x230
[ 1673.933130][T19009]  try_charge_memcg+0xc9d/0x17c0
[ 1673.938069][T19009]  ? percpu_ref_put+0x180/0x180
[ 1673.942902][T19009]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1673.948612][T19009]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1673.954576][T19009]  ? percpu_ref_tryget+0x15/0x180
[ 1673.959588][T19009]  ? percpu_ref_tryget+0x15/0x180
[ 1673.964594][T19009]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1673.970294][T19009]  ? get_mem_cgroup_from_objcg+0x19/0x150
[ 1673.976009][T19009]  ? get_mem_cgroup_from_objcg+0x13c/0x150
[ 1673.981799][T19009]  obj_cgroup_charge+0x36a/0x620
[ 1673.986731][T19009]  ? obj_cgroup_charge+0xe9/0x620
[ 1673.991736][T19009]  ? mod_objcg_mlstate+0x320/0x320
[ 1673.996840][T19009]  ? percpu_ref_put+0x12/0x100
[ 1674.001584][T19009]  ? percpu_ref_put+0x12/0x100
[ 1674.006332][T19009]  slab_pre_alloc_hook+0x2e2/0x300
[ 1674.011443][T19009]  ? slab_pre_alloc_hook+0xb1/0x300
[ 1674.016646][T19009]  kmem_cache_alloc_lru+0x49/0x2e0
[ 1674.021759][T19009]  ? __d_alloc+0x2e/0x6e0
[ 1674.026079][T19009]  __d_alloc+0x2e/0x6e0
[ 1674.030215][T19009]  d_alloc+0x46/0x250
[ 1674.034179][T19009]  lookup_one_qstr_excl+0xc6/0x240
[ 1674.039275][T19009]  filename_create+0x242/0x450
[ 1674.044022][T19009]  ? kern_path_create+0x50/0x50
[ 1674.048861][T19009]  ? __virt_addr_valid+0x467/0x540
[ 1674.053963][T19009]  do_mkdirat+0xa5/0x440
[ 1674.058194][T19009]  ? vfs_mkdir+0x570/0x570
[ 1674.062593][T19009]  __x64_sys_mkdirat+0x85/0x90
[ 1674.067335][T19009]  do_syscall_64+0x4c/0xa0
[ 1674.071738][T19009]  ? clear_bhb_loop+0x60/0xb0
[ 1674.076402][T19009]  ? clear_bhb_loop+0x60/0xb0
[ 1674.081058][T19009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1674.086938][T19009] RIP: 0033:0x7f18b0f9cfc7
[ 1674.091335][T19009] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1674.110933][T19009] RSP: 002b:00007f18b1e60e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 1674.119338][T19009] RAX: ffffffffffffffda RBX: 00007f18b1e60ee0 RCX: 00007f18b0f9cfc7
[ 1674.127295][T19009] RDX: 00000000000001ff RSI: 0000200000000300 RDI: 00000000ffffff9c
[ 1674.135253][T19009] RBP: 0000000000000000 R08: 0000200000000300 R09: 0000000000000000
[ 1674.143208][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000300
[ 1674.151159][T19009] R13: 00007f18b1e60ea0 R14: 0000000000000000 R15: 0000000000000000
[ 1674.159121][T19009]  </TASK>
[ 1674.451229][T19023] bridge0: port 4(syz_tun) entered blocking state
[ 1674.496393][T19023] bridge0: port 4(syz_tun) entered disabled state
[ 1674.554609][T19023] device syz_tun entered promiscuous mode
[ 1674.612757][T19023] bridge0: port 4(syz_tun) entered blocking state
[ 1674.619267][T19023] bridge0: port 4(syz_tun) entered forwarding state
[ 1675.001398][T19033] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1675.305375][T19041] ip_tables: iptables: counters copy to user failed while replacing table
[ 1675.336093][   T27] audit: type=1326 audit(1790127621.581:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18978 comm="syz.7.3430" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f58a839e159 code=0x7fc00000
[ 1675.523483][T15427] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1675.759726][T15427] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00
[ 1675.787226][T19051] Config c1/1 of g1 needs at least one function.
[ 1675.819553][T15427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.846448][T19051] udc dummy_udc.0: failed to start g1: -22
[ 1675.891169][T19051] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1675.954557][T19051] UDC core: g1: couldn't find an available UDC or it's busy
[ 1676.108431][T15427] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[ 1678.718904][    T7] kworker/dying (7) used greatest stack depth: 15024 bytes left
[ 1679.717500][T19009] memory: usage 0kB, limit 0kB, failcnt 19
[ 1679.812824][T19009] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1679.917159][T19009] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1680.006940][T19009] Memory cgroup stats for /syz5/test:
[ 1680.007505][T19009] anon 0
[ 1680.007505][T19009] file 0
[ 1680.007505][T19009] kernel 0
[ 1680.007505][T19009] kernel_stack 0
[ 1680.007505][T19009] pagetables 0
[ 1680.007505][T19009] sec_pagetables 0
[ 1680.007505][T19009] percpu 0
[ 1680.007505][T19009] sock 0
[ 1680.007505][T19009] vmalloc 0
[ 1680.007505][T19009] shmem 0
[ 1680.007505][T19009] zswap 0
[ 1680.007505][T19009] zswapped 0
[ 1680.007505][T19009] file_mapped 0
[ 1680.007505][T19009] file_dirty 0
[ 1680.007505][T19009] file_writeback 0
[ 1680.007505][T19009] swapcached 0
[ 1680.007505][T19009] anon_thp 0
[ 1680.007505][T19009] file_thp 0
[ 1680.007505][T19009] shmem_thp 0
[ 1680.007505][T19009] inactive_anon 0
[ 1680.007505][T19009] active_anon 0
[ 1680.007505][T19009] inactive_file 0
[ 1680.007505][T19009] active_file 0
[ 1680.007505][T19009] unevictable 0
[ 1680.007505][T19009] slab_reclaimable 0
[ 1680.007505][T19009] slab_unreclaimable 0
[ 1680.007505][T19009] slab 0
[ 1680.007505][T19009] workingset_refault_anon 0
[ 1681.000181][T19009] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0-1,oom_memcg=/syz5/test,task_memcg=/syz5/test,task=syz.5.3439,pid=19008,uid=0
[ 1681.157754][T19009] Memory cgroup out of memory: Killed process 19009 (syz.5.3439) total-vm:102244kB, anon-rss:1432kB, file-rss:22540kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000
[ 1681.575078][T19104] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1683.410034][T15427] usb 2-1: USB disconnect, device number 8
[ 1683.502615][T19154] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1683.983541][T19166] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1685.032675][T19182] device syzkaller0 entered promiscuous mode
[ 1686.678038][T19196] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3483'.
[ 1686.931543][T19206] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1687.365752][T19219] device syzkaller0 entered promiscuous mode
[ 1687.717380][T19229] Config c1/1 of g1 needs at least one function.
[ 1687.763905][T19229] udc dummy_udc.0: failed to start g1: -22
[ 1687.793121][T19229] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1687.803886][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3490'.
[ 1687.849487][T19229] UDC core: g1: couldn't find an available UDC or it's busy
[ 1687.903910][T19225] device bond1 entered promiscuous mode
[ 1687.942252][T19226] device bridge1 entered promiscuous mode
[ 1688.011725][T19226] bond1: (slave bridge1): Enslaving as an active interface with an up link
[ 1688.033819][T19238] Config c1/1 of g1 needs at least one function.
[ 1688.078123][T19238] udc dummy_udc.0: failed to start g1: -22
[ 1688.154369][T19238] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1688.226662][T19238] UDC core: g1: couldn't find an available UDC or it's busy
[ 1688.396821][T19253] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[ 1688.602863][T19240] device syzkaller0 entered promiscuous mode
[ 1688.679893][T19260] loop7: detected capacity change from 0 to 1024
[ 1688.749879][T19260] EXT4-fs: Ignoring removed bh option
[ 1688.888076][T19260] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 1689.110671][T19260] loop7: detected capacity change from 1024 to 64
[ 1689.686014][ T8643] EXT4-fs (loop7): unmounting filesystem.
[ 1689.790252][T19264] kmmpd-loop7: attempt to access beyond end of device
[ 1689.790252][T19264] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64
[ 1689.818661][T19284] Config c1/1 of g1 needs at least one function.
[ 1689.893429][T19284] udc dummy_udc.0: failed to start g1: -22
[ 1689.913716][T19264] Buffer I/O error on dev loop7, logical block 64, lost sync page write
[ 1689.937330][T19284] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1690.069850][T19290] md: could not open device unknown-block(1,0).
[ 1690.089566][T19284] UDC core: g1: couldn't find an available UDC or it's busy
[ 1690.649225][T19298] Config c1/1 of g1 needs at least one function.
[ 1690.702431][T19298] udc dummy_udc.0: failed to start g1: -22
[ 1690.731256][T19290] md/raid1:md0: active with 1 out of 2 mirrors
[ 1690.759425][T19298] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1690.799463][T19290] md0: detected capacity change from 0 to 2048
[ 1690.823796][T19298] UDC core: g1: couldn't find an available UDC or it's busy
[ 1690.893198][T19269] loop4: detected capacity change from 0 to 32768
[ 1691.359489][T19309] FAULT_INJECTION: forcing a failure.
[ 1691.359489][T19309] name failslab, interval 1, probability 0, space 0, times 0
[ 1691.384196][T19308] device syzkaller0 entered promiscuous mode
[ 1691.485445][T19309] CPU: 0 PID: 19309 Comm: syz.5.3511 Not tainted syzkaller #0
[ 1691.492923][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1691.502960][T19309] Call Trace:
[ 1691.506221][T19309]  <TASK>
[ 1691.509133][T19309]  dump_stack_lvl+0x188/0x24e
[ 1691.513796][T19309]  ? show_regs_print_info+0x12/0x12
[ 1691.518976][T19309]  ? load_image+0x410/0x410
[ 1691.523463][T19309]  ? __might_sleep+0xd0/0xd0
[ 1691.528030][T19309]  ? __lock_acquire+0x7c40/0x7c40
[ 1691.533037][T19309]  should_fail_ex+0x390/0x4c0
[ 1691.537702][T19309]  should_failslab+0x5/0x20
[ 1691.542185][T19309]  slab_pre_alloc_hook+0x59/0x300
[ 1691.547194][T19309]  ? __lock_acquire+0x138a/0x7c40
[ 1691.552203][T19309]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1691.557941][T19309]  __kmem_cache_alloc_node+0x4f/0x270
[ 1691.563299][T19309]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[ 1691.569016][T19309]  __kmalloc+0xa3/0x240
[ 1691.573161][T19309]  tomoyo_realpath_from_path+0xe2/0x5c0
[ 1691.578704][T19309]  ? tomoyo_domain+0xd2/0x120
[ 1691.583364][T19309]  ? tomoyo_path_number_perm+0x205/0x650
[ 1691.588978][T19309]  tomoyo_path_number_perm+0x22f/0x650
[ 1691.594422][T19309]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[ 1691.599879][T19309]  ? __fget_files+0x28/0x460
[ 1691.604457][T19309]  security_file_ioctl+0x6c/0xa0
[ 1691.609376][T19309]  __se_sys_ioctl+0x48/0x170
[ 1691.613952][T19309]  do_syscall_64+0x4c/0xa0
[ 1691.618367][T19309]  ? clear_bhb_loop+0x60/0xb0
[ 1691.623026][T19309]  ? clear_bhb_loop+0x60/0xb0
[ 1691.627680][T19309]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1691.633561][T19309] RIP: 0033:0x7f18b0f9e159
[ 1691.637957][T19309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1691.657550][T19309] RSP: 002b:00007f18b1e61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1691.665945][T19309] RAX: ffffffffffffffda RBX: 00007f18b1225fa0 RCX: 00007f18b0f9e159
[ 1691.673895][T19309] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000005
[ 1691.681846][T19309] RBP: 00007f18b103506b R08: 0000000000000000 R09: 0000000000000000
[ 1691.689799][T19309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1691.697761][T19309] R13: 00007f18b1226038 R14: 00007f18b1225fa0 R15: 00007ffed8e40148
[ 1691.705718][T19309]  </TASK>
[ 1691.708774][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1693.952295][ T4498] tipc: Left network mode
[ 1694.021497][T15162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1694.034802][T15162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1694.043100][T15162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1694.050649][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1694.058153][T15162] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1694.065466][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1694.136632][T19335] device syzkaller0 entered promiscuous mode
[ 1695.031172][T19309] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1695.279255][T19354] Config c1/1 of g1 needs at least one function.
[ 1695.344334][T19354] udc dummy_udc.0: failed to start g1: -22
[ 1695.400498][T19354] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1695.500069][T19354] UDC core: g1: couldn't find an available UDC or it's busy
[ 1695.598419][T19344] loop4: detected capacity change from 0 to 32768
[ 1695.631496][T19333] chnl_net:caif_netlink_parms(): no params data found
[ 1696.441394][T15162] Bluetooth: hci1: command 0x0409 tx timeout
[ 1696.473014][T19344] XFS (loop4): Mounting V5 Filesystem
[ 1696.643628][T19344] XFS (loop4): Ending clean mount
[ 1698.085964][T19391] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3525'.
[ 1698.262130][T19333] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1698.335224][T19333] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1698.410027][T19333] device bridge_slave_0 entered promiscuous mode
[ 1698.664106][T15162] Bluetooth: hci1: command 0x041b tx timeout
[ 1698.896758][T19333] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1698.926254][T19333] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1698.984326][T19333] device bridge_slave_1 entered promiscuous mode
[ 1699.001672][ T9991] XFS (loop4): Unmounting Filesystem
[ 1699.133438][T19333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1699.815636][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1699.845226][ T4498] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1699.906375][ T4498] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1699.964624][ T4498] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1700.422640][T19416] Config c1/1 of g1 needs at least one function.
[ 1700.439935][T19416] udc dummy_udc.0: failed to start g1: -22
[ 1700.483574][T19416] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1700.561141][T19416] UDC core: g1: couldn't find an available UDC or it's busy
[ 1700.739078][T15428] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1700.915605][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 1700.921918][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 1700.931594][T15162] Bluetooth: hci1: command 0x040f tx timeout
[ 1700.968251][T15428] usb 2-1: config 0 has no interfaces?
[ 1700.983265][T15428] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 1701.016316][T19422] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[ 1701.025367][T15428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1701.106511][T15428] usb 2-1: config 0 descriptor??
[ 1701.283699][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead
[ 1701.321489][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead
[ 1701.373206][T15442] usb 2-1: USB disconnect, device number 9
[ 1701.404132][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x9d8a instead
[ 1701.460950][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x3d0d instead
[ 1701.506234][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead
[ 1701.548820][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead
[ 1701.593081][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead
[ 1701.652393][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead
[ 1701.699165][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead
[ 1701.743888][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead
[ 1701.793916][T19427] jffs2: Further such events for this erase block will not be printed
[ 1701.843476][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead
[ 1701.911268][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead
[ 1702.019309][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x9d8a instead
[ 1702.109478][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x3d0d instead
[ 1702.187996][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead
[ 1702.273491][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead
[ 1702.380216][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead
[ 1702.491068][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead
[ 1702.568383][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead
[ 1702.653129][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead
[ 1702.723652][T19427] jffs2: Further such events for this erase block will not be printed
[ 1702.765013][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead
[ 1702.818317][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead
[ 1702.835339][T15442] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1702.870043][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x9d8a instead
[ 1702.937029][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x3d0d instead
[ 1702.985329][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead
[ 1703.014655][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead
[ 1703.050437][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x9d8a instead
[ 1703.067382][T15442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.111601][T15442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1703.122833][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x3d0d instead
[ 1703.142187][T15442] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1703.165768][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead
[ 1703.176871][T15162] Bluetooth: hci1: command 0x0419 tx timeout
[ 1703.189486][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead
[ 1703.204566][T15442] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00
[ 1703.214395][T15442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.226988][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x9d8a instead
[ 1703.250157][T15442] usb 2-1: config 0 descriptor??
[ 1703.257739][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x3d0d instead
[ 1703.321807][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead
[ 1703.372321][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead
[ 1703.400902][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x9d8a instead
[ 1703.436059][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x3d0d instead
[ 1703.496054][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead
[ 1703.566078][ T4498] team0 (unregistering): Port device team_slave_1 removed
[ 1703.575540][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead
[ 1703.595355][T19463] Config c1/1 of g1 needs at least one function.
[ 1703.620367][T19463] udc dummy_udc.0: failed to start g1: -22
[ 1703.630026][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x9d8a instead
[ 1703.643536][T19463] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1703.654406][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x3d0d instead
[ 1703.685518][T19463] UDC core: g1: couldn't find an available UDC or it's busy
[ 1703.700192][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead
[ 1703.743525][T15442] wacom 0003:056A:0003.0014: unbalanced collection at end of report description
[ 1703.761795][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead
[ 1703.778163][T15442] wacom 0003:056A:0003.0014: parse failed
[ 1703.784014][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x9d8a instead
[ 1703.801053][T15442] wacom: probe of 0003:056A:0003.0014 failed with error -22
[ 1703.814206][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x3d0d instead
[ 1703.870361][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead
[ 1703.890691][ T4498] team0 (unregistering): Port device team_slave_0 removed
[ 1703.929940][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead
[ 1703.941689][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x9d8a instead
[ 1703.974243][T13427] usb 2-1: USB disconnect, device number 10
[ 1703.984784][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x3d0d instead
[ 1704.027091][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead
[ 1704.054142][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead
[ 1704.070151][ T4498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1704.079829][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x9d8a instead
[ 1704.107290][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x3d0d instead
[ 1704.135189][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead
[ 1704.163286][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead
[ 1704.190153][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x9d8a instead
[ 1704.204582][T15442] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1704.213851][ T4498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1704.226405][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x3d0d instead
[ 1704.256685][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead
[ 1704.282022][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead
[ 1704.312635][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x9d8a instead
[ 1704.337349][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x3d0d instead
[ 1704.365406][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead
[ 1704.395683][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead
[ 1704.428508][T15442] usb 5-1: Using ep0 maxpacket: 16
[ 1704.433825][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x9d8a instead
[ 1704.459856][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x3d0d instead
[ 1704.475001][T15442] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1704.503404][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead
[ 1704.518598][T15442] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1704.525901][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead
[ 1704.563278][T15442] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1704.582190][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x9d8a instead
[ 1704.604412][T15442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1704.624687][T15442] usb 5-1: Product: syz
[ 1704.628941][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x3d0d instead
[ 1704.648078][T15442] usb 5-1: Manufacturer: syz
[ 1704.658635][T15442] usb 5-1: SerialNumber: syz
[ 1704.670413][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead
[ 1704.697254][T15442] usb 5-1: config 0 descriptor??
[ 1704.732690][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead
[ 1704.759331][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x9d8a instead
[ 1704.789215][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x3d0d instead
[ 1704.819074][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead
[ 1704.850448][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead
[ 1704.876854][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x9d8a instead
[ 1704.920731][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x3d0d instead
[ 1704.961431][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead
[ 1704.973065][T15442] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21
[ 1704.997581][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead
[ 1705.020943][T13427] usb 2-1: new low-speed USB device number 11 using dummy_hcd
[ 1705.042594][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x9d8a instead
[ 1705.114641][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x3d0d instead
[ 1705.161538][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead
[ 1705.209512][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead
[ 1705.269326][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x9d8a instead
[ 1705.321122][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x3d0d instead
[ 1705.365331][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead
[ 1705.394763][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead
[ 1705.409025][T15442] rc_core: IR keymap rc-imon-pad not found
[ 1705.417665][T15442] Registered IR keymap rc-empty
[ 1705.425743][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x9d8a instead
[ 1705.440385][T15442] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1705.453146][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x3d0d instead
[ 1705.469822][T15442] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1705.479961][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead
[ 1705.516672][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead
[ 1705.549304][T15442] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1705.560226][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x9d8a instead
[ 1705.577400][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x3d0d instead
[ 1705.591529][T15442] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input22
[ 1705.607183][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead
[ 1705.622557][T15442] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:16> initialized
[ 1705.632794][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead
[ 1705.734612][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x9d8a instead
[ 1705.752306][    C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1705.760957][T15442] usb 5-1: USB disconnect, device number 16
[ 1705.821995][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x3d0d instead
[ 1705.852518][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead
[ 1705.884747][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead
[ 1705.912705][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x9d8a instead
[ 1705.928636][ T4498] bond0 (unregistering): Released all slaves
[ 1705.937238][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x3d0d instead
[ 1705.969870][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead
[ 1705.994693][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead
[ 1706.023258][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x9d8a instead
[ 1706.054678][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x3d0d instead
[ 1706.067761][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead
[ 1706.092903][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead
[ 1706.136113][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x9d8a instead
[ 1706.157144][T19333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1706.166959][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x3d0d instead
[ 1706.264717][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead
[ 1706.309652][T19333] team0: Port device team_slave_0 added
[ 1706.375597][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead
[ 1706.399395][T19333] team0: Port device team_slave_1 added
[ 1706.439334][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x9d8a instead
[ 1706.521631][T19333] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1706.531150][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x3d0d instead
[ 1706.607619][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1706.655721][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead
[ 1706.760372][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead
[ 1706.873641][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x9d8a instead
[ 1706.884055][T19333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1706.950815][T19493] Config c1/1 of g1 needs at least one function.
[ 1706.959545][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x3d0d instead
[ 1707.004665][T19333] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1707.045953][T19493] udc dummy_udc.0: failed to start g1: -22
[ 1707.077204][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1707.112928][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead
[ 1707.131658][T19493] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1707.192094][T19493] UDC core: g1: couldn't find an available UDC or it's busy
[ 1707.201834][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead
[ 1707.256558][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x9d8a instead
[ 1707.294890][T19333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1707.336429][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x3d0d instead
[ 1707.413658][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead
[ 1707.524547][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead
[ 1707.594121][T19333] device hsr_slave_0 entered promiscuous mode
[ 1707.635017][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x9d8a instead
[ 1707.656249][T19333] device hsr_slave_1 entered promiscuous mode
[ 1707.678232][T19506] Config c1/1 of g1 needs at least one function.
[ 1707.723519][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x3d0d instead
[ 1707.738939][T19333] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1707.748169][T19506] udc dummy_udc.0: failed to start g1: -22
[ 1707.770120][T19333] Cannot create hsr debugfs directory
[ 1707.779193][T19506] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1707.800685][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead
[ 1707.833331][T19506] UDC core: g1: couldn't find an available UDC or it's busy
[ 1707.877376][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead
[ 1707.981780][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x9d8a instead
[ 1708.079059][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x3d0d instead
[ 1708.199079][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead
[ 1708.316655][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead
[ 1708.385945][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x9d8a instead
[ 1708.474675][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x3d0d instead
[ 1708.564588][T15442] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1708.576991][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead
[ 1708.624390][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead
[ 1708.661343][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x9d8a instead
[ 1708.725263][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x3d0d instead
[ 1708.791946][T15442] usb 6-1: Using ep0 maxpacket: 16
[ 1708.808553][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead
[ 1708.837385][T15442] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1708.875604][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead
[ 1708.892422][T15442] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1708.916240][T15442] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.928941][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x9d8a instead
[ 1708.963793][T15442] usb 6-1: Product: syz
[ 1708.981534][T19427] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x3d0d instead
[ 1708.994366][T15442] usb 6-1: Manufacturer: syz
[ 1709.006072][T15442] usb 6-1: SerialNumber: syz
[ 1709.026532][T15442] usb 6-1: config 0 descriptor??
[ 1709.034030][T19427] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[ 1709.078690][T15442] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1709.101500][T19427] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[ 1709.134423][T15442] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1709.381318][T19538] binder: BINDER_SET_CONTEXT_MGR already set
[ 1709.466584][T19533] kvm: pic: non byte write
[ 1709.472921][T19538] binder: 19536:19538 ioctl 4018620d 200000004a80 returned -16
[ 1709.695151][T19543] loop6: detected capacity change from 0 to 1024
[ 1709.710641][T15442] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1709.723727][T19545] Config c1/1 of g1 needs at least one function.
[ 1709.784324][T19545] udc dummy_udc.0: failed to start g1: -22
[ 1709.796276][T19543] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1709.825890][T19545] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1709.860561][T19543] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 1709.882346][T19545] UDC core: g1: couldn't find an available UDC or it's busy
[ 1710.113053][T19543] fuse: root generation should be zero
[ 1710.791651][T15442] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1710.835655][T15442] em28xx 6-1:0.0: board has no eeprom
[ 1711.967105][ T6160] EXT4-fs (loop6): unmounting filesystem.
[ 1712.053987][T15442] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1712.061925][T15442] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1712.163948][T15442] usb 6-1: USB disconnect, device number 19
[ 1712.187836][T15442] em28xx 6-1:0.0: Disconnecting em28xx
[ 1712.193928][T19570] syz.6.3566 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1712.296822][T15430] em28xx 6-1:0.0: Binding DVB extension
[ 1712.688005][T15430] em28xx 6-1:0.0: Registering input extension
[ 1712.725065][T15442] em28xx 6-1:0.0: Closing input extension
[ 1712.909697][T19583] serio: Serial port ptm0
[ 1712.931616][T15442] em28xx 6-1:0.0: Freeing device
[ 1713.249747][T19585] Config c1/1 of g1 needs at least one function.
[ 1713.299958][T19585] udc dummy_udc.0: failed to start g1: -22
[ 1713.327668][T19585] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1713.395897][T19585] UDC core: g1: couldn't find an available UDC or it's busy
[ 1713.477143][T19587] Config c1/1 of g1 needs at least one function.
[ 1713.511649][T19587] udc dummy_udc.0: failed to start g1: -22
[ 1713.562890][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3571'.
[ 1713.575951][T19587] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1713.618895][T19587] UDC core: g1: couldn't find an available UDC or it's busy
[ 1713.631118][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3571'.
[ 1713.681961][T19595] Config c1/1 of g1 needs at least one function.
[ 1713.706556][T19591] device ip6gretap0 entered promiscuous mode
[ 1713.729284][T19595] udc dummy_udc.0: failed to start g1: -22
[ 1713.766042][T19591] device ip6gretap0 left promiscuous mode
[ 1713.775455][T19595] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1713.825693][T19595] UDC core: g1: couldn't find an available UDC or it's busy
[ 1713.871688][T19600] FAULT_INJECTION: forcing a failure.
[ 1713.871688][T19600] name failslab, interval 1, probability 0, space 0, times 0
[ 1714.020690][T19600] CPU: 0 PID: 19600 Comm: syz.6.3575 Not tainted syzkaller #0
[ 1714.028199][T19600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1714.038237][T19600] Call Trace:
[ 1714.041500][T19600]  <TASK>
[ 1714.044418][T19600]  dump_stack_lvl+0x188/0x24e
[ 1714.049082][T19600]  ? show_regs_print_info+0x12/0x12
[ 1714.054261][T19600]  ? load_image+0x410/0x410
[ 1714.058748][T19600]  ? __might_sleep+0xd0/0xd0
[ 1714.063316][T19600]  ? __lock_acquire+0x7c40/0x7c40
[ 1714.068334][T19600]  should_fail_ex+0x390/0x4c0
[ 1714.072998][T19600]  should_failslab+0x5/0x20
[ 1714.077477][T19600]  slab_pre_alloc_hook+0x59/0x300
[ 1714.082480][T19600]  ? asymmetric_key_generate_id+0x52/0xd0
[ 1714.088185][T19600]  __kmem_cache_alloc_node+0x4f/0x270
[ 1714.093540][T19600]  ? asymmetric_key_generate_id+0x52/0xd0
[ 1714.099250][T19600]  __kmalloc+0xa3/0x240
[ 1714.103413][T19600]  ? x509_fabricate_name+0x574/0x950
[ 1714.108679][T19600]  asymmetric_key_generate_id+0x52/0xd0
[ 1714.114208][T19600]  x509_process_extension+0x1d6/0x3a0
[ 1714.119561][T19600]  asn1_ber_decoder+0x9c2/0x21b0
[ 1714.124481][T19600]  ? __se_sys_add_key+0x34b/0x410
[ 1714.129495][T19600]  ? ref_tracker_free+0x830/0x830
[ 1714.134528][T19600]  x509_cert_parse+0x1ae/0x7a0
[ 1714.139288][T19600]  x509_key_preparse+0x60/0x660
[ 1714.144129][T19600]  ? down_read+0x1a8/0x2d0
[ 1714.148536][T19600]  asymmetric_key_preparse+0xa5/0x140
[ 1714.153895][T19600]  key_create_or_update+0x432/0xa40
[ 1714.159079][T19600]  ? security_key_permission+0x7c/0xa0
[ 1714.164529][T19600]  ? key_type_put+0x20/0x20
[ 1714.169017][T19600]  ? lookup_user_key_possessed+0x40/0x40
[ 1714.174638][T19600]  ? __might_fault+0xc2/0x120
[ 1714.179295][T19600]  ? __might_fault+0xa6/0x120
[ 1714.183972][T19600]  __se_sys_add_key+0x34b/0x410
[ 1714.188806][T19600]  ? __x64_sys_add_key+0xc0/0xc0
[ 1714.193725][T19600]  ? lockdep_hardirqs_on+0x94/0x140
[ 1714.198903][T19600]  ? __x64_sys_add_key+0x1c/0xc0
[ 1714.203819][T19600]  do_syscall_64+0x4c/0xa0
[ 1714.208214][T19600]  ? clear_bhb_loop+0x60/0xb0
[ 1714.212873][T19600]  ? clear_bhb_loop+0x60/0xb0
[ 1714.217980][T19600]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1714.223858][T19600] RIP: 0033:0x7fb1ba19e159
[ 1714.228255][T19600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1714.247843][T19600] RSP: 002b:00007fb1bb12e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1714.256238][T19600] RAX: ffffffffffffffda RBX: 00007fb1ba425fa0 RCX: 00007fb1ba19e159
[ 1714.264188][T19600] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 1714.272138][T19600] RBP: 00007fb1ba23506b R08: ffffffffffffffff R09: 0000000000000000
[ 1714.280089][T19600] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 1714.288053][T19600] R13: 00007fb1ba426038 R14: 00007fb1ba425fa0 R15: 00007ffef0cc7ea8
[ 1714.296025][T19600]  </TASK>
[ 1715.202697][T19333] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1715.303247][T19333] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1715.401389][T19333] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1715.494582][T19333] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1715.761235][T19333] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1715.835779][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1715.877170][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1715.913583][T19333] 8021q: adding VLAN 0 to HW filter on device team0
[ 1715.986292][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1716.016001][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1716.058715][ T4982] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1716.065817][ T4982] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1716.183332][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1716.247425][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1716.323718][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1716.392424][ T4982] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1716.399559][ T4982] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1716.507724][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1716.568665][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1716.623135][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1716.685344][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1716.720566][T19637] kvm: emulating exchange as write
[ 1716.731029][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1716.761739][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1716.795718][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1716.836532][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1716.897452][T19333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1716.952205][T19333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1716.974137][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1717.001625][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1717.094090][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1717.148507][T19643] Config c1/1 of g1 needs at least one function.
[ 1717.179332][T19640] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1717.200445][T19643] udc dummy_udc.0: failed to start g1: -22
[ 1717.218924][T19640] kvm: pic: single mode not supported
[ 1717.218979][T19640] kvm: pic: non byte read
[ 1717.248348][T19643] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1717.285475][T19640] kvm: pic: level sensitive irq not supported
[ 1717.285522][T19640] kvm: pic: non byte read
[ 1717.322499][T19643] UDC core: g1: couldn't find an available UDC or it's busy
[ 1717.349009][T19640] kvm: pic: level sensitive irq not supported
[ 1717.349057][T19640] kvm: pic: non byte read
[ 1717.407577][T19640] kvm: pic: level sensitive irq not supported
[ 1717.407680][T19640] kvm: pic: non byte read
[ 1717.510428][T19640] kvm: pic: level sensitive irq not supported
[ 1717.510523][T19640] kvm: pic: non byte read
[ 1717.522137][T19648] Config c1/1 of g1 needs at least one function.
[ 1717.581950][T19648] udc dummy_udc.0: failed to start g1: -22
[ 1717.611985][T19640] kvm: pic: level sensitive irq not supported
[ 1717.612296][T19640] kvm: pic: non byte read
[ 1717.631545][T19648] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1717.692530][T19648] UDC core: g1: couldn't find an available UDC or it's busy
[ 1717.707220][T19640] kvm: pic: level sensitive irq not supported
[ 1717.707269][T19640] kvm: pic: non byte read
[ 1717.928091][T15430] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1717.960146][T19658] Config c1/1 of g1 needs at least one function.
[ 1717.991901][T19659] loop5: detected capacity change from 0 to 512
[ 1718.009901][T19658] udc dummy_udc.0: failed to start g1: -22
[ 1718.044280][T19658] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1718.072824][T19659] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1718.122471][T19659] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1718.148502][T19658] UDC core: g1: couldn't find an available UDC or it's busy
[ 1718.157466][T15430] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 1718.194688][T19659] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[ 1718.215186][T15430] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 1718.283171][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1718.299242][T15430] usb 7-1: New USB device found, idVendor=2040, idProduct=c600, bcdDevice= 1.00
[ 1718.319487][T19659] EXT4-fs (loop5): 1 truncate cleaned up
[ 1718.325133][T19659] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 1718.337761][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1718.392031][T15430] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1718.407560][T19333] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1718.432005][T19669] Config c1/1 of g1 needs at least one function.
[ 1718.496701][T15430] usb 7-1: Product: syz
[ 1718.526303][T19669] udc dummy_udc.0: failed to start g1: -22
[ 1718.539819][T15430] usb 7-1: Manufacturer: syz
[ 1718.557717][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1718.586699][T15430] usb 7-1: SerialNumber: syz
[ 1718.596315][T19669] configfs-gadget.g1: probe of gadget.0 failed with error -22
[ 1718.612498][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1718.640621][T19652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1718.671857][T19669] UDC core: g1: couldn't find an available UDC or it's busy
[ 1718.693216][T19652] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1718.763882][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1718.785428][T15430] usb 7-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[ 1718.837750][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1718.856976][T15430] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1718.900410][T19333] device veth0_vlan entered promiscuous mode
[ 1718.911434][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1718.925534][T15430] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[ 1718.954381][T17184] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1718.986520][T15430] usb 7-1: media controller created
[ 1719.010363][T19333] device veth1_vlan entered promiscuous mode
[ 1719.027517][ T4871] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0)
[ 1719.084255][T19673] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN
[ 1719.095977][T19673] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[ 1719.104377][T19673] CPU: 0 PID: 19673 Comm: syz.6.3585 Not tainted syzkaller #0
[ 1719.111808][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1719.121838][T19673] RIP: 0010:__mutex_lock+0xe8/0xae0
[ 1719.127043][T19673] Code: c0 40 61 c1 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d a5 dc 85 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ec f2 97 f7 48 39 5b 60 0f 85 d9 08 00 00
[ 1719.146656][T19673] RSP: 0018:ffffc9000492f3c0 EFLAGS: 00010202
[ 1719.152705][T19673] RAX: 0000000000000019 RBX: 0000000000000068 RCX: ffffffff96c16103
[ 1719.160657][T19673] RDX: ffff88801b30a23c RSI: ffffffff8a8c2a20 RDI: 00000000000000c8
[ 1719.168606][T19673] RBP: ffffc9000492f518 R08: ffffffff86e23892 R09: 1ffff1100ede3b2b
[ 1719.176556][T19673] R10: dffffc0000000000 R11: ffffed100ede3b2c R12: dffffc0000000000
[ 1719.184507][T19673] R13: 0000000000000000 R14: ffff888076f1d958 R15: 0000000000000000
[ 1719.192467][T19673] FS:  00007fb1bb10d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1719.201380][T19673] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1719.207958][T19673] CR2: 000000110c31eda2 CR3: 000000001efe7000 CR4: 00000000003506f0
[ 1719.215916][T19673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1719.223871][T19673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1719.231824][T19673] Call Trace:
[ 1719.235089][T19673]  <TASK>
[ 1719.238006][T19673]  ? dvb_usbv2_generic_write+0x22/0x50
[ 1719.243452][T19673]  ? mutex_lock_nested+0x10/0x10
[ 1719.248368][T19673]  ? mutex_lock_nested+0x10/0x10
[ 1719.253285][T19673]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1719.259420][T19673]  ? rcu_is_watching+0x11/0xa0
[ 1719.264164][T19673]  ? trace_contention_end+0x5f/0x170
[ 1719.269428][T19673]  dvb_usbv2_generic_write+0x22/0x50
[ 1719.274696][T19673]  mxl111sf_ctrl_msg+0x15e/0x2c0
[ 1719.279613][T19673]  mxl111sf_write_reg+0xa6/0x180
[ 1719.284532][T19673]  ? mxl111sf_read_reg+0x260/0x260
[ 1719.289624][T19673]  ? look_up_lock_class+0x75/0x140
[ 1719.294716][T19673]  ? register_lock_class+0xc0/0x870
[ 1719.299897][T19673]  mxl111sf_i2c_xfer+0x460/0x5030
[ 1719.304904][T19673]  ? __lock_acquire+0x1465/0x7c40
[ 1719.309915][T19673]  ? mxl111sf_idac_config+0x1d0/0x1d0
[ 1719.315269][T19673]  ? register_lock_class+0xc0/0x870
[ 1719.320451][T19673]  ? verify_lock_unused+0x140/0x140
[ 1719.325632][T19673]  ? is_dynamic_key+0x260/0x260
[ 1719.330465][T19673]  ? unwind_next_frame+0x1719/0x1fd0
[ 1719.335732][T19673]  ? mark_lock+0x94/0x320
[ 1719.340042][T19673]  ? __lock_acquire+0x1465/0x7c40
[ 1719.345048][T19673]  ? mark_lock+0x94/0x320
[ 1719.349356][T19673]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 1719.355315][T19673]  ? __lock_acquire+0x7c40/0x7c40
[ 1719.360316][T19673]  ? lock_chain_count+0x20/0x20
[ 1719.365155][T19673]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[ 1719.371030][T19673]  ? lockdep_hardirqs_on+0x94/0x140
[ 1719.376239][T19673]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1719.382122][T19673]  ? _raw_spin_unlock+0x40/0x40
[ 1719.386950][T19673]  ? try_to_take_rt_mutex+0x7fb/0xaa0
[ 1719.392301][T19673]  ? rt_mutex_slowlock+0x391/0x740
[ 1719.397392][T19673]  ? mxl111sf_idac_config+0x1d0/0x1d0
[ 1719.402746][T19673]  __i2c_transfer+0x88d/0x2290
[ 1719.407492][T19673]  ? i2c_cmd+0x110/0x110
[ 1719.411746][T19673]  ? __might_fault+0xa6/0x120
[ 1719.416399][T19673]  ? i2c_transfer+0x117/0x3a0
[ 1719.421056][T19673]  i2c_transfer+0x25d/0x3a0
[ 1719.425548][T19673]  ? __i2c_transfer+0x2290/0x2290
[ 1719.430552][T19673]  ? __might_fault+0xc2/0x120
[ 1719.435208][T19673]  ? __might_fault+0xa6/0x120
[ 1719.439865][T19673]  ? _copy_from_user+0x10b/0x170
[ 1719.444781][T19673]  i2cdev_ioctl_rdwr+0x3dc/0x6c0
[ 1719.449699][T19673]  i2cdev_ioctl+0x610/0x7b0
[ 1719.454195][T19673]  ? i2cdev_write+0x120/0x120
[ 1719.458860][T19673]  ? bpf_lsm_file_ioctl+0x5/0x10
[ 1719.463779][T19673]  ? security_file_ioctl+0x7c/0xa0
[ 1719.468868][T19673]  ? i2cdev_write+0x120/0x120
[ 1719.473523][T19673]  __se_sys_ioctl+0xfa/0x170
[ 1719.478094][T19673]  do_syscall_64+0x4c/0xa0
[ 1719.482487][T19673]  ? clear_bhb_loop+0x60/0xb0
[ 1719.487138][T19673]  ? clear_bhb_loop+0x60/0xb0
[ 1719.491807][T19673]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1719.497685][T19673] RIP: 0033:0x7fb1ba19e159
[ 1719.502079][T19673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1719.521673][T19673] RSP: 002b:00007fb1bb10d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1719.530074][T19673] RAX: ffffffffffffffda RBX: 00007fb1ba426090 RCX: 00007fb1ba19e159
[ 1719.538022][T19673] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 0000000000000005
[ 1719.545968][T19673] RBP: 00007fb1ba23506b R08: 0000000000000000 R09: 0000000000000000
[ 1719.553913][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1719.561861][T19673] R13: 00007fb1ba426128 R14: 00007fb1ba426090 R15: 00007ffef0cc7ea8
[ 1719.569814][T19673]  </TASK>
[ 1719.572825][T19673] Modules linked in:
[ 1719.587208][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1719.596661][T15430] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1719.619554][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1719.632357][ T4871] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1)
[ 1719.668754][T15430] usb 7-1: selecting invalid altsetting 1
[ 1719.688734][T19333] device veth0_macvtap entered promiscuous mode
[ 1719.703801][T15430] set interface failed
[ 1719.723343][ T4871] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2)
[ 1719.747837][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1719.773918][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1719.804011][T19333] device veth1_macvtap entered promiscuous mode
[ 1719.818819][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1719.880086][ T4982] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1719.890862][ T8958] EXT4-fs (loop5): unmounting filesystem.
[ 1720.148619][ T8958] device syz_tun left promiscuous mode
[ 1720.154533][ T8958] bridge0: port 3(syz_tun) entered disabled state
[ 1720.168540][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1720.188164][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.209571][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1720.232485][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.250989][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1720.261746][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.272712][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1720.286031][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.297387][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1720.307929][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.319624][T19333] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1720.330328][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1720.350930][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1720.376952][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1720.397964][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.425156][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1720.448309][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.473457][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1720.500856][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.524071][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1720.547793][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.568736][T19333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1720.591007][T19333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1720.614264][T19333] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1720.636060][T17184] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.667594][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1720.687973][ T4973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1720.710088][T19333] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.729631][T19333] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.748759][T19333] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.770510][T19333] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1720.793710][T17184] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1720.846921][T17184] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1721.007499][T19673] ---[ end trace 0000000000000000 ]---
[ 1721.012972][T19673] RIP: 0010:__mutex_lock+0xe8/0xae0
[ 1721.028884][T19673] Code: c0 40 61 c1 96 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 56 09 00 00 83 3d a5 dc 85 0c 00 75 21 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ec f2 97 f7 48 39 5b 60 0f 85 d9 08 00 00
[ 1721.071604][T19673] RSP: 0018:ffffc9000492f3c0 EFLAGS: 00010202
[ 1721.077684][T19673] RAX: 0000000000000019 RBX: 0000000000000068 RCX: ffffffff96c16103
[ 1721.103739][T19673] RDX: ffff88801b30a23c RSI: ffffffff8a8c2a20 RDI: 00000000000000c8
[ 1721.116064][T19673] RBP: ffffc9000492f518 R08: ffffffff86e23892 R09: 1ffff1100ede3b2b
[ 1721.124052][T19673] R10: dffffc0000000000 R11: ffffed100ede3b2c R12: dffffc0000000000
[ 1721.158364][T19673] R13: 0000000000000000 R14: ffff888076f1d958 R15: 0000000000000000
[ 1721.166344][T19673] FS:  00007fb1bb10d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1721.190429][T19673] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1721.197019][T19673] CR2: 000055558d6a94e8 CR3: 000000001efe7000 CR4: 00000000003506f0
[ 1721.223408][T19673] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1721.231388][T19673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1721.266687][T19673] Kernel panic - not syncing: Fatal exception
[ 1721.272816][T19673] Kernel Offset: disabled
[ 1721.277135][T19673] Rebooting in 86400 seconds..