last executing test programs:

10m31.227991406s ago: executing program 32 (id=206):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a31000000000500010007ffe2001c0007800c00018008000140f60000020c0002"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)

5m34.533151783s ago: executing program 3 (id=1835):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x10000)
sendfile(r0, r1, 0x0, 0x7ffff004)

5m34.410752931s ago: executing program 3 (id=1837):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='mnt/ttyUSB0\x00', &(0x7f0000000080)={0x8440, 0x40, 0x6}, 0x18)
close_range(r0, 0xffffffffffffffff, 0x0)

5m32.756818093s ago: executing program 3 (id=1853):
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00')
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x20000000)
writev(r0, &(0x7f00000003c0), 0x100000000000022d)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = gettid()
prlimit64(r3, 0x6, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0)
read(r4, &(0x7f0000000940)=""/1040, 0x410)
bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
pipe(&(0x7f0000000000))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, 0x0, 0x40)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = accept4(r2, 0x0, 0x0, 0x800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f0000000140))

5m31.308278684s ago: executing program 3 (id=1857):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b9, &(0x7f0000001040)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

5m30.75520118s ago: executing program 3 (id=1863):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f00000000c0)={"1870df9c7327e2d48c2e3a3f3cacf3b6", 0x0, 0x0, {0x2, 0x4b}, {0x0, 0xff}, 0x3ff, [0x4, 0x1, 0x2, 0x399455da, 0xfffffffffffffff7, 0x7, 0xfffffffffffffffa, 0x20, 0xffffffff, 0x9, 0x7, 0xfffffffffffffbff, 0x2, 0x40, 0x2280, 0x2]})
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x80005, @mcast1}, 0x1c)

5m19.963435239s ago: executing program 3 (id=1885):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fadvise64(0xffffffffffffffff, 0xdb, 0x2, 0x5)

5m19.440311717s ago: executing program 33 (id=1885):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fadvise64(0xffffffffffffffff, 0xdb, 0x2, 0x5)

4m15.054433037s ago: executing program 4 (id=2156):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read(r0, &(0x7f0000000080)=""/108, 0x6c)

4m13.812597843s ago: executing program 4 (id=2161):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'macsec0\x00'})
sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
setns(r1, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='3', 0x4e)

4m12.84717473s ago: executing program 4 (id=2164):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r2, 0x25513}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

4m12.40715579s ago: executing program 4 (id=2165):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0x1, 0x4b9, &(0x7f0000001040)="$eJzs20tslNUbx/HfM+90mA79/x0uFjAEmmhiBYFesEBqYrjYaMJFC9VIvKTSKVZ6IZ2ilICwVHcuWLp068KVcWtIXBoXBmNYmCAbN7MSd5jzznuboXRmbDtD6fdD4LyX5x3OOc+8c86ZvCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdefVwT6+1uhYAAKCZTp4e7ul/aPxPt6YyAACgKc6w/gcAAFhLTJ5+l2nPhZKd8PfLsscnpi9dHjk2tPBl7SZTSp4f7/5me/v69780cOBgWC5+/XLbplOnzxzuOjozdXG2UCwWxrpGpifOzYwV6n6FpV5fbZffAV1TFy6NjY8Xu/r29lecvpy/t259Z35w4L2jmTB25NjQ0OlETLrtP//vD3nUDD8jTy/I9PH339pJSSktvS9qvHdWWrvfiF1+I0aODfkNmZwYnZ5zJy0VRKUq+yQT9lETcrEkKcnVyzLLs2Zrk6cfZDqyr2SnJHlhP+z2vxiuqz6tkHZLV0ndWgU5e4ytk6cPZLq1L683gn7185+Rrra6clhx6eD+n7GSvel/Hrj7yX1sHn+r6/Xp8ZlErKWCO2q1jw/N9Jh/NmXl6ZR/x5dsWDuTp9a1rlZolnZ5mpIp89Un/rxC/rz0qcEDO3YeSs4wttR4HRe7N7i56hmT24Kpg6Xcn+VvF+qTNU9/ynT/t6y/3x2OAdKNB4td+EdTqoeVZp4mZfrnWsmsal3qJdb3kdU+9q9s/duzR2cuzs9OnP9obsHzuezhD4tzs6PnFj5dXrt6ySO11rHVUo0tyXJWXvF9/mkpui5YA/yvvBfX5pur8Xuhu6oMJd8/9WzXvYptYB7l6mTm6a5M4+9vLY8zyjXcN2uBy/+QTMXSzxZmOsh/8AxYIv8vx/2Xtcoy4uf2/+XvtcK5xLazmx91fCXy7+rk8v+OTEf+3hp8p1HOv1cV6+I6ZXr35vYgLpVxceEDcPnyK45PTBZ6XOwDmTb+FMbKj80FsZvi2F4XW5Tpi1uVseuD2M1xbJ+LvS3TnV8Xjn06ju13sfMuX3e6wtici90RxHbGsXvPzUyO1epWl/8+md6+/pqFbX5k/hP3/42qMvJQzhffXq785xPHbgR5PRvkP10j/1/KNP/X9rDdft+Hb6sN/r9x/t1c+bublbHhgnJjHNtbb7NazeV/g0z3XrkdtTloW7AbZyiZ/2fSlWXUry3K/4bEsXxQr0yDfbEWFeevXBidnCzMssEGG2xEG63+ZEIzuPF/2I3qA56F85hg/O8o78UzpvufxeP/YFUZadH4vzFxbDCYtbSlpezc1MW2LVK2OH9lz8TU6PnC+cJ0//6Bnr5D+3v6D7ZlwsldvFV33z0JXP53y3Ttx1+idUzl/G/h+X+uqoy0KP+bkm2qmNfU3RVrkst/h0wDd29H683F5v/h+r/72coyuv9alP/NiWP5oF4dDfYFAAAAAAAAAAAAAAAAAKwmOfP0nEyXh1+08DdE9Tz/N1ZVRpb/+a/yD5NrPP/VmTg21qTfNTTU0QAAAAAAAAAAAE2SkqevZXpeJbvuDnRIJ5Ilnmj/BgAA//9+z0gL")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040))
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0)
rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

4m11.482599892s ago: executing program 4 (id=2168):
userfaultfd(0x80001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'Capture Volum'], 0x4000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40002}, 0x8000)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="031a1800b50000000100fefffeeffeff"], 0xc8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005"], 0x74}}, 0x4000004)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r6 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil)
ioctl(r7, 0x4048aec9, &(0x7f0000000200)="0100")

4m10.835179166s ago: executing program 4 (id=2169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01d9f24b0f2c79000f20c035000000200f22c0c744240006000000c744240204000000c7442406000000000f011424430f14ecc7442400ea913fe9c744240207000000c7442406000000000f011c24c481c971e5023e42f42e3e470f01c50fc7b0c60a9a60", 0x6b}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m10.237459447s ago: executing program 34 (id=2169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01d9f24b0f2c79000f20c035000000200f22c0c744240006000000c744240204000000c7442406000000000f011424430f14ecc7442400ea913fe9c744240207000000c7442406000000000f011c24c481c971e5023e42f42e3e470f01c50fc7b0c60a9a60", 0x6b}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4m8.005302509s ago: executing program 0 (id=2184):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0)

4m5.994957687s ago: executing program 0 (id=2190):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
setns(r1, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='3', 0x4e)

4m4.967845106s ago: executing program 0 (id=2193):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x3, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x0, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004)

4m3.677214432s ago: executing program 0 (id=2197):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f0000002880)={[{@fat=@fmask={'fmask', 0x3d, 0x7a}}, {@shortname_mixed}, {@fat=@nfs}, {@utf8no}, {@uni_xlate}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {}, {@uni_xlate}, {@numtail}, {@numtail}, {@numtail}]}, 0x0, 0x2bd, &(0x7f0000000580)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

4m1.223560114s ago: executing program 0 (id=2202):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0xb, 0x6, @random="c28cee6af9b7"}, 0x14)
recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0)
setns(r1, 0x24020000)
r7 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
setns(r8, 0x24020000)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r9, &(0x7f0000000000)='3', 0x4e)

3m56.564577937s ago: executing program 0 (id=2219):
r0 = epoll_create1(0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r2, 0xe)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

3m55.861637862s ago: executing program 35 (id=2219):
r0 = epoll_create1(0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r2, 0xe)
close_range(r0, 0xffffffffffffffff, 0x100000000000000)

3m0.465941947s ago: executing program 5 (id=2448):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d3acc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141ea4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb69c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff1da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033ea1d00000000000086ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aedd4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x2, 0x4, 0x5, '\x00', 0x1})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"})

2m58.694755068s ago: executing program 5 (id=2451):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}], 0x1, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090)
write(r0, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd706", 0x2fc)

2m58.457024525s ago: executing program 5 (id=2455):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
eventfd(0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)

2m58.160507243s ago: executing program 5 (id=2459):
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',codepage=macgreek,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=iso8859-6,part=0x00000000000007ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00841578607e49813aae559d0db033577f34eac65bbe0bd0971db44c7b9c0d0c797f5f0cd1a23e27bc0be1e6e06a809aa32a194bfcd4c7a48d10305364e28e2ca063d53e3e9b8b7a228d0876d5afb3a8668090ccfd9100572df108d0e33b2b82dcfa202665ed7116403c0b65da65463dc29440f9b84fe67838eddc553645de9ea2de0c3cda7b0016a307959d3f08"], 0x1, 0x32e, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e3, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2m57.295803076s ago: executing program 5 (id=2465):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xe9)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x4de602690fff9cbc, 0x0)
getuid()
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0)

2m56.651147703s ago: executing program 5 (id=2470):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, r2, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r3=>0x0)
syz_ublk_setup_queues(r0, r3, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0)

2m56.061504864s ago: executing program 36 (id=2470):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, 0x0)
syz_ublk_add_dev(r0, 0x0, r2, 0x0, &(0x7f0000000340)={0x2e, 0x40, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x2, 0x62c, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x6}}}, &(0x7f00000003c0)=<r3=>0x0)
syz_ublk_setup_queues(r0, r3, &(0x7f0000000200)={0x0, 0x8427, 0x0, 0xfffffffe, 0x34d}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c8b, 0x20, 0x3, 0x98}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x8000, 0x43, 0xffffffff}}], 0x1, 0x0, 0x0)

2m26.871689247s ago: executing program 8 (id=2619):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

2m25.690509894s ago: executing program 8 (id=2623):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffffc, 0x60000)
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m24.991938988s ago: executing program 8 (id=2626):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b)
write(r1, &(0x7f0000000000)='7', 0x1)
pread64(r0, 0x0, 0x0, 0x100)
write(r0, &(0x7f0000000400)='1', 0x1)

2m24.307701112s ago: executing program 8 (id=2628):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24)
listen(r0, 0x1)
sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "0200000000000000"}, {0x10, 0x110, 0xe}], 0x28}, 0x0)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0)
nanosleep(&(0x7f0000000500)={0x0, 0x10000000}, 0x0)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000b00), 0x1000}], 0x1}, 0x0)
nanosleep(&(0x7f0000000c00)={0x0, 0x10000000}, 0x0)

2m23.420831782s ago: executing program 8 (id=2634):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x99)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x4)

2m22.429091897s ago: executing program 8 (id=2641):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0xc, 0x0, 0x0}, 0x0)
write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8)

2m7.328452807s ago: executing program 37 (id=2641):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
syz_usb_control_io$uac2(r0, &(0x7f0000000240)={0xc, 0x0, 0x0}, 0x0)
write$char_usb(r2, &(0x7f00000007c0)="0bcde56ca9a62cbf", 0x8)

9.85112248s ago: executing program 7 (id=3191):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r4 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r4, &(0x7f00000005c0)="bad386dd", 0x4, 0x840, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14)

9.825869786s ago: executing program 2 (id=3192):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc41, 0x3)
fallocate(r1, 0x0, 0x2000, 0x18003)

9.530133115s ago: executing program 2 (id=3193):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r3], 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000800)="000000000000000002", 0x0}, 0x50)

8.246684393s ago: executing program 7 (id=3194):
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x74e95f77fb8a5e87, 0x39, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0)
r2 = dup(r1)
readv(r2, &(0x7f00000000c0)=[{0x0, 0x20000}, {&(0x7f0000000240)=""/30, 0x1e}], 0x2)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)

8.245746488s ago: executing program 2 (id=3204):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, '\x00', [{0xd, 0xd, 0x7f, 0xffff, 0x6, 0x5}, {0x9, 0xe2, 0x1, 0xff3, 0x81, 0x78}]})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

6.897143657s ago: executing program 9 (id=3195):
syz_open_dev$sg(&(0x7f0000000180), 0xaa, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x303, 0x38}, "1e00", "799298c9493f4cbdfb5868d41337f3a2", "8df6c736", "ae7ebf0500e38175"}, 0x28)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1)

6.89681321s ago: executing program 2 (id=3196):
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f00000002c0)='./file1\x00', 0x200802, &(0x7f0000000280)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000000)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xffc}}, {@abort}]}, 0x2, 0x786, &(0x7f0000000f80)="$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")
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './proc\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000)

6.669003132s ago: executing program 7 (id=3198):
arch_prctl$ARCH_GET_CPUID(0x1011)
syz_mount_image$squashfs(&(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1c0, &(0x7f00000009c0)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLMHp8EeewyFJ00GH6YiPR9aMxhLOSVKaYmxsmQpnz3yQX8emcYTh0QrmjXWeeY11halT89LykqqyqrLmTZy4cWZjZ2Pjyol1UWl+qxhbUlw2NXUyMjlsURPYzGyoPslGe8K79lUPkxxYe1ig3mG+ZLywSOrUiqqZE74ozWY0/M5wh+c/FEhYNJhwwhQmpzQwpF0MY+RgYGBo23JmTggzP5vbAoWW5BNMoUc5ls6UsDggVHXyp6XmW4dEtxnbnjqwneE5fJxnTUGfoNFxCQanhYL/ZUA+TWhoKNNYy7TUdsGXIo2/El6rjZ0yGNztmZbCApSlAUSuhPJkwXoSkld46GhqGqUkJzRskkhIciswVGbYuodztUADA1K0qTAwMGxnhMUtBFyDMUbBKBgFo2AUjIJRMApGwSgYBaNgFIwIAAgAAP//wQuXFg==")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0x0, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0xfc, 0xa, {0x7, 0x25, 0x1, 0x0, 0xe, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0xbf, 0x8, {0x7, 0x25, 0x1, 0x8, 0x5, 0x6}}}}}}}}]}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

6.219343805s ago: executing program 9 (id=3201):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0)
mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x591)

6.14759505s ago: executing program 6 (id=3202):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002800)='./file1\x00', 0x1000040, &(0x7f0000000280), 0x11, 0x5a3, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0xffeffff8, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmmsg$unix(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x27}, 0x1, 0x0, 0x0, 0x7, 0x27, 0xa}, 0xfffffe86)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
fallocate(r0, 0x0, 0xfff, 0x9)
write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)

6.133611278s ago: executing program 1 (id=3203):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, 0x0)

6.020712637s ago: executing program 9 (id=3205):
r0 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0x3, 0x7}}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000)
write(r1, &(0x7f0000000000)='3', 0x4e)
r2 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000780)={0x3, 0x0, @c}, 0x29, r0)
keyctl$read(0xb, r2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0)

5.887442188s ago: executing program 1 (id=3206):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x25, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

5.267285235s ago: executing program 9 (id=3207):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
shutdown(r0, 0x0)

5.074313654s ago: executing program 6 (id=3208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

4.999134387s ago: executing program 1 (id=3209):
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000180)={0x69, 0x9, 0x2, {0x569142f7, 0x0, 0xfb, 0xb, 0x3, 0x5, 0x7, 0x1ff, 0x80000001}}, 0x43)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="b5300305c9"], 0x6)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88)

4.980615547s ago: executing program 2 (id=3210):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8})
mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x7000, 0x3, &(0x7f0000ff8000/0x7000)=nil)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200a00000086b22b0b6f9fdb5447107e46945b847c41f24c78c7df275c2756596b561b5b8edc83e9d1c7c6d6b7e595f6b86583f2bb65f7c9974dff8e92d301a13944b406638b1ac0664456ec63637f95475a02ab4ce17e087453ecac3c672cb7068eabce779421086889c805e79193576226f24140328c9db30b31ff1b389d2ba92bdda5f63f4c682c2c32ec6a80048abecb15b54ab21ec04db5237b0ccec3ebff7829617d96d1eb437a4df5b45c0063cb1ff8e8edd33c6876fc5f50a41304000000459b717429eecfb909b7f736c8fd3ec987ce7622dffe997638ff90d6c0b5e82ce4e4728a6735ec37c342b8d7f9eadcf3ffa9ad068e2c4b79ad22032d3fcb1158fc4afbea3d0a625901841dd34e9d8ab2dddb3cf013c578ad85a7c82d61be53056fbee7d2e6c5eef9f3fa1b3d6f09fbd8862988f4ff8ee1107ad4f1d3895f035c5a12ce3f837120a3913e459a2a46bc375ea01c7a8bd280071d9c34d76cdcb86ac3b7310548235ecb662e2b3bd038a91c5ed9f9ce20b0d24cdb6eb4c883ab9afa7c49adeab4901333aed1e0e47d4688fd528fb0de02adb37c7888685646cd02acb1852c120f3ab46d1d724c757490b036ae0d4943df81a57a33b7eaaa0bb9bbe5edc9baef95df87a730604ac875e4a9676db00c381d536e86ffef8fa14f0d81ec5c500770d6a7f758acc7de2de589d5cefd544eef6636226a1f86856c8132b8b71c8cde604d1829a15309d1180700ebbc438f6f"], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2)
read(r8, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xf8}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000100), 0x2)
splice(r4, 0x0, r7, 0x0, 0x39000, 0x0)
r9 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1)
splice(r6, 0x0, r9, 0x0, 0x2, 0x5)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e)
pipe2(&(0x7f0000000040), 0x0)

4.839003708s ago: executing program 9 (id=3211):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8})
mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x7000, 0x3, &(0x7f0000ff8000/0x7000)=nil)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r8, 0x0, 0x0)
read(r8, &(0x7f00000001c0)=""/93, 0x5d)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xf8}, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000100), 0x2)
splice(r4, 0x0, r7, 0x0, 0x39000, 0x0)
r9 = memfd_create(&(0x7f0000000180)='<Z2>J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1)
splice(r6, 0x0, r9, 0x0, 0x2, 0x5)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[], 0xfffffe3e)
pipe2(&(0x7f0000000040), 0x0)

4.09283135s ago: executing program 7 (id=3212):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

3.48001471s ago: executing program 6 (id=3213):
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000000))
r0 = socket(0xa, 0x3, 0x87)
sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$vcsa(0x0, 0xff, 0x801)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x408d2}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000000)='3', 0x4e)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='attr\x00')
getdents64(r2, &(0x7f0000000340)=""/111, 0x6f)

2.431418959s ago: executing program 1 (id=3214):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

1.900469095s ago: executing program 6 (id=3215):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x401, 0x0, 0x10003, 0x4, 0xff, "190000000000e400000800"})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x8000654})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.874390794s ago: executing program 7 (id=3216):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
ppoll(&(0x7f0000000100)=[{r2, 0x3328}, {r1, 0x4236}], 0x2, 0x0, 0x0, 0x0)
unshare(0x22020400)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.448693037s ago: executing program 1 (id=3217):
socket$inet6_udp(0xa, 0x2, 0x0)
setns(0xc9, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f)
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r2, &(0x7f0000000100), 0x12)
listen(r2, 0x1)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88)
accept(r2, 0x0, 0x0)

1.270213519s ago: executing program 6 (id=3218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff)
mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1fa)
mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0)
rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00')
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)

680.510707ms ago: executing program 9 (id=3219):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f47000)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34808521, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8)

663.925015ms ago: executing program 1 (id=3220):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb1000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000bb3000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f20000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x0, &(0x7f0000000140)}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0xba, &(0x7f0000000040)={0x0, 0xb7a3, 0xc000, 0x0, 0xc7})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffd, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf1, 0x0, 0x0}, 0x94)
pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

383.937895ms ago: executing program 2 (id=3221):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d00, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x7)
r1 = syz_open_pts(r0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r2 = io_uring_setup(0x1191, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xcb})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd)

135.333882ms ago: executing program 7 (id=3222):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x1, 0xfff1}, {0x0, 0x2}}}, 0xfc5d}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x40)

0s ago: executing program 6 (id=3223):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffdfe)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/61, 0x54000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
unshare(0x28040680)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

040:0264, interface 0, class 0)
[  709.709529][ T5716] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  710.427400][ T5716] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  710.643950][   T54] Bluetooth: hci5: command tx timeout
[  710.954362][ T5716] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  710.954422][ T5716] em28xx 7-1:0.0: board has no eeprom
[  711.037263][T15142] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.037322][T15142] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.037431][T15142] bridge_slave_0: entered allmulticast mode
[  711.038389][T15142] bridge_slave_0: entered promiscuous mode
[  711.096386][   T44] bridge_slave_1: left allmulticast mode
[  711.096407][   T44] bridge_slave_1: left promiscuous mode
[  711.096556][   T44] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.147838][   T44] bridge_slave_0: left allmulticast mode
[  711.147856][   T44] bridge_slave_0: left promiscuous mode
[  711.148004][   T44] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.247742][ T5716] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  711.247826][ T5716] em28xx 7-1:0.0: dvb set to bulk mode.
[  711.287421][ T5716] usb 7-1: USB disconnect, device number 14
[  711.288361][ T5716] em28xx 7-1:0.0: Disconnecting em28xx
[  711.339558][   T10] em28xx 7-1:0.0: Binding DVB extension
[  711.761058][   T10] em28xx 7-1:0.0: Registering input extension
[  711.777332][ T5716] em28xx 7-1:0.0: Closing input extension
[  712.235798][T12282] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  712.394744][T12282] usb 8-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  712.398021][T12282] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  712.398038][T12282] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  712.398060][T12282] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.600687][T12282] idmouse 8-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  712.644151][T12282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.811193][   T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  712.830027][   T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  712.853868][   T44] bond0 (unregistering): Released all slaves
[  712.894725][T15142] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.894783][T15142] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.894891][T15142] bridge_slave_1: entered allmulticast mode
[  712.899669][T15142] bridge_slave_1: entered promiscuous mode
[  713.456410][ T5716] em28xx: Freeing device
[  714.235361][ T5723] usb 8-1: USB disconnect, device number 7
[  714.295899][ T5723] idmouse 8-1:1.0: disconnected
[  714.462796][T15365] loop9: detected capacity change from 0 to 164
[  714.463374][T15365] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ.ÃNÛBþO'
[  714.783112][T15142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  714.811745][T15142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  715.292542][T15142] team0: Port device team_slave_0 added
[  715.344732][   T44] hsr_slave_0: left promiscuous mode
[  715.363498][   T44] hsr_slave_1: left promiscuous mode
[  715.364053][   T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  715.364065][   T44] batman_adv: batadv0: Removing interface: batadv_slave_0
[  715.493007][   T44] veth1_vlan: left promiscuous mode
[  715.493138][   T44] veth0_vlan: left promiscuous mode
[  715.819672][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2767'.
[  715.851760][T15397] l2tp_ppp: sess 2/0: no socket in recv
[  716.096807][T15406] xt_hashlimit: size too large, truncated to 1048576
[  716.297930][   T44] team0 (unregistering): Port device team_slave_1 removed
[  716.340242][   T44] team0 (unregistering): Port device team_slave_0 removed
[  716.703980][T15142] team0: Port device team_slave_1 added
[  716.735613][T15417] kvm [15416]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc1) = 0x60000000800
[  716.735703][T15417] kvm [15416]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0xc2) = 0x60000000800
[  716.784947][T15417] kvm [15416]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x11e) = 0x60000001800
[  716.810856][T15417] kvm [15416]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x186) = 0x60000002000
[  716.810925][T15417] kvm [15416]: vcpu0, guest rIP: 0xdf Unhandled WRMSR(0x187) = 0x60000004800
[  716.889714][T15392] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.892883][T15392] bridge0: port 1(bridge_slave_0) entered disabled state
[  717.062109][T15392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  717.068449][T15392] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  717.513963][   T51] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.514854][   T51] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.514877][   T51] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.514897][   T51] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  717.564570][T15142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  717.564581][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  717.564595][T15142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  717.618709][T15142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  717.618722][T15142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  717.618737][T15142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  717.846812][T15142] hsr_slave_0: entered promiscuous mode
[  717.863844][T15142] hsr_slave_1: entered promiscuous mode
[  717.864224][T15142] debugfs: 'hsr0' already exists in 'hsr'
[  717.864236][T15142] Cannot create hsr debugfs directory
[  718.474953][T15447] loop2: detected capacity change from 0 to 128
[  718.590940][T15447] ufs: ufstype=nextstep is supported read-only
[  718.840964][T15438] device-mapper: ioctl: device has been removed from the dev hash table.
[  719.344059][T15459] loop7: detected capacity change from 0 to 128
[  719.860409][T15463] xt_hashlimit: size too large, truncated to 1048576
[  719.932022][T15467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.012213][T15486] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in;
[  721.012213][T15486]    program syz.6.2784 not setting count and/or reply_len properly
[  722.372911][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.432593][ T5716] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  722.586004][ T5716] usb 10-1: Using ep0 maxpacket: 32
[  722.586935][ T5716] usb 10-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40
[  722.589029][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.589047][ T5716] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  722.589069][ T5716] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.590590][ T5716] usb 10-1: config 0 descriptor??
[  722.632361][ T5716] hub 10-1:0.0: USB hub found
[  722.841275][ T5716] hub 10-1:0.0: 1 port detected
[  723.484344][ T5716] hub 10-1:0.0: activate --> -90
[  723.981954][ T5716] usb 10-1: USB disconnect, device number 6
[  724.021254][ T4303] usb 10-1: Failed to suspend device, error -71
[  724.292858][ T2254] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  724.443587][ T2254] usb 7-1: Using ep0 maxpacket: 8
[  724.446394][ T2254] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  724.449330][ T2254] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[  724.449347][ T2254] usb 7-1: config 2 has no interface number 0
[  724.449370][ T2254] usb 7-1: config 2 interface 31 has no altsetting 0
[  724.495618][ T2254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.495634][ T2254] usb 7-1: Product: syz
[  724.495642][ T2254] usb 7-1: Manufacturer: syz
[  724.495650][ T2254] usb 7-1: SerialNumber: syz
[  724.860880][T15562] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2798'.
[  725.034632][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2798'.
[  725.412652][T15577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  725.450859][ T2254] ch9200 7-1:2.31: probe with driver ch9200 failed with error -71
[  725.478485][ T2254] usb 7-1: USB disconnect, device number 15
[  725.562809][T15142] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  725.571010][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  725.614029][T15142] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  725.635725][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  725.649995][T15142] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  725.671639][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  725.684357][T15142] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  725.717220][T15142] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  726.107517][T15142] 8021q: adding VLAN 0 to HW filter on device bond0
[  726.173218][T15142] 8021q: adding VLAN 0 to HW filter on device team0
[  726.225465][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.225539][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  726.249930][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.249990][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  726.277686][T15604] loop6: detected capacity change from 0 to 1024
[  726.278226][T15604] EXT4-fs: Ignoring removed orlov option
[  726.278257][T15604] EXT4-fs: Invalid want_extra_isize 2
[  726.624084][T15613] loop9: detected capacity change from 0 to 32768
[  726.665545][T15610] netlink: 'syz.7.2807': attribute type 1 has an invalid length.
[  726.665561][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2807'.
[  726.828468][T15613] JBD2: Ignoring recovery information on journal
[  726.864403][T15613] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  727.373366][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2809'.
[  727.601646][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.601749][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.603174][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.639079][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.639174][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.054201][T14202] ocfs2: Unmounting device (7,9) on (node local)
[  728.477935][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.478048][T15637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.478728][T15636] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.533321][ T5716] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  728.682051][ T5716] usb 3-1: Using ep0 maxpacket: 16
[  728.682564][ T5716] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  728.683344][ T5716] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.683369][ T5716] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  728.698403][ T5716] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  728.698426][ T5716] usb 3-1: SerialNumber: syz
[  728.734181][ T5716] cdc_acm 3-1:1.0: skipping garbage
[  728.765913][T15142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  728.954623][T15142] veth0_vlan: entered promiscuous mode
[  728.997315][T15142] veth1_vlan: entered promiscuous mode
[  729.040507][T15653] loop2: detected capacity change from 0 to 1024
[  729.089788][T15653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  729.089850][T15653] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  729.141702][T15678] FAULT_INJECTION: forcing a failure.
[  729.141702][T15678] name failslab, interval 1, probability 0, space 0, times 0
[  729.141724][T15678] CPU: 0 UID: 0 PID: 15678 Comm: syz.7.2820 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  729.141741][T15678] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  729.141746][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  729.141753][T15678] Call Trace:
[  729.141758][T15678]  <TASK>
[  729.141764][T15678]  dump_stack_lvl+0xe8/0x150
[  729.141783][T15678]  should_fail_ex+0x3eb/0x540
[  729.141798][T15678]  should_failslab+0xa8/0x100
[  729.141811][T15678]  __kmalloc_noprof+0xf9/0x710
[  729.141822][T15678]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  729.141833][T15678]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  729.141848][T15678]  __memcg_list_lru_alloc+0x1d9/0x760
[  729.141865][T15678]  ? xa_load+0x60/0x210
[  729.141876][T15678]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  729.141896][T15678]  __memcg_slab_post_alloc_hook+0x3b2/0xdb0
[  729.141909][T15678]  ? __memcg_slab_post_alloc_hook+0x1f1/0xdb0
[  729.141928][T15678]  kmem_cache_alloc_lru_noprof+0x34c/0x5f0
[  729.141939][T15678]  ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0
[  729.141949][T15678]  ? __d_alloc+0x37/0x7f0
[  729.141958][T15678]  ? __d_alloc+0x37/0x7f0
[  729.141971][T15678]  __d_alloc+0x37/0x7f0
[  729.141984][T15678]  d_make_root+0x41/0x80
[  729.141994][T15678]  bpf_fill_super+0x2fd/0xce0
[  729.142009][T15678]  ? __pfx_bpf_fill_super+0x10/0x10
[  729.142019][T15678]  ? lock_acquire+0x115/0x350
[  729.142034][T15678]  ? __pfx_bpf_fill_super+0x10/0x10
[  729.142045][T15678]  get_tree_nodev+0xbb/0x150
[  729.142057][T15678]  vfs_get_tree+0x92/0x2a0
[  729.142069][T15678]  vfs_cmd_create+0xa2/0x200
[  729.142081][T15678]  __se_sys_fsconfig+0x6b9/0x810
[  729.142095][T15678]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  729.142107][T15678]  ? rcu_is_watching+0x16/0xb0
[  729.142121][T15678]  ? __x64_sys_fsconfig+0x20/0xc0
[  729.142133][T15678]  do_syscall_64+0x166/0x520
[  729.142143][T15678]  ? trace_irq_disable+0x3b/0x140
[  729.142152][T15678]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.142163][T15678]  ? clear_bhb_loop+0x70/0xc0
[  729.142175][T15678]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.142186][T15678] RIP: 0033:0x7fa15659e159
[  729.142197][T15678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.142206][T15678] RSP: 002b:00007fa1547f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  729.142220][T15678] RAX: ffffffffffffffda RBX: 00007fa156825fa0 RCX: 00007fa15659e159
[  729.142228][T15678] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004
[  729.142234][T15678] RBP: 00007fa15663506b R08: 0000000000000000 R09: 0000000000000000
[  729.142241][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  729.142247][T15678] R13: 00007fa156826038 R14: 00007fa156825fa0 R15: 00007fff64a82728
[  729.142264][T15678]  </TASK>
[  729.221298][T15142] veth0_macvtap: entered promiscuous mode
[  729.501697][T15142] veth1_macvtap: entered promiscuous mode
[  729.585285][T15142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  729.616834][T15142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  729.836450][  T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.836626][  T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  729.837461][  T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  729.873046][ T4303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.056214][  T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.056229][  T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.150947][T15681] EXT4-fs error (device loop2): ext4_free_blocks:6719: comm syz.2.2817: Freeing blocks not in datazone - block = 0, count = 16
[  730.212945][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.212960][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.446027][ T5716] usb 3-1: USB disconnect, device number 53
[  730.679545][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.679656][T15703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.003273][ T5716] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  731.049837][ T1163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm kworker/u8:9: bg 0: block 112: padding at end of block bitmap is not set
[  731.100423][ T1163] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  731.100445][ T1163] EXT4-fs (loop2): This should not happen!! Data will be lost
[  731.100445][ T1163] 
[  731.100453][ T1163] EXT4-fs (loop2): Total free blocks count 0
[  731.100461][ T1163] EXT4-fs (loop2): Free/Dirty block details
[  731.100468][ T1163] EXT4-fs (loop2): free_blocks=16
[  731.100476][ T1163] EXT4-fs (loop2): dirty_blocks=80
[  731.100483][ T1163] EXT4-fs (loop2): Block reservation details
[  731.100489][ T1163] EXT4-fs (loop2): i_reserved_data_blocks=5
[  731.182373][ T5716] usb 7-1: Using ep0 maxpacket: 8
[  731.182829][ T5716] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  731.185141][ T5716] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[  731.185156][ T5716] usb 7-1: config 2 has no interface number 0
[  731.185178][ T5716] usb 7-1: config 2 interface 31 has no altsetting 0
[  731.186828][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.186842][ T5716] usb 7-1: Product: syz
[  731.186850][ T5716] usb 7-1: Manufacturer: syz
[  731.186857][ T5716] usb 7-1: SerialNumber: syz
[  731.189050][  T150] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 64 with error 28
[  731.191824][ T5625] EXT4-fs warning (device loop2): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[  731.222431][ T5723] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  731.382098][ T5723] usb 8-1: Using ep0 maxpacket: 8
[  731.383364][ T5723] usb 8-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  731.408531][ T5723] usb 8-1: config 2 has an invalid interface number: 31 but max is 0
[  731.408549][ T5723] usb 8-1: config 2 has no interface number 0
[  731.408572][ T5723] usb 8-1: config 2 interface 31 has no altsetting 0
[  731.437316][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.437332][ T5723] usb 8-1: Product: syz
[  731.437339][ T5723] usb 8-1: Manufacturer: syz
[  731.437347][ T5723] usb 8-1: SerialNumber: syz
[  732.001550][T15735] FAULT_INJECTION: forcing a failure.
[  732.001550][T15735] name failslab, interval 1, probability 0, space 0, times 0
[  732.001572][T15735] CPU: 0 UID: 0 PID: 15735 Comm: syz.1.2833 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  732.001590][T15735] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  732.001595][T15735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  732.001602][T15735] Call Trace:
[  732.001607][T15735]  <TASK>
[  732.001612][T15735]  dump_stack_lvl+0xe8/0x150
[  732.001631][T15735]  should_fail_ex+0x3eb/0x540
[  732.001646][T15735]  should_failslab+0xa8/0x100
[  732.001659][T15735]  __kvmalloc_node_noprof+0x171/0x820
[  732.001674][T15735]  ? open_substream+0x283/0x780
[  732.001752][T15735]  ? open_substream+0x283/0x780
[  732.001767][T15735]  open_substream+0x283/0x780
[  732.001780][T15735]  rawmidi_open_priv+0xc4/0x630
[  732.001795][T15735]  snd_rawmidi_open+0x43b/0xb40
[  732.001812][T15735]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  732.001823][T15735]  ? __pfx_default_wake_function+0x10/0x10
[  732.001839][T15735]  ? snd_open+0x31b/0x3c0
[  732.001885][T15735]  chrdev_open+0x4d9/0x600
[  732.001898][T15735]  ? __pfx_chrdev_open+0x10/0x10
[  732.001910][T15735]  ? devcgroup_check_permission+0x31/0x8f0
[  732.001924][T15735]  ? __pfx_chrdev_open+0x10/0x10
[  732.001935][T15735]  do_dentry_open+0x80e/0x1360
[  732.001951][T15735]  vfs_open_consume+0x4a/0x350
[  732.001961][T15735]  ? path_openat+0x148a/0x1da0
[  732.001974][T15735]  path_openat+0x14a6/0x1da0
[  732.001995][T15735]  do_file_open+0x23e/0x4a0
[  732.002008][T15735]  ? __pfx_do_file_open+0x10/0x10
[  732.002031][T15735]  ? _raw_spin_unlock+0x28/0x50
[  732.002041][T15735]  ? alloc_fd+0x6af/0x760
[  732.002057][T15735]  do_sys_openat2+0x115/0x200
[  732.002069][T15735]  ? __pfx_do_sys_openat2+0x10/0x10
[  732.002083][T15735]  ? do_user_addr_fault+0xd3f/0x1480
[  732.002098][T15735]  __x64_sys_openat+0x138/0x170
[  732.002112][T15735]  do_syscall_64+0x166/0x520
[  732.002121][T15735]  ? trace_irq_disable+0x3b/0x140
[  732.002130][T15735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.002142][T15735]  ? clear_bhb_loop+0x70/0xc0
[  732.002153][T15735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.002163][T15735] RIP: 0033:0x7f298c75e98e
[  732.002175][T15735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  732.002184][T15735] RSP: 002b:00007f298d692b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  732.002203][T15735] RAX: ffffffffffffffda RBX: 00007f298d6936c0 RCX: 00007f298c75e98e
[  732.002211][T15735] RDX: 0000000000141102 RSI: 00007f298d692c00 RDI: ffffffffffffff9c
[  732.002219][T15735] RBP: 00007f298d692c00 R08: 0000000000000000 R09: 0000000000000000
[  732.002226][T15735] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  732.002234][T15735] R13: 00007f298ca26038 R14: 00007f298ca25fa0 R15: 00007ffebcce6998
[  732.002250][T15735]  </TASK>
[  732.424291][ T5275] 8021q: adding VLAN 0 to HW filter on device eth13
[  732.577737][ T5716] ch9200 7-1:2.31: probe with driver ch9200 failed with error -71
[  732.600421][ T5716] usb 7-1: USB disconnect, device number 16
[  732.886714][ T5723] ch9200 8-1:2.31: probe with driver ch9200 failed with error -32
[  733.095783][T15754] kvm: requested 181028 ns i8254 timer period limited to 200000 ns
[  734.024584][ T5723] usb 8-1: USB disconnect, device number 8
[  734.223419][T15790] loop2: detected capacity change from 0 to 8
[  734.759548][ T5275] 8021q: adding VLAN 0 to HW filter on device eth14
[  736.178249][T15828] FAULT_INJECTION: forcing a failure.
[  736.178249][T15828] name fail_futex, interval 1, probability 0, space 0, times 0
[  736.178273][T15828] CPU: 0 UID: 0 PID: 15828 Comm: syz.9.2855 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  736.178290][T15828] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  736.178295][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  736.178302][T15828] Call Trace:
[  736.178307][T15828]  <TASK>
[  736.178313][T15828]  dump_stack_lvl+0xe8/0x150
[  736.178331][T15828]  should_fail_ex+0x3eb/0x540
[  736.178347][T15828]  get_futex_key+0x1b4/0x1580
[  736.178358][T15828]  ? __lock_acquire+0x747/0x2de0
[  736.178375][T15828]  ? __pfx_get_futex_key+0x10/0x10
[  736.178390][T15828]  ? update_se+0x90/0x1080
[  736.178402][T15828]  futex_wait_setup+0x4a/0x590
[  736.178416][T15828]  ? __futex_wait+0xdb/0x470
[  736.178428][T15828]  __futex_wait+0x175/0x470
[  736.178438][T15828]  ? update_protect_slice+0x45/0x320
[  736.178452][T15828]  ? __pfx___futex_wait+0x10/0x10
[  736.178465][T15828]  ? __pfx_futex_wake_mark+0x10/0x10
[  736.178478][T15828]  ? try_to_wake_up+0x8ce/0x14e0
[  736.178495][T15828]  futex_wait+0x121/0x390
[  736.178507][T15828]  ? __pfx_futex_wait+0x10/0x10
[  736.178522][T15828]  ? __pfx_packet_setsockopt+0x10/0x10
[  736.178538][T15828]  do_futex+0x3e7/0x4e0
[  736.178551][T15828]  ? __pfx_do_futex+0x10/0x10
[  736.178565][T15828]  __se_sys_futex+0x3a8/0x450
[  736.178579][T15828]  ? __pfx___se_sys_futex+0x10/0x10
[  736.178593][T15828]  ? __x64_sys_futex+0x21/0xf0
[  736.178605][T15828]  do_syscall_64+0x166/0x520
[  736.178618][T15828]  ? trace_irq_disable+0x3b/0x140
[  736.178628][T15828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.178639][T15828]  ? clear_bhb_loop+0x70/0xc0
[  736.178650][T15828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  736.178661][T15828] RIP: 0033:0x7ff88bd9e159
[  736.178673][T15828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.178682][T15828] RSP: 002b:00007ff88cbac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  736.178695][T15828] RAX: ffffffffffffffda RBX: 00007ff88c025fa8 RCX: 00007ff88bd9e159
[  736.178703][T15828] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff88c025fa8
[  736.178710][T15828] RBP: 00007ff88c025fa0 R08: 0000000000000000 R09: 0000000000000000
[  736.178717][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.178723][T15828] R13: 00007ff88c026038 R14: 00007ffec9f70e20 R15: 00007ffec9f70f08
[  736.178739][T15828]  </TASK>
[  736.495728][T15802] loop2: detected capacity change from 0 to 32768
[  736.598431][T15802] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  736.964560][  T989] net_ratelimit: 36 callbacks suppressed
[  736.964574][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.966221][ T1163] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.972714][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.973173][  T989] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.198863][T15802] overlayfs: upper fs does not support tmpfile.
[  737.202737][T15802] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  737.227053][T15802] overlayfs: upper fs missing required features.
[  737.376588][ T5275] 8021q: adding VLAN 0 to HW filter on device eth15
[  737.878921][ T5625] ocfs2: Unmounting device (7,2) on (node local)
[  738.351122][T15865] FAULT_INJECTION: forcing a failure.
[  738.351122][T15865] name failslab, interval 1, probability 0, space 0, times 0
[  738.351147][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.9.2865 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  738.351164][T15865] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  738.351169][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  738.351176][T15865] Call Trace:
[  738.351181][T15865]  <TASK>
[  738.351186][T15865]  dump_stack_lvl+0xe8/0x150
[  738.351205][T15865]  should_fail_ex+0x3eb/0x540
[  738.351220][T15865]  should_failslab+0xa8/0x100
[  738.351234][T15865]  __kvmalloc_node_noprof+0x171/0x820
[  738.351246][T15865]  ? rcu_do_enqueue+0x62e/0x870
[  738.351257][T15865]  ? nf_hook_entries_grow+0x287/0x740
[  738.351268][T15865]  ? nf_hook_entries_grow+0x287/0x740
[  738.351280][T15865]  ? __pfx___mutex_lock+0x10/0x10
[  738.351294][T15865]  nf_hook_entries_grow+0x287/0x740
[  738.351313][T15865]  __nf_register_net_hook+0x26f/0x940
[  738.351330][T15865]  nf_register_net_hook+0xb2/0x190
[  738.351343][T15865]  nf_register_net_hooks+0x44/0x1b0
[  738.351356][T15865]  nf_defrag_ipv4_enable+0x87/0x120
[  738.351371][T15865]  nf_ct_netns_do_get+0x18c/0x5c0
[  738.351449][T15865]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[  738.351463][T15865]  ? __mutex_trylock_common+0x15f/0x270
[  738.351475][T15865]  ? nf_ct_netns_get+0xe9/0x320
[  738.351487][T15865]  xt_ct_tg_check+0xf9/0xa00
[  738.351523][T15865]  ? rcu_is_watching+0x16/0xb0
[  738.351534][T15865]  ? trace_contention_end+0x3d/0x140
[  738.351546][T15865]  ? __pfx_xt_ct_tg_check+0x10/0x10
[  738.351562][T15865]  xt_check_target+0x619/0xca0
[  738.351579][T15865]  ? __pfx_xt_check_target+0x10/0x10
[  738.351591][T15865]  ? pcpu_alloc_noprof+0x1036/0x1900
[  738.351608][T15865]  ? xt_find_target+0x20f/0x260
[  738.351632][T15865]  translate_table+0x1789/0x1f80
[  738.351655][T15865]  ? __pfx_translate_table+0x10/0x10
[  738.351666][T15865]  ? lock_acquire+0x115/0x350
[  738.351685][T15865]  ? __might_fault+0xaf/0x130
[  738.351698][T15865]  ? _copy_from_user+0x94/0xb0
[  738.351713][T15865]  do_ipt_set_ctl+0xa53/0xe20
[  738.351728][T15865]  ? rcu_is_watching+0x16/0xb0
[  738.351739][T15865]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  738.351759][T15865]  ? __mutex_unlock_slowpath+0x731/0x900
[  738.351773][T15865]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  738.351792][T15865]  nf_setsockopt+0x26f/0x290
[  738.351803][T15865]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  738.351816][T15865]  do_sock_setsockopt+0x17c/0x1b0
[  738.351830][T15865]  __x64_sys_setsockopt+0x13d/0x1b0
[  738.351843][T15865]  do_syscall_64+0x166/0x520
[  738.351853][T15865]  ? trace_irq_disable+0x3b/0x140
[  738.351866][T15865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.351877][T15865]  ? clear_bhb_loop+0x70/0xc0
[  738.351888][T15865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.351899][T15865] RIP: 0033:0x7ff88bd9e159
[  738.351911][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.351920][T15865] RSP: 002b:00007ff88cbac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  738.351933][T15865] RAX: ffffffffffffffda RBX: 00007ff88c025fa0 RCX: 00007ff88bd9e159
[  738.351941][T15865] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000007
[  738.351949][T15865] RBP: 00007ff88be3506b R08: 00000000000002a8 R09: 0000000000000000
[  738.351956][T15865] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  738.351962][T15865] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  738.351980][T15865]  </TASK>
[  738.867899][T15849] loop6: detected capacity change from 0 to 32768
[  738.911669][T15849] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  739.329377][T15849] XFS (loop6): Ending clean mount
[  740.252863][   T33] audit: type=1800 audit(1790902849.512:47): pid=15849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2860" name="file1" dev="loop6" ino=9286 res=0 errno=-22
[  740.553783][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.553934][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.554047][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.559857][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.559973][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.563796][T15902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.741985][ T5723] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  740.808744][ T5275] 8021q: adding VLAN 0 to HW filter on device eth16
[  740.898414][ T5723] usb 7-1: New USB device found: idVendor=1020, idProduct=0006, bcdDevice=0.00
[  740.913889][ T5723] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  740.913908][ T5723] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  740.913931][ T5723] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.950090][ T5723] usb 7-1: config 0 descriptor??
[  741.379680][T15849] XFS (loop6): Metadata CRC error detected at xfs_agfl_read_verify+0x139/0x200, xfs_agfl block 0x3 
[  741.379768][T15849] XFS (loop6): Unmount and run xfs_repair
[  741.379776][T15849] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  741.379790][T15849] 00000000: 58 41 46 4c 00 00 00 00 bf dc 47 fc 10 d8 4e ed  XAFL......G...N.
[  741.379799][T15849] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  741.379807][T15849] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  741.379815][T15849] 00000030: 00 00 00 09 00 00 00 0a 00 07 00 00 00 00 00 00  ................
[  741.379822][T15849] 00000040: 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  741.379830][T15849] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  741.379837][T15849] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  741.379845][T15849] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  741.379854][T15849] XFS (loop6): metadata I/O error in "xfs_alloc_read_agfl+0x22c/0x440" at daddr 0x3 len 1 error 74
[  741.678269][T15849] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  741.678406][T15849] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  741.809491][T15920] loop9: detected capacity change from 0 to 4096
[  741.852738][ T5716] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  741.894488][ T5723] usbhid 7-1:0.0: can't add hid device: -71
[  741.894553][ T5723] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  741.925982][ T5723] usb 7-1: USB disconnect, device number 17
[  741.940695][T15920] ntfs3(loop9): Failed to load $Extend (-22).
[  741.940711][T15920] ntfs3(loop9): Failed to initialize $Extend.
[  742.007120][ T5716] usb 8-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[  742.023358][ T5716] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  742.023376][ T5716] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  742.023399][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.075526][ T5716] spcp8x5 8-1:1.0: SPCP8x5 converter detected
[  742.097900][ T5716] usb 8-1: SPCP8x5 converter now attached to ttyUSB0
[  742.620721][T11910] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  743.801546][T15952] syz_tun: entered allmulticast mode
[  743.863931][T15952] pimreg: entered allmulticast mode
[  743.912609][T15954] SPCP8x5 ttyUSB0: failed to set control lines: -110
[  744.150673][T15950] syz_tun: left allmulticast mode
[  744.219301][T15921] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  744.244836][T15965] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  744.458194][   T33] audit: type=1326 audit(1790902853.712:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15964 comm="syz.1.2881" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f298c79e159 code=0x0
[  745.220776][T15994] loop2: detected capacity change from 0 to 512
[  745.245858][T15994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  745.279519][T15994] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.2889: bad orphan inode 15
[  745.279541][T15994] loop2: lost filesystem error report for type 5 error -117
[  745.289991][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  745.290006][    C0] EXT4-fs (loop2): initial error at time 1790902854: ext4_orphan_get:1429
[  745.290019][    C0] EXT4-fs (loop2): last error at time 1790902854: ext4_orphan_get:1429
[  745.331375][T15994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  745.445952][T15921] SPCP8x5 ttyUSB0: failed to set control lines: -32
[  745.467634][ T5716] usb 8-1: USB disconnect, device number 9
[  745.501291][ T5716] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  745.501668][ T5716] spcp8x5 8-1:1.0: device disconnected
[  745.526821][T15994] EXT4-fs error (device loop2): __ext4_new_inode:1083: comm syz.2.2889: reserved inode found cleared - inode=17
[  745.666257][ T5625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  745.666892][T16006] net_ratelimit: 21 callbacks suppressed
[  745.666903][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.667006][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.667129][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.720079][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.720172][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.720250][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.784475][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.784624][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.784737][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.820608][T16006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.904743][ T5723] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  745.937652][T16011] loop9: detected capacity change from 0 to 164
[  746.036847][T16011] isofs_fill_super: root inode is not a directory. Corrupted media?
[  746.053902][ T5723] usb 2-1: New USB device found: idVendor=0525, idProduct=1080, bcdDevice=1.00
[  746.055564][T16015] loop7: detected capacity change from 0 to 128
[  746.056266][ T5723] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.100051][T16015] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  746.135496][T16011] FAULT_INJECTION: forcing a failure.
[  746.135496][T16011] name failslab, interval 1, probability 0, space 0, times 0
[  746.135518][T16011] CPU: 0 UID: 0 PID: 16011 Comm: syz.9.2894 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  746.135539][T16011] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  746.135544][T16011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  746.135552][T16011] Call Trace:
[  746.135557][T16011]  <TASK>
[  746.135562][T16011]  dump_stack_lvl+0xe8/0x150
[  746.135582][T16011]  should_fail_ex+0x3eb/0x540
[  746.135599][T16011]  should_failslab+0xa8/0x100
[  746.135613][T16011]  ? vm_area_dup+0x28/0x760
[  746.135624][T16011]  kmem_cache_alloc_noprof+0x9c/0x600
[  746.135637][T16011]  ? vm_area_dup+0x28/0x760
[  746.135651][T16011]  vm_area_dup+0x28/0x760
[  746.135662][T16011]  ? __split_vma+0x1b7/0xa90
[  746.135673][T16011]  __split_vma+0x1d7/0xa90
[  746.135688][T16011]  ? __pfx___split_vma+0x10/0x10
[  746.135706][T16011]  ? can_vma_merge_left+0x15f/0x510
[  746.135720][T16011]  vma_modify+0x7e6/0x1c40
[  746.135738][T16011]  vma_modify_flags+0x2a4/0x3c0
[  746.135751][T16011]  ? __pfx_vma_modify_flags+0x10/0x10
[  746.135761][T16011]  ? futex_unqueue+0x22/0x240
[  746.135787][T16011]  mprotect_fixup+0x539/0xda0
[  746.135803][T16011]  ? __pfx_mprotect_fixup+0x10/0x10
[  746.135813][T16011]  ? mas_next_slot+0xc91/0xd70
[  746.135834][T16011]  ? apparmor_file_mprotect+0x1ec/0x3a0
[  746.135845][T16011]  ? security_file_mprotect+0x1a/0x290
[  746.135860][T16011]  do_mprotect_pkey+0x8e7/0xd10
[  746.135877][T16011]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  746.135902][T16011]  ? rcu_is_watching+0x16/0xb0
[  746.135918][T16011]  __x64_sys_mprotect+0x80/0x90
[  746.135930][T16011]  do_syscall_64+0x166/0x520
[  746.135940][T16011]  ? trace_irq_disable+0x3b/0x140
[  746.135950][T16011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.135962][T16011]  ? clear_bhb_loop+0x70/0xc0
[  746.135974][T16011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.135984][T16011] RIP: 0033:0x7ff88bd9e159
[  746.135996][T16011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  746.136007][T16011] RSP: 002b:00007ff88cbac028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  746.136021][T16011] RAX: ffffffffffffffda RBX: 00007ff88c025fa0 RCX: 00007ff88bd9e159
[  746.136029][T16011] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000
[  746.136045][T16011] RBP: 00007ff88be3506b R08: 0000000000000000 R09: 0000000000000000
[  746.136053][T16011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  746.136060][T16011] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  746.136078][T16011]  </TASK>
[  746.468319][T16015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  746.650247][ T5723] net1080 2-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, ea:62:25:b7:8a:7f
[  746.869469][T16022] Bluetooth: hci2: Frame reassembly failed (-90)
[  747.065568][   T61] Bluetooth: hci2: Frame reassembly failed (-84)
[  747.206281][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  747.617177][T16003] net1080 2-1:1.0 usb0: port B, peer disconnected
[  747.830620][T13445] usb 2-1: USB disconnect, device number 6
[  747.832226][T13445] net1080 2-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT
[  748.040099][T16031] kvm: pic: non byte write
[  748.048685][T16031] kvm: pic: non byte write
[  748.048813][T16031] kvm: pic: non byte write
[  748.048965][T16031] kvm: pic: non byte write
[  748.068446][T16031] kvm: pic: non byte write
[  748.068603][T16031] kvm: pic: non byte write
[  748.542131][T13445] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  748.696519][T13445] usb 3-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[  748.698579][T13445] usb 3-1: config 1 has an invalid interface number: 3 but max is 0
[  748.698595][T13445] usb 3-1: config 1 has no interface number 0
[  748.700261][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.700274][T13445] usb 3-1: Product: syz
[  748.700282][T13445] usb 3-1: Manufacturer: syz
[  748.700289][T13445] usb 3-1: SerialNumber: syz
[  748.782331][ T5716] usb 8-1: new low-speed USB device number 10 using dummy_hcd
[  748.799217][T13445] usb 3-1: 3:0 : does not exist
[  748.799232][T13445] usb 3-1: 3:0 : does not exist
[  748.947053][ T5716] usb 8-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  748.949794][ T5716] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  748.949811][ T5716] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  748.949821][ T5716] usb 8-1: config 0 has no interface number 0
[  748.949842][ T5716] usb 8-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  748.949866][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.951292][ T5716] usb 8-1: config 0 descriptor??
[  749.023686][ T5716] iowarrior 8-1:0.1: no interrupt-in endpoint found
[  749.122201][T11912] Bluetooth: hci2: command 0x1003 tx timeout
[  749.122280][   T54] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  749.337811][T13445] usb 8-1: USB disconnect, device number 10
[  749.547037][ T5716] usb 3-1: USB disconnect, device number 54
[  750.134676][ T5716] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  750.193971][T16075] loop6: detected capacity change from 0 to 32768
[  750.262934][T16096] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  750.263020][T16096] kvm: requested 48609 ns i8254 timer period limited to 200000 ns
[  750.288964][T16096] kvm: requested 170971 ns i8254 timer period limited to 200000 ns
[  750.289180][T16096] kvm: requested 40228 ns i8254 timer period limited to 200000 ns
[  750.289379][ T5716] usb 10-1: New USB device found: idVendor=0cf2, idProduct=6250, bcdDevice=0.00
[  750.319912][ T5716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.319930][ T5716] usb 10-1: Product: syz
[  750.319937][ T5716] usb 10-1: Manufacturer: syz
[  750.319945][ T5716] usb 10-1: SerialNumber: syz
[  750.346374][T16075] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  750.347061][T16096] kvm: requested 108952 ns i8254 timer period limited to 200000 ns
[  750.347411][T16096] kvm: requested 33523 ns i8254 timer period limited to 200000 ns
[  750.386212][ T5716] ums_eneub6250 10-1:1.0: USB Mass Storage device detected
[  750.447763][T16096] kvm: requested 187733 ns i8254 timer period limited to 200000 ns
[  750.447946][T16096] kvm: requested 95542 ns i8254 timer period limited to 200000 ns
[  750.448053][T16096] kvm: requested 77104 ns i8254 timer period limited to 200000 ns
[  750.448283][T16075] XFS (loop6): Ending clean mount
[  750.478519][T16096] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  750.538913][ T5716] scsi host1: usb-storage 10-1:1.0
[  751.180596][T16126] loop9: detected capacity change from 0 to 128
[  751.283437][ T5716] ums_eneub6250 10-1:1.0: probe with driver ums_eneub6250 failed with error 3
[  751.386157][T11910] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  752.189575][  T989] hid_parser_main: 222 callbacks suppressed
[  752.189591][  T989] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0
[  752.231084][  T989] hid-generic 0000:0000:0000.002A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  752.442089][T13445] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  752.452428][ T5716] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  752.592277][T13445] usb 8-1: Using ep0 maxpacket: 32
[  752.592801][T13445] usb 8-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  752.593689][T13445] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  752.595247][T13445] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  752.595262][T13445] usb 8-1: Product: syz
[  752.595270][T13445] usb 8-1: Manufacturer: syz
[  752.595278][T13445] usb 8-1: SerialNumber: syz
[  752.596926][T13445] usb 8-1: config 0 descriptor??
[  752.597648][T16149] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  752.598786][T13445] hub 8-1:0.0: bad descriptor, ignoring hub
[  752.598801][T13445] hub 8-1:0.0: probe with driver hub failed with error -5
[  752.635924][ T5716] usb 7-1: Using ep0 maxpacket: 32
[  752.645399][ T5716] usb 7-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  752.679083][ T5716] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  752.679100][ T5716] usb 7-1: config 0 has no interface number 0
[  752.679122][ T5716] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  752.679133][ T5716] usb 7-1: config 0 interface 1 has no altsetting 0
[  752.723088][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.723105][ T5716] usb 7-1: Product: syz
[  752.723114][ T5716] usb 7-1: Manufacturer: syz
[  752.723121][ T5716] usb 7-1: SerialNumber: syz
[  752.730616][ T5716] usb 7-1: config 0 descriptor??
[  752.922848][ T5723] usb 10-1: USB disconnect, device number 7
[  752.958193][T13445] usb 8-1: USB disconnect, device number 11
[  753.032877][ T5716] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  753.092699][ T5716] cx231xx 7-1:0.1: Failed to read PCB config
[  753.092767][ T5716] cx231xx 7-1:0.1: probe with driver cx231xx failed with error -71
[  753.120735][ T5716] usb 7-1: USB disconnect, device number 18
[  753.532841][ T5716] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  753.684722][ T5716] usb 7-1: Using ep0 maxpacket: 32
[  753.693819][ T5716] usb 7-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  753.700323][ T5716] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  753.700340][ T5716] usb 7-1: config 0 has no interface number 0
[  753.700362][ T5716] usb 7-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  753.700373][ T5716] usb 7-1: config 0 interface 1 has no altsetting 0
[  753.754399][ T5723] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  753.757233][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.757248][ T5716] usb 7-1: Product: syz
[  753.757256][ T5716] usb 7-1: Manufacturer: syz
[  753.757264][ T5716] usb 7-1: SerialNumber: syz
[  753.800902][ T5716] usb 7-1: config 0 descriptor??
[  753.944277][ T5723] usb 8-1: Using ep0 maxpacket: 32
[  753.945320][ T5723] usb 8-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  753.946425][ T5723] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  753.946451][ T5723] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  753.946466][ T5723] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  753.946495][ T5723] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  753.951193][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.951208][ T5723] usb 8-1: Product: syz
[  753.951216][ T5723] usb 8-1: Manufacturer: syz
[  753.951224][ T5723] usb 8-1: SerialNumber: syz
[  754.113204][ T5716] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  754.119899][    C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  754.151172][ T5716] cx231xx 7-1:0.1: bad scenario!!!!!
[  754.151172][ T5716] config_info=0
[  754.151250][ T5716] cx231xx 7-1:0.1: Failed to read PCB config
[  754.352066][T16191] gadgetfs: bound to dummy_udc driver
[  754.357256][  T989] usb 7-1: USB disconnect, device number 19
[  754.471380][ T5723] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/input/input112
[  754.592092][ T5716] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  754.592282][    C0] gadgetfs: connected
[  754.592375][ T5716] gadgetfs: disconnected
[  754.752149][    C0] gadgetfs: connected
[  754.775022][ T5716] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a0, bcdDevice=1.00
[  754.823706][ T5716] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  754.823733][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.913609][T16189] gadgetfs: suspended from state 3
[  755.913651][T16189] gadgetfs: disconnected
[  755.980985][ T5716] usb 1-1: can't set config #1, error -71
[  756.008522][ T5716] usb 1-1: USB disconnect, device number 55
[  756.079234][ T5723] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  756.079301][ T5723]  (id 0x00)
[  756.305360][ T5723] rc_core: IR keymap rc-imon-pad not found
[  756.305372][ T5723] Registered IR keymap rc-empty
[  756.305502][ T5723] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  756.305513][ T5723] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  756.425871][   T54] Bluetooth: hci3: unexpected event for opcode 0xfc1e
[  756.650889][ T5723] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0
[  756.715051][ T5723] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:155.0/rc/rc0/input113
[  756.743208][ T5723] imon 8-1:155.0: iMON device (15c2:ffdc) on usb<8:12> initialized
[  756.803187][ T5723] net_ratelimit: 27 callbacks suppressed
[  756.803198][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.351585][T16241] loop9: detected capacity change from 0 to 8
[  757.378887][T16241] SQUASHFS error: zlib decompression failed, data probably corrupt
[  757.378901][T16241] SQUASHFS error: Failed to read block 0x9b: -5
[  757.378918][T16241] SQUASHFS error: Unable to read metadata cache entry [99]
[  757.378925][T16241] SQUASHFS error: Unable to read inode 0x127
[  757.444444][ T5723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.557846][T16222] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  757.557898][T16222] Bluetooth: hci0: Failed to read MSFT supported features (-4)
[  757.682967][ T5723] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  757.831986][ T5723] usb 10-1: Using ep0 maxpacket: 16
[  757.837869][ T5723] usb 10-1: New USB device found: idVendor=041e, idProduct=3040, bcdDevice=0.40
[  757.852325][ T5723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.852356][ T5723] usb 10-1: Product: syz
[  757.852364][ T5723] usb 10-1: Manufacturer: syz
[  757.852372][ T5723] usb 10-1: SerialNumber: syz
[  757.905559][T16251] netlink: 'syz.6.2943': attribute type 4 has an invalid length.
[  758.736757][ T5723] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  758.751011][ T5723] usb 10-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  759.256091][ T5723] usb 10-1: USB disconnect, device number 8
[  759.417567][T12475] udevd[12475]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  759.563753][ T5716] usb 8-1: USB disconnect, device number 12
[  761.507150][   T33] audit: type=1800 audit(1790902870.762:49): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2951" name="mnt" dev="sda1" ino=2059 res=0 errno=-22
[  762.048680][T16338] md: could not open device unknown-block(0,0).
[  762.048816][T16338] md: md_import_device returned -6
[  762.162146][    C0] net_ratelimit: 49 callbacks suppressed
[  762.780795][T16373] FAULT_INJECTION: forcing a failure.
[  762.780795][T16373] name failslab, interval 1, probability 0, space 0, times 0
[  762.780818][T16373] CPU: 0 UID: 0 PID: 16373 Comm: syz.1.2967 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  762.780851][T16373] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  762.780860][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  762.780866][T16373] Call Trace:
[  762.780871][T16373]  <TASK>
[  762.780876][T16373]  dump_stack_lvl+0xe8/0x150
[  762.780895][T16373]  should_fail_ex+0x3eb/0x540
[  762.780910][T16373]  should_failslab+0xa8/0x100
[  762.780923][T16373]  __kmalloc_cache_noprof+0x9e/0x600
[  762.780935][T16373]  ? nf_tables_newchain+0x1098/0x28b0
[  762.780947][T16373]  ? nf_tables_newchain+0x1098/0x28b0
[  762.780970][T16373]  nf_tables_newchain+0x1098/0x28b0
[  762.780989][T16373]  ? __pfx_nf_tables_newchain+0x10/0x10
[  762.781017][T16373]  ? nfnl_pernet+0x23/0x240
[  762.781033][T16373]  ? __nla_parse+0x40/0x60
[  762.781047][T16373]  nfnetlink_rcv+0x1288/0x28c0
[  762.781075][T16373]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  762.781107][T16373]  ? skb_clone+0x246/0x3a0
[  762.781125][T16373]  ? netlink_deliver_tap+0x2e/0x1b0
[  762.781136][T16373]  ? netlink_deliver_tap+0x2e/0x1b0
[  762.781149][T16373]  netlink_unicast+0x7bd/0x940
[  762.781165][T16373]  netlink_sendmsg+0x7c3/0xae0
[  762.781178][T16373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  762.781193][T16373]  ? apparmor_socket_sendmsg+0x98/0x360
[  762.781205][T16373]  ? __pfx_netlink_sendmsg+0x10/0x10
[  762.781214][T16373]  sock_sendmsg_nosec+0x14e/0x190
[  762.781227][T16373]  ____sys_sendmsg+0x54e/0x850
[  762.781241][T16373]  ? __pfx_____sys_sendmsg+0x10/0x10
[  762.781256][T16373]  ? import_iovec+0x73/0xa0
[  762.781269][T16373]  ___sys_sendmsg+0x2a5/0x360
[  762.781281][T16373]  ? __lock_acquire+0x747/0x2de0
[  762.781295][T16373]  ? __pfx____sys_sendmsg+0x10/0x10
[  762.781307][T16373]  ? futex_wait+0x2a2/0x390
[  762.781332][T16373]  ? __fget_files+0x3a2/0x420
[  762.781343][T16373]  ? __fget_files+0x2a/0x420
[  762.781357][T16373]  __x64_sys_sendmsg+0x1b1/0x290
[  762.781369][T16373]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  762.781390][T16373]  do_syscall_64+0x166/0x520
[  762.781401][T16373]  ? trace_irq_disable+0x3b/0x140
[  762.781410][T16373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.781421][T16373]  ? clear_bhb_loop+0x70/0xc0
[  762.781433][T16373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  762.781444][T16373] RIP: 0033:0x7f298c79e159
[  762.781455][T16373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  762.781465][T16373] RSP: 002b:00007f298d693028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  762.781477][T16373] RAX: ffffffffffffffda RBX: 00007f298ca25fa0 RCX: 00007f298c79e159
[  762.781485][T16373] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[  762.781492][T16373] RBP: 00007f298c83506b R08: 0000000000000000 R09: 0000000000000000
[  762.781499][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  762.781505][T16373] R13: 00007f298ca26038 R14: 00007f298ca25fa0 R15: 00007ffebcce6998
[  762.781522][T16373]  </TASK>
[  763.165152][T16377] loop5: detected capacity change from 0 to 7
[  763.167790][T16377] Dev loop5: unable to read RDB block 7
[  763.167813][T16377]  loop5: AHDI p1 p3 p4
[  763.167825][T16377] loop5: partition table partially beyond EOD, truncated
[  763.170367][T16377] loop5: p1 size 100663296 extends beyond EOD, truncated
[  763.216898][T16377] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  763.461052][T16378] Dev loop5: unable to read RDB block 7
[  763.461070][T16378]  loop5: AHDI p1 p3 p4
[  763.461082][T16378] loop5: partition table partially beyond EOD, truncated
[  763.485637][T16378] loop5: p1 size 100663296 extends beyond EOD, truncated
[  763.499510][T16378] loop5: p3 size 4261412863 extends beyond EOD, truncated
[  763.887218][T13445] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  763.938977][T12475] udevd[12475]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  763.956307][T12548] udevd[12548]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  764.051051][T12548] udevd[12548]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  764.062300][T13445] usb 3-1: Using ep0 maxpacket: 8
[  764.069125][T13445] usb 3-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  764.085042][T12475] udevd[12475]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  764.098578][T13445] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  764.098591][T13445] usb 3-1: config 2 has no interface number 0
[  764.098616][T13445] usb 3-1: config 2 interface 31 has no altsetting 0
[  764.138654][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.138665][T13445] usb 3-1: Product: syz
[  764.138673][T13445] usb 3-1: Manufacturer: syz
[  764.138681][T13445] usb 3-1: SerialNumber: syz
[  764.721577][T16397] FAULT_INJECTION: forcing a failure.
[  764.721577][T16397] name failslab, interval 1, probability 0, space 0, times 0
[  764.721598][T16397] CPU: 0 UID: 0 PID: 16397 Comm: syz.9.2973 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  764.721615][T16397] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  764.721620][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  764.721626][T16397] Call Trace:
[  764.721631][T16397]  <TASK>
[  764.721637][T16397]  dump_stack_lvl+0xe8/0x150
[  764.721663][T16397]  should_fail_ex+0x3eb/0x540
[  764.721681][T16397]  should_failslab+0xa8/0x100
[  764.721694][T16397]  __kmalloc_cache_noprof+0x9e/0x600
[  764.721706][T16397]  ? snd_midi_event_new+0x74/0x1e0
[  764.721790][T16397]  ? snd_midi_event_new+0x74/0x1e0
[  764.721804][T16397]  snd_midi_event_new+0x74/0x1e0
[  764.721821][T16397]  snd_virmidi_input_open+0xe6/0x3a0
[  764.721835][T16397]  open_substream+0x3f5/0x780
[  764.721849][T16397]  rawmidi_open_priv+0x93/0x630
[  764.721863][T16397]  snd_rawmidi_open+0x43b/0xb40
[  764.721879][T16397]  ? __pfx_snd_rawmidi_open+0x10/0x10
[  764.721890][T16397]  ? __pfx_default_wake_function+0x10/0x10
[  764.721906][T16397]  ? snd_open+0x31b/0x3c0
[  764.721919][T16397]  chrdev_open+0x4d9/0x600
[  764.721932][T16397]  ? __pfx_chrdev_open+0x10/0x10
[  764.721943][T16397]  ? devcgroup_check_permission+0x31/0x8f0
[  764.721958][T16397]  ? __pfx_chrdev_open+0x10/0x10
[  764.721967][T16397]  do_dentry_open+0x80e/0x1360
[  764.721983][T16397]  vfs_open_consume+0x4a/0x350
[  764.721993][T16397]  ? path_openat+0x148a/0x1da0
[  764.722005][T16397]  path_openat+0x14a6/0x1da0
[  764.722025][T16397]  do_file_open+0x23e/0x4a0
[  764.722039][T16397]  ? __pfx_do_file_open+0x10/0x10
[  764.722061][T16397]  ? _raw_spin_unlock+0x28/0x50
[  764.722072][T16397]  ? alloc_fd+0x6af/0x760
[  764.722087][T16397]  do_sys_openat2+0x115/0x200
[  764.722099][T16397]  ? __pfx_do_sys_openat2+0x10/0x10
[  764.722113][T16397]  ? do_user_addr_fault+0xd3f/0x1480
[  764.722127][T16397]  __x64_sys_openat+0x138/0x170
[  764.722140][T16397]  do_syscall_64+0x166/0x520
[  764.722150][T16397]  ? trace_irq_disable+0x3b/0x140
[  764.722159][T16397]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.722171][T16397]  ? clear_bhb_loop+0x70/0xc0
[  764.722183][T16397]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  764.722195][T16397] RIP: 0033:0x7ff88bd5e98e
[  764.722206][T16397] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  764.722216][T16397] RSP: 002b:00007ff88cbabb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  764.722229][T16397] RAX: ffffffffffffffda RBX: 00007ff88cbac6c0 RCX: 00007ff88bd5e98e
[  764.722237][T16397] RDX: 0000000000141102 RSI: 00007ff88cbabc00 RDI: ffffffffffffff9c
[  764.722244][T16397] RBP: 00007ff88cbabc00 R08: 0000000000000000 R09: 0000000000000000
[  764.722251][T16397] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  764.722258][T16397] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  764.722276][T16397]  </TASK>
[  765.510658][T16404] loop6: detected capacity change from 0 to 32768
[  765.565078][T16404] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  765.587869][T13445] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71
[  765.626427][T13445] usb 3-1: USB disconnect, device number 55
[  765.664943][   T33] audit: type=1800 audit(1790902874.922:50): pid=16404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2974" name="file1" dev="loop6" ino=17058 res=0 errno=-22
[  765.942501][ T5716] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  766.092869][ T5716] usb 7-1: Using ep0 maxpacket: 16
[  766.094484][ T5716] usb 7-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  766.111019][ T5716] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  766.127920][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.127931][ T5716] usb 7-1: Product: syz
[  766.127939][ T5716] usb 7-1: Manufacturer: syz
[  766.127946][ T5716] usb 7-1: SerialNumber: syz
[  766.157293][ T5716] usb 7-1: config 0 descriptor??
[  766.254630][ T5716] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  766.429703][T13445] usb 7-1: USB disconnect, device number 20
[  766.570757][   T44] usb 7-1: Failed to submit usb control message: -19
[  766.570797][   T44] usb 7-1: unable to send the bmi data to the device: -19
[  766.570808][   T44] usb 7-1: unable to get target info from device
[  766.570829][   T44] usb 7-1: could not get target info (-19)
[  766.570840][   T44] usb 7-1: could not probe fw (-19)
[  767.018808][T16431] loop2: detected capacity change from 0 to 8
[  767.041563][T16431] SQUASHFS error: lzo decompression failed, data probably corrupt
[  767.041583][T16431] SQUASHFS error: Failed to read block 0x91: -5
[  767.041601][T16431] SQUASHFS error: Unable to read metadata cache entry [8f]
[  767.041608][T16431] SQUASHFS error: Unable to read inode 0x11f
[  767.201908][    C0] net_ratelimit: 81 callbacks suppressed
[  767.400512][T16441] netlink: 'syz.7.2984': attribute type 1 has an invalid length.
[  767.584066][T11910] ocfs2: Unmounting device (7,6) on (node local)
[  767.750450][T16441] 8021q: adding VLAN 0 to HW filter on device bond1
[  767.917966][T16454] loop9: detected capacity change from 0 to 1024
[  767.956743][T16443] bond1: (slave veth3): Enslaving as an active interface with a down link
[  767.973445][T16454] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended
[  768.001527][T16454] EXT4-fs (loop9): Errors on filesystem, clearing orphan list.
[  768.003553][T16454] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.067774][T16446] bond1: (slave dummy0): making interface the new active one
[  768.087809][T16446] dummy0: entered promiscuous mode
[  768.136580][T16446] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  768.385231][T16460] loop6: detected capacity change from 0 to 128
[  768.427697][T16460] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  768.431013][T16460] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  768.502363][T14202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.657057][T16460] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  768.837414][T16467] 8021q: adding VLAN 0 to HW filter on device bond1
[  768.924985][T16472] bond1: (slave bridge1): making interface the new active one
[  768.966333][T16472] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  769.125842][T16460] fscrypt: loop6: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13
[  769.223461][T11910] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  769.469851][T16464] loop7: detected capacity change from 0 to 32768
[  769.490150][T16464] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2988 (16464)
[  769.645811][T16464] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  769.645833][T16464] BTRFS info (device loop7): using sha256 checksum algorithm
[  769.878924][T16464] BTRFS info (device loop7): enabling ssd optimizations
[  769.878941][T16464] BTRFS info (device loop7): turning on async discard
[  769.878950][T16464] BTRFS info (device loop7): enabling free space tree
[  770.062259][ T5716] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  770.212292][ T5716] usb 10-1: Using ep0 maxpacket: 32
[  770.214713][ T5716] usb 10-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  770.215851][ T5716] usb 10-1: config 0 has an invalid interface number: 188 but max is 0
[  770.215863][ T5716] usb 10-1: config 0 has no interface number 0
[  770.215886][ T5716] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  770.218622][ T5716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.218633][ T5716] usb 10-1: Product: syz
[  770.218645][ T5716] usb 10-1: Manufacturer: syz
[  770.218652][ T5716] usb 10-1: SerialNumber: syz
[  770.297653][ T5716] usb 10-1: config 0 descriptor??
[  770.310601][T16506] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  770.461794][T12971] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  770.499169][T16518] netlink: 'syz.6.2999': attribute type 39 has an invalid length.
[  770.556988][T16506] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  770.870062][T16526] loop2: detected capacity change from 0 to 512
[  770.881830][T16526] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  771.189936][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3001'.
[  771.470749][T16538] usb usb8: usbfs: process 16538 (syz.2.3004) did not claim interface 0 before use
[  771.562686][T16538] pimreg: entered allmulticast mode
[  771.574880][T16542] pimreg: left allmulticast mode
[  772.402063][    C0] net_ratelimit: 99 callbacks suppressed
[  773.496494][ T5716] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  773.496508][ T5716] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  773.496660][ T5716] asix 10-1:0.188: probe with driver asix failed with error -71
[  773.537556][ T5716] usb 10-1: USB disconnect, device number 9
[  774.012909][   T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  774.092237][  T989] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  774.242019][  T989] usb 7-1: Using ep0 maxpacket: 8
[  774.247611][  T989] usb 7-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  774.257810][  T989] usb 7-1: config 2 has an invalid interface number: 31 but max is 0
[  774.257823][  T989] usb 7-1: config 2 has no interface number 0
[  774.257846][  T989] usb 7-1: config 2 interface 31 has no altsetting 0
[  774.259792][  T989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.259802][  T989] usb 7-1: Product: syz
[  774.259809][  T989] usb 7-1: Manufacturer: syz
[  774.259817][  T989] usb 7-1: SerialNumber: syz
[  775.010466][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  775.010494][   T10] usb 3-1: New USB device found: idVendor=1235, idProduct=8201, bcdDevice=0.40
[  775.016114][   T10] usb 3-1: unable to read config index 0 descriptor/start: -71
[  775.016131][   T10] usb 3-1: can't read configurations, error -71
[  775.072125][T12282] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  775.171202][  T989] ch9200 7-1:2.31: probe with driver ch9200 failed with error -71
[  775.205025][  T989] usb 7-1: USB disconnect, device number 21
[  775.224878][T12282] usb 10-1: Using ep0 maxpacket: 8
[  775.230659][T12282] usb 10-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  775.243091][T12282] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[  775.243130][T12282] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  775.243141][T12282] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  775.243153][T12282] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  775.243166][T12282] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  775.243198][T12282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.490562][T12282] usb 10-1: usb_control_msg returned -32
[  775.490588][T12282] usbtmc 10-1:16.0: can't read capabilities
[  775.565404][T16594] FAULT_INJECTION: forcing a failure.
[  775.565404][T16594] name failslab, interval 1, probability 0, space 0, times 0
[  775.565424][T16594] CPU: 0 UID: 0 PID: 16594 Comm: syz.7.3022 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  775.565441][T16594] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  775.565446][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  775.565453][T16594] Call Trace:
[  775.565457][T16594]  <TASK>
[  775.565463][T16594]  dump_stack_lvl+0xe8/0x150
[  775.565480][T16594]  should_fail_ex+0x3eb/0x540
[  775.565496][T16594]  should_failslab+0xa8/0x100
[  775.565509][T16594]  __kmalloc_cache_noprof+0x9e/0x600
[  775.565519][T16594]  ? kvm_init_irq_routing+0x4f/0x110
[  775.565557][T16594]  ? kvm_dev_ioctl+0x9aa/0x16e0
[  775.565567][T16594]  ? kvm_dev_ioctl+0x9aa/0x16e0
[  775.565581][T16594]  kvm_dev_ioctl+0x9aa/0x16e0
[  775.565596][T16594]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  775.565608][T16594]  ? bpf_lsm_file_ioctl+0x9/0x20
[  775.565621][T16594]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  775.565631][T16594]  __se_sys_ioctl+0xfc/0x170
[  775.565643][T16594]  do_syscall_64+0x166/0x520
[  775.565654][T16594]  ? trace_irq_disable+0x3b/0x140
[  775.565664][T16594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.565675][T16594]  ? clear_bhb_loop+0x70/0xc0
[  775.565687][T16594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.565698][T16594] RIP: 0033:0x7fa15659e159
[  775.565710][T16594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  775.565720][T16594] RSP: 002b:00007fa1547f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  775.565732][T16594] RAX: ffffffffffffffda RBX: 00007fa156825fa0 RCX: 00007fa15659e159
[  775.565740][T16594] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005
[  775.565747][T16594] RBP: 00007fa15663506b R08: 0000000000000000 R09: 0000000000000000
[  775.565754][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  775.565761][T16594] R13: 00007fa156826038 R14: 00007fa156825fa0 R15: 00007fff64a82728
[  775.565777][T16594]  </TASK>
[  775.995988][T16606] syzkaller1: entered promiscuous mode
[  775.995997][T16606] syzkaller1: entered allmulticast mode
[  776.111666][T16604] syzkaller0: entered promiscuous mode
[  776.111675][T16604] syzkaller0: entered allmulticast mode
[  776.298308][T16614] usbtmc 10-1:16.0: usb_control_msg returned -32
[  776.308391][   T10] usb 10-1: USB disconnect, device number 10
[  776.681680][T16624] batman_adv: batadv0: Interface deactivated: macsec0
[  776.707532][T16624] batman_adv: batadv0: Removing interface: macsec0
[  777.014520][   T54] Bluetooth: hci5: Malformed MSFT vendor event: 0x02
[  777.603873][    C0] net_ratelimit: 78 callbacks suppressed
[  777.737714][T12282] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  777.856278][   T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  777.882805][T12282] usb 10-1: Using ep0 maxpacket: 8
[  777.883271][T12282] usb 10-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  777.890593][T12282] usb 10-1: config 2 has an invalid interface number: 31 but max is 0
[  777.890607][T12282] usb 10-1: config 2 has no interface number 0
[  777.890630][T12282] usb 10-1: config 2 interface 31 has no altsetting 0
[  777.929282][T12282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.929293][T12282] usb 10-1: Product: syz
[  777.929301][T12282] usb 10-1: Manufacturer: syz
[  777.929308][T12282] usb 10-1: SerialNumber: syz
[  778.016482][   T10] usb 8-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  778.033557][   T10] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  778.033567][   T10] usb 8-1: Product: syz
[  778.033575][   T10] usb 8-1: SerialNumber: syz
[  778.080161][   T10] usb 8-1: config 0 descriptor??
[  778.316095][   T10] hso 8-1:0.0: Failed to find BULK eps
[  778.492305][T13445] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  778.547230][   T10] usb 8-1: USB disconnect, device number 13
[  778.593818][T16670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  778.654381][T13445] usb 2-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=34.15
[  778.666807][T13445] usb 2-1: config 9 interface 0 has no altsetting 0
[  778.686976][T13445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.686987][T13445] usb 2-1: Product: syz
[  778.686995][T13445] usb 2-1: Manufacturer: syz
[  778.687002][T13445] usb 2-1: SerialNumber: syz
[  778.754930][T12282] ch9200 10-1:2.31: probe with driver ch9200 failed with error -71
[  778.791302][T12282] usb 10-1: USB disconnect, device number 11
[  778.995166][T16664] netlink: 'syz.1.3036': attribute type 1 has an invalid length.
[  779.146575][T16664] 8021q: adding VLAN 0 to HW filter on device bond2
[  779.338731][T12282] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  779.426672][T16664] netlink: 'syz.1.3036': attribute type 10 has an invalid length.
[  779.426688][T16664] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3036'.
[  779.502654][T12282] usb 10-1: New USB device found: idVendor=056a, idProduct=00ec, bcdDevice=0.00
[  779.506152][T12282] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.506197][T12282] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.553260][T12282] usb 10-1: config 0 descriptor??
[  779.579105][T16689] bond2: (slave gretap1): making interface the new active one
[  779.594059][T12282] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  779.782132][T16689] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  779.850662][T16694] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  779.850799][T16664] dummy0: entered promiscuous mode
[  779.879749][T16664] bond2: (slave dummy0): Releasing active interface
[  779.879762][T16664] gretap1: entered promiscuous mode
[  779.924689][   T10] usb 10-1: USB disconnect, device number 12
[  780.180169][T13445] snd-usb-caiaq 2-1:9.0: can't set alt interface.
[  780.180182][T13445] usb 2-1: unable to init card! (ret=-5)
[  780.180521][T13445] snd-usb-caiaq 2-1:9.0: probe with driver snd-usb-caiaq failed with error -5
[  780.214101][T13445] usb 2-1: USB disconnect, device number 7
[  780.532898][ T4236] dummy0: left promiscuous mode
[  780.714844][   T61] Bluetooth: hci2: Frame reassembly failed (-84)
[  780.742520][T16727] loop7: detected capacity change from 0 to 2048
[  780.763277][T16727]  loop7: p1 p3
[  780.763277][T16727]  p1: <netbsd: (ignored 240 more) >
[  780.763418][T16727] loop7: p1 size 16777216 extends beyond EOD, truncated
[  780.804929][T16727] loop7: p3 start 3036741376 is beyond EOD, truncated
[  780.834434][T16730] Bluetooth: hci2: Frame reassembly failed (-84)
[  780.835949][T16730] Bluetooth: hci2: Frame reassembly failed (-84)
[  780.859081][T16730] Bluetooth: hci2: Frame reassembly failed (-84)
[  780.859328][T16730] Bluetooth: hci2: Frame reassembly failed (-84)
[  781.275131][T13445] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  781.422900][T13445] usb 8-1: Using ep0 maxpacket: 8
[  781.431222][T13445] usb 8-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  781.443747][T13445] usb 8-1: config 2 has an invalid interface number: 31 but max is 0
[  781.443760][T13445] usb 8-1: config 2 has no interface number 0
[  781.443785][T13445] usb 8-1: config 2 interface 31 has no altsetting 0
[  781.448367][T13445] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.448378][T13445] usb 8-1: Product: syz
[  781.448386][T13445] usb 8-1: Manufacturer: syz
[  781.448394][T13445] usb 8-1: SerialNumber: syz
[  782.772648][T11912] Bluetooth: hci2: command 0x1003 tx timeout
[  782.773496][   T54] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  782.827064][T15587] net_ratelimit: 65 callbacks suppressed
[  782.829308][T16734] misc userio: Invalid payload size
[  782.829653][T16734] misc userio: No port type given on /dev/userio
[  782.891362][T16761] misc userio: The device must be registered before sending interrupts
[  782.908579][T16761] misc userio: The device must be registered before sending interrupts
[  782.963960][T13445] ch9200 8-1:2.31: probe with driver ch9200 failed with error -32
[  783.268517][T16769] FAULT_INJECTION: forcing a failure.
[  783.268517][T16769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  783.268540][T16769] CPU: 0 UID: 0 PID: 16769 Comm: syz.9.3058 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  783.268561][T16769] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  783.268566][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  783.268572][T16769] Call Trace:
[  783.268577][T16769]  <TASK>
[  783.268583][T16769]  dump_stack_lvl+0xe8/0x150
[  783.268600][T16769]  should_fail_ex+0x3eb/0x540
[  783.268615][T16769]  _copy_from_user+0x2d/0xb0
[  783.268628][T16769]  copy_from_sockptr_offset+0x66/0xa0
[  783.268641][T16769]  do_ipt_set_ctl+0x991/0xe20
[  783.268657][T16769]  ? rcu_is_watching+0x16/0xb0
[  783.268668][T16769]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  783.268688][T16769]  ? __mutex_unlock_slowpath+0x731/0x900
[  783.268703][T16769]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  783.268720][T16769]  nf_setsockopt+0x26f/0x290
[  783.268732][T16769]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  783.268745][T16769]  do_sock_setsockopt+0x17c/0x1b0
[  783.268757][T16769]  __x64_sys_setsockopt+0x13d/0x1b0
[  783.268770][T16769]  do_syscall_64+0x166/0x520
[  783.268781][T16769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.268791][T16769]  ? clear_bhb_loop+0x70/0xc0
[  783.268803][T16769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  783.268814][T16769] RIP: 0033:0x7ff88bd9e159
[  783.268825][T16769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  783.268833][T16769] RSP: 002b:00007ff88cbac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  783.268845][T16769] RAX: ffffffffffffffda RBX: 00007ff88c025fa0 RCX: 00007ff88bd9e159
[  783.268853][T16769] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005
[  783.268860][T16769] RBP: 00007ff88be3506b R08: 0000000000000230 R09: 0000000000000000
[  783.268866][T16769] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  783.268873][T16769] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  783.268889][T16769]  </TASK>
[  783.619881][T16771] syzkaller0: entered promiscuous mode
[  783.619890][T16771] syzkaller0: entered allmulticast mode
[  785.139974][T12282] usb 8-1: USB disconnect, device number 14
[  785.423772][T16796] netlink: 'syz.1.3065': attribute type 1 has an invalid length.
[  785.698643][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3069'.
[  785.698659][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3069'.
[  786.721679][T16808] 8021q: adding VLAN 0 to HW filter on device bond2
[  786.824131][T16813] 8021q: adding VLAN 0 to HW filter on device bond0
[  786.849773][T16813] bond2: (slave bond0): making interface the new active one
[  786.872860][T16813] bond2: (slave bond0): Enslaving as an active interface with an up link
[  788.164640][  T989] net_ratelimit: 96 callbacks suppressed
[  788.355891][T16824] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžq
Ó†ØÈÌONEOUT'
[  788.628628][T16831] 8021q: adding VLAN 0 to HW filter on device eth0
[  788.650006][T16839] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3076'.
[  788.650031][T16839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3076'.
[  788.693177][T16831] 8021q: adding VLAN 0 to HW filter on device eth1
[  788.796187][T16840] PM: suspend entry (s2idle)
[  788.835985][T16831] 8021q: adding VLAN 0 to HW filter on device eth2
[  788.910486][T16840] PM: suspend exit
[  788.950151][T16831] 8021q: adding VLAN 0 to HW filter on device eth3
[  789.094532][T16845] FAULT_INJECTION: forcing a failure.
[  789.094532][T16845] name failslab, interval 1, probability 0, space 0, times 0
[  789.094549][T16845] CPU: 0 UID: 0 PID: 16845 Comm: syz.2.3078 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  789.094565][T16845] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  789.094570][T16845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  789.094577][T16845] Call Trace:
[  789.094582][T16845]  <TASK>
[  789.094588][T16845]  dump_stack_lvl+0xe8/0x150
[  789.094605][T16845]  should_fail_ex+0x3eb/0x540
[  789.094620][T16845]  should_failslab+0xa8/0x100
[  789.094632][T16845]  ? __kernfs_new_node+0xe6/0x980
[  789.094644][T16845]  kmem_cache_alloc_noprof+0x9c/0x600
[  789.094657][T16845]  ? __kernfs_new_node+0xe6/0x980
[  789.094670][T16845]  __kernfs_new_node+0xe6/0x980
[  789.094685][T16845]  ? __pfx___kernfs_new_node+0x10/0x10
[  789.094695][T16845]  ? lock_acquire+0x115/0x350
[  789.094706][T16845]  ? kernfs_root+0x1c/0x230
[  789.094724][T16845]  ? kernfs_root+0x1c/0x230
[  789.094734][T16845]  ? kernfs_root+0x1c/0x230
[  789.094743][T16845]  ? kernfs_root+0x1c/0x230
[  789.094755][T16845]  kernfs_new_node+0xeb/0x140
[  789.094767][T16845]  __kernfs_create_file+0x4b/0x2e0
[  789.094780][T16845]  sysfs_add_file_mode_ns+0x237/0x300
[  789.094795][T16845]  internal_create_group+0x679/0x1180
[  789.094812][T16845]  ? kernfs_create_dir_ns+0x1c0/0x220
[  789.094825][T16845]  ? __pfx_internal_create_group+0x10/0x10
[  789.094834][T16845]  ? sysfs_create_dir_ns+0x16a/0x2a0
[  789.094847][T16845]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  789.094860][T16845]  sysfs_create_groups+0x59/0x120
[  789.094873][T16845]  kobject_add_internal+0x669/0xcd0
[  789.094887][T16845]  kobject_init_and_add+0x12b/0x1a0
[  789.094898][T16845]  ? rcu_is_watching+0x16/0xb0
[  789.094910][T16845]  ? __pfx_kobject_init_and_add+0x10/0x10
[  789.094922][T16845]  ? __kmalloc_cache_noprof+0x148/0x600
[  789.094931][T16845]  ? rpc_sysfs_xprt_setup+0xa7/0x260
[  789.095025][T16845]  ? rpc_sysfs_xprt_setup+0xa7/0x260
[  789.095039][T16845]  rpc_sysfs_xprt_setup+0x132/0x260
[  789.095053][T16845]  xprt_switch_alloc+0x420/0x590
[  789.095091][T16845]  rpc_create_xprt+0x1c7/0xa90
[  789.095126][T16845]  ? __pfx_rpc_create_xprt+0x10/0x10
[  789.095141][T16845]  ? rcu_is_watching+0x16/0xb0
[  789.095151][T16845]  ? trace_kmalloc+0x2a/0xf0
[  789.095163][T16845]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  789.095176][T16845]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  789.095186][T16845]  ? xprt_create_transport+0x39b/0x5f0
[  789.095219][T16845]  ? xprt_create_transport+0x39b/0x5f0
[  789.095229][T16845]  ? kstrdup+0x81/0x100
[  789.095241][T16845]  ? __asan_memcpy+0x40/0x70
[  789.095254][T16845]  ? xprt_create_transport+0x438/0x5f0
[  789.095266][T16845]  rpc_create+0x649/0x900
[  789.095278][T16845]  ? __pfx_rpc_create+0x10/0x10
[  789.095287][T16845]  ? lock_acquire+0x115/0x350
[  789.095301][T16845]  ? lock_acquire+0x115/0x350
[  789.095324][T16845]  ? __kernel_text_address+0xd/0x30
[  789.095335][T16845]  ? unwind_get_return_address+0x4d/0x90
[  789.095347][T16845]  ? nfs_init_timeout_values+0x186/0x430
[  789.095399][T16845]  nfs_mount+0x445/0x740
[  789.095440][T16845]  ? __pfx_nfs_mount+0x10/0x10
[  789.095451][T16845]  ? stack_depot_save_flags+0x33/0x7f0
[  789.095466][T16845]  ? kasan_save_track+0x4f/0x80
[  789.095477][T16845]  ? nfs_get_tree+0xe45/0x1650
[  789.095508][T16845]  ? vfs_get_tree+0x92/0x2a0
[  789.095517][T16845]  ? vfs_cmd_create+0xa2/0x200
[  789.095527][T16845]  ? __se_sys_fsconfig+0x6b9/0x810
[  789.095544][T16845]  ? __lock_acquire+0x747/0x2de0
[  789.095558][T16845]  ? nfs_try_get_tree+0x57f/0x11e0
[  789.095594][T16845]  nfs_try_get_tree+0x76d/0x11e0
[  789.095609][T16845]  ? __pfx_nfs_try_get_tree+0x10/0x10
[  789.095630][T16845]  ? find_nfs_version+0x9d/0x170
[  789.095643][T16845]  ? nfs_get_tree+0x11a9/0x1650
[  789.095658][T16845]  vfs_get_tree+0x92/0x2a0
[  789.095670][T16845]  vfs_cmd_create+0xa2/0x200
[  789.095681][T16845]  __se_sys_fsconfig+0x6b9/0x810
[  789.095695][T16845]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  789.095708][T16845]  ? rcu_is_watching+0x16/0xb0
[  789.095722][T16845]  ? __x64_sys_fsconfig+0x20/0xc0
[  789.095734][T16845]  do_syscall_64+0x166/0x520
[  789.095745][T16845]  ? trace_irq_disable+0x3b/0x140
[  789.095754][T16845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.095766][T16845]  ? clear_bhb_loop+0x70/0xc0
[  789.095777][T16845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  789.095789][T16845] RIP: 0033:0x7f64ba39e159
[  789.095801][T16845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  789.095810][T16845] RSP: 002b:00007f64bb25c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  789.095837][T16845] RAX: ffffffffffffffda RBX: 00007f64ba625fa0 RCX: 00007f64ba39e159
[  789.095847][T16845] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  789.095854][T16845] RBP: 00007f64ba43506b R08: 0000000000000000 R09: 0000000000000000
[  789.095861][T16845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  789.095867][T16845] R13: 00007f64ba626038 R14: 00007f64ba625fa0 R15: 00007ffcfad86248
[  789.095884][T16845]  </TASK>
[  789.508508][T16845] kobject: kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0)
[  789.735331][ T3032] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  791.205336][ T4303] Filesystems sync: 2.388 seconds
[  791.596457][T16860] FAULT_INJECTION: forcing a failure.
[  791.596457][T16860] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  791.596478][T16860] CPU: 0 UID: 0 PID: 16860 Comm: syz.9.3071 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  791.596494][T16860] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  791.596499][T16860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  791.596506][T16860] Call Trace:
[  791.596511][T16860]  <TASK>
[  791.596516][T16860]  dump_stack_lvl+0xe8/0x150
[  791.596534][T16860]  should_fail_ex+0x3eb/0x540
[  791.596549][T16860]  _copy_from_user+0x2d/0xb0
[  791.596561][T16860]  __sys_bind+0x1c6/0x410
[  791.596574][T16860]  ? __pfx___sys_bind+0x10/0x10
[  791.596591][T16860]  ? rcu_is_watching+0x16/0xb0
[  791.596606][T16860]  __x64_sys_bind+0x7a/0x90
[  791.596617][T16860]  do_syscall_64+0x166/0x520
[  791.596629][T16860]  ? trace_irq_disable+0x3b/0x140
[  791.596639][T16860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.596655][T16860]  ? clear_bhb_loop+0x70/0xc0
[  791.596666][T16860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  791.596677][T16860] RIP: 0033:0x7ff88bd9e159
[  791.596689][T16860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.596698][T16860] RSP: 002b:00007ff88cbac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  791.596710][T16860] RAX: ffffffffffffffda RBX: 00007ff88c025fa0 RCX: 00007ff88bd9e159
[  791.596719][T16860] RDX: 000000000000006e RSI: 00002000000000c0 RDI: 0000000000000004
[  791.596725][T16860] RBP: 00007ff88be3506b R08: 0000000000000000 R09: 0000000000000000
[  791.596733][T16860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.596740][T16860] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  791.596756][T16860]  </TASK>
[  792.518451][T16863] kvm: pic: non byte write
[  793.089545][T16887] loop9: detected capacity change from 0 to 512
[  793.107274][T16887] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  793.151192][T16887] EXT4-fs (loop9): 1 truncate cleaned up
[  793.170555][T16887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  793.215258][T16890] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm ext4lazyinit: bg 0: block 4: invalid block bitmap
[  793.302640][ T4303] net_ratelimit: 155 callbacks suppressed
[  794.974826][T14202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.236217][T16905] FAULT_INJECTION: forcing a failure.
[  796.236217][T16905] name failslab, interval 1, probability 0, space 0, times 0
[  796.236233][T16905] CPU: 0 UID: 0 PID: 16905 Comm: syz.2.3092 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  796.236250][T16905] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  796.236255][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  796.236262][T16905] Call Trace:
[  796.236266][T16905]  <TASK>
[  796.236271][T16905]  dump_stack_lvl+0xe8/0x150
[  796.236289][T16905]  should_fail_ex+0x3eb/0x540
[  796.236305][T16905]  should_failslab+0xa8/0x100
[  796.236325][T16905]  __kmalloc_node_noprof+0xfb/0x720
[  796.236341][T16905]  ? __pfx___up_read+0x10/0x10
[  796.236352][T16905]  ? crypto_create_tfm_node+0x81/0x3c0
[  796.236428][T16905]  ? crypto_create_tfm_node+0x81/0x3c0
[  796.236439][T16905]  ? crypto_spawn_alg+0x8b/0x1a0
[  796.236480][T16905]  crypto_create_tfm_node+0x81/0x3c0
[  796.236494][T16905]  crypto_spawn_tfm2+0x5c/0x90
[  796.236505][T16905]  rsassa_pkcs1_init_tfm+0x42/0x90
[  796.236518][T16905]  crypto_create_tfm_node+0x143/0x3c0
[  796.236531][T16905]  crypto_alloc_tfm_node+0x169/0x3e0
[  796.236547][T16905]  public_key_verify_signature+0x242/0x9e0
[  796.236567][T16905]  ? __pfx_public_key_verify_signature+0x10/0x10
[  796.236586][T16905]  ? asymmetric_key_generate_id+0x60/0x170
[  796.236596][T16905]  ? asymmetric_key_id_same+0x67/0xe0
[  796.236611][T16905]  x509_check_for_self_signed+0x326/0x430
[  796.236624][T16905]  x509_cert_parse+0x622/0x7a0
[  796.236637][T16905]  x509_key_preparse+0x64/0x6d0
[  796.236647][T16905]  ? down_read+0x2b9/0x320
[  796.236660][T16905]  asymmetric_key_preparse+0xb9/0x1b0
[  796.236672][T16905]  __key_create_or_update+0x3a4/0xa70
[  796.236688][T16905]  ? __pfx___key_create_or_update+0x10/0x10
[  796.236702][T16905]  ? lookup_user_key+0xc82/0x1360
[  796.236719][T16905]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  796.236731][T16905]  ? __pfx_keyring_search_iterator+0x10/0x10
[  796.236745][T16905]  key_create_or_update+0x42/0x60
[  796.236758][T16905]  __se_sys_add_key+0x349/0x420
[  796.236770][T16905]  ? __pfx___se_sys_add_key+0x10/0x10
[  796.236786][T16905]  ? __x64_sys_add_key+0x20/0xc0
[  796.236797][T16905]  do_syscall_64+0x166/0x520
[  796.236807][T16905]  ? trace_irq_disable+0x3b/0x140
[  796.236816][T16905]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.236827][T16905]  ? clear_bhb_loop+0x70/0xc0
[  796.236839][T16905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.236850][T16905] RIP: 0033:0x7f64ba39e159
[  796.236862][T16905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.236871][T16905] RSP: 002b:00007f64bb25c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  796.236883][T16905] RAX: ffffffffffffffda RBX: 00007f64ba625fa0 RCX: 00007f64ba39e159
[  796.236891][T16905] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  796.236898][T16905] RBP: 00007f64ba43506b R08: 0000000007b00aee R09: 0000000000000000
[  796.236906][T16905] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  796.236912][T16905] R13: 00007f64ba626038 R14: 00007f64ba625fa0 R15: 00007ffcfad86248
[  796.236929][T16905]  </TASK>
[  796.614584][   T61] gretap1: left promiscuous mode
[  798.321904][    C0] net_ratelimit: 66 callbacks suppressed
[  798.621329][T16933] bridge_slave_0: left allmulticast mode
[  798.621340][T16933] bridge_slave_0: left promiscuous mode
[  798.621452][T16933] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.707934][T16933] bridge_slave_1: left allmulticast mode
[  798.707945][T16933] bridge_slave_1: left promiscuous mode
[  798.708048][T16933] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.767239][T16933] bond0: (slave bond_slave_0): Releasing backup interface
[  799.969407][T16942] 0x00000000000a-0x000000000309 : ""
[  799.984813][T16942] ftl_cs: FTL header corrupt!
[  800.049719][T16933] bond0: (slave bond_slave_1): Releasing backup interface
[  800.108607][T16933] team0: Port device team_slave_0 removed
[  800.152236][T16933] team0: Port device team_slave_1 removed
[  800.152787][T16933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  800.152797][T16933] batman_adv: batadv0: Removing interface: batadv_slave_0
[  800.196749][T16933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  800.196759][T16933] batman_adv: batadv0: Removing interface: batadv_slave_1
[  800.335250][T16935] team0: Mode changed to "loadbalance"
[  801.109743][T16966] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  801.624340][T16999] loop6: detected capacity change from 0 to 128
[  801.853244][T13445] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  801.977644][T17008] syzkaller0: entered promiscuous mode
[  801.977653][T17008] syzkaller0: entered allmulticast mode
[  802.015705][T13445] usb 2-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  802.017422][T13445] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  802.017464][T13445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.020802][T13445] usb 2-1: config 0 descriptor??
[  802.073033][T13445] pwc: Askey VC010 type 2 USB webcam detected.
[  802.517035][T13445] pwc: recv_control_msg error -32 req 02 val 2b00
[  802.517602][T13445] pwc: recv_control_msg error -32 req 02 val 2700
[  802.520487][T13445] pwc: recv_control_msg error -32 req 02 val 2c00
[  802.521259][T13445] pwc: recv_control_msg error -32 req 04 val 1000
[  802.544013][T13445] pwc: recv_control_msg error -32 req 04 val 1300
[  802.569518][T13445] pwc: recv_control_msg error -32 req 04 val 1400
[  802.571055][T13445] pwc: recv_control_msg error -32 req 02 val 2000
[  802.587751][T13445] pwc: recv_control_msg error -32 req 02 val 2100
[  802.849261][T13445] pwc: recv_control_msg error -71 req 02 val 2500
[  802.856359][T13445] pwc: recv_control_msg error -71 req 02 val 2400
[  802.857210][T13445] pwc: recv_control_msg error -71 req 02 val 2600
[  802.859145][T13445] pwc: recv_control_msg error -71 req 02 val 2900
[  802.859504][T13445] pwc: recv_control_msg error -71 req 02 val 2800
[  802.876449][T13445] pwc: recv_control_msg error -71 req 04 val 1100
[  802.891660][T13445] pwc: recv_control_msg error -71 req 04 val 1200
[  802.977190][T13445] pwc: Registered as video103.
[  802.987753][T13445] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input115
[  803.032282][T13445] usb 2-1: USB disconnect, device number 8
[  803.361961][    C0] net_ratelimit: 94 callbacks suppressed
[  803.561059][T17029] loop9: detected capacity change from 0 to 512
[  803.601703][T17029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  803.780214][T14202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  804.002659][T13445] usb 2-1: new low-speed USB device number 9 using dummy_hcd
[  804.153217][T13445] usb 2-1: New USB device found: idVendor=056a, idProduct=00d3, bcdDevice=0.00
[  804.153860][T13445] usb 2-1: config 0 has no interfaces?
[  804.153890][T13445] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.155520][T13445] usb 2-1: config 0 descriptor??
[  804.219872][T16979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  804.362937][T12282] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  804.439483][T13445] usb 2-1: USB disconnect, device number 9
[  804.522903][T12282] usb 10-1: New USB device found: idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  804.532798][T12282] usb 10-1: config 0 has no interfaces?
[  804.541272][T12282] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.541282][T12282] usb 10-1: Product: syz
[  804.541289][T12282] usb 10-1: Manufacturer: syz
[  804.541297][T12282] usb 10-1: SerialNumber: syz
[  804.566261][T12282] usb 10-1: config 0 descriptor??
[  804.686402][T17057] syzkaller0: entered promiscuous mode
[  804.686410][T17057] syzkaller0: entered allmulticast mode
[  804.762003][  T989] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  804.819655][T17045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.820047][T17045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.841784][T17045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.853637][T17045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.859945][T17045] netlink: 'syz.9.3121': attribute type 11 has an invalid length.
[  804.912698][  T989] usb 8-1: New USB device found: idVendor=046d, idProduct=0920, bcdDevice=78.55
[  804.915613][T13445] usb 10-1: USB disconnect, device number 13
[  804.917590][  T989] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.917601][  T989] usb 8-1: Product: syz
[  804.917608][  T989] usb 8-1: Manufacturer: syz
[  804.917616][  T989] usb 8-1: SerialNumber: syz
[  804.920761][  T989] usb 8-1: config 0 descriptor??
[  804.977774][T17060] loop2: detected capacity change from 0 to 164
[  805.209086][  T989] gspca_main: tv8532-2.14.0 probing 046d:0920
[  805.295816][  T989] usb 8-1: USB disconnect, device number 15
[  805.615940][T17070] syzkaller0: entered promiscuous mode
[  805.615949][T17070] syzkaller0: entered allmulticast mode
[  805.662785][T17070] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  805.663138][T17075] FAULT_INJECTION: forcing a failure.
[  805.663138][T17075] name failslab, interval 1, probability 0, space 0, times 0
[  805.663153][T17075] CPU: 0 UID: 0 PID: 17075 Comm: syz.6.3131 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  805.663170][T17075] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  805.663175][T17075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  805.663182][T17075] Call Trace:
[  805.663187][T17075]  <TASK>
[  805.663192][T17075]  dump_stack_lvl+0xe8/0x150
[  805.663209][T17075]  should_fail_ex+0x3eb/0x540
[  805.663224][T17075]  ? __alloc_skb+0x1db/0x7a0
[  805.663235][T17075]  should_failslab+0xa8/0x100
[  805.663248][T17075]  ? __alloc_skb+0x1db/0x7a0
[  805.663257][T17075]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  805.663268][T17075]  ? __alloc_skb+0x18d/0x7a0
[  805.663278][T17075]  ? __alloc_skb+0x1db/0x7a0
[  805.663292][T17075]  __alloc_skb+0x1db/0x7a0
[  805.663304][T17075]  alloc_uevent_skb+0x7d/0x230
[  805.663318][T17075]  kobject_uevent_net_broadcast+0x184/0x560
[  805.663333][T17075]  kobject_uevent_env+0x566/0x9e0
[  805.663348][T17075]  xprt_switch_alloc+0x238/0x590
[  805.663363][T17075]  rpc_create_xprt+0x1c7/0xa90
[  805.663375][T17075]  ? __pfx_rpc_create_xprt+0x10/0x10
[  805.663390][T17075]  ? rcu_is_watching+0x16/0xb0
[  805.663401][T17075]  ? trace_kmalloc+0x2a/0xf0
[  805.663413][T17075]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  805.663425][T17075]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  805.663435][T17075]  ? xprt_create_transport+0x39b/0x5f0
[  805.663445][T17075]  ? xprt_create_transport+0x39b/0x5f0
[  805.663455][T17075]  ? kstrdup+0x81/0x100
[  805.663465][T17075]  ? __asan_memcpy+0x40/0x70
[  805.663478][T17075]  ? xprt_create_transport+0x438/0x5f0
[  805.663490][T17075]  rpc_create+0x649/0x900
[  805.663502][T17075]  ? __pfx_rpc_create+0x10/0x10
[  805.663512][T17075]  ? lock_acquire+0x115/0x350
[  805.663526][T17075]  ? lock_acquire+0x115/0x350
[  805.663550][T17075]  ? __kernel_text_address+0xd/0x30
[  805.663561][T17075]  ? unwind_get_return_address+0x4d/0x90
[  805.663573][T17075]  ? nfs_init_timeout_values+0x186/0x430
[  805.663587][T17075]  nfs_mount+0x445/0x740
[  805.663600][T17075]  ? __pfx_nfs_mount+0x10/0x10
[  805.663611][T17075]  ? stack_depot_save_flags+0x33/0x7f0
[  805.663625][T17075]  ? kasan_save_track+0x4f/0x80
[  805.663645][T17075]  ? nfs_get_tree+0xe45/0x1650
[  805.663655][T17075]  ? vfs_get_tree+0x92/0x2a0
[  805.663665][T17075]  ? vfs_cmd_create+0xa2/0x200
[  805.663675][T17075]  ? __se_sys_fsconfig+0x6b9/0x810
[  805.663692][T17075]  ? __lock_acquire+0x747/0x2de0
[  805.663705][T17075]  ? nfs_try_get_tree+0x57f/0x11e0
[  805.663718][T17075]  nfs_try_get_tree+0x76d/0x11e0
[  805.663734][T17075]  ? __pfx_nfs_try_get_tree+0x10/0x10
[  805.663757][T17075]  ? find_nfs_version+0x9d/0x170
[  805.663770][T17075]  ? nfs_get_tree+0x11a9/0x1650
[  805.663784][T17075]  vfs_get_tree+0x92/0x2a0
[  805.663796][T17075]  vfs_cmd_create+0xa2/0x200
[  805.663807][T17075]  __se_sys_fsconfig+0x6b9/0x810
[  805.663821][T17075]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  805.663833][T17075]  ? rcu_is_watching+0x16/0xb0
[  805.663847][T17075]  ? __x64_sys_fsconfig+0x20/0xc0
[  805.663858][T17075]  do_syscall_64+0x166/0x520
[  805.663868][T17075]  ? trace_irq_disable+0x3b/0x140
[  805.663877][T17075]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.663889][T17075]  ? clear_bhb_loop+0x70/0xc0
[  805.663900][T17075]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  805.663910][T17075] RIP: 0033:0x7f0c0c99e159
[  805.663922][T17075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  805.663932][T17075] RSP: 002b:00007f0c0d83c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  805.663944][T17075] RAX: ffffffffffffffda RBX: 00007f0c0cc25fa0 RCX: 00007f0c0c99e159
[  805.663952][T17075] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003
[  805.663959][T17075] RBP: 00007f0c0ca3506b R08: 0000000000000000 R09: 0000000000000000
[  805.663965][T17075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  805.663972][T17075] R13: 00007f0c0cc26038 R14: 00007f0c0cc25fa0 R15: 00007ffcc71a14d8
[  805.663988][T17075]  </TASK>
[  805.664957][T17069] tipc: Resetting bearer <eth:syzkaller0>
[  806.349447][T17069] tipc: Disabling bearer <eth:syzkaller0>
[  806.417306][T17081] create_pit_timer: 23 callbacks suppressed
[  806.417313][T17081] kvm: requested 5028 ns i8254 timer period limited to 200000 ns
[  806.470788][T17081] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  806.471595][T17081] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  806.501086][T17081] kvm: requested 12571 ns i8254 timer period limited to 200000 ns
[  806.527797][T17081] kvm: requested 85485 ns i8254 timer period limited to 200000 ns
[  806.527845][T17081] kvm: requested 93028 ns i8254 timer period limited to 200000 ns
[  806.527889][T17081] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  806.528435][T17081] kvm: requested 10057 ns i8254 timer period limited to 200000 ns
[  806.528562][T17081] kvm: requested 155047 ns i8254 timer period limited to 200000 ns
[  806.528632][T17081] kvm: requested 160914 ns i8254 timer period limited to 200000 ns
[  807.164853][T17110] netlink: 'syz.6.3141': attribute type 4 has an invalid length.
[  807.167908][T17110] netlink: 'syz.6.3141': attribute type 4 has an invalid length.
[  807.327438][T17113] loop2: detected capacity change from 0 to 1024
[  807.438349][T17113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  807.438410][T17113] ext4 filesystem being mounted at /658/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  807.742768][T13445] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  807.893543][T13445] usb 3-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00
[  807.898873][T13445] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  807.898888][T13445] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 11776, setting to 1024
[  807.898901][T13445] usb 3-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  807.898942][T13445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.988996][T13445] pl2303 3-1:1.0: required endpoints missing
[  808.005614][T13445] pl2303 3-1:1.1: pl2303 converter detected
[  808.033493][T13445] usb 3-1: pl2303 converter now attached to ttyUSB0
[  808.082660][  T989] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  808.222356][T17113] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.3142: lblock 0 mapped to illegal pblock 0 (length 6)
[  808.334007][T17113] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.3142: bg 0: block 112: padding at end of block bitmap is not set
[  808.412459][T17113] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: block 4: comm syz.2.3142: lblock 4 mapped to illegal pblock 4 (length 2)
[  808.456066][T17113] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  808.456087][T17113] EXT4-fs (loop2): This should not happen!! Data will be lost
[  808.456087][T17113] 
[  808.486307][    C0] net_ratelimit: 101 callbacks suppressed
[  808.533841][  T989] usb 2-1: unable to get BOS descriptor or descriptor too short
[  808.542432][  T989] usb 2-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  808.544758][  T989] usb 2-1: unable to read config index 0 descriptor/start: -71
[  808.544776][  T989] usb 2-1: can't read configurations, error -71
[  808.644754][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  809.105780][T13445] usb 3-1: USB disconnect, device number 58
[  809.159107][ T1163] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28
[  809.159125][ T1163] EXT4-fs (loop2): This should not happen!! Data will be lost
[  809.159125][ T1163] 
[  809.159133][ T1163] EXT4-fs (loop2): Total free blocks count 0
[  809.159140][ T1163] EXT4-fs (loop2): Free/Dirty block details
[  809.159147][ T1163] EXT4-fs (loop2): free_blocks=0
[  809.159154][ T1163] EXT4-fs (loop2): dirty_blocks=64
[  809.159161][ T1163] EXT4-fs (loop2): Block reservation details
[  809.352881][T13445] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  809.403543][T13445] pl2303 3-1:1.1: device disconnected
[  809.803162][T17150] loop6: detected capacity change from 0 to 8
[  809.824856][T17150] SQUASHFS error: lzo decompression failed, data probably corrupt
[  809.824869][T17150] SQUASHFS error: Failed to read block 0x91: -5
[  809.824887][T17150] SQUASHFS error: Unable to read metadata cache entry [8f]
[  809.824893][T17150] SQUASHFS error: Unable to read inode 0x11f
[  809.976120][T13445] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  811.021950][T13445] usb 3-1: Using ep0 maxpacket: 32
[  811.027482][T13445] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  811.028905][T13445] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  811.028917][T13445] usb 3-1: config 0 has no interface number 0
[  811.028938][T13445] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  811.028949][T13445] usb 3-1: config 0 interface 1 has no altsetting 0
[  811.041659][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.041669][T13445] usb 3-1: Product: syz
[  811.041677][T13445] usb 3-1: Manufacturer: syz
[  811.041685][T13445] usb 3-1: SerialNumber: syz
[  811.043763][T13445] usb 3-1: config 0 descriptor??
[  812.536767][T13445] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  812.537434][T13445] cx231xx 3-1:0.1: Failed to read PCB config
[  812.537465][T13445] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  812.577062][T13445] usb 3-1: USB disconnect, device number 59
[  812.706916][T17169] loop9: detected capacity change from 0 to 8
[  812.738386][T17169] SQUASHFS error: Unable to read inode 0x11f
[  813.112436][T13445] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  813.266465][T13445] usb 3-1: Using ep0 maxpacket: 32
[  813.269195][T13445] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  813.270709][T13445] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  813.270741][T13445] usb 3-1: config 0 has no interface number 0
[  813.270770][T13445] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  813.270781][T13445] usb 3-1: config 0 interface 1 has no altsetting 0
[  813.326870][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.326881][T13445] usb 3-1: Product: syz
[  813.326889][T13445] usb 3-1: Manufacturer: syz
[  813.326896][T13445] usb 3-1: SerialNumber: syz
[  813.359108][T13445] usb 3-1: config 0 descriptor??
[  813.619250][T13445] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  813.631018][T13445] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4)
[  813.660130][T17193] net_ratelimit: 109 callbacks suppressed
[  813.733252][T13445] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110
[  813.736078][T13445] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  813.737165][T13445] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  813.830068][T13445] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  813.846463][T13445] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32
[  813.846476][T13445] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32
[  813.941808][T13445] i2c i2c-2: Added multiplexed i2c bus 4
[  814.059777][T13445] i2c i2c-2: Added multiplexed i2c bus 5
[  814.060224][T13445] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]!
[  814.060237][T13445] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]!
[  814.193084][T13445] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71
[  814.220048][T13445] usb 3-1: USB disconnect, device number 60
[  814.480627][T17209] syzkaller0: entered promiscuous mode
[  814.480636][T17209] syzkaller0: entered allmulticast mode
[  815.707864][T17223] loop7: detected capacity change from 0 to 256
[  815.883050][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'.
[  816.002750][T17227] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3171'.
[  816.153760][T13445] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  816.239703][   T54] Bluetooth: hci5: link tx timeout
[  816.239708][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  816.303048][T13445] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  816.303912][T13445] usb 8-1: config 1 has an invalid interface number: 128 but max is 1
[  816.303925][T13445] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  816.303935][T13445] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  816.303952][T13445] usb 8-1: config 1 has no interface number 0
[  816.303983][T13445] usb 8-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  816.305884][T13445] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  816.305895][T13445] usb 8-1: Product: syz
[  816.305902][T13445] usb 8-1: Manufacturer: syz
[  816.305910][T13445] usb 8-1: SerialNumber: syz
[  816.405848][T13445] cdc_wdm 8-1:1.128: skipping garbage
[  816.405855][T13445] cdc_wdm 8-1:1.128: skipping garbage
[  816.405867][T13445] cdc_wdm 8-1:1.128: probe with driver cdc_wdm failed with error -22
[  816.567312][T17245] netlink: 'syz.6.3177': attribute type 83 has an invalid length.
[  816.592318][   T54] Bluetooth: hci5: link tx timeout
[  816.592324][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  816.627099][   T54] Bluetooth: hci5: link tx timeout
[  816.627105][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  816.786239][   T54] Bluetooth: hci5: link tx timeout
[  816.786245][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  816.904628][ T2254] usb 8-1: USB disconnect, device number 16
[  817.212456][   T54] Bluetooth: hci5: link tx timeout
[  817.212462][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  817.309075][T17261] syzkaller0: entered promiscuous mode
[  817.309084][T17261] syzkaller0: entered allmulticast mode
[  817.707625][T17250] loop6: detected capacity change from 0 to 512
[  817.852471][   T54] Bluetooth: hci5: link tx timeout
[  817.852477][   T54] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  817.977617][T17250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  817.977677][T17250] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  818.333901][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  818.393348][ T2254] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  818.527085][T11910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  818.614801][ T2254] usb 10-1: Using ep0 maxpacket: 8
[  818.621407][ T2254] usb 10-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  818.626556][ T2254] usb 10-1: config 2 has an invalid interface number: 31 but max is 0
[  818.626569][ T2254] usb 10-1: config 2 has no interface number 0
[  818.626596][ T2254] usb 10-1: config 2 interface 31 has no altsetting 0
[  818.646504][ T2254] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.646515][ T2254] usb 10-1: Product: syz
[  818.646523][ T2254] usb 10-1: Manufacturer: syz
[  818.646530][ T2254] usb 10-1: SerialNumber: syz
[  818.707487][ T5721] net_ratelimit: 62 callbacks suppressed
[  818.828888][T17289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.256865][T17308] syzkaller0: entered promiscuous mode
[  819.256875][T17308] syzkaller0: entered allmulticast mode
[  819.369575][T17285] misc userio: Invalid payload size
[  819.425662][T17314] misc userio: The device must be registered before sending interrupts
[  819.425959][T17314] misc userio: The device must be registered before sending interrupts
[  820.657843][ T2254] ch9200 10-1:2.31: probe with driver ch9200 failed with error -32
[  822.013867][T12282] usb 10-1: USB disconnect, device number 14
[  822.198162][T17332] loop2: detected capacity change from 0 to 8
[  822.409546][T17337] loop7: detected capacity change from 0 to 8
[  822.434061][T17337] SQUASHFS error: zlib decompression failed, data probably corrupt
[  822.434075][T17337] SQUASHFS error: Failed to read block 0x9b: -5
[  822.434092][T17337] SQUASHFS error: Unable to read metadata cache entry [99]
[  822.434099][T17337] SQUASHFS error: Unable to read inode 0x127
[  822.722319][T12282] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  822.872009][T12282] usb 8-1: Using ep0 maxpacket: 16
[  822.872489][T12282] usb 8-1: New USB device found: idVendor=041e, idProduct=3040, bcdDevice=0.40
[  822.875220][T12282] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.875231][T12282] usb 8-1: Product: syz
[  822.875239][T12282] usb 8-1: Manufacturer: syz
[  822.875246][T12282] usb 8-1: SerialNumber: syz
[  823.129463][T17349] loop6: detected capacity change from 0 to 1024
[  823.180939][T17349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  823.181027][T17349] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  823.274372][T17356] FAULT_INJECTION: forcing a failure.
[  823.274372][T17356] name failslab, interval 1, probability 0, space 0, times 0
[  823.274389][T17356] CPU: 0 UID: 0 PID: 17356 Comm: syz.9.3205 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  823.274405][T17356] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  823.274411][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  823.274418][T17356] Call Trace:
[  823.274422][T17356]  <TASK>
[  823.274427][T17356]  dump_stack_lvl+0xe8/0x150
[  823.274445][T17356]  should_fail_ex+0x3eb/0x540
[  823.274460][T17356]  should_failslab+0xa8/0x100
[  823.274475][T17356]  __kmalloc_noprof+0xf9/0x710
[  823.274486][T17356]  ? __kmalloc_noprof+0x1a6/0x710
[  823.274496][T17356]  ? x509_get_sig_params+0x397/0x690
[  823.274506][T17356]  ? x509_get_sig_params+0x397/0x690
[  823.274521][T17356]  x509_get_sig_params+0x397/0x690
[  823.274535][T17356]  x509_cert_parse+0x514/0x7a0
[  823.274548][T17356]  x509_key_preparse+0x64/0x6d0
[  823.274561][T17356]  ? down_read+0x2b9/0x320
[  823.274629][T17356]  asymmetric_key_preparse+0xb9/0x1b0
[  823.274647][T17356]  __key_create_or_update+0x3a4/0xa70
[  823.274664][T17356]  ? __pfx___key_create_or_update+0x10/0x10
[  823.274679][T17356]  ? lookup_user_key+0xc82/0x1360
[  823.274696][T17356]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  823.274709][T17356]  ? __pfx_keyring_search_iterator+0x10/0x10
[  823.274722][T17356]  key_create_or_update+0x42/0x60
[  823.274736][T17356]  __se_sys_add_key+0x349/0x420
[  823.274749][T17356]  ? __pfx___se_sys_add_key+0x10/0x10
[  823.274765][T17356]  ? __x64_sys_add_key+0x20/0xc0
[  823.274777][T17356]  do_syscall_64+0x166/0x520
[  823.274787][T17356]  ? trace_irq_disable+0x3b/0x140
[  823.274797][T17356]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.274808][T17356]  ? clear_bhb_loop+0x70/0xc0
[  823.274820][T17356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  823.274831][T17356] RIP: 0033:0x7ff88bd9e159
[  823.274846][T17356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  823.274856][T17356] RSP: 002b:00007ff88cbac028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[  823.274869][T17356] RAX: ffffffffffffffda RBX: 00007ff88c025fa0 RCX: 00007ff88bd9e159
[  823.274877][T17356] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[  823.274884][T17356] RBP: 00007ff88be3506b R08: 0000000032d76377 R09: 0000000000000000
[  823.274892][T17356] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[  823.274899][T17356] R13: 00007ff88c026038 R14: 00007ff88c025fa0 R15: 00007ffec9f70f08
[  823.274918][T17356]  </TASK>
[  823.557210][T17354] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  823.631595][T17349] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: block 3: comm syz.6.3202: lblock 3 mapped to illegal pblock 3 (length 2)
[  823.656104][T17349] EXT4-fs error (device loop6): ext4_map_blocks:832: inode #15: comm syz.6.3202: lblock 0 mapped to illegal pblock 0 (length 1)
[  823.760536][T17349] EXT4-fs error (device loop6): ext4_ext_remove_space:2977: inode #15: comm syz.6.3202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0)
[  823.763878][    C0] net_ratelimit: 46 callbacks suppressed
[  823.949105][T11910] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  824.191387][T12282] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  824.202667][T12282] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  824.673755][T12282] usb 8-1: USB disconnect, device number 17
[  824.922332][ T5716] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  824.931942][T13445] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  825.111909][T13445] usb 3-1: Using ep0 maxpacket: 8
[  825.112412][T13445] usb 3-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  825.141199][T13445] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  825.141211][T13445] usb 3-1: config 2 has no interface number 0
[  825.141250][T13445] usb 3-1: config 2 interface 31 has no altsetting 0
[  825.256952][ T5716] usb 10-1: Using ep0 maxpacket: 8
[  825.433737][ T5716] usb 10-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  825.499168][T13445] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.499179][T13445] usb 3-1: Product: syz
[  825.499187][T13445] usb 3-1: Manufacturer: syz
[  825.499195][T13445] usb 3-1: SerialNumber: syz
[  825.604360][ T5716] usb 10-1: config 2 has an invalid interface number: 31 but max is 0
[  825.604372][ T5716] usb 10-1: config 2 has no interface number 0
[  825.604398][ T5716] usb 10-1: config 2 interface 31 has no altsetting 0
[  825.839038][ T5716] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  825.839048][ T5716] usb 10-1: Product: syz
[  825.839056][ T5716] usb 10-1: Manufacturer: syz
[  825.839064][ T5716] usb 10-1: SerialNumber: syz
[  826.650316][T17382] FAULT_INJECTION: forcing a failure.
[  826.650316][T17382] name failslab, interval 1, probability 0, space 0, times 0
[  826.650351][T17382] CPU: 0 UID: 0 PID: 17382 Comm: syz.6.3213 Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  826.650368][T17382] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  826.650374][T17382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  826.650381][T17382] Call Trace:
[  826.650386][T17382]  <TASK>
[  826.650392][T17382]  dump_stack_lvl+0xe8/0x150
[  826.650409][T17382]  should_fail_ex+0x3eb/0x540
[  826.650425][T17382]  should_failslab+0xa8/0x100
[  826.650440][T17382]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  826.650454][T17382]  ? __d_alloc+0x37/0x7f0
[  826.650464][T17382]  ? __d_alloc+0x37/0x7f0
[  826.650477][T17382]  __d_alloc+0x37/0x7f0
[  826.650490][T17382]  __d_alloc_parallel+0xde/0x1700
[  826.650502][T17382]  ? lock_acquire+0x115/0x350
[  826.650519][T17382]  ? __d_lookup+0x66/0x790
[  826.650530][T17382]  ? __d_lookup+0x66/0x790
[  826.650540][T17382]  ? __pfx___d_alloc_parallel+0x10/0x10
[  826.650552][T17382]  ? d_lookup+0x1f/0xa0
[  826.650563][T17382]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  826.650580][T17382]  proc_fill_cache+0x238/0x390
[  826.650591][T17382]  ? __pfx_proc_pident_instantiate+0x10/0x10
[  826.650602][T17382]  ? __pfx_proc_fill_cache+0x10/0x10
[  826.650614][T17382]  ? __pfx_filldir64+0x10/0x10
[  826.650627][T17382]  proc_pident_readdir+0x151/0x1f0
[  826.650642][T17382]  iterate_dir+0x2e2/0x4d0
[  826.650655][T17382]  __se_sys_getdents64+0xf1/0x280
[  826.650666][T17382]  ? __pfx___se_sys_getdents64+0x10/0x10
[  826.650676][T17382]  ? __pfx_filldir64+0x10/0x10
[  826.650687][T17382]  ? rcu_is_watching+0x16/0xb0
[  826.650704][T17382]  do_syscall_64+0x166/0x520
[  826.650715][T17382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.650726][T17382]  ? clear_bhb_loop+0x70/0xc0
[  826.650738][T17382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  826.650748][T17382] RIP: 0033:0x7f0c0c99e159
[  826.650760][T17382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  826.650769][T17382] RSP: 002b:00007f0c0d83c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  826.650782][T17382] RAX: ffffffffffffffda RBX: 00007f0c0cc25fa0 RCX: 00007f0c0c99e159
[  826.650790][T17382] RDX: 000000000000006f RSI: 0000200000000340 RDI: 0000000000000005
[  826.650797][T17382] RBP: 00007f0c0ca3506b R08: 0000000000000000 R09: 0000000000000000
[  826.650804][T17382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  826.650810][T17382] R13: 00007f0c0cc26038 R14: 00007f0c0cc25fa0 R15: 00007ffcc71a14d8
[  826.650827][T17382]  </TASK>
[  826.989971][T17373] misc userio: Invalid payload size
[  827.040891][T17375] misc userio: The device must be registered before sending interrupts
[  827.041806][T17375] misc userio: The device must be registered before sending interrupts
[  827.764603][ T5716] ch9200 10-1:2.31: probe with driver ch9200 failed with error -32
[  827.926259][T13445] ch9200 3-1:2.31: probe with driver ch9200 failed with error -32
[  827.981558][T17405] file system registered
[  828.250306][T17408] unloading
[  828.291508][ T5716] usb 10-1: USB disconnect, device number 15
[  828.517448][ T5716] usb 3-1: USB disconnect, device number 61
[  829.072109][T11910] ==================================================================
[  829.072118][T11910] BUG: KASAN: slab-use-after-free in ffs_data_clear+0x543/0x5b0
[  829.072197][T11910] Write of size 1 at addr ffff8880237b1e4a by task syz-executor/11910
[  829.072207][T11910] 
[  829.072217][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz-executor Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  829.072233][T11910] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  829.072238][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  829.072245][T11910] Call Trace:
[  829.072250][T11910]  <TASK>
[  829.072255][T11910]  dump_stack_lvl+0xe8/0x150
[  829.072268][T11910]  print_address_description+0x55/0x1e0
[  829.072288][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.072297][T11910]  print_report+0x58/0x70
[  829.072307][T11910]  kasan_report+0x117/0x150
[  829.072318][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.072329][T11910]  ffs_data_clear+0x543/0x5b0
[  829.072340][T11910]  ffs_fs_kill_sb+0x84/0x370
[  829.072350][T11910]  deactivate_locked_super+0xbe/0x110
[  829.072361][T11910]  cleanup_mnt+0x3d3/0x460
[  829.072372][T11910]  task_work_run+0x1d9/0x260
[  829.072382][T11910]  ? __pfx_task_work_run+0x10/0x10
[  829.072394][T11910]  exit_to_user_mode_loop+0x204/0x770
[  829.072404][T11910]  ? rcu_is_watching+0x16/0xb0
[  829.072415][T11910]  do_syscall_64+0x328/0x520
[  829.072425][T11910]  ? trace_irq_disable+0x3b/0x140
[  829.072434][T11910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.072445][T11910]  ? clear_bhb_loop+0x70/0xc0
[  829.072455][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.072465][T11910] RIP: 0033:0x7f0c0c99f397
[  829.072476][T11910] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  829.072485][T11910] RSP: 002b:00007ffcc71a0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  829.072497][T11910] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0c0c99f397
[  829.072504][T11910] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc71a0800
[  829.072512][T11910] RBP: 00007ffcc71a0800 R08: 00007ffcc71a1800 R09: 00000000ffffffff
[  829.072519][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc71a1890
[  829.072526][T11910] R13: 00007f0c0ca344bb R14: 00000000000ca529 R15: 00007ffcc71a18d0
[  829.072537][T11910]  </TASK>
[  829.072541][T11910] 
[  829.072544][T11910] Allocated by task 17405:
[  829.072581][T11910]  kasan_save_track+0x3e/0x80
[  829.072590][T11910]  __kasan_kmalloc+0x93/0xb0
[  829.072598][T11910]  __kmalloc_cache_noprof+0x31c/0x600
[  829.072607][T11910]  ffs_alloc_inst+0x152/0x310
[  829.072615][T11910]  usb_get_function_instance+0xe3/0x2f0
[  829.072646][T11910]  function_make+0x127/0x360
[  829.072654][T11910]  configfs_mkdir+0x4f6/0x9e0
[  829.072662][T11910]  vfs_mkdir+0x40e/0x630
[  829.072671][T11910]  filename_mkdirat+0x285/0x510
[  829.072678][T11910]  __se_sys_mkdirat+0x35/0x150
[  829.072686][T11910]  do_syscall_64+0x166/0x520
[  829.072694][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.072703][T11910] 
[  829.072705][T11910] Freed by task 17408:
[  829.072710][T11910]  kasan_save_track+0x3e/0x80
[  829.072718][T11910]  kasan_save_free_info+0x40/0x50
[  829.072727][T11910]  __kasan_slab_free+0x5c/0x80
[  829.072734][T11910]  kfree+0x1c5/0x650
[  829.072742][T11910]  ffs_free_inst+0x233/0x2c0
[  829.072749][T11910]  usb_put_function_instance+0x95/0xc0
[  829.072758][T11910]  config_item_release+0x13a/0x2d0
[  829.072766][T11910]  configfs_rmdir+0x885/0x950
[  829.072774][T11910]  vfs_rmdir+0x3e6/0x6a0
[  829.072781][T11910]  filename_rmdir+0x292/0x520
[  829.072789][T11910]  __se_sys_rmdir+0x2e/0x140
[  829.072796][T11910]  do_syscall_64+0x166/0x520
[  829.072804][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.072813][T11910] 
[  829.072816][T11910] The buggy address belongs to the object at ffff8880237b1e00
[  829.072816][T11910]  which belongs to the cache kmalloc-128 of size 128
[  829.072824][T11910] The buggy address is located 74 bytes inside of
[  829.072824][T11910]  freed 128-byte region [ffff8880237b1e00, ffff8880237b1e80)
[  829.072835][T11910] 
[  829.072837][T11910] The buggy address belongs to the physical page:
[  829.072883][T11910] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880237b1d00 pfn:0x237b1
[  829.072898][T11910] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
[  829.072908][T11910] page_type: f5(slab)
[  829.072918][T11910] raw: 00fff00000000200 ffff88801b041a00 ffffea0001dd3110 ffffea0001eb1c10
[  829.072927][T11910] raw: ffff8880237b1d00 000000000010000f 00000000f5000000 0000000000000000
[  829.072933][T11910] page dumped because: kasan: bad access detected
[  829.072971][T11910] page_owner tracks the page as allocated
[  829.072976][T11910] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5624, tgid 5624 (syz-executor), ts 199870517782
[  829.072993][T11910]  post_alloc_hook+0x1f9/0x250
[  829.073003][T11910]  get_page_from_freelist+0x220f/0x2280
[  829.073012][T11910]  __alloc_frozen_pages_noprof+0x1fc/0x400
[  829.073021][T11910]  allocate_slab+0x7d/0x5e0
[  829.073028][T11910]  refill_objects+0x2d5/0x350
[  829.073036][T11910]  __pcs_replace_empty_main+0x2c8/0x6c0
[  829.073045][T11910]  __kmalloc_cache_noprof+0x396/0x600
[  829.073053][T11910]  mm_init_sched+0x56/0x350
[  829.073062][T11910]  mm_init+0x8e3/0xcb0
[  829.073070][T11910]  copy_mm+0xfc/0x470
[  829.073077][T11910]  copy_process+0x1ea2/0x4430
[  829.073085][T11910]  kernel_clone+0x2d7/0x940
[  829.073093][T11910]  __x64_sys_clone+0x1b6/0x230
[  829.073101][T11910]  do_syscall_64+0x166/0x520
[  829.073109][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.073118][T11910] page last free pid 5624 tgid 5624 ts 199869898357 stack trace:
[  829.073125][T11910]  free_pages_prepare+0x9eb/0xaf0
[  829.073133][T11910]  __free_contig_range_common+0x174/0x340
[  829.073143][T11910]  free_pages_bulk+0x48/0x120
[  829.073151][T11910]  vfree+0x22c/0x490
[  829.073158][T11910]  __do_replace+0x850/0x9a0
[  829.073194][T11910]  do_ip6t_set_ctl+0xb45/0xe30
[  829.073203][T11910]  nf_setsockopt+0x26f/0x290
[  829.073211][T11910]  do_sock_setsockopt+0x17c/0x1b0
[  829.073220][T11910]  __x64_sys_setsockopt+0x13d/0x1b0
[  829.073228][T11910]  do_syscall_64+0x166/0x520
[  829.073236][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.073245][T11910] 
[  829.073248][T11910] Memory state around the buggy address:
[  829.073254][T11910]  ffff8880237b1d00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  829.073260][T11910]  ffff8880237b1d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  829.073267][T11910] >ffff8880237b1e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  829.073272][T11910]                                               ^
[  829.073277][T11910]  ffff8880237b1e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  829.073284][T11910]  ffff8880237b1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  829.073288][T11910] ==================================================================
[  829.073864][T17425] kernfs broadcast: removing
[  829.073895][T17425] kernfs speed: removing
[  829.073924][T17425] kernfs duplex: removing
[  829.073951][T17425] kernfs dormant: removing
[  829.073987][T17425] kernfs testing: removing
[  829.074015][T17425] kernfs operstate: removing
[  829.074044][T17425] kernfs carrier_changes: removing
[  829.074071][T17425] kernfs ifalias: removing
[  829.074098][T17425] kernfs carrier: removing
[  829.074128][T17425] kernfs mtu: removing
[  829.074155][T17425] kernfs flags: removing
[  829.074183][T17425] kernfs tx_queue_len: removing
[  829.074210][T17425] kernfs gro_flush_timeout: removing
[  829.074238][T17425] kernfs napi_defer_hard_irqs: removing
[  829.074266][T17425] kernfs proto_down: removing
[  829.074293][T17425] kernfs carrier_up_count: removing
[  829.074320][T17425] kernfs carrier_down_count: removing
[  829.074347][T17425] kernfs threaded: removing
[  829.074384][T17425] PM: Removing info for No Bus:syzkaller0
[  829.074423][T17425] kobject: 'syzkaller0' (ffff88807a5d87c0): kobject_uevent_env
[  829.074451][T17425] kobject: 'syzkaller0' (ffff88807a5d87c0): fill_kobj_path: path = '/devices/virtual/net/syzkaller0'
[  829.074534][T17425] kernfs syzkaller0: removing
[  829.078716][T11910] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  829.865004][T11910] CPU: 0 UID: 0 PID: 11910 Comm: syz-executor Tainted: G             L     Y syzkaller #0 PREEMPT(full) 
[  829.876263][T11910] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND
[  829.882037][T11910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  829.892070][T11910] Call Trace:
[  829.895345][T11910]  <TASK>
[  829.898256][T11910]  vpanic+0x26f/0x710
[  829.902220][T11910]  panic+0xc5/0xd0
[  829.906179][T11910]  ? __pfx_panic+0x10/0x10
[  829.910592][T11910]  ? preempt_schedule_common+0x7f/0xd0
[  829.916125][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.920967][T11910]  check_panic_on_warn+0x89/0xb0
[  829.925897][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.930758][T11910]  end_report+0x73/0x170
[  829.934990][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.939827][T11910]  kasan_report+0x128/0x150
[  829.944309][T11910]  ? ffs_data_clear+0x543/0x5b0
[  829.949137][T11910]  ffs_data_clear+0x543/0x5b0
[  829.953794][T11910]  ffs_fs_kill_sb+0x84/0x370
[  829.958359][T11910]  deactivate_locked_super+0xbe/0x110
[  829.963712][T11910]  cleanup_mnt+0x3d3/0x460
[  829.968110][T11910]  task_work_run+0x1d9/0x260
[  829.972767][T11910]  ? __pfx_task_work_run+0x10/0x10
[  829.978040][T11910]  exit_to_user_mode_loop+0x204/0x770
[  829.983392][T11910]  ? rcu_is_watching+0x16/0xb0
[  829.988154][T11910]  do_syscall_64+0x328/0x520
[  829.992723][T11910]  ? trace_irq_disable+0x3b/0x140
[  829.997722][T11910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.003766][T11910]  ? clear_bhb_loop+0x70/0xc0
[  830.008429][T11910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  830.014303][T11910] RIP: 0033:0x7f0c0c99f397
[  830.018694][T11910] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  830.038285][T11910] RSP: 002b:00007ffcc71a0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  830.046677][T11910] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f0c0c99f397
[  830.054628][T11910] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc71a0800
[  830.062577][T11910] RBP: 00007ffcc71a0800 R08: 00007ffcc71a1800 R09: 00000000ffffffff
[  830.070526][T11910] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc71a1890
[  830.078472][T11910] R13: 00007f0c0ca344bb R14: 00000000000ca529 R15: 00007ffcc71a18d0
[  830.086436][T11910]  </TASK>
[  830.089479][T11910] Kernel Offset: disabled
[  830.093822][T11910] Rebooting in 86400 seconds..