last executing test programs:

18m21.746783168s ago: executing program 32 (id=52):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, 0x0, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x60442, 0x0)
r5 = dup(r4)
preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000480)=""/121, 0x79}, {0x0}], 0x2, 0x401, 0x6)
lseek(r2, 0x1, 0x1)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94)
recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

8m28.245616331s ago: executing program 5 (id=1936):
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)

8m26.888112748s ago: executing program 5 (id=1939):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0)
r1 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x1088, 0x4, 0x2, 0x40, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, r1, 0x0, 0x8, 'syz1\x00', 0x0})

8m25.531358612s ago: executing program 5 (id=1943):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x871a15abc695fa3b, 0x70bd2d, 0x25dfdbfe, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

8m24.673031615s ago: executing program 5 (id=1947):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000004c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, &(0x7f0000000000)={0xffffffff, 0x2, 0xffffffff, 0x8034e, 0x3, 0xfffffffb})

8m21.267216444s ago: executing program 5 (id=1956):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000800), &(0x7f0000000880)='./debug/tracing/options/context-info\x00', 0x61088, &(0x7f00000008c0)={[{@sbsector={'sbsector', 0x3d, 0x6}}, {@cruft}, {@dmode={'dmode', 0x3d, 0x2}}], [{@flag='rw'}]}, 0x1, 0x55a, &(0x7f000001a240)="$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")
umount2(&(0x7f0000000200)='./debug\x00', 0x0)

8m20.208464974s ago: executing program 5 (id=1958):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92})

8m4.513471759s ago: executing program 33 (id=1958):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92})

7m6.321433448s ago: executing program 0 (id=2294):
setrlimit(0x9, &(0x7f0000000400)={0x0, 0x6})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

7m5.268113983s ago: executing program 0 (id=2295):
syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0/file0\x00', 0x800, 0x10)
lstat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000780))
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000007c0)=ANY=[])

7m4.930925699s ago: executing program 0 (id=2298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0xffffffffffffff09)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240000c0)
r6 = socket(0x2000000000000021, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r8 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, <r9=>r7})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x5)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r10=>0x0})
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000701030000000000000000030000010c000340000000440d0000010c000640000000000000000508000537000000030cd657af2422eb985a0a6cdff0efbed1662f3379a3b3002f0eb973925465c5d2186e05092f757f2ea70dca984b8801f710ba57cd25e6f4e773fc65b9150884ec93525453ca4a122e668198fa"], 0x34}}, 0x4c800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@loopback}}}, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r10, r11}, 0xc)

7m2.614211815s ago: executing program 0 (id=2307):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0), 0x3, 0x45c, &(0x7f0000000940)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B")
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', 'upperdir'})

7m1.119105592s ago: executing program 0 (id=2313):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286100", "90be8b1c550065406c7f30601300a0f4bd070000000000000000000000000800"}})
r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x80002)
ioctl$LOOP_SET_STATUS(r2, 0x1277, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "4b8b3ea46929dfed0b2f34380d308f95a023d009852471dd5a94a9fe9549918ae7fd1f0ececd9bada8b108403362cfe0f4fccffb1b6a2115354d4df15d017a3f", "2363f18d9acc6c25af21ca2af6d2e80e4caadd6d126cfb80c92dc817d44dcdec"})

6m59.623055019s ago: executing program 0 (id=2321):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
tkill(r0, 0x12)
waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000340))

6m59.037737841s ago: executing program 34 (id=2321):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r0, 0x13)
tkill(r0, 0x12)
waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000340))

4m46.189355519s ago: executing program 4 (id=2921):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92", 0x2}], 0x1}}], 0x1, 0x4400c880)
sendto$inet6(r0, &(0x7f0000000300), 0x7e, 0x3b00, 0x0, 0xfffffffffffffdfd)

4m45.987109131s ago: executing program 4 (id=2924):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66d", 0x2d}], 0x1, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x50, 0x1}], 0x2, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
recvmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000600), 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd\x00', 0x8)
mount(0x0, &(0x7f0000000680)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='-# ', 0x3)

4m44.690463027s ago: executing program 4 (id=2927):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000200)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000280)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e)
close(r0)

4m43.69413508s ago: executing program 4 (id=2930):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='\x00', 0x89901)
move_mount(r0, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x152)

4m42.634515893s ago: executing program 4 (id=2934):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x40ce, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f00000002c0)='27', 0x2)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000380)={<r2=>0xffffffffffffffff}, 0x2, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000400)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0xfffffcda)

4m41.031416459s ago: executing program 4 (id=2938):
r0 = syz_open_dev$vbi(&(0x7f0000001700), 0x2, 0x2)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000001740)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000017c0)=<r2=>0x0, &(0x7f0000001800)=<r3=>0x0, &(0x7f0000001840)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001880)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4048000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001a00)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000001a40)=0x2)

4m39.979103959s ago: executing program 35 (id=2938):
r0 = syz_open_dev$vbi(&(0x7f0000001700), 0x2, 0x2)
r1 = syz_io_uring_setup(0xf00, &(0x7f0000001740)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f00000017c0)=<r2=>0x0, &(0x7f0000001800)=<r3=>0x0, &(0x7f0000001840)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000001880)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4048000)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000001a00)={0x5, 0x2})
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000001a40)=0x2)

3m40.540111055s ago: executing program 3 (id=3110):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0xffffffffffffff09)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240000c0)
r6 = socket(0x2000000000000021, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, <r9=>r7})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x5)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r10=>0x0})
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000701030000000000000000030000010c000340000000440d0000010c000640000000000000000508000537000000030cd657af2422eb985a0a6cdff0efbed1662f3379a3b3002f0eb973925465c5d2186e05092f757f2ea70dca984b8801f710ba57cd25e6f4e773fc65b9"], 0x34}}, 0x4c800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@loopback}}}, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r10, r11}, 0xc)

3m39.476677315s ago: executing program 3 (id=3113):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x8001)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500)=0x2000000, &(0x7f0000000440)=r1}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f0000000040), 0x0}, 0x20)

3m39.187587193s ago: executing program 3 (id=3117):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3", 0x3c}], 0x1, &(0x7f0000000500)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x30, 0x1}], 0x2, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
recvmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0')
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000600), 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd\x00', 0x8)
mount(0x0, &(0x7f0000000680)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='-# ', 0x3)

3m38.235160952s ago: executing program 3 (id=3119):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0xc5c, &(0x7f00000001c0)={[{@errors_remount}, {@grpid}]}, 0x3, 0x459, &(0x7f0000000200)="$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")
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000940)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000001580)={0x2020}, 0x2020)

3m37.943104307s ago: executing program 3 (id=3123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0xffffffffffffff09)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240000c0)
r6 = socket(0x2000000000000021, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]})
r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x20004, <r9=>r7})
ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000040)=0x5)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r10=>0x0})
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="34000000000701030000000000000000030000010c000340000000440d0000010c000640000000000000000508000537000000030cd657af2422eb985a0a6cdff0efbed1662f3379a3b3002f0eb973925465c5d2186e05092f757f2ea70dca984b8801f710ba57cd25e6f4e773fc65b9150884ec93525453"], 0x34}}, 0x4c800)
getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@loopback}}}, 0x0)
setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={r10, r11}, 0xc)

3m36.659697588s ago: executing program 3 (id=3127):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20000000)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {0x0, 0x2}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)

3m34.641227122s ago: executing program 36 (id=3127):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syzkaller0\x00'})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20000000)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x3, 0xd}, {0x0, 0x2}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)

1m13.365433073s ago: executing program 8 (id=3567):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3", 0x3c}], 0x1, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x50, 0x1}], 0x2, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
recvmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, &(0x7f0000000140)='\x00'/19)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000600), 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd\x00', 0x8)
mount(0x0, &(0x7f0000000680)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='-# ', 0x3)

1m11.992983509s ago: executing program 8 (id=3570):
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r2 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r4, &(0x7f0000000240)={0x0, 0x0})
syz_kvm_add_vcpu$x86(r1, &(0x7f00000000c0)={0x0, 0x0})
r5 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x5a, {"660f3880590f12c442c5a9c3c7442406000000000f011424c4828bf635130000003e2ef2460f2cc5450f068866ba43000000000000eff20f2cae00880000660f38812766b804008ec8"}}], 0x72})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1m10.297116134s ago: executing program 8 (id=3583):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000300)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010)
shutdown(r0, 0x1)

1m9.034568052s ago: executing program 8 (id=3589):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r1, &(0x7f0000000580)='10', 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)

1m8.423435348s ago: executing program 8 (id=3591):
recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/29, 0x1d}, 0x7}], 0x1, 0x12141, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0xffffff16, 0xfe7e)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

1m7.428311234s ago: executing program 8 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x0, 0x2}, {0x100a}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
write$tun(r1, &(0x7f0000000480)=ANY=[], 0x20)

1m7.130747487s ago: executing program 37 (id=3593):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x401, 0x2000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0xffff, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1002, 0x0, 0x2}, {0x100a}}}]}}]}]}]}}]}, 0x5c}}, 0x0)
write$tun(r1, &(0x7f0000000480)=ANY=[], 0x20)

41.966325301s ago: executing program 1 (id=3630):
capset(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f00000001c0)='27', 0x2)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f0000000300)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, 0x0, 0x4008004)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x8001)

38.451205242s ago: executing program 1 (id=3634):
socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000300)=""/100, 0x64}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
close(r0)

37.382262344s ago: executing program 1 (id=3638):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@discard_async}, {@max_inline={'max_inline', 0x3d, [0x78, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
io_setup(0x202, &(0x7f0000000340)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
syz_usb_connect(0x6, 0x18, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff)
socket$vsock_stream(0x28, 0x1, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc400941b, &(0x7f0000000000)={0x1, 0x1400})

33.977359551s ago: executing program 1 (id=3642):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0xb8}}, 0x2c000010)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_usb_connect(0x2, 0xb3, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470881000200000001001b24", @ANYRES8=r1], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0})

29.683758077s ago: executing program 1 (id=3651):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x20000005)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000006c0), 0x208e24b)
preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000740)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})

25.642636098s ago: executing program 1 (id=3655):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b40)='+p', 0x2)
syz_mount_image$btrfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./debug/../file0\x00', 0x1914008, &(0x7f0000000c00), 0x0, 0x55f0, &(0x7f0000001cc0)="$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")
ioctl(r0, 0x400452c8, &(0x7f0000000040)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/rfcomm0\x00', 0x802, 0x0)

23.813469613s ago: executing program 9 (id=3656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x53)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

17.943602321s ago: executing program 9 (id=3658):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})

10.500872847s ago: executing program 9 (id=3663):
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$xfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x4000000, &(0x7f0000000240)={[{@filestreams}, {@usrquota}, {@noalign}, {@noattr2}, {@inode32}, {@nodiscard}, {@noattr2}, {@usrquota}, {@gquota}, {@pqnoenforce}]}, 0x1, 0x9827, &(0x7f00000002c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f000000ac80)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f000000acc0), 0xfea7)
pipe2(0x0, 0x80800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f000000ad40)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f000000ae80), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f000000aec0)=0x6)
syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x9, 0x0, 0x406}}}, 0x7)

10.422452447s ago: executing program 6 (id=3664):
mkdir(0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x11e, 0x20, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil})

9.617895071s ago: executing program 2 (id=3594):
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
syz_open_dev$usbmon(0x0, 0x80000001, 0x28100)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0x1}, @restrict={0xe, 0x0, 0x0, 0xb, 0x4}]}}, 0x0, 0x42, 0x0, 0x0, 0x3}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, 0xe)
sendmmsg$inet_sctp(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x30}, {&(0x7f0000000340)=@in6={0xa, 0x4e23, 0xa8, @private0, 0x2}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000003c0)="e7e2f92fb585766089af8707efc85b76ff9adbeae4cec352e75f9856d80a4f3857f06a05ec249cdf4d438ec66dd60684086ec0867e788275847019e3", 0x3c}], 0x1, &(0x7f0000000500)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x50, 0x1}], 0x2, 0x0)
ioctl$SIOCGSTAMP(r2, 0x8906, 0x0)
recvmmsg$unix(r2, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r3, 0x890b, 0x0)
bind$x25(r3, &(0x7f0000000080), 0x12)
connect$x25(r3, &(0x7f0000000600), 0x12)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000})
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./nfsd\x00', 0x8)
mount(0x0, &(0x7f0000000680)='./nfsd\x00', &(0x7f00000006c0)='nfsd\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x1, 0x0)
write(r5, &(0x7f0000000740)='-# ', 0x3)

8.547788838s ago: executing program 38 (id=3655):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000a80)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dynamic_debug/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000b40)='+p', 0x2)
syz_mount_image$btrfs(&(0x7f0000000b80), &(0x7f0000000bc0)='./debug/../file0\x00', 0x1914008, &(0x7f0000000c00), 0x0, 0x55f0, &(0x7f0000001cc0)="$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")
ioctl(r0, 0x400452c8, &(0x7f0000000040)="000000000000000000000000000000000000000001")
mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000840)='./dev\x00', &(0x7f0000000880)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/rfcomm0\x00', 0x802, 0x0)

8.511883607s ago: executing program 6 (id=3667):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0)
r1 = dup(r0)
pselect6(0x40, &(0x7f0000000300)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000, 0x2}, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000340)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"})
r2 = syz_open_pts(r0, 0x80)
r3 = dup3(r2, r0, 0x80000)
read(r0, &(0x7f00000003c0)=""/228, 0xe4)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f00000004c0)={0x3, 0x6, 0x8, 0xfffffff7, 0x23, "4bbe21000000911604000000f3ab00", 0x1, 0x8})
write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './bus', [], 0xa, "fac6ebe9bbf31000e1df08fc5c1c91714cf87cca9aa06353ec5533f7ace1a713ea44735df4511ab03178358c9959be82297cc5fb7901fb0996c13b6b2ee1414998cafcdb28a7a744d36face7e239b3f72ec6f49cff43db6e4e9371b9d998d60ccb68b3bc3fe39b4b8dfe1aec6e46cc8bdd90aa5baf9c226e91fc04a24b62fe65bc7ecbc0304fd71443faf663d4c513c4efe206d5cef8843303c6a140f23b73eaf8dc049f7371ae8ef807aef3f8d5a070dd3bfc1eaae00000"}, 0xc1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socket$inet_tcp(0x2, 0x1, 0x0)

7.313390614s ago: executing program 7 (id=3668):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r3, &(0x7f0000000180)='10', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x802, 0x20)
write(r4, &(0x7f0000000200)='1', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r5, &(0x7f0000000280)='0', 0x1)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x40000022, 0x0, 0xfffffffffffffff2}]})

7.26360542s ago: executing program 6 (id=3669):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c74424003f000000c744240291100000c7442406000000000f011424363e66f3440fc7fe400f5bcf0f226566ba2100b876560000ef440f01c4b93b0b0000b807000000ba000000000f30b805000000b9892b00000f01d966b801010f00d8660f28c7", 0x62}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.2183394s ago: executing program 2 (id=3670):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000400c)
r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180000003100017f000000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x1}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/ttyUSB0\x00', 0x40, 0x24)
lsetxattr$security_capability(&(0x7f00000000c0)='./dev/ttyUSB0\x00', &(0x7f0000000100), 0x0, 0x0, 0x2)
syz_usb_control_io(r1, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.951481789s ago: executing program 7 (id=3671):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x76)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
accept4$inet6(r1, 0x0, 0x0, 0x80800)

5.920485179s ago: executing program 6 (id=3672):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0)
syz_usb_connect$uac2(0x0, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xe41, 0x4249, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x9, 0x0, 0x8, {0x8, 0xb, 0x0, 0x2, 0x1, 0x0, 0x20, 0x7f}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x800, 0x7, 0x25, 0x6}, [@processing_unit={0x11, 0x24, 0x8, 0x4, 0x5, [0x1, 0x1, 0x2, 0x3, 0x2, 0x0]}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x4, [0x6, 0x6, 0xf2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x0, 0x7, 0xbdb8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x35, 0xd7, 0x7, {0x8, 0x25, 0x1, 0x2, 0x3}}}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740), 0x0}, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, &(0x7f0000000800)={0x2, 0x100})

5.770751814s ago: executing program 9 (id=3673):
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
recvfrom(r0, 0x0, 0x0, 0x2, 0x0, 0x60)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

4.35440539s ago: executing program 7 (id=3674):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(0x0, &(0x7f0000000e00)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x0, 0x63]}, &(0x7f0000000e40)={0x0, "004975ef815566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556e778899aabbccddeeffef5f00", 0x40}, 0x48, r2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c0251})
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x5})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

4.345967208s ago: executing program 9 (id=3675):
timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x101282, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f00000003c0)={'syzkaller0\x00'})
readv(r1, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/197, 0xc5}], 0x1)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)

4.326583311s ago: executing program 2 (id=3676):
socket(0x10, 0x803, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00007c2000/0x4000)=nil, &(0x7f00009dc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000726000/0x13000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.474915828s ago: executing program 2 (id=3677):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$lock(r2, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0)=[@cr4={0x1, 0x425c}], 0x1)
r3 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.007685581s ago: executing program 6 (id=3678):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x8000)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa4, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x70, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xffe0, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x1, 0x10, 0x1000, 0x80, 0x7f}, {0x8, 0x0, 0x800, 0x3, 0x2, 0x6}, 0xe72d, 0x2, 0x178d}}, @TCA_TBF_RATE64={0xc, 0x4, 0x3454acd1e6f80a22}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcd2e77eb9cafbc50}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)

2.501913456s ago: executing program 7 (id=3679):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r3})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={@private2})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)

2.07640047s ago: executing program 2 (id=3680):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x6, 0x300000f, 0x401d031, 0xffffffffffffffff, 0x0)
ioperm(0x4, 0x8, 0x5)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000900)='./file0\x00', 0x0, &(0x7f0000000940)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xf9, 0x4a4, &(0x7f0000000cc0)="$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")
rename(&(0x7f0000001180)='./file0/file0\x00', &(0x7f00000011c0)='./file1\x00')
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x101042, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
truncate(&(0x7f0000000700)='./file1\x00', 0x1000700)

1.505331608s ago: executing program 2 (id=3681):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0)
write(r2, &(0x7f0000000880)='off', 0x3)
write(r2, &(0x7f00000008c0)='on', 0x2)

1.238699655s ago: executing program 9 (id=3682):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000240)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000280)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000002c0)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x3, {{}, 0xfffff788}}, {0x8, 0x22eb, 0x2}, {0x8, 0x6558, 0x2}}}}}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000340)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r2, &(0x7f0000000380), 0x400000000000ec0, 0x2, &(0x7f00000003c0)={0x77359400})
syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x13e5, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x90, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xf, 0xd, 0x1d, {0x7, 0x25, 0x1, 0x8, 0x7f, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0xab, 0x6, {0x7, 0x25, 0x1, 0x8, 0x3, 0x5}}}}}}}}]}}, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0})

1.065407416s ago: executing program 6 (id=3683):
socket$inet6_icmp(0xa, 0x2, 0x3a)
mkdirat(0xffffffffffffffff, 0x0, 0x1fb)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x6d2a, 0x4000, 0x8, 0x223})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb)
io_uring_enter(r0, 0x1912, 0x71, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x2, r0, 0x4, {0x8, 0x5}, 0x6}, 0x1)

1.051196394s ago: executing program 7 (id=3684):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00')
prlimit64(0x0, 0xe, &(0x7f0000003240)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000003280)=0x7)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000)
r2 = syz_open_dev$MSR(&(0x7f0000003340), 0x0, 0x0)
read$msr(r2, &(0x7f0000003380)=""/102392, 0x18ff8)
pread64(r0, &(0x7f0000002fc0)=""/195, 0xc3, 0x591f)

0s ago: executing program 7 (id=3685):
syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0xc0, 0x6, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0x80, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0xae, 0xff}}]}}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x63)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff)
r0 = add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, &(0x7f0000000200)="3081d73081ba020101300d06092a864886f70d01010b0500300d310b3009060355040313024341301e170d3230303130313030303030305a170d3330303130313030303030305a300f310d300b06035504031304557365723066301f06082a85030701010101301306072a85030202230106082a850307010102020343000440d5a777f9262f8cbdcce31f0194053d2fecb50034f5516d3b904b23286f1dc836616036ecbbb40b954e544f152105d8526644317e5dc5d126005f60d8f0c727fc300d06092a864886f70d01010b05000309000102030405060708", 0xda, 0xffffffffffffffff)
keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000300)='enc=raw hash=stree\x00\x00\x00\x0056\x00\x80\x12\xff9\xa6\xcfGEyM\tKi\\\x11\x80\xf3\xee\"\xe4wR\xe3\xf1\x98\xc8\x0et\xac', 0x0)
mount(&(0x7f0000000100)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='ext4\x00', 0x8410, 0x0)
chdir(&(0x7f00000022c0)='./mnt\x00')
openat(0xffffffffffffff9c, &(0x7f0000002300)='./mnt\x00', 0x0, 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./bus\x00', 0x1d7)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

kernel console output (not intermixed with test programs):

0000000.
[ 1119.197178][T17784] FAULT_INJECTION: forcing a failure.
[ 1119.197178][T17784] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1119.197208][T17784] CPU: 1 UID: 0 PID: 17784 Comm: syz.8.3394 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1119.197233][T17784] Tainted: [L]=SOFTLOCKUP
[ 1119.197239][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1119.197252][T17784] Call Trace:
[ 1119.197260][T17784]  <TASK>
[ 1119.197270][T17784]  dump_stack_lvl+0xe8/0x150
[ 1119.197308][T17784]  should_fail_ex+0x3eb/0x540
[ 1119.197338][T17784]  _copy_from_user+0x2d/0xb0
[ 1119.197366][T17784]  bpf_vlog_reverse_ubuf+0xb1/0x3e0
[ 1119.197402][T17784]  bpf_vlog_finalize+0x189/0x3f0
[ 1119.197426][T17784]  bpf_log_attr_finalize+0x80/0x1e0
[ 1119.197449][T17784]  ? __pfx_bpf_log_attr_finalize+0x10/0x10
[ 1119.197476][T17784]  ? btf_parse_str_sec+0x1e7/0x2f0
[ 1119.197503][T17784]  btf_new_fd+0x6a0/0x8f0
[ 1119.197526][T17784]  __sys_bpf+0xe0c/0xe70
[ 1119.197556][T17784]  ? __pfx___sys_bpf+0x10/0x10
[ 1119.197579][T17784]  ? do_futex+0x3e7/0x4e0
[ 1119.197626][T17784]  ? rcu_is_watching+0x16/0xb0
[ 1119.197663][T17784]  __x64_sys_bpf+0xba/0xd0
[ 1119.197694][T17784]  do_syscall_64+0x16a/0x530
[ 1119.197716][T17784]  ? trace_irq_disable+0x3b/0x140
[ 1119.197743][T17784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.197763][T17784]  ? clear_bhb_loop+0x70/0xc0
[ 1119.197796][T17784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.197816][T17784] RIP: 0033:0x00007fc22779fb19
[ 1119.197836][T17784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1119.197854][T17784] RSP: 002b:00007fc2259f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1119.197875][T17784] RAX: ffffffffffffffda RBX: 00007fc227a25fa0 RCX: 00007fc22779fb19
[ 1119.197889][T17784] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012
[ 1119.197902][T17784] RBP: 00007fc227837b70 R08: 0000000000000000 R09: 0000000000000000
[ 1119.197914][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1119.197926][T17784] R13: 00007fc227a26038 R14: 00007fc227a25fa0 R15: 00007ffe515e7ff8
[ 1119.197959][T17784]  </TASK>
[ 1119.273424][   T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[ 1119.437559][   T10] usb 8-1: New USB device found: idVendor=046d, idProduct=c222, bcdDevice=0.00
[ 1119.441434][   T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1119.441484][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1119.758304][T17797] FAULT_INJECTION: forcing a failure.
[ 1119.758304][T17797] name failslab, interval 1, probability 0, space 0, times 0
[ 1119.758463][T17797] CPU: 0 UID: 0 PID: 17797 Comm: syz.1.3397 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1119.758494][T17797] Tainted: [L]=SOFTLOCKUP
[ 1119.758503][T17797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1119.758515][T17797] Call Trace:
[ 1119.758522][T17797]  <TASK>
[ 1119.758530][T17797]  dump_stack_lvl+0xe8/0x150
[ 1119.758556][T17797]  should_fail_ex+0x3eb/0x540
[ 1119.758576][T17797]  should_failslab+0xa8/0x100
[ 1119.758589][T17797]  ? key_alloc+0x340/0xd20
[ 1119.758601][T17797]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1119.758616][T17797]  ? key_alloc+0x340/0xd20
[ 1119.758630][T17797]  key_alloc+0x340/0xd20
[ 1119.758665][T17797]  __key_create_or_update+0x867/0xab0
[ 1119.758688][T17797]  ? __pfx___key_create_or_update+0x10/0x10
[ 1119.758700][T17797]  ? lookup_user_key+0x112c/0x12c0
[ 1119.758721][T17797]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1119.758740][T17797]  key_create_or_update+0x42/0x60
[ 1119.758755][T17797]  __se_sys_add_key+0x349/0x420
[ 1119.758772][T17797]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1119.758792][T17797]  ? __x64_sys_add_key+0x20/0xc0
[ 1119.758808][T17797]  do_syscall_64+0x16a/0x530
[ 1119.758820][T17797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.758831][T17797]  ? clear_bhb_loop+0x70/0xc0
[ 1119.758844][T17797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1119.758855][T17797] RIP: 0033:0x00007fa019d9fb19
[ 1119.758868][T17797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1119.758878][T17797] RSP: 002b:00007fa01ac17028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1119.758890][T17797] RAX: ffffffffffffffda RBX: 00007fa01a026180 RCX: 00007fa019d9fb19
[ 1119.758898][T17797] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900
[ 1119.758905][T17797] RBP: 00007fa019e37b70 R08: ffffffffffffffff R09: 0000000000000000
[ 1119.758912][T17797] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000
[ 1119.758919][T17797] R13: 00007fa01a026218 R14: 00007fa01a026180 R15: 00007fff2907ff38
[ 1119.758937][T17797]  </TASK>
[ 1120.369127][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3399'.
[ 1121.464938][ T2263] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1121.982523][   T10] lg-g15 0003:046D:C222.002D: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.7-1/input0
[ 1122.363862][   T10] input: Logitech Gaming Keyboard Gaming Keys as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:046D:C222.002D/input/input55
[ 1122.546112][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.551225][ T2263] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1122.552357][ T2263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1122.552403][ T2263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1122.552428][ T2263] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1122.552465][ T2263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1122.601706][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.607343][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.612363][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.617604][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.624465][   T10] lg-g15 0003:046D:C222.002D: Error getting LED brightness: -71
[ 1122.679076][   T10] usb 8-1: USB disconnect, device number 17
[ 1122.731719][T17809] fido_id[17809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory
[ 1123.722292][ T2263] cxacru 2-1:1.0: send of cm 0x90 failed (-71)
[ 1123.931251][T17830] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1124.364752][ T2263] usb 2-1: USB disconnect, device number 63
[ 1125.982487][T17846] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1126.190386][T17856] FAULT_INJECTION: forcing a failure.
[ 1126.190386][T17856] name failslab, interval 1, probability 0, space 0, times 0
[ 1126.190408][T17856] CPU: 1 UID: 0 PID: 17856 Comm: syz.8.3413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1126.190424][T17856] Tainted: [L]=SOFTLOCKUP
[ 1126.190428][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1126.190436][T17856] Call Trace:
[ 1126.190440][T17856]  <TASK>
[ 1126.190445][T17856]  dump_stack_lvl+0xe8/0x150
[ 1126.190469][T17856]  should_fail_ex+0x3eb/0x540
[ 1126.190487][T17856]  should_failslab+0xa8/0x100
[ 1126.190500][T17856]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 1126.190516][T17856]  ? xs_format_peer_addresses+0x162/0x530
[ 1126.190597][T17856]  ? xs_format_peer_addresses+0x162/0x530
[ 1126.190617][T17856]  kstrdup+0x42/0x100
[ 1126.190632][T17856]  xs_format_peer_addresses+0x162/0x530
[ 1126.190648][T17856]  ? __pfx_xs_format_peer_addresses+0x10/0x10
[ 1126.190672][T17856]  ? timer_init_key+0x161/0x2c0
[ 1126.190700][T17856]  xs_setup_tcp+0x751/0x920
[ 1126.190714][T17856]  ? __pfx_xs_setup_tcp+0x10/0x10
[ 1126.190730][T17856]  ? do_raw_spin_unlock+0xf5/0x200
[ 1126.190745][T17856]  xprt_create_transport+0x166/0x5f0
[ 1126.190762][T17856]  rpc_create+0x53a/0x910
[ 1126.190798][T17856]  ? __pfx_rpc_create+0x10/0x10
[ 1126.190833][T17856]  ? net_generic+0x1e/0x240
[ 1126.190856][T17856]  ? net_generic+0x1e/0x240
[ 1126.190869][T17856]  ? nfs_create_rpc_client+0x2ff/0x7a0
[ 1126.190886][T17856]  nfs_create_rpc_client+0x58d/0x7a0
[ 1126.190901][T17856]  ? __pfx_nfs_create_rpc_client+0x10/0x10
[ 1126.190926][T17856]  ? __raw_spin_lock_init+0x45/0x100
[ 1126.190938][T17856]  ? __init_waitqueue_head+0xa8/0x150
[ 1126.190950][T17856]  nfs4_alloc_client+0x888/0xd40
[ 1126.190978][T17856]  ? __pfx_nfs4_alloc_client+0x10/0x10
[ 1126.190997][T17856]  ? lock_acquire+0x115/0x350
[ 1126.191010][T17856]  ? net_generic+0x1e/0x240
[ 1126.191028][T17856]  ? do_raw_spin_unlock+0xf5/0x200
[ 1126.191041][T17856]  nfs_get_client+0xbf7/0xfc0
[ 1126.191061][T17856]  ? timer_init_key+0x161/0x2c0
[ 1126.191080][T17856]  nfs4_set_client+0x365/0x560
[ 1126.191097][T17856]  nfs4_create_server+0x553/0x1150
[ 1126.191114][T17856]  ? __pfx_nfs4_create_server+0x10/0x10
[ 1126.191145][T17856]  ? __pfx_nfs4_try_get_tree+0x10/0x10
[ 1126.191161][T17856]  nfs4_try_get_tree+0x49/0x110
[ 1126.191177][T17856]  vfs_get_tree+0x92/0x2a0
[ 1126.191197][T17856]  do_new_mount+0x325/0xb00
[ 1126.191213][T17856]  ? __pfx_do_new_mount+0x10/0x10
[ 1126.191227][T17856]  ? ns_capable+0x84/0xe0
[ 1126.191243][T17856]  ? path_mount+0x647/0x1050
[ 1126.191257][T17856]  ? user_path_at+0xd4/0x160
[ 1126.191272][T17856]  __se_sys_mount+0x31d/0x420
[ 1126.191288][T17856]  ? __pfx___se_sys_mount+0x10/0x10
[ 1126.191304][T17856]  ? __x64_sys_mount+0x20/0xc0
[ 1126.191318][T17856]  do_syscall_64+0x16a/0x530
[ 1126.191330][T17856]  ? trace_irq_disable+0x3b/0x140
[ 1126.191344][T17856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.191355][T17856]  ? clear_bhb_loop+0x70/0xc0
[ 1126.191370][T17856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.191380][T17856] RIP: 0033:0x00007fc22779fb19
[ 1126.191393][T17856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1126.191402][T17856] RSP: 002b:00007fc2259f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1126.191414][T17856] RAX: ffffffffffffffda RBX: 00007fc227a25fa0 RCX: 00007fc22779fb19
[ 1126.191422][T17856] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000200000000080
[ 1126.191429][T17856] RBP: 00007fc227837b70 R08: 0000200000000140 R09: 0000000000000000
[ 1126.191436][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1126.191442][T17856] R13: 00007fc227a26038 R14: 00007fc227a25fa0 R15: 00007ffe515e7ff8
[ 1126.191460][T17856]  </TASK>
[ 1126.631259][   T33] audit: type=1326 audit(1793817384.589:11197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17858 comm="syz.6.3414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e859fb19 code=0x7fc00000
[ 1126.664870][   T33] audit: type=1326 audit(1793817384.617:11198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17858 comm="syz.6.3414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb4e859fb19 code=0x7fc00000
[ 1126.666451][   T33] audit: type=1326 audit(1793817384.626:11199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17858 comm="syz.6.3414" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4e859fb19 code=0x7fc00000
[ 1127.604097][T17873] FAULT_INJECTION: forcing a failure.
[ 1127.604097][T17873] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1127.604273][T17873] CPU: 0 UID: 0 PID: 17873 Comm: syz.9.3416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1127.604302][T17873] Tainted: [L]=SOFTLOCKUP
[ 1127.604310][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1127.604322][T17873] Call Trace:
[ 1127.604330][T17873]  <TASK>
[ 1127.604339][T17873]  dump_stack_lvl+0xe8/0x150
[ 1127.604377][T17873]  should_fail_ex+0x3eb/0x540
[ 1127.604410][T17873]  get_futex_key+0x1ab/0x1410
[ 1127.604438][T17873]  ? rcu_is_watching+0x16/0xb0
[ 1127.604468][T17873]  ? trace_hrtimer_start+0x82/0x200
[ 1127.604500][T17873]  ? __pfx_get_futex_key+0x10/0x10
[ 1127.604538][T17873]  futex_wake+0x119/0x5f0
[ 1127.604565][T17873]  ? rcu_is_watching+0x16/0xb0
[ 1127.604597][T17873]  ? __pfx_futex_wake+0x10/0x10
[ 1127.604621][T17873]  ? __schedule+0x17f3/0x5830
[ 1127.604655][T17873]  do_futex+0x458/0x4e0
[ 1127.604682][T17873]  ? __pfx_do_futex+0x10/0x10
[ 1127.604711][T17873]  __se_sys_futex+0x3a8/0x450
[ 1127.604739][T17873]  ? __pfx___se_sys_futex+0x10/0x10
[ 1127.604759][T17873]  ? rcu_is_watching+0x16/0xb0
[ 1127.604793][T17873]  ? __x64_sys_futex+0x21/0xf0
[ 1127.604817][T17873]  do_syscall_64+0x16a/0x530
[ 1127.604839][T17873]  ? trace_irq_disable+0x3b/0x140
[ 1127.604865][T17873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1127.604885][T17873]  ? clear_bhb_loop+0x70/0xc0
[ 1127.604909][T17873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1127.604929][T17873] RIP: 0033:0x00007f0804b9fb19
[ 1127.604949][T17873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1127.604966][T17873] RSP: 002b:00007f08059c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1127.604988][T17873] RAX: ffffffffffffffda RBX: 00007f0804e26098 RCX: 00007f0804b9fb19
[ 1127.605003][T17873] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0804e2609c
[ 1127.605017][T17873] RBP: 00007f0804e26090 R08: 3fffffffffffffff R09: 0000000000000000
[ 1127.605031][T17873] R10: 000000003da8c9e5 R11: 0000000000000246 R12: 0000000000000000
[ 1127.605043][T17873] R13: 00007f0804e26128 R14: 00007ffdfa2dfd20 R15: 00007ffdfa2dfe08
[ 1127.605075][T17873]  </TASK>
[ 1128.754643][ T2263] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1128.975419][ T2263] usb 10-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1128.994329][ T2263] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.995489][ T2263] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1128.995518][ T2263] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1128.996647][ T2263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.289643][ T2263] cxacru 10-1:1.0: send of cm 0x90 failed (-71)
[ 1129.396787][T17878] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1129.522571][ T2263] usb 10-1: USB disconnect, device number 5
[ 1129.606677][T17880] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 1133.184718][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1134.089634][T17918] FAULT_INJECTION: forcing a failure.
[ 1134.089634][T17918] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1134.089657][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.1.3436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1134.089673][T17918] Tainted: [L]=SOFTLOCKUP
[ 1134.089677][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1134.089686][T17918] Call Trace:
[ 1134.089690][T17918]  <TASK>
[ 1134.089696][T17918]  dump_stack_lvl+0xe8/0x150
[ 1134.089719][T17918]  should_fail_ex+0x3eb/0x540
[ 1134.089738][T17918]  prepare_alloc_pages+0x21e/0x5f0
[ 1134.089757][T17918]  __alloc_frozen_pages_noprof+0x189/0x450
[ 1134.089772][T17918]  ? lock_acquire+0x115/0x350
[ 1134.089788][T17918]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1134.089807][T17918]  ? policy_nodemask+0x31b/0x980
[ 1134.089818][T17918]  ? __lock_acquire+0x747/0x2de0
[ 1134.089832][T17918]  alloc_pages_mpol+0x21e/0x390
[ 1134.089846][T17918]  folio_alloc_mpol_noprof+0x39/0x160
[ 1134.089858][T17918]  vma_alloc_folio_noprof+0xe1/0x210
[ 1134.089871][T17918]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1134.089885][T17918]  ? vma_has_anon_rmap+0xc9/0x270
[ 1134.089902][T17918]  do_pte_missing+0x16d4/0x3570
[ 1134.089924][T17918]  handle_mm_fault+0x1807/0x2f80
[ 1134.089942][T17918]  ? handle_mm_fault+0xee/0x2f80
[ 1134.089957][T17918]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1134.089967][T17918]  ? lock_vma_under_rcu+0x45a/0x500
[ 1134.089978][T17918]  ? do_sys_openat2+0x18d/0x200
[ 1134.090002][T17918]  do_user_addr_fault+0xb35/0x1480
[ 1134.090021][T17918]  ? trace_page_fault_user+0x84/0x1e0
[ 1134.090035][T17918]  exc_page_fault+0x6a/0xc0
[ 1134.090049][T17918]  asm_exc_page_fault+0x26/0x30
[ 1134.090059][T17918] RIP: 0033:0x00007fa019c6710a
[ 1134.090072][T17918] Code: 00 4c 89 e7 31 c0 48 8d 35 b5 15 1d 00 e8 ae 6f 0e 00 66 0f 6f 05 16 15 1f 00 4c 89 e6 48 8d bc 24 f0 10 00 00 ba 80 00 00 00 <0f> 29 84 24 70 10 00 00 66 0f ef c0 0f 29 84 24 80 10 00 00 0f 29
[ 1134.090081][T17918] RSP: 002b:00007fa01ac56f60 EFLAGS: 00010202
[ 1134.090095][T17918] RAX: 000000000000000b RBX: 000000000000000a RCX: 0000000000000000
[ 1134.090102][T17918] RDX: 0000000000000080 RSI: 00007fa01ac56fa0 RDI: 00007fa01ac58050
[ 1134.090109][T17918] RBP: 00007fa01ac57fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 1134.090116][T17918] R10: 0000000000000000 R11: 0000000000000000 R12: 00007fa01ac56fa0
[ 1134.090123][T17918] R13: 0000200000000a00 R14: 0000000000000003 R15: 0000000000000000
[ 1134.090139][T17918]  </TASK>
[ 1134.090147][T17918] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1134.418915][ T2263] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1134.620450][ T2263] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1134.637519][ T2263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1134.637733][ T2263] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1134.637772][ T2263] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1134.637903][ T2263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1135.391423][ T2263] cxacru 2-1:1.0: send of cm 0x90 failed (-71)
[ 1135.400975][T17946] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1135.441954][ T2263] usb 2-1: USB disconnect, device number 64
[ 1135.463334][T17944] FAULT_INJECTION: forcing a failure.
[ 1135.463334][T17944] name failslab, interval 1, probability 0, space 0, times 0
[ 1135.463367][T17944] CPU: 1 UID: 0 PID: 17944 Comm: syz.7.3440 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1135.463395][T17944] Tainted: [L]=SOFTLOCKUP
[ 1135.463403][T17944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1135.463416][T17944] Call Trace:
[ 1135.463425][T17944]  <TASK>
[ 1135.463433][T17944]  dump_stack_lvl+0xe8/0x150
[ 1135.463472][T17944]  should_fail_ex+0x3eb/0x540
[ 1135.463504][T17944]  should_failslab+0xa8/0x100
[ 1135.463527][T17944]  __kmalloc_cache_noprof+0x9e/0x600
[ 1135.463553][T17944]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1135.463577][T17944]  ? fuse_get_tree+0xc2/0x3b0
[ 1135.463631][T17944]  ? fuse_get_tree+0xc2/0x3b0
[ 1135.463657][T17944]  fuse_get_tree+0xc2/0x3b0
[ 1135.463678][T17944]  vfs_get_tree+0x92/0x2a0
[ 1135.463709][T17944]  do_new_mount+0x325/0xb00
[ 1135.463740][T17944]  ? __pfx_do_new_mount+0x10/0x10
[ 1135.463767][T17944]  ? ns_capable+0x84/0xe0
[ 1135.463795][T17944]  ? path_mount+0x647/0x1050
[ 1135.463822][T17944]  ? user_path_at+0xd4/0x160
[ 1135.463851][T17944]  __se_sys_mount+0x31d/0x420
[ 1135.463882][T17944]  ? __pfx___se_sys_mount+0x10/0x10
[ 1135.463916][T17944]  ? __x64_sys_mount+0x20/0xc0
[ 1135.463943][T17944]  do_syscall_64+0x16a/0x530
[ 1135.463966][T17944]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.463986][T17944]  ? clear_bhb_loop+0x70/0xc0
[ 1135.464010][T17944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1135.464037][T17944] RIP: 0033:0x00007efc40f9fb19
[ 1135.464057][T17944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1135.464072][T17944] RSP: 002b:00007efc41e18028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1135.464095][T17944] RAX: ffffffffffffffda RBX: 00007efc41225fa0 RCX: 00007efc40f9fb19
[ 1135.464108][T17944] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000
[ 1135.464121][T17944] RBP: 00007efc41037b70 R08: 0000200000000240 R09: 0000000000000000
[ 1135.464135][T17944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1135.464147][T17944] R13: 00007efc41226038 R14: 00007efc41225fa0 R15: 00007ffc9c192a58
[ 1135.464180][T17944]  </TASK>
[ 1138.262608][T17965] lo: entered allmulticast mode
[ 1138.271798][T17961] lo: left allmulticast mode
[ 1139.430824][T17974] FAULT_INJECTION: forcing a failure.
[ 1139.430824][T17974] name failslab, interval 1, probability 0, space 0, times 0
[ 1139.430860][T17974] CPU: 0 UID: 0 PID: 17974 Comm: syz.7.3450 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1139.430889][T17974] Tainted: [L]=SOFTLOCKUP
[ 1139.430897][T17974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1139.430911][T17974] Call Trace:
[ 1139.430919][T17974]  <TASK>
[ 1139.430928][T17974]  dump_stack_lvl+0xe8/0x150
[ 1139.430968][T17974]  should_fail_ex+0x3eb/0x540
[ 1139.431000][T17974]  should_failslab+0xa8/0x100
[ 1139.431024][T17974]  __kmalloc_cache_noprof+0x9e/0x600
[ 1139.431051][T17974]  ? blk_alloc_queue_stats+0x4c/0x100
[ 1139.431072][T17974]  ? blk_alloc_queue_stats+0x4c/0x100
[ 1139.431100][T17974]  blk_alloc_queue_stats+0x4c/0x100
[ 1139.431121][T17974]  blk_alloc_queue+0xcc/0x690
[ 1139.431148][T17974]  __blk_mq_alloc_disk+0x194/0x390
[ 1139.431186][T17974]  ? __pfx___blk_mq_alloc_disk+0x10/0x10
[ 1139.431229][T17974]  ? blk_mq_alloc_tag_set+0xb61/0x1000
[ 1139.431266][T17974]  loop_add+0x480/0xb40
[ 1139.431347][T17974]  ? __pfx_loop_add+0x10/0x10
[ 1139.431401][T17974]  loop_control_ioctl+0x12b/0x5a0
[ 1139.431424][T17974]  ? __fget_files+0x2a/0x420
[ 1139.431459][T17974]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1139.431486][T17974]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1139.431516][T17974]  ? __pfx_loop_control_ioctl+0x10/0x10
[ 1139.431539][T17974]  __se_sys_ioctl+0xfc/0x170
[ 1139.431561][T17974]  do_syscall_64+0x16a/0x530
[ 1139.431584][T17974]  ? trace_irq_disable+0x3b/0x140
[ 1139.431610][T17974]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.431631][T17974]  ? clear_bhb_loop+0x70/0xc0
[ 1139.431655][T17974]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.431673][T17974] RIP: 0033:0x00007efc40f9fb19
[ 1139.431694][T17974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1139.431711][T17974] RSP: 002b:00007efc41e18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1139.431734][T17974] RAX: ffffffffffffffda RBX: 00007efc41225fa0 RCX: 00007efc40f9fb19
[ 1139.431750][T17974] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004
[ 1139.431763][T17974] RBP: 00007efc41037b70 R08: 0000000000000000 R09: 0000000000000000
[ 1139.431776][T17974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1139.431789][T17974] R13: 00007efc41226038 R14: 00007efc41225fa0 R15: 00007ffc9c192a58
[ 1139.431824][T17974]  </TASK>
[ 1139.690047][T17980] loop6: detected capacity change from 0 to 16
[ 1139.711827][T17980] erofs (device loop6): mounted with root inode @ nid 36.
[ 1139.773664][T17980] syz.6.3454: attempt to access beyond end of device
[ 1139.773664][T17980] loop6: rw=524288, sector=8, nr_sectors = 24 limit=16
[ 1139.803297][T17980] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[ 1139.803334][T17980] erofs (device loop6): read error -117 @ 0 of nid 89
[ 1139.807320][   T33] audit: type=1800 audit(1793817396.758:11200): pid=17980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3454" name="file2" dev="loop6" ino=89 res=0 errno=-117
[ 1139.857504][T17980] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[ 1139.857540][T17980] erofs (device loop6): read error -117 @ 0 of nid 89
[ 1141.100115][T17995] FAULT_INJECTION: forcing a failure.
[ 1141.100115][T17995] name failslab, interval 1, probability 0, space 0, times 0
[ 1141.100160][T17995] CPU: 1 UID: 0 PID: 17995 Comm: syz.7.3458 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1141.100189][T17995] Tainted: [L]=SOFTLOCKUP
[ 1141.100196][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1141.100209][T17995] Call Trace:
[ 1141.100217][T17995]  <TASK>
[ 1141.100226][T17995]  dump_stack_lvl+0xe8/0x150
[ 1141.100262][T17995]  should_fail_ex+0x3eb/0x540
[ 1141.100296][T17995]  should_failslab+0xa8/0x100
[ 1141.100319][T17995]  __kmalloc_cache_noprof+0x9e/0x600
[ 1141.100345][T17995]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1141.100370][T17995]  ? raw_ioctl+0x1b88/0x41c0
[ 1141.100402][T17995]  ? raw_ioctl+0x1b88/0x41c0
[ 1141.100436][T17995]  raw_ioctl+0x1b88/0x41c0
[ 1141.100471][T17995]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1141.100497][T17995]  ? do_vfs_ioctl+0x116f/0x1530
[ 1141.100520][T17995]  ? __pfx_raw_ioctl+0x10/0x10
[ 1141.100550][T17995]  ? trace_sched_exit_tp+0x3a/0x130
[ 1141.100613][T17995]  ? __fget_files+0x2a/0x420
[ 1141.100639][T17995]  ? __fget_files+0x2a/0x420
[ 1141.100668][T17995]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1141.100696][T17995]  ? __pfx_raw_ioctl+0x10/0x10
[ 1141.100724][T17995]  __se_sys_ioctl+0xfc/0x170
[ 1141.100746][T17995]  do_syscall_64+0x16a/0x530
[ 1141.100769][T17995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.100790][T17995]  ? clear_bhb_loop+0x70/0xc0
[ 1141.100814][T17995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.100834][T17995] RIP: 0033:0x00007efc40f9f7ab
[ 1141.100854][T17995] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1141.100871][T17995] RSP: 002b:00007efc41df4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1141.100892][T17995] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007efc40f9f7ab
[ 1141.100906][T17995] RDX: 00007efc41df5fd0 RSI: 0000000041015500 RDI: 000000000000000a
[ 1141.100919][T17995] RBP: 00007efc41df5fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 1141.100933][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc41df4fa0
[ 1141.100946][T17995] R13: 0000200000000a00 R14: 0000000000000003 R15: 0000000000000000
[ 1141.100978][T17995]  </TASK>
[ 1141.272955][T17999] FAULT_INJECTION: forcing a failure.
[ 1141.272955][T17999] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1141.272988][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.9.3460 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1141.273025][T17999] Tainted: [L]=SOFTLOCKUP
[ 1141.273033][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1141.273046][T17999] Call Trace:
[ 1141.273054][T17999]  <TASK>
[ 1141.273062][T17999]  dump_stack_lvl+0xe8/0x150
[ 1141.273099][T17999]  should_fail_ex+0x3eb/0x540
[ 1141.273132][T17999]  get_futex_key+0x1ab/0x1410
[ 1141.273168][T17999]  ? __pfx_get_futex_key+0x10/0x10
[ 1141.273193][T17999]  ? do_raw_spin_unlock+0xf5/0x200
[ 1141.273221][T17999]  futex_wake+0x119/0x5f0
[ 1141.273250][T17999]  ? __pfx_futex_wake+0x10/0x10
[ 1141.273276][T17999]  ? __se_sys_fsconfig+0x6c4/0x810
[ 1141.273301][T17999]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1141.273328][T17999]  do_futex+0x458/0x4e0
[ 1141.273352][T17999]  ? __pfx_do_futex+0x10/0x10
[ 1141.273369][T17999]  ? kfree+0x4d/0x650
[ 1141.273399][T17999]  __se_sys_futex+0x3a8/0x450
[ 1141.273422][T17999]  ? __pfx___se_sys_fsconfig+0x10/0x10
[ 1141.273442][T17999]  ? __pfx___se_sys_futex+0x10/0x10
[ 1141.273461][T17999]  ? rcu_is_watching+0x16/0xb0
[ 1141.273495][T17999]  ? __x64_sys_futex+0x21/0xf0
[ 1141.273516][T17999]  do_syscall_64+0x16a/0x530
[ 1141.273536][T17999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.273556][T17999]  ? clear_bhb_loop+0x70/0xc0
[ 1141.273578][T17999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1141.273597][T17999] RIP: 0033:0x00007f0804b9fb19
[ 1141.273617][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1141.273632][T17999] RSP: 002b:00007f08059ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1141.273652][T17999] RAX: ffffffffffffffda RBX: 00007f0804e25fa8 RCX: 00007f0804b9fb19
[ 1141.273666][T17999] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0804e25fac
[ 1141.273679][T17999] RBP: 00007f0804e25fa0 R08: 3fffffffffffffff R09: 0000000000000000
[ 1141.273692][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1141.273704][T17999] R13: 00007f0804e26038 R14: 00007ffdfa2dfd20 R15: 00007ffdfa2dfe08
[ 1141.273735][T17999]  </TASK>
[ 1142.357875][T18012] loop9: detected capacity change from 0 to 256
[ 1142.400366][  T303] IPVS: starting estimator thread 0...
[ 1142.488860][T18015] IPVS: using max 47 ests per chain, 112800 per kthread
[ 1143.014590][T18012] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[ 1143.402097][   T33] audit: type=1800 audit(1793817400.081:11201): pid=18025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3466" name="file1" dev="loop9" ino=961 res=0 errno=-22
[ 1143.470474][T18020] bridge0: port 3(netdevsim0) entered disabled state
[ 1143.470661][T18020] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1143.470907][T18020] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1144.276063][T13294] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1144.483250][T13294] usb 9-1: Using ep0 maxpacket: 16
[ 1144.498410][T13294] usb 9-1: New USB device found: idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1144.539117][T13294] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1144.539165][T13294] usb 9-1: config 0 has no interface number 0
[ 1144.589263][T13294] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.589330][T13294] usb 9-1: Product: syz
[ 1144.589387][T13294] usb 9-1: Manufacturer: syz
[ 1144.589438][T13294] usb 9-1: SerialNumber: syz
[ 1144.642555][T13294] usb 9-1: config 0 descriptor??
[ 1144.664260][T13294] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1145.100154][   T14] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.101239][   T14] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.101312][   T14] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.101346][   T14] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1145.412221][T18052] FAULT_INJECTION: forcing a failure.
[ 1145.412221][T18052] name failslab, interval 1, probability 0, space 0, times 0
[ 1145.412275][T18052] CPU: 1 UID: 0 PID: 18052 Comm: syz.1.3475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1145.412303][T18052] Tainted: [L]=SOFTLOCKUP
[ 1145.412311][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1145.412323][T18052] Call Trace:
[ 1145.412331][T18052]  <TASK>
[ 1145.412340][T18052]  dump_stack_lvl+0xe8/0x150
[ 1145.412378][T18052]  should_fail_ex+0x3eb/0x540
[ 1145.412412][T18052]  should_failslab+0xa8/0x100
[ 1145.412436][T18052]  __kmalloc_noprof+0xf9/0x710
[ 1145.412462][T18052]  ? tomoyo_encode+0x2ad/0x570
[ 1145.412486][T18052]  ? tomoyo_encode+0x2ad/0x570
[ 1145.412516][T18052]  tomoyo_encode+0x2ad/0x570
[ 1145.412546][T18052]  tomoyo_realpath_from_path+0x5fd/0x640
[ 1145.412581][T18052]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1145.412602][T18052]  tomoyo_path_number_perm+0x246/0x5f0
[ 1145.412626][T18052]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1145.412644][T18052]  ? __lock_acquire+0x747/0x2de0
[ 1145.412685][T18052]  ? __pfx___schedule+0x10/0x10
[ 1145.412727][T18052]  ? __fget_files+0x2a/0x420
[ 1145.412756][T18052]  ? __fget_files+0x2a/0x420
[ 1145.412781][T18052]  ? __fget_files+0x2a/0x420
[ 1145.412812][T18052]  security_file_ioctl+0xc3/0x2a0
[ 1145.412846][T18052]  __se_sys_ioctl+0x47/0x170
[ 1145.412869][T18052]  do_syscall_64+0x16a/0x530
[ 1145.412894][T18052]  ? trace_irq_disable+0x3b/0x140
[ 1145.412921][T18052]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.412941][T18052]  ? clear_bhb_loop+0x70/0xc0
[ 1145.412967][T18052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.412987][T18052] RIP: 0033:0x00007fa019d9f7ab
[ 1145.413008][T18052] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[ 1145.413023][T18052] RSP: 002b:00007fa01ac14f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1145.413044][T18052] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007fa019d9f7ab
[ 1145.413059][T18052] RDX: 00007fa01ac15fd0 RSI: 0000000041015500 RDI: 000000000000000a
[ 1145.413072][T18052] RBP: 00007fa01ac15fd0 R08: 0000000000000001 R09: 00000000ffffffff
[ 1145.413085][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa01ac14fa0
[ 1145.413099][T18052] R13: 0000200000000a00 R14: 0000000000000003 R15: 0000000000000000
[ 1145.413135][T18052]  </TASK>
[ 1145.414540][T18052] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1145.814267][ T5809] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1145.840150][T13294] gspca_spca1528: reg_w err -71
[ 1145.982412][T13294] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71
[ 1146.001622][ T5809] usb 2-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1146.021551][ T5809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1146.021818][ T5809] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1146.021856][ T5809] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1146.021984][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1146.395972][T13294] usb 9-1: USB disconnect, device number 4
[ 1146.727982][ T5809] cxacru 2-1:1.0: send of cm 0x90 failed (-71)
[ 1146.798806][T18060] cxacru 2-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1146.833580][ T5809] usb 2-1: USB disconnect, device number 65
[ 1147.014307][T18064] TC_ACT_REPEAT abuse ?
[ 1147.014490][T18069] loop6: detected capacity change from 0 to 128
[ 1147.147750][T18069] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1147.158620][T18069] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1148.365030][T12929] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1149.325269][T18092] ip_tables: iptables: counters copy to user failed while replacing table
[ 1149.727869][T18102] FAULT_INJECTION: forcing a failure.
[ 1149.727869][T18102] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1149.727902][T18102] CPU: 1 UID: 0 PID: 18102 Comm: syz.9.3490 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1149.727928][T18102] Tainted: [L]=SOFTLOCKUP
[ 1149.727936][T18102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1149.727948][T18102] Call Trace:
[ 1149.727956][T18102]  <TASK>
[ 1149.727964][T18102]  dump_stack_lvl+0xe8/0x150
[ 1149.727998][T18102]  should_fail_ex+0x3eb/0x540
[ 1149.728030][T18102]  get_futex_key+0x1ab/0x1410
[ 1149.728065][T18102]  ? __pfx_get_futex_key+0x10/0x10
[ 1149.728100][T18102]  futex_wake+0x119/0x5f0
[ 1149.728128][T18102]  ? __pfx_futex_wake+0x10/0x10
[ 1149.728158][T18102]  ? mm_exit_exec_release+0x20/0x290
[ 1149.728187][T18102]  do_futex+0x458/0x4e0
[ 1149.728212][T18102]  ? __pfx_do_futex+0x10/0x10
[ 1149.728234][T18102]  ? __might_fault+0xaf/0x130
[ 1149.728256][T18102]  mm_exit_exec_release+0x10d/0x290
[ 1149.728281][T18102]  exit_mm+0x50/0x240
[ 1149.728303][T18102]  do_exit+0x6a8/0x2360
[ 1149.728330][T18102]  ? __pfx_do_exit+0x10/0x10
[ 1149.728356][T18102]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1149.728384][T18102]  do_group_exit+0x22d/0x2f0
[ 1149.728402][T18102]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1149.728425][T18102]  get_signal+0x136a/0x1430
[ 1149.728469][T18102]  arch_do_signal_or_restart+0xbb/0x860
[ 1149.728499][T18102]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1149.728524][T18102]  ? ksys_write+0xf8/0x270
[ 1149.728557][T18102]  exit_to_user_mode_loop+0x10e/0x770
[ 1149.728581][T18102]  ? rcu_is_watching+0x16/0xb0
[ 1149.728610][T18102]  do_syscall_64+0x32c/0x530
[ 1149.728630][T18102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1149.728656][T18102]  ? clear_bhb_loop+0x70/0xc0
[ 1149.728678][T18102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1149.728695][T18102] RIP: 0033:0x00007f0804b9fb19
[ 1149.728715][T18102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1149.728731][T18102] RSP: 002b:00007f08059c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1149.728751][T18102] RAX: fffffffffffffe00 RBX: 00007f0804e26098 RCX: 00007f0804b9fb19
[ 1149.728765][T18102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0804e26098
[ 1149.728778][T18102] RBP: 00007f0804e26090 R08: 0000000000000000 R09: 0000000000000000
[ 1149.728789][T18102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1149.728801][T18102] R13: 00007f0804e26128 R14: 00007ffdfa2dfd20 R15: 00007ffdfa2dfe08
[ 1149.728832][T18102]  </TASK>
[ 1150.859579][   T14] pimreg: left allmulticast mode
[ 1150.913451][T18110] FAULT_INJECTION: forcing a failure.
[ 1150.913451][T18110] name failslab, interval 1, probability 0, space 0, times 0
[ 1150.913473][T18110] CPU: 1 UID: 0 PID: 18110 Comm: syz.6.3495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1150.913488][T18110] Tainted: [L]=SOFTLOCKUP
[ 1150.913492][T18110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1150.913499][T18110] Call Trace:
[ 1150.913504][T18110]  <TASK>
[ 1150.913509][T18110]  dump_stack_lvl+0xe8/0x150
[ 1150.913532][T18110]  should_fail_ex+0x3eb/0x540
[ 1150.913551][T18110]  should_failslab+0xa8/0x100
[ 1150.913567][T18110]  __kmalloc_cache_noprof+0x9e/0x600
[ 1150.913581][T18110]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1150.913594][T18110]  ? reuseport_alloc+0x11e/0x4d0
[ 1150.913673][T18110]  ? reuseport_alloc+0x11e/0x4d0
[ 1150.913688][T18110]  reuseport_alloc+0x11e/0x4d0
[ 1150.913701][T18110]  inet_hash+0x747/0xdb0
[ 1150.913720][T18110]  inet_csk_listen_start+0x27a/0x380
[ 1150.913763][T18110]  __inet_listen_sk+0x1f1/0x300
[ 1150.913781][T18110]  inet_listen+0xa5/0x110
[ 1150.913797][T18110]  __x64_sys_listen+0x1c7/0x240
[ 1150.913815][T18110]  do_syscall_64+0x16a/0x530
[ 1150.913831][T18110]  ? trace_irq_disable+0x3b/0x140
[ 1150.913845][T18110]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.913857][T18110]  ? clear_bhb_loop+0x70/0xc0
[ 1150.913870][T18110]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1150.913881][T18110] RIP: 0033:0x00007fb4e859fb19
[ 1150.913894][T18110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1150.913904][T18110] RSP: 002b:00007fb4e9387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032
[ 1150.913916][T18110] RAX: ffffffffffffffda RBX: 00007fb4e8825fa0 RCX: 00007fb4e859fb19
[ 1150.913925][T18110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1150.913932][T18110] RBP: 00007fb4e8637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1150.913939][T18110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1150.913946][T18110] R13: 00007fb4e8826038 R14: 00007fb4e8825fa0 R15: 00007fff9f87c7f8
[ 1150.913964][T18110]  </TASK>
[ 1151.719360][T18109] FAULT_INJECTION: forcing a failure.
[ 1151.719360][T18109] name failslab, interval 1, probability 0, space 0, times 0
[ 1151.719385][T18109] CPU: 1 UID: 0 PID: 18109 Comm: syz.1.3494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1151.719401][T18109] Tainted: [L]=SOFTLOCKUP
[ 1151.719406][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1151.719414][T18109] Call Trace:
[ 1151.719418][T18109]  <TASK>
[ 1151.719424][T18109]  dump_stack_lvl+0xe8/0x150
[ 1151.719447][T18109]  should_fail_ex+0x3eb/0x540
[ 1151.719472][T18109]  should_failslab+0xa8/0x100
[ 1151.719492][T18109]  ? do_getname+0x2e/0x250
[ 1151.719514][T18109]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1151.719540][T18109]  ? do_getname+0x2e/0x250
[ 1151.719557][T18109]  ? lock_vma_under_rcu+0x45a/0x500
[ 1151.719571][T18109]  do_getname+0x2e/0x250
[ 1151.719581][T18109]  ? getname_flags+0x11/0x20
[ 1151.719594][T18109]  do_sys_openat2+0xce/0x200
[ 1151.719608][T18109]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1151.719636][T18109]  ? rcu_is_watching+0x16/0xb0
[ 1151.719671][T18109]  __x64_sys_openat+0x138/0x170
[ 1151.719698][T18109]  do_syscall_64+0x16a/0x530
[ 1151.719710][T18109]  ? trace_irq_disable+0x3b/0x140
[ 1151.719725][T18109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.719737][T18109]  ? clear_bhb_loop+0x70/0xc0
[ 1151.719750][T18109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1151.719761][T18109] RIP: 0033:0x00007fa019d6034e
[ 1151.719774][T18109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1151.719784][T18109] RSP: 002b:00007fa01ac56ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1151.719796][T18109] RAX: ffffffffffffffda RBX: 00007fa01ac596c0 RCX: 00007fa019d6034e
[ 1151.719804][T18109] RDX: 0000000000000002 RSI: 00007fa019e36f02 RDI: ffffffffffffff9c
[ 1151.719812][T18109] RBP: 00007fa019e37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1151.719818][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040
[ 1151.719825][T18109] R13: 0000200000000a00 R14: 0000000000000003 R15: 00007fff2907ff38
[ 1151.719841][T18109]  </TASK>
[ 1152.643804][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1152.662848][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1152.664323][   T14] bond0 (unregistering): Released all slaves
[ 1152.811590][ T7496] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.813382][ T7496] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.813425][ T7496] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.813458][ T7496] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1153.666946][T18151] loop8: detected capacity change from 0 to 1024
[ 1153.984745][T18151] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1154.073504][   T33] audit: type=1804 audit(1793817409.904:11202): pid=18151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.3503" name="/newroot/87/file1/bus" dev="loop8" ino=18 res=1 errno=0
[ 1154.115319][   T14] tipc: Left network mode
[ 1154.305810][T18165] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1154.609646][T16030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1156.586258][T18198] FAULT_INJECTION: forcing a failure.
[ 1156.586258][T18198] name failslab, interval 1, probability 0, space 0, times 0
[ 1156.586293][T18198] CPU: 1 UID: 0 PID: 18198 Comm: syz.8.3516 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1156.586321][T18198] Tainted: [L]=SOFTLOCKUP
[ 1156.586330][T18198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1156.586343][T18198] Call Trace:
[ 1156.586351][T18198]  <TASK>
[ 1156.586360][T18198]  dump_stack_lvl+0xe8/0x150
[ 1156.586400][T18198]  should_fail_ex+0x3eb/0x540
[ 1156.586434][T18198]  should_failslab+0xa8/0x100
[ 1156.586458][T18198]  __kmalloc_cache_noprof+0x9e/0x600
[ 1156.586485][T18198]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1156.586509][T18198]  ? find_css_set+0xc79/0x1e00
[ 1156.586534][T18198]  ? find_css_set+0xc79/0x1e00
[ 1156.586568][T18198]  find_css_set+0xc79/0x1e00
[ 1156.586613][T18198]  ? __pfx_find_css_set+0x10/0x10
[ 1156.586674][T18198]  cgroup_migrate_prepare_dst+0x118/0x620
[ 1156.586712][T18198]  cgroup_attach_task+0x480/0x870
[ 1156.586747][T18198]  ? __pfx_cgroup_attach_task+0x10/0x10
[ 1156.586789][T18198]  ? cgroup_attach_permissions+0x4ec/0x9f0
[ 1156.586830][T18198]  __cgroup_procs_write+0x28c/0x2f0
[ 1156.586868][T18198]  cgroup_procs_write+0x27/0x50
[ 1156.586901][T18198]  ? __pfx_cgroup_procs_write+0x10/0x10
[ 1156.586924][T18198]  cgroup_file_write+0x331/0x8f0
[ 1156.586956][T18198]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1156.586982][T18198]  ? __kmalloc_noprof+0x387/0x710
[ 1156.587029][T18198]  ? __pfx_cgroup_file_write+0x10/0x10
[ 1156.587051][T18198]  kernfs_fop_write_iter+0x3a4/0x540
[ 1156.587086][T18198]  vfs_write+0x612/0xba0
[ 1156.587127][T18198]  ? __pfx_vfs_write+0x10/0x10
[ 1156.587156][T18198]  ? __fget_files+0x3a2/0x420
[ 1156.587177][T18198]  ? __fget_files+0x2a/0x420
[ 1156.587204][T18198]  ? fdget+0x1ac/0x250
[ 1156.587235][T18198]  ksys_write+0x150/0x270
[ 1156.587264][T18198]  ? __pfx_ksys_write+0x10/0x10
[ 1156.587304][T18198]  do_syscall_64+0x16a/0x530
[ 1156.587325][T18198]  ? trace_irq_disable+0x3b/0x140
[ 1156.587352][T18198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.587372][T18198]  ? clear_bhb_loop+0x70/0xc0
[ 1156.587393][T18198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1156.587412][T18198] RIP: 0033:0x00007fc22779fb19
[ 1156.587432][T18198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1156.587448][T18198] RSP: 002b:00007fc2259f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1156.587469][T18198] RAX: ffffffffffffffda RBX: 00007fc227a25fa0 RCX: 00007fc22779fb19
[ 1156.587484][T18198] RDX: 0000000000000015 RSI: 0000200000000640 RDI: 0000000000000004
[ 1156.587497][T18198] RBP: 00007fc227837b70 R08: 0000000000000000 R09: 0000000000000000
[ 1156.587509][T18198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1156.587521][T18198] R13: 00007fc227a26038 R14: 00007fc227a25fa0 R15: 00007ffe515e7ff8
[ 1156.587556][T18198]  </TASK>
[ 1157.049537][T18210] loop8: detected capacity change from 0 to 512
[ 1157.050902][T18210] EXT4-fs: Ignoring removed oldalloc option
[ 1157.118406][T18210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1157.235585][T18214] FAULT_INJECTION: forcing a failure.
[ 1157.235585][T18214] name failslab, interval 1, probability 0, space 0, times 0
[ 1157.235630][T18214] CPU: 0 UID: 0 PID: 18214 Comm: syz.6.3521 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1157.235659][T18214] Tainted: [L]=SOFTLOCKUP
[ 1157.235668][T18214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1157.235680][T18214] Call Trace:
[ 1157.235688][T18214]  <TASK>
[ 1157.235697][T18214]  dump_stack_lvl+0xe8/0x150
[ 1157.235735][T18214]  should_fail_ex+0x3eb/0x540
[ 1157.235788][T18214]  should_failslab+0xa8/0x100
[ 1157.235812][T18214]  __kmalloc_noprof+0xf9/0x710
[ 1157.235838][T18214]  ? tomoyo_encode+0x2ad/0x570
[ 1157.235860][T18214]  ? tomoyo_encode+0x2ad/0x570
[ 1157.235891][T18214]  tomoyo_encode+0x2ad/0x570
[ 1157.235921][T18214]  tomoyo_realpath_from_path+0x5fd/0x640
[ 1157.235967][T18214]  tomoyo_check_open_permission+0x229/0x470
[ 1157.235989][T18214]  ? tomoyo_check_open_permission+0x1d3/0x470
[ 1157.236010][T18214]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 1157.236033][T18214]  ? __asan_memset+0x22/0x50
[ 1157.236092][T18214]  ? devcgroup_check_permission+0x31/0x8f0
[ 1157.236126][T18214]  security_file_open+0xa9/0x240
[ 1157.236157][T18214]  do_dentry_open+0x495/0x1360
[ 1157.236191][T18214]  vfs_open_consume+0x4a/0x350
[ 1157.236213][T18214]  ? path_openat+0x16e1/0x20f0
[ 1157.236243][T18214]  path_openat+0x16fc/0x20f0
[ 1157.236291][T18214]  do_file_open+0x23e/0x4a0
[ 1157.236320][T18214]  ? __pfx___schedule+0x10/0x10
[ 1157.236345][T18214]  ? __pfx_do_file_open+0x10/0x10
[ 1157.236370][T18214]  ? irqentry_exit+0x2a0/0x9b0
[ 1157.236415][T18214]  ? _raw_spin_unlock+0x41/0x50
[ 1157.236434][T18214]  ? alloc_fd+0x6af/0x760
[ 1157.236469][T18214]  do_sys_openat2+0x115/0x200
[ 1157.236496][T18214]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1157.236526][T18214]  ? do_user_addr_fault+0xd3f/0x1480
[ 1157.236556][T18214]  __x64_sys_openat+0x138/0x170
[ 1157.236585][T18214]  do_syscall_64+0x16a/0x530
[ 1157.236606][T18214]  ? trace_irq_disable+0x3b/0x140
[ 1157.236633][T18214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.236652][T18214]  ? clear_bhb_loop+0x70/0xc0
[ 1157.236677][T18214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1157.236697][T18214] RIP: 0033:0x00007fb4e856034e
[ 1157.236717][T18214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1157.236733][T18214] RSP: 002b:00007fb4e67f3ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1157.236754][T18214] RAX: ffffffffffffffda RBX: 00007fb4e67f66c0 RCX: 00007fb4e856034e
[ 1157.236769][T18214] RDX: 0000000000000002 RSI: 00007fb4e8636f02 RDI: ffffffffffffff9c
[ 1157.236783][T18214] RBP: 00007fb4e8637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1157.236796][T18214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040
[ 1157.236808][T18214] R13: 0000200000000a00 R14: 0000000000000003 R15: 00007fff9f87c7f8
[ 1157.236840][T18214]  </TASK>
[ 1157.237022][T18214] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1157.523202][ T2263] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1157.718619][   T33] audit: type=1326 audit(1793817413.283:11203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.718764][   T33] audit: type=1326 audit(1793817413.302:11204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.728536][   T33] audit: type=1326 audit(1793817413.302:11205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.728651][   T33] audit: type=1326 audit(1793817413.302:11206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.781721][   T33] audit: type=1326 audit(1793817413.302:11207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.861239][   T33] audit: type=1326 audit(1793817413.403:11208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.861278][   T33] audit: type=1326 audit(1793817413.403:11209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1157.890005][ T2263] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1157.927679][ T2263] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1157.927733][ T2263] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1157.927759][ T2263] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1157.927802][ T2263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1157.929337][   T33] audit: type=1800 audit(1793817413.486:11210): pid=18215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3520" name="file1" dev="loop8" ino=15 res=0 errno=-22
[ 1158.016426][   T33] audit: type=1326 audit(1793817413.569:11211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18218 comm="syz.9.3523" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0804b9fb19 code=0x7ffc0000
[ 1158.153968][T16030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.308404][T18227] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1158.340496][ T2263] usb 7-1: USB disconnect, device number 24
[ 1158.707735][T18238] FAULT_INJECTION: forcing a failure.
[ 1158.707735][T18238] name failslab, interval 1, probability 0, space 0, times 0
[ 1158.707758][T18238] CPU: 0 UID: 0 PID: 18238 Comm: syz.9.3528 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1158.707774][T18238] Tainted: [L]=SOFTLOCKUP
[ 1158.707778][T18238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1158.707785][T18238] Call Trace:
[ 1158.707790][T18238]  <TASK>
[ 1158.707795][T18238]  dump_stack_lvl+0xe8/0x150
[ 1158.707822][T18238]  should_fail_ex+0x3eb/0x540
[ 1158.707842][T18238]  should_failslab+0xa8/0x100
[ 1158.707855][T18238]  __kvmalloc_node_noprof+0x171/0x820
[ 1158.707870][T18238]  ? __kmalloc_noprof+0x387/0x710
[ 1158.707882][T18238]  ? ceph_msg_new2+0x3b/0x4d0
[ 1158.707964][T18238]  ? kmem_cache_alloc_noprof+0x151/0x600
[ 1158.707976][T18238]  ? ceph_msg_new2+0x166/0x4d0
[ 1158.707992][T18238]  ? ceph_msg_new2+0x166/0x4d0
[ 1158.708021][T18238]  ceph_msg_new2+0x166/0x4d0
[ 1158.708040][T18238]  msgpool_alloc+0x80/0x210
[ 1158.708055][T18238]  ? __pfx_msgpool_alloc+0x10/0x10
[ 1158.708076][T18238]  mempool_init_node+0x1f4/0x510
[ 1158.708104][T18238]  ? __pfx_msgpool_alloc+0x10/0x10
[ 1158.708122][T18238]  mempool_create_node_noprof+0xb8/0x150
[ 1158.708134][T18238]  ? __pfx_msgpool_free+0x10/0x10
[ 1158.708149][T18238]  ceph_msgpool_init+0xb3/0x1c0
[ 1158.708165][T18238]  ceph_osdc_init+0x55b/0x900
[ 1158.708207][T18238]  ceph_create_client+0x246/0x310
[ 1158.708221][T18238]  ceph_get_tree+0x1ca/0x1a90
[ 1158.708238][T18238]  ? apparmor_capable+0x126/0x170
[ 1158.708257][T18238]  vfs_get_tree+0x92/0x2a0
[ 1158.708275][T18238]  vfs_cmd_create+0xa2/0x200
[ 1158.708289][T18238]  __se_sys_fsconfig+0x6b9/0x810
[ 1158.708304][T18238]  ? __pfx___se_sys_fsconfig+0x10/0x10
[ 1158.708319][T18238]  ? rcu_is_watching+0x16/0xb0
[ 1158.708339][T18238]  ? __x64_sys_fsconfig+0x20/0xc0
[ 1158.708351][T18238]  do_syscall_64+0x16a/0x530
[ 1158.708363][T18238]  ? trace_irq_disable+0x3b/0x140
[ 1158.708377][T18238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.708388][T18238]  ? clear_bhb_loop+0x70/0xc0
[ 1158.708401][T18238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1158.708411][T18238] RIP: 0033:0x00007f0804b9fb19
[ 1158.708424][T18238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1158.708433][T18238] RSP: 002b:00007f08059ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[ 1158.708445][T18238] RAX: ffffffffffffffda RBX: 00007f0804e25fa0 RCX: 00007f0804b9fb19
[ 1158.708453][T18238] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[ 1158.708460][T18238] RBP: 00007f0804c37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1158.708466][T18238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1158.708473][T18238] R13: 00007f0804e26038 R14: 00007f0804e25fa0 R15: 00007ffdfa2dfe08
[ 1158.708491][T18238]  </TASK>
[ 1158.853886][   T14] hsr_slave_0: left promiscuous mode
[ 1158.859050][   T14] hsr_slave_1: left promiscuous mode
[ 1158.860003][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1158.860024][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1158.864531][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1158.864549][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1158.879435][   T14] veth1_macvtap: left promiscuous mode
[ 1158.879511][   T14] veth0_macvtap: left promiscuous mode
[ 1158.879676][   T14] veth0_vlan: left promiscuous mode
[ 1159.608927][T18270] netlink: 'syz.6.3533': attribute type 4 has an invalid length.
[ 1159.927485][T18278] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1159.927510][T18278] overlayfs: failed to set xattr on upper
[ 1159.927519][T18278] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1159.927527][T18278] overlayfs: ...falling back to index=off.
[ 1159.927535][T18278] overlayfs: ...falling back to uuid=null.
[ 1160.150141][T18284] device-mapper: table: 248:17: linear: Device lookup failed (-ENOENT)
[ 1160.150164][T18284] device-mapper: ioctl: error adding target to table
[ 1160.278385][T18285] batman_adv: batadv0: Adding interface: syzkaller0
[ 1160.278404][T18285] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1160.278436][T18285] batman_adv: batadv0: Interface activated: syzkaller0
[ 1160.406067][T18281] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1160.647569][T18281] batman_adv: batadv0: Removing interface: syzkaller0
[ 1160.709021][T18292] FAULT_INJECTION: forcing a failure.
[ 1160.709021][T18292] name failslab, interval 1, probability 0, space 0, times 0
[ 1160.709044][T18292] CPU: 0 UID: 0 PID: 18292 Comm: syz.6.3541 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1160.709060][T18292] Tainted: [L]=SOFTLOCKUP
[ 1160.709064][T18292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1160.709072][T18292] Call Trace:
[ 1160.709078][T18292]  <TASK>
[ 1160.709083][T18292]  dump_stack_lvl+0xe8/0x150
[ 1160.709105][T18292]  should_fail_ex+0x3eb/0x540
[ 1160.709124][T18292]  should_failslab+0xa8/0x100
[ 1160.709135][T18292]  ? alloc_empty_file+0x5b/0x1d0
[ 1160.709148][T18292]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1160.709160][T18292]  ? stack_depot_save_flags+0x33/0x810
[ 1160.709176][T18292]  ? alloc_empty_file+0x5b/0x1d0
[ 1160.709192][T18292]  alloc_empty_file+0x5b/0x1d0
[ 1160.709206][T18292]  path_openat+0x96/0x20f0
[ 1160.709231][T18292]  do_file_open+0x23e/0x4a0
[ 1160.709249][T18292]  ? __pfx_do_file_open+0x10/0x10
[ 1160.709274][T18292]  ? _raw_spin_unlock+0x28/0x50
[ 1160.709285][T18292]  ? alloc_fd+0x6af/0x760
[ 1160.709304][T18292]  do_sys_openat2+0x115/0x200
[ 1160.709318][T18292]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1160.709333][T18292]  ? do_user_addr_fault+0xd3f/0x1480
[ 1160.709349][T18292]  __x64_sys_openat+0x138/0x170
[ 1160.709365][T18292]  do_syscall_64+0x16a/0x530
[ 1160.709376][T18292]  ? trace_irq_disable+0x3b/0x140
[ 1160.709394][T18292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.709406][T18292]  ? clear_bhb_loop+0x70/0xc0
[ 1160.709419][T18292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1160.709430][T18292] RIP: 0033:0x00007fb4e856034e
[ 1160.709442][T18292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1160.709451][T18292] RSP: 002b:00007fb4e9384ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1160.709463][T18292] RAX: ffffffffffffffda RBX: 00007fb4e93876c0 RCX: 00007fb4e856034e
[ 1160.709470][T18292] RDX: 0000000000000002 RSI: 00007fb4e8636f02 RDI: ffffffffffffff9c
[ 1160.709477][T18292] RBP: 00007fb4e8637b70 R08: 0000000000000000 R09: 0000000000000000
[ 1160.709484][T18292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040
[ 1160.709491][T18292] R13: 0000200000000a00 R14: 0000000000000003 R15: 00007fff9f87c7f8
[ 1160.709507][T18292]  </TASK>
[ 1160.882958][T18302] ip_tables: iptables: counters copy to user failed while replacing table
[ 1160.990831][T18298] netlink: 'syz.1.3543': attribute type 10 has an invalid length.
[ 1161.462328][T18321] 0x000000000000-0x000000010000 : ""
[ 1161.615016][T18321] ftl_cs: FTL header not found.
[ 1161.653989][T18321] FAULT_INJECTION: forcing a failure.
[ 1161.653989][T18321] name failslab, interval 1, probability 0, space 0, times 0
[ 1161.654023][T18321] CPU: 1 UID: 0 PID: 18321 Comm: syz.1.3548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1161.654051][T18321] Tainted: [L]=SOFTLOCKUP
[ 1161.654059][T18321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1161.654073][T18321] Call Trace:
[ 1161.654081][T18321]  <TASK>
[ 1161.654090][T18321]  dump_stack_lvl+0xe8/0x150
[ 1161.654130][T18321]  should_fail_ex+0x3eb/0x540
[ 1161.654165][T18321]  should_failslab+0xa8/0x100
[ 1161.654188][T18321]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 1161.654215][T18321]  ? __lock_acquire+0x747/0x2de0
[ 1161.654241][T18321]  ? __kernfs_new_node+0xa9/0x980
[ 1161.654265][T18321]  ? __kernfs_new_node+0xa9/0x980
[ 1161.654295][T18321]  kstrdup+0x42/0x100
[ 1161.654320][T18321]  __kernfs_new_node+0xa9/0x980
[ 1161.654353][T18321]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1161.654377][T18321]  ? kernfs_root+0x1c/0x230
[ 1161.654406][T18321]  ? kernfs_root+0x1c/0x230
[ 1161.654426][T18321]  ? kernfs_root+0x1c/0x230
[ 1161.654444][T18321]  ? kernfs_root+0x1c/0x230
[ 1161.654478][T18321]  kernfs_create_dir_ns+0xfe/0x230
[ 1161.654509][T18321]  sysfs_create_dir_ns+0x12f/0x2a0
[ 1161.654534][T18321]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 1161.654558][T18321]  ? rcu_is_watching+0x16/0xb0
[ 1161.654588][T18321]  ? kfree+0x4d/0x650
[ 1161.654613][T18321]  kobject_add_internal+0x622/0xcd0
[ 1161.654651][T18321]  kobject_add+0x163/0x240
[ 1161.654675][T18321]  ? kobject_add_internal+0x804/0xcd0
[ 1161.654706][T18321]  ? queue_hctx+0x1e/0x240
[ 1161.654728][T18321]  ? __pfx_kobject_add+0x10/0x10
[ 1161.654757][T18321]  ? queue_hctx+0x1e/0x240
[ 1161.654787][T18321]  blk_mq_register_hctx+0xe4/0x400
[ 1161.654813][T18321]  blk_mq_sysfs_register+0x159/0x530
[ 1161.654840][T18321]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1161.654859][T18321]  ? kobject_create_and_add+0x58/0x230
[ 1161.654888][T18321]  blk_register_queue+0xbf/0x4f0
[ 1161.654915][T18321]  ? kobject_create_and_add+0x16f/0x230
[ 1161.654947][T18321]  __add_disk+0x6b8/0xdb0
[ 1161.654979][T18321]  add_disk_fwnode+0x100/0x3a0
[ 1161.655009][T18321]  add_mtd_blktrans_dev+0xe79/0x14b0
[ 1161.655077][T18321]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 1161.655120][T18321]  ? __kmalloc_cache_noprof+0x31c/0x600
[ 1161.655143][T18321]  ? __kmalloc_cache_noprof+0x148/0x600
[ 1161.655162][T18321]  ? mtdblock_add_mtd+0x57/0x240
[ 1161.655191][T18321]  mtdblock_add_mtd+0x18a/0x240
[ 1161.655215][T18321]  blktrans_notify_add+0x9f/0xf0
[ 1161.655238][T18321]  add_mtd_device+0x117f/0x17b0
[ 1161.655272][T18321]  ? __pfx_add_mtd_device+0x10/0x10
[ 1161.655303][T18321]  ? __pfx_mtd_nvmem_reg_read+0x10/0x10
[ 1161.655337][T18321]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1161.655374][T18321]  mtd_add_partition+0x388/0x590
[ 1161.655402][T18321]  ? __pfx_mtd_add_partition+0x10/0x10
[ 1161.655448][T18321]  ? __might_fault+0xaf/0x130
[ 1161.655479][T18321]  mtdchar_blkpg_ioctl+0x28a/0x2c0
[ 1161.655506][T18321]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 1161.655547][T18321]  ? __might_fault+0xaf/0x130
[ 1161.655574][T18321]  mtdchar_ioctl+0x14f7/0x1bc0
[ 1161.655603][T18321]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 1161.655631][T18321]  ? __lock_acquire+0x747/0x2de0
[ 1161.655674][T18321]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1161.655699][T18321]  ? __mutex_trylock_common+0x15f/0x270
[ 1161.655731][T18321]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1161.655761][T18321]  ? rcu_is_watching+0x16/0xb0
[ 1161.655787][T18321]  ? trace_contention_end+0x3d/0x140
[ 1161.655817][T18321]  ? __mutex_lock+0x305/0x15a0
[ 1161.655838][T18321]  ? do_futex+0x458/0x4e0
[ 1161.655864][T18321]  ? mtdchar_unlocked_ioctl+0xa1/0xd0
[ 1161.655885][T18321]  ? __pfx___mutex_lock+0x10/0x10
[ 1161.655918][T18321]  ? __fget_files+0x2a/0x420
[ 1161.655944][T18321]  ? __fget_files+0x2a/0x420
[ 1161.655972][T18321]  mtdchar_unlocked_ioctl+0xae/0xd0
[ 1161.655995][T18321]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 1161.656018][T18321]  __se_sys_ioctl+0xfc/0x170
[ 1161.656039][T18321]  do_syscall_64+0x16a/0x530
[ 1161.656059][T18321]  ? trace_irq_disable+0x3b/0x140
[ 1161.656084][T18321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.656105][T18321]  ? clear_bhb_loop+0x70/0xc0
[ 1161.656130][T18321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1161.656149][T18321] RIP: 0033:0x00007fa019d9fb19
[ 1161.656169][T18321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1161.656186][T18321] RSP: 002b:00007fa01ac59028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1161.656207][T18321] RAX: ffffffffffffffda RBX: 00007fa01a025fa0 RCX: 00007fa019d9fb19
[ 1161.656222][T18321] RDX: 00002000000006c0 RSI: 0000000000001269 RDI: 0000000000000005
[ 1161.656235][T18321] RBP: 00007fa019e37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1161.656246][T18321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1161.656258][T18321] R13: 00007fa01a026038 R14: 00007fa01a025fa0 R15: 00007fff2907ff38
[ 1161.656291][T18321]  </TASK>
[ 1161.656332][T18321] kobject: kobject_add_internal failed for 0 (error: -12 parent: mq)
[ 1161.675650][T14230] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[ 1161.743131][T18325] loop6: detected capacity change from 0 to 512
[ 1161.746779][T18325] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1161.754151][T18325] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[ 1161.805270][T18325] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.3549: corrupted in-inode xattr: e_value size too large
[ 1161.805302][T18325] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1161.806012][T18325] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.3549: couldn't read orphan inode 15 (err -117)
[ 1161.806041][T18325] loop6: lost filesystem error report for type 5 error -117
[ 1161.849626][T14230] usb 8-1: Using ep0 maxpacket: 32
[ 1161.861563][T14230] usb 8-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00
[ 1161.878255][T14230] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1161.878287][T14230] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1161.878329][T14230] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.880735][T18325] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1162.233129][T14230] usb 8-1: config 0 descriptor??
[ 1162.374611][T12929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1162.466757][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1162.652754][T18342] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3553'.
[ 1162.741139][T14230] ft260 0003:0403:6030.002E: unknown main item tag 0x0
[ 1162.741180][T14230] ft260 0003:0403:6030.002E: unknown main item tag 0x0
[ 1162.742652][T18342] syzkaller1: entered promiscuous mode
[ 1162.742671][T18342] syzkaller1: entered allmulticast mode
[ 1162.955940][T14230] ft260 0003:0403:6030.002E: chip code: 0000 0000
[ 1163.137145][T18357] erspan1: entered promiscuous mode
[ 1163.174347][T14230] ft260 0003:0403:6030.002E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0
[ 1163.395822][T14230] ft260 0003:0403:6030.002E: failed to retrieve status: -32, no wakeup
[ 1164.279200][T14230] usb 8-1: USB disconnect, device number 18
[ 1164.594700][T18383] FAULT_INJECTION: forcing a failure.
[ 1164.594700][T18383] name failslab, interval 1, probability 0, space 0, times 0
[ 1164.594795][T18383] CPU: 1 UID: 0 PID: 18383 Comm: syz.1.3560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1164.594823][T18383] Tainted: [L]=SOFTLOCKUP
[ 1164.594831][T18383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1164.594843][T18383] Call Trace:
[ 1164.594852][T18383]  <TASK>
[ 1164.594861][T18383]  dump_stack_lvl+0xe8/0x150
[ 1164.594899][T18383]  should_fail_ex+0x3eb/0x540
[ 1164.594934][T18383]  should_failslab+0xa8/0x100
[ 1164.594957][T18383]  __kmalloc_cache_noprof+0x9e/0x600
[ 1164.594985][T18383]  ? raw_open+0x88/0x4d0
[ 1164.595012][T18383]  ? raw_open+0x88/0x4d0
[ 1164.595045][T18383]  ? __pfx_raw_open+0x10/0x10
[ 1164.595073][T18383]  raw_open+0x88/0x4d0
[ 1164.595101][T18383]  ? __pfx_raw_open+0x10/0x10
[ 1164.595128][T18383]  misc_open+0x2d5/0x350
[ 1164.595163][T18383]  chrdev_open+0x4d9/0x600
[ 1164.595207][T18383]  ? __pfx_chrdev_open+0x10/0x10
[ 1164.595228][T18383]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[ 1164.595256][T18383]  ? __pfx_chrdev_open+0x10/0x10
[ 1164.595283][T18383]  do_dentry_open+0x80e/0x1360
[ 1164.595318][T18383]  vfs_open_consume+0x4a/0x350
[ 1164.595347][T18383]  ? path_openat+0x16e1/0x20f0
[ 1164.595379][T18383]  path_openat+0x16fc/0x20f0
[ 1164.595427][T18383]  do_file_open+0x23e/0x4a0
[ 1164.595462][T18383]  ? __pfx_do_file_open+0x10/0x10
[ 1164.595514][T18383]  ? _raw_spin_unlock+0x28/0x50
[ 1164.595534][T18383]  ? alloc_fd+0x6af/0x760
[ 1164.595570][T18383]  do_sys_openat2+0x115/0x200
[ 1164.595594][T18383]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1164.595618][T18383]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1164.595656][T18383]  __x64_sys_openat+0x138/0x170
[ 1164.595685][T18383]  do_syscall_64+0x16a/0x530
[ 1164.595707][T18383]  ? trace_irq_disable+0x3b/0x140
[ 1164.595733][T18383]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.595754][T18383]  ? clear_bhb_loop+0x70/0xc0
[ 1164.595777][T18383]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.595797][T18383] RIP: 0033:0x00007fa019d6034e
[ 1164.595818][T18383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1164.595835][T18383] RSP: 002b:00007fa01ac14ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1164.595856][T18383] RAX: ffffffffffffffda RBX: 00007fa01ac176c0 RCX: 00007fa019d6034e
[ 1164.595871][T18383] RDX: 0000000000000002 RSI: 00007fa019e36f02 RDI: ffffffffffffff9c
[ 1164.595885][T18383] RBP: 00007fa019e37b70 R08: 0000000000000000 R09: 0000000000000000
[ 1164.595897][T18383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040
[ 1164.595910][T18383] R13: 0000200000000a00 R14: 0000000000000003 R15: 00007fff2907ff38
[ 1164.595942][T18383]  </TASK>
[ 1164.701008][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3561'.
[ 1164.784357][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3561'.
[ 1164.784597][T18380] FAULT_INJECTION: forcing a failure.
[ 1164.784597][T18380] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1164.784625][T18380] CPU: 0 UID: 0 PID: 18380 Comm: syz.8.3561 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1164.784652][T18380] Tainted: [L]=SOFTLOCKUP
[ 1164.784659][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1164.784674][T18380] Call Trace:
[ 1164.784682][T18380]  <TASK>
[ 1164.784690][T18380]  dump_stack_lvl+0xe8/0x150
[ 1164.784727][T18380]  should_fail_ex+0x3eb/0x540
[ 1164.784766][T18380]  _copy_to_iter+0x404/0x17e0
[ 1164.784806][T18380]  ? __pfx__copy_to_iter+0x10/0x10
[ 1164.784836][T18380]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1164.784858][T18380]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1164.784882][T18380]  __skb_datagram_iter+0xf8/0x980
[ 1164.784905][T18380]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 1164.784934][T18380]  skb_copy_datagram_iter+0xb5/0x240
[ 1164.784958][T18380]  netlink_recvmsg+0x2c8/0xa70
[ 1164.784994][T18380]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1164.785025][T18380]  ? __lock_acquire+0x747/0x2de0
[ 1164.785055][T18380]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 1164.785082][T18380]  sock_recvmsg_nosec+0x130/0x170
[ 1164.785108][T18380]  ____sys_recvmsg+0x466/0x530
[ 1164.785135][T18380]  ? __pfx_____sys_recvmsg+0x10/0x10
[ 1164.785169][T18380]  ? import_iovec+0x73/0xa0
[ 1164.785197][T18380]  ___sys_recvmsg+0x213/0x5a0
[ 1164.785222][T18380]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1164.785245][T18380]  ? lock_acquire+0x115/0x350
[ 1164.785295][T18380]  do_recvmmsg+0x31a/0x800
[ 1164.785321][T18380]  ? evict+0x987/0xb50
[ 1164.785339][T18380]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1164.785358][T18380]  ? do_futex+0x3e7/0x4e0
[ 1164.785401][T18380]  __x64_sys_recvmmsg+0x198/0x250
[ 1164.785424][T18380]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1164.785454][T18380]  do_syscall_64+0x16a/0x530
[ 1164.785476][T18380]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.785496][T18380]  ? clear_bhb_loop+0x70/0xc0
[ 1164.785518][T18380]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1164.785537][T18380] RIP: 0033:0x00007fc22779fb19
[ 1164.785556][T18380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1164.785573][T18380] RSP: 002b:00007fc2259f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1164.785594][T18380] RAX: ffffffffffffffda RBX: 00007fc227a25fa0 RCX: 00007fc22779fb19
[ 1164.785608][T18380] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003
[ 1164.785620][T18380] RBP: 00007fc227837b70 R08: 0000000000000000 R09: 0000000000000000
[ 1164.785632][T18380] R10: 0000000040012012 R11: 0000000000000246 R12: 0000000000000000
[ 1164.785644][T18380] R13: 00007fc227a26038 R14: 00007fc227a25fa0 R15: 00007ffe515e7ff8
[ 1164.785674][T18380]  </TASK>
[ 1164.793184][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3561'.
[ 1165.243101][T18392] netlink: 'syz.8.3565': attribute type 1 has an invalid length.
[ 1165.260557][T18367] svc: failed to register lockdv1 RPC service (errno 5).
[ 1165.266598][T18367] lockd_up: makesock failed, error=-5
[ 1165.334734][T18392] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1165.472779][T18401] FAULT_INJECTION: forcing a failure.
[ 1165.472779][T18401] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1165.472831][T18401] CPU: 1 UID: 0 PID: 18401 Comm: syz.9.3564 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1165.472859][T18401] Tainted: [L]=SOFTLOCKUP
[ 1165.472867][T18401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1165.472879][T18401] Call Trace:
[ 1165.472887][T18401]  <TASK>
[ 1165.472896][T18401]  dump_stack_lvl+0xe8/0x150
[ 1165.472933][T18401]  should_fail_ex+0x3eb/0x540
[ 1165.472966][T18401]  get_futex_key+0x1ab/0x1410
[ 1165.473007][T18401]  ? __pfx_get_futex_key+0x10/0x10
[ 1165.473037][T18401]  ? __cgroup_account_cputime+0xe8/0x120
[ 1165.473074][T18401]  futex_wait_setup+0x4a/0x590
[ 1165.473103][T18401]  ? __futex_wait+0xdb/0x470
[ 1165.473131][T18401]  __futex_wait+0x175/0x470
[ 1165.473164][T18401]  ? __pfx___futex_wait+0x10/0x10
[ 1165.473193][T18401]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1165.473225][T18401]  ? try_to_wake_up+0x8ce/0x14e0
[ 1165.473273][T18401]  futex_wait+0x121/0x390
[ 1165.473300][T18401]  ? __pfx_futex_wait+0x10/0x10
[ 1165.473335][T18401]  ? irqentry_exit+0x2a0/0x9b0
[ 1165.473359][T18401]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1165.473386][T18401]  do_futex+0x3e7/0x4e0
[ 1165.473411][T18401]  ? __pfx_do_futex+0x10/0x10
[ 1165.473431][T18401]  ? __se_sys_futex+0x98/0x450
[ 1165.473456][T18401]  __se_sys_futex+0x3a8/0x450
[ 1165.473483][T18401]  ? __pfx___se_sys_futex+0x10/0x10
[ 1165.473503][T18401]  ? rcu_is_watching+0x16/0xb0
[ 1165.473537][T18401]  ? __x64_sys_futex+0x21/0xf0
[ 1165.473561][T18401]  do_syscall_64+0x16a/0x530
[ 1165.473583][T18401]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.473603][T18401]  ? clear_bhb_loop+0x70/0xc0
[ 1165.473627][T18401]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1165.473648][T18401] RIP: 0033:0x00007f0804b9fb19
[ 1165.473667][T18401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1165.473682][T18401] RSP: 002b:00007f08059c90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1165.473703][T18401] RAX: ffffffffffffffda RBX: 00007f0804e26098 RCX: 00007f0804b9fb19
[ 1165.473718][T18401] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0804e26098
[ 1165.473731][T18401] RBP: 00007f0804e26090 R08: 0000000000000000 R09: 0000000000000000
[ 1165.473743][T18401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1165.473755][T18401] R13: 00007f0804e26128 R14: 00007ffdfa2dfd20 R15: 00007ffdfa2dfe08
[ 1165.473787][T18401]  </TASK>
[ 1165.613374][T18392] bond1: (slave geneve2): making interface the new active one
[ 1165.617849][T18392] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1165.654048][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1165.896864][T14230] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1166.446399][T14230] usb 10-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1166.489487][T14230] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.489542][T14230] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1166.489564][T14230] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1166.489604][T14230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.106373][T18367] svc: failed to register nfsdv3 RPC service (errno 512).
[ 1167.106560][T18367] svc: failed to register nfsaclv3 RPC service (errno 512).
[ 1167.106576][T18367] failed to unregister tcp with rpcbind
[ 1167.117968][T18367] svc: failed to register nfsdv3 RPC service (errno 97).
[ 1167.117991][T18367] svc: failed to register nfsaclv3 RPC service (errno 97).
[ 1167.118021][T18367] failed to unregister tcp with rpcbind
[ 1167.299611][T14230] cxacru_cm: 34 callbacks suppressed
[ 1167.299635][T14230] cxacru 10-1:1.0: send of cm 0x90 failed (-71)
[ 1167.299663][T14230] cxacru 10-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1167.299871][T14230] cxacru 10-1:1.0: probe with driver cxacru failed with error -22
[ 1167.336718][T14230] usb 10-1: USB disconnect, device number 6
[ 1167.639317][T18434] syzkaller0: left promiscuous mode
[ 1167.639354][T18434] syzkaller0: left allmulticast mode
[ 1167.857192][T18442] loop6: detected capacity change from 0 to 2048
[ 1167.882600][T18442] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1167.898705][T18442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1168.010037][T18449] loop7: detected capacity change from 0 to 512
[ 1168.342974][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1168.538356][T18458] 0: reclassify loop, rule prio 0, protocol 800
[ 1169.774541][T18473] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1170.383593][T18502] FAULT_INJECTION: forcing a failure.
[ 1170.383593][T18502] name failslab, interval 1, probability 0, space 0, times 0
[ 1170.383640][T18502] CPU: 1 UID: 0 PID: 18502 Comm: syz.7.3588 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.383669][T18502] Tainted: [L]=SOFTLOCKUP
[ 1170.383676][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1170.383689][T18502] Call Trace:
[ 1170.383698][T18502]  <TASK>
[ 1170.383707][T18502]  dump_stack_lvl+0xe8/0x150
[ 1170.383747][T18502]  should_fail_ex+0x3eb/0x540
[ 1170.383789][T18502]  should_failslab+0xa8/0x100
[ 1170.383813][T18502]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[ 1170.383841][T18502]  ? key_alloc+0x38c/0xd20
[ 1170.383861][T18502]  ? key_alloc+0x38c/0xd20
[ 1170.383887][T18502]  kmemdup_noprof+0x2b/0x70
[ 1170.383912][T18502]  key_alloc+0x38c/0xd20
[ 1170.383947][T18502]  __key_create_or_update+0x867/0xab0
[ 1170.383982][T18502]  ? __pfx___key_create_or_update+0x10/0x10
[ 1170.384004][T18502]  ? lookup_user_key+0x112c/0x12c0
[ 1170.384042][T18502]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1170.384078][T18502]  key_create_or_update+0x42/0x60
[ 1170.384105][T18502]  __se_sys_add_key+0x349/0x420
[ 1170.384136][T18502]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1170.384172][T18502]  ? __x64_sys_add_key+0x20/0xc0
[ 1170.384201][T18502]  do_syscall_64+0x16a/0x530
[ 1170.384225][T18502]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.384246][T18502]  ? clear_bhb_loop+0x70/0xc0
[ 1170.384270][T18502]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.384290][T18502] RIP: 0033:0x00007efc40f9fb19
[ 1170.384310][T18502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.384327][T18502] RSP: 002b:00007efc41df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1170.384348][T18502] RAX: ffffffffffffffda RBX: 00007efc41226090 RCX: 00007efc40f9fb19
[ 1170.384363][T18502] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900
[ 1170.384377][T18502] RBP: 00007efc41037b70 R08: ffffffffffffffff R09: 0000000000000000
[ 1170.384391][T18502] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000
[ 1170.384404][T18502] R13: 00007efc41226128 R14: 00007efc41226090 R15: 00007ffc9c192a58
[ 1170.384438][T18502]  </TASK>
[ 1170.524434][T18504] loop8: detected capacity change from 0 to 512
[ 1170.547542][T18504] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1170.559327][T18504] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[ 1170.596007][T18504] EXT4-fs (loop8): 1 truncate cleaned up
[ 1170.611884][T18504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1170.660882][T18504] FAULT_INJECTION: forcing a failure.
[ 1170.660882][T18504] name failslab, interval 1, probability 0, space 0, times 0
[ 1170.660915][T18504] CPU: 0 UID: 0 PID: 18504 Comm: syz.8.3589 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1170.660941][T18504] Tainted: [L]=SOFTLOCKUP
[ 1170.660948][T18504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1170.660960][T18504] Call Trace:
[ 1170.660969][T18504]  <TASK>
[ 1170.660977][T18504]  dump_stack_lvl+0xe8/0x150
[ 1170.661014][T18504]  should_fail_ex+0x3eb/0x540
[ 1170.661046][T18504]  should_failslab+0xa8/0x100
[ 1170.661066][T18504]  ? ext4_mb_new_blocks+0x539/0x4520
[ 1170.661124][T18504]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1170.661151][T18504]  ? ext4_mb_new_blocks+0x539/0x4520
[ 1170.661178][T18504]  ext4_mb_new_blocks+0x539/0x4520
[ 1170.661219][T18504]  ? rcu_is_watching+0x16/0xb0
[ 1170.661247][T18504]  ? ext4_get_branch+0x653/0x7c0
[ 1170.661267][T18504]  ? __pfx_ext4_mb_new_blocks+0x10/0x10
[ 1170.661286][T18504]  ? ext4_block_to_path+0x382/0x700
[ 1170.661315][T18504]  ext4_ind_map_blocks+0xef3/0x2300
[ 1170.661358][T18504]  ? __pfx_ext4_ind_map_blocks+0x10/0x10
[ 1170.661417][T18504]  ? down_write+0x166/0x200
[ 1170.661446][T18504]  ext4_map_create_blocks+0xbb/0x530
[ 1170.661474][T18504]  ? ext4_fc_track_inode+0xf3/0x3f0
[ 1170.661504][T18504]  ext4_map_blocks+0xe8e/0x1c60
[ 1170.661528][T18504]  ? up_write+0x19d/0x4a0
[ 1170.661567][T18504]  ? __pfx_ext4_map_blocks+0x10/0x10
[ 1170.661599][T18504]  ? __asan_memcpy+0x40/0x70
[ 1170.661624][T18504]  ? ext4_read_inline_data+0x100/0x2b0
[ 1170.661651][T18504]  ext4_convert_inline_data_nolock+0x25d/0x980
[ 1170.661686][T18504]  ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[ 1170.661708][T18504]  ? down_write+0x166/0x200
[ 1170.661745][T18504]  ext4_convert_inline_data+0x484/0x5c0
[ 1170.661786][T18504]  ? __pfx_ext4_convert_inline_data+0x10/0x10
[ 1170.661813][T18504]  ? down_write+0x166/0x200
[ 1170.661836][T18504]  ? __pfx_down_write+0x10/0x10
[ 1170.661870][T18504]  ext4_fallocate+0x1e2/0x400
[ 1170.661897][T18504]  vfs_fallocate+0x65a/0x7e0
[ 1170.661923][T18504]  ? __fget_files+0x2a/0x420
[ 1170.661953][T18504]  ? __pfx_vfs_fallocate+0x10/0x10
[ 1170.661979][T18504]  ? __fget_files+0x2a/0x420
[ 1170.662008][T18504]  ? fdget+0x1ac/0x250
[ 1170.662034][T18504]  __x64_sys_fallocate+0xbf/0x110
[ 1170.662064][T18504]  do_syscall_64+0x16a/0x530
[ 1170.662085][T18504]  ? trace_irq_disable+0x3b/0x140
[ 1170.662110][T18504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.662130][T18504]  ? clear_bhb_loop+0x70/0xc0
[ 1170.662153][T18504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1170.662171][T18504] RIP: 0033:0x00007fc22779fb19
[ 1170.662191][T18504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1170.662207][T18504] RSP: 002b:00007fc2259f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[ 1170.662227][T18504] RAX: ffffffffffffffda RBX: 00007fc227a25fa0 RCX: 00007fc22779fb19
[ 1170.662242][T18504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1170.662253][T18504] RBP: 00007fc227837b70 R08: 0000000000000000 R09: 0000000000000000
[ 1170.662266][T18504] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000
[ 1170.662277][T18504] R13: 00007fc227a26038 R14: 00007fc227a25fa0 R15: 00007ffe515e7ff8
[ 1170.662311][T18504]  </TASK>
[ 1170.664118][T14230] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1170.881205][T18509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3590'.
[ 1171.049775][T14230] usb 8-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1171.070534][T14230] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1171.070593][T14230] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1171.070615][T14230] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1171.070656][T14230] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1171.117040][T16030] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1171.223510][T18514] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1171.267201][T16030] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[ 1171.315711][T18493] loop9: detected capacity change from 0 to 32768
[ 1171.358384][T18493] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1171.383896][T18514] syzkaller0: entered promiscuous mode
[ 1171.383920][T18514] syzkaller0: entered allmulticast mode
[ 1171.388531][T18514] tipc: Resetting bearer <eth:syzkaller0>
[ 1171.512734][T14230] cxacru 8-1:1.0: send of cm 0x90 failed (-71)
[ 1171.512766][T14230] cxacru 8-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 1171.512883][T14230] cxacru 8-1:1.0: probe with driver cxacru failed with error -22
[ 1171.543296][T14230] usb 8-1: USB disconnect, device number 19
[ 1171.630173][T18513] tipc: Resetting bearer <eth:syzkaller0>
[ 1171.692937][T18493] XFS (loop9): Ending clean mount
[ 1171.722121][T16030] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1171.761038][T18493] XFS (loop9): Quotacheck needed: Please wait.
[ 1172.133333][T18493] XFS (loop9): Quotacheck: Done.
[ 1175.703189][T16864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1175.709773][T16864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1175.728877][T16864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1175.729909][T16864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1175.730588][T16864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1175.870024][T16862] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1176.390580][T18541] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[ 1176.390768][T18541] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1176.998568][T18543] loop9: detected capacity change from 0 to 32768
[ 1177.036247][T18543] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3598 (18543)
[ 1177.102829][T18543] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1177.102865][T18543] BTRFS info (device loop9): using sha256 checksum algorithm
[ 1177.487281][T18543] BTRFS info (device loop9): enabling ssd optimizations
[ 1177.487332][T18543] BTRFS info (device loop9): turning on async discard
[ 1177.487349][T18543] BTRFS info (device loop9): enabling free space tree
[ 1178.064418][ T5647] Bluetooth: hci0: command tx timeout
[ 1180.347455][ T5647] Bluetooth: hci0: command tx timeout
[ 1181.675815][T18513] tipc: Disabling bearer <eth:syzkaller0>
[ 1181.685279][ T5299] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1181.931905][T18575] ip_tables: iptables: counters copy to user failed while replacing table
[ 1182.018557][T18575] syzkaller1: entered promiscuous mode
[ 1182.018580][T18575] syzkaller1: entered allmulticast mode
[ 1182.041551][T16862] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1182.331942][T14230] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[ 1182.495011][T18535] rxe_eth0 speed is unknown, defaulting to 1000
[ 1182.511586][T18593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1182.522521][T14230] usb 8-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00
[ 1182.533585][T14230] usb 8-1: config 1 has an invalid interface number: 3 but max is 0
[ 1182.533611][T14230] usb 8-1: config 1 has no interface number 0
[ 1182.563332][T14230] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.563359][T14230] usb 8-1: Product: syz
[ 1182.563372][T14230] usb 8-1: Manufacturer: syz
[ 1182.563386][T14230] usb 8-1: SerialNumber: syz
[ 1182.579206][ T5647] Bluetooth: hci0: command tx timeout
[ 1182.596976][T18593] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1182.622226][T18593] iommufd_mock iommufd_mock2: Adding to iommu group 2
[ 1182.644641][T14230] usb 8-1: cannot find UAC_HEADER
[ 1183.023231][T18604] FAULT_INJECTION: forcing a failure.
[ 1183.023231][T18604] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1183.023277][T18604] CPU: 1 UID: 0 PID: 18604 Comm: syz.6.3605 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1183.023306][T18604] Tainted: [L]=SOFTLOCKUP
[ 1183.023314][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1183.023326][T18604] Call Trace:
[ 1183.023335][T18604]  <TASK>
[ 1183.023343][T18604]  dump_stack_lvl+0xe8/0x150
[ 1183.023385][T18604]  should_fail_ex+0x3eb/0x540
[ 1183.023419][T18604]  prepare_alloc_pages+0x21e/0x5f0
[ 1183.023454][T18604]  __alloc_frozen_pages_noprof+0x189/0x450
[ 1183.023490][T18604]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1183.023517][T18604]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1183.023546][T18604]  ? policy_nodemask+0x31b/0x980
[ 1183.023571][T18604]  alloc_pages_mpol+0x21e/0x390
[ 1183.023598][T18604]  folio_alloc_mpol_noprof+0x39/0x160
[ 1183.023621][T18604]  vma_alloc_folio_noprof+0xe1/0x210
[ 1183.023645][T18604]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1183.023668][T18604]  ? do_pte_missing+0x1429/0x3570
[ 1183.023698][T18604]  do_pte_missing+0x16d4/0x3570
[ 1183.023741][T18604]  handle_mm_fault+0x1807/0x2f80
[ 1183.023775][T18604]  ? handle_mm_fault+0xee/0x2f80
[ 1183.023803][T18604]  ? irqentry_exit+0x2a0/0x9b0
[ 1183.023826][T18604]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1183.023853][T18604]  ? irqentry_exit+0x2a0/0x9b0
[ 1183.023889][T18604]  ? lock_vma_under_rcu+0x1d1/0x500
[ 1183.023909][T18604]  ? do_user_addr_fault+0xb15/0x1480
[ 1183.023940][T18604]  do_user_addr_fault+0xb35/0x1480
[ 1183.023977][T18604]  ? trace_page_fault_user+0x84/0x1e0
[ 1183.024004][T18604]  exc_page_fault+0x6a/0xc0
[ 1183.024028][T18604]  asm_exc_page_fault+0x26/0x30
[ 1183.024048][T18604] RIP: 0033:0x00007fb4e8466ec6
[ 1183.024068][T18604] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d ba 17 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 cc c7 fe ff 4d 85 ed 0f 84 2b 0a 00
[ 1183.024085][T18604] RSP: 002b:00007fb4e67f3f60 EFLAGS: 00010206
[ 1183.024104][T18604] RAX: 0000000000000000 RBX: 00007fb4e8826090 RCX: 0000000000000000
[ 1183.024118][T18604] RDX: 0000200000000a00 RSI: 0000200000000a00 RDI: 00007fb4e863866a
[ 1183.024132][T18604] RBP: 00007fb4e8637b70 R08: 00007fb4e8453a30 R09: 0000000000000000
[ 1183.024146][T18604] R10: 0000000000000003 R11: 0000200000000a00 R12: 0000000000000040
[ 1183.024159][T18604] R13: 0000200000000a00 R14: 0000000000000003 R15: 00007fff9f87c7f8
[ 1183.024192][T18604]  </TASK>
[ 1183.024284][T18604] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1183.096046][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1183.096100][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1183.342429][T14230] snd-usb-audio 8-1:1.3: probe with driver snd-usb-audio failed with error -22
[ 1183.344903][T14230] usb 8-1: USB disconnect, device number 20
[ 1183.468440][T18579] udevd[18579]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1183.606370][T13294] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1183.773486][T13294] usb 7-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1183.794539][T13294] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1183.794929][T13294] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1183.794957][T13294] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1183.794998][T13294] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.057098][T13294] cxacru 7-1:1.0: send of cm 0x90 failed (-71)
[ 1184.070688][T18630] cxacru 7-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1184.091772][T13294] usb 7-1: USB disconnect, device number 25
[ 1184.820229][ T5647] Bluetooth: hci0: command tx timeout
[ 1184.894353][T18617] loop7: detected capacity change from 0 to 32768
[ 1184.935002][T18617] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1185.189729][T18535] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1185.189899][T18535] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1185.190041][T18535] bridge_slave_0: entered allmulticast mode
[ 1185.191763][T18535] bridge_slave_0: entered promiscuous mode
[ 1185.195003][T18535] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1185.195160][T18535] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1185.195278][T18535] bridge_slave_1: entered allmulticast mode
[ 1185.196783][T18535] bridge_slave_1: entered promiscuous mode
[ 1185.230313][T18535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.233640][T18535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.368954][T18535] team0: Port device team_slave_0 added
[ 1185.386926][T18535] team0: Port device team_slave_1 added
[ 1185.450124][T18617] XFS (loop7): Starting recovery (logdev: internal)
[ 1185.555484][T18535] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1185.555502][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.555526][T18535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1185.563709][T18617] XFS (loop7): Ending recovery (logdev: internal)
[ 1185.574106][T18535] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1185.574123][T18535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1185.574156][T18535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1185.589378][T14230] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1185.827603][T14230] usb 2-1: New USB device found: idVendor=04d8, idProduct=f002, bcdDevice=0.00
[ 1185.831632][T14230] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1185.831666][T14230] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1185.831690][T14230] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1185.831721][T14230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.836169][T14230] usb 2-1: config 0 descriptor??
[ 1185.873783][T18535] hsr_slave_0: entered promiscuous mode
[ 1185.878232][T18535] hsr_slave_1: entered promiscuous mode
[ 1185.883900][T18535] debugfs: 'hsr0' already exists in 'hsr'
[ 1185.883919][T18535] Cannot create hsr debugfs directory
[ 1185.953174][T13939] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1186.093191][T18683] lo: entered promiscuous mode
[ 1186.093362][T18683] tunl0: entered promiscuous mode
[ 1186.093469][T18683] gre0: entered promiscuous mode
[ 1186.093595][T18683] gretap0: entered promiscuous mode
[ 1186.093707][T18683] erspan0: entered promiscuous mode
[ 1186.093968][T18683] ip_vti0: entered promiscuous mode
[ 1186.094136][T18683] ip6_vti0: entered promiscuous mode
[ 1186.094339][T18683] sit0: entered promiscuous mode
[ 1186.094459][T18683] ip6tnl0: entered promiscuous mode
[ 1186.094578][T18683] ip6gre0: entered promiscuous mode
[ 1186.094692][T18683] syz_tun: entered promiscuous mode
[ 1186.102862][T18683] ip6gretap0: entered promiscuous mode
[ 1186.103003][T18683] bridge0: entered promiscuous mode
[ 1186.103190][T18683] vcan0: entered promiscuous mode
[ 1186.103331][T18683] bond0: entered promiscuous mode
[ 1186.103345][T18683] bond_slave_0: entered promiscuous mode
[ 1186.103529][T18683] bond_slave_1: entered promiscuous mode
[ 1186.103791][T18683] team0: entered promiscuous mode
[ 1186.103805][T18683] team_slave_0: entered promiscuous mode
[ 1186.103967][T18683] team_slave_1: entered promiscuous mode
[ 1186.104249][T18683] dummy0: entered promiscuous mode
[ 1186.104387][T18683] nlmon0: entered promiscuous mode
[ 1186.109488][T18683] batadv0: entered promiscuous mode
[ 1186.109654][T18683] vxcan0: entered promiscuous mode
[ 1186.109796][T18683] vxcan1: entered promiscuous mode
[ 1186.109950][T18683] veth0: entered promiscuous mode
[ 1186.110095][T18683] veth1: entered promiscuous mode
[ 1186.110225][T18683] wg0: entered promiscuous mode
[ 1186.110361][T18683] wg1: entered promiscuous mode
[ 1186.110492][T18683] wg2: entered promiscuous mode
[ 1186.110625][T18683] veth0_to_bridge: entered promiscuous mode
[ 1186.145169][T18683] veth1_to_bridge: entered promiscuous mode
[ 1186.166374][T18683] veth0_to_bond: entered promiscuous mode
[ 1186.231945][T18683] veth1_to_bond: entered promiscuous mode
[ 1186.252704][T18671] loop1: detected capacity change from 0 to 1024
[ 1186.289960][T18683] veth0_to_team: entered promiscuous mode
[ 1186.340113][T18671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1186.363621][T18683] veth1_to_team: entered promiscuous mode
[ 1186.390374][T18683] veth0_to_batadv: entered promiscuous mode
[ 1186.397458][T18683] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1186.420077][T18683] batadv_slave_0: entered promiscuous mode
[ 1186.444121][T18683] veth1_to_batadv: entered promiscuous mode
[ 1186.473832][T18683] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1186.473918][T18683] batadv_slave_1: entered promiscuous mode
[ 1186.500793][T18683] xfrm0: entered promiscuous mode
[ 1186.541228][T18683] veth0_to_hsr: entered promiscuous mode
[ 1186.621358][T18683] veth1_to_hsr: entered promiscuous mode
[ 1186.687418][T18671] EXT4-fs warning (device loop1): ext4_rmdir:3194: inode #11: comm syz.1.3612: empty directory 'file0' has too many links (111)
[ 1186.695836][T18683] hsr0: entered promiscuous mode
[ 1186.716878][T14230] usbhid 2-1:0.0: can't add hid device: -71
[ 1186.716983][T14230] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1186.722170][T14230] usb 2-1: USB disconnect, device number 66
[ 1186.729546][T18683] veth1_virt_wifi: entered promiscuous mode
[ 1186.753589][T18683] veth0_virt_wifi: entered promiscuous mode
[ 1186.768092][T18683] virt_wifi0: entered promiscuous mode
[ 1186.804539][T18683] macvtap0: entered promiscuous mode
[ 1186.809472][T18683] macsec0: entered promiscuous mode
[ 1186.835366][T18683] geneve0: entered promiscuous mode
[ 1186.839445][T18683] geneve1: entered promiscuous mode
[ 1186.927821][T18683] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[ 1186.940467][T18683] netdevsim netdevsim6 netdevsim1: entered promiscuous mode
[ 1186.951081][T18683] netdevsim netdevsim6 netdevsim2: entered promiscuous mode
[ 1186.961728][T18701] loop9: detected capacity change from 0 to 512
[ 1186.963070][T18683] netdevsim netdevsim6 netdevsim3: entered promiscuous mode
[ 1187.028186][T18683] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode
[ 1187.033733][T18701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1187.056158][T18683] sit1: entered promiscuous mode
[ 1187.056383][T18683] batman_adv: batadv0: Interface deactivated: syzkaller0
[ 1187.058844][T18683] syzkaller0: entered promiscuous mode
[ 1187.060049][T18683] ipvlan0: entered promiscuous mode
[ 1187.065028][T18683] gtp0: entered promiscuous mode
[ 1187.115731][T18701] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1187.192100][ T7496] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.192153][ T7496] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.192190][ T7496] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.192224][ T7496] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1187.293805][T18712] syzkaller0: entered promiscuous mode
[ 1187.293831][T18712] syzkaller0: entered allmulticast mode
[ 1187.441205][ T5634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1188.147827][T18750] FAULT_INJECTION: forcing a failure.
[ 1188.147827][T18750] name failslab, interval 1, probability 0, space 0, times 0
[ 1188.147850][T18750] CPU: 1 UID: 0 PID: 18750 Comm: syz.9.3620 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1188.147866][T18750] Tainted: [L]=SOFTLOCKUP
[ 1188.147870][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1188.147878][T18750] Call Trace:
[ 1188.147882][T18750]  <TASK>
[ 1188.147894][T18750]  dump_stack_lvl+0xe8/0x150
[ 1188.147919][T18750]  should_fail_ex+0x3eb/0x540
[ 1188.147940][T18750]  should_failslab+0xa8/0x100
[ 1188.147953][T18750]  ? key_alloc+0x340/0xd20
[ 1188.147965][T18750]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1188.147980][T18750]  ? key_alloc+0x340/0xd20
[ 1188.147996][T18750]  key_alloc+0x340/0xd20
[ 1188.148016][T18750]  __key_create_or_update+0x867/0xab0
[ 1188.148034][T18750]  ? __pfx___key_create_or_update+0x10/0x10
[ 1188.148045][T18750]  ? lookup_user_key+0x112c/0x12c0
[ 1188.148078][T18750]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 1188.148105][T18750]  key_create_or_update+0x42/0x60
[ 1188.148120][T18750]  __se_sys_add_key+0x349/0x420
[ 1188.148137][T18750]  ? __pfx___se_sys_add_key+0x10/0x10
[ 1188.148157][T18750]  ? __x64_sys_add_key+0x20/0xc0
[ 1188.148172][T18750]  do_syscall_64+0x16a/0x530
[ 1188.148187][T18750]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.148199][T18750]  ? clear_bhb_loop+0x70/0xc0
[ 1188.148211][T18750]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1188.148222][T18750] RIP: 0033:0x00007f0804b9fb19
[ 1188.148235][T18750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1188.148244][T18750] RSP: 002b:00007f08059c9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 1188.148256][T18750] RAX: ffffffffffffffda RBX: 00007f0804e26090 RCX: 00007f0804b9fb19
[ 1188.148264][T18750] RDX: 0000200000000980 RSI: 0000200000000940 RDI: 0000200000000900
[ 1188.148271][T18750] RBP: 00007f0804c37b70 R08: ffffffffffffffff R09: 0000000000000000
[ 1188.148278][T18750] R10: 000000000000005b R11: 0000000000000246 R12: 0000000000000000
[ 1188.148285][T18750] R13: 00007f0804e26128 R14: 00007f0804e26090 R15: 00007ffdfa2dfe08
[ 1188.148302][T18750]  </TASK>
[ 1188.440249][T18704] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1188.718815][T18704] usb 10-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00
[ 1188.729321][T18704] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1188.729383][T18704] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 1188.729407][T18704] usb 10-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 1188.729447][T18704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.997096][T18704] cxacru 10-1:1.0: send of cm 0x90 failed (-71)
[ 1189.000407][T18768] cxacru 10-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 1189.019636][T18704] usb 10-1: USB disconnect, device number 7
[ 1190.092387][T18774] loop9: detected capacity change from 0 to 32768
[ 1190.262014][T18774] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1190.643167][T16862] ocfs2: Unmounting device (7,9) on (node local)
[ 1197.032080][T18780] bridge0: entered allmulticast mode
[ 1197.090778][T18786] bridge1: entered promiscuous mode
[ 1197.090802][T18786] bridge1: entered allmulticast mode
[ 1197.111649][T18786] team0: Port device bridge1 added
[ 1197.111831][T18788] bridge0: port 4(team0) entered blocking state
[ 1197.111914][T18788] bridge0: port 4(team0) entered disabled state
[ 1197.112035][T18788] team0: entered allmulticast mode
[ 1197.112050][T18788] team_slave_0: entered allmulticast mode
[ 1197.112148][T18788] team_slave_1: entered allmulticast mode
[ 1197.176563][T18788] team0: entered promiscuous mode
[ 1197.176588][T18788] team_slave_0: entered promiscuous mode
[ 1197.176770][T18788] team_slave_1: entered promiscuous mode
[ 1197.989928][T18813] FAULT_INJECTION: forcing a failure.
[ 1197.989928][T18813] name fail_futex, interval 1, probability 0, space 0, times 0
[ 1197.989964][T18813] CPU: 0 UID: 0 PID: 18813 Comm: syz.6.3632 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1197.989992][T18813] Tainted: [L]=SOFTLOCKUP
[ 1197.990000][T18813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1197.990012][T18813] Call Trace:
[ 1197.990020][T18813]  <TASK>
[ 1197.990028][T18813]  dump_stack_lvl+0xe8/0x150
[ 1197.990065][T18813]  should_fail_ex+0x3eb/0x540
[ 1197.990097][T18813]  get_futex_key+0x1ab/0x1410
[ 1197.990129][T18813]  ? __lock_acquire+0x747/0x2de0
[ 1197.990160][T18813]  ? kasan_save_free_info+0x40/0x50
[ 1197.990184][T18813]  ? __pfx_get_futex_key+0x10/0x10
[ 1197.990209][T18813]  ? do_syscall_64+0x16a/0x530
[ 1197.990232][T18813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1197.990262][T18813]  futex_wake+0x119/0x5f0
[ 1197.990291][T18813]  ? __pfx_futex_wake+0x10/0x10
[ 1197.990330][T18813]  do_futex+0x458/0x4e0
[ 1197.990356][T18813]  ? __pfx_do_futex+0x10/0x10
[ 1197.990384][T18813]  __se_sys_futex+0x3a8/0x450
[ 1197.990411][T18813]  ? __pfx___se_sys_futex+0x10/0x10
[ 1197.990440][T18813]  ? __x64_sys_futex+0x21/0xf0
[ 1197.990463][T18813]  do_syscall_64+0x16a/0x530
[ 1197.990484][T18813]  ? trace_irq_disable+0x3b/0x140
[ 1197.990510][T18813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1197.990530][T18813]  ? clear_bhb_loop+0x70/0xc0
[ 1197.990554][T18813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1197.990573][T18813] RIP: 0033:0x00007fb4e859fb19
[ 1197.990593][T18813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1197.990609][T18813] RSP: 002b:00007fb4e67f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1197.990639][T18813] RAX: ffffffffffffffda RBX: 00007fb4e8826098 RCX: 00007fb4e859fb19
[ 1197.990654][T18813] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e882609c
[ 1197.990667][T18813] RBP: 00007fb4e8826090 R08: 3fffffffffffffff R09: 0000000000000000
[ 1197.990681][T18813] R10: 000000001afa875d R11: 0000000000000246 R12: 0000000000000000
[ 1197.990694][T18813] R13: 00007fb4e8826128 R14: 00007fff9f87c710 R15: 00007fff9f87c7f8
[ 1197.990727][T18813]  </TASK>
[ 1199.982711][T16479] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1200.898292][   T33] audit: type=1800 audit(1793817453.156:11245): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3631" name="/" dev="fuse" ino=1 res=0 errno=-4
[ 1201.472122][T16479] usb 7-1: device not accepting address 26, error -71
[ 1202.645360][T18837] loop1: detected capacity change from 0 to 32768
[ 1202.717165][T18837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3638 (18837)
[ 1202.819651][T18837] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1202.819687][T18837] BTRFS info (device loop1): using crc32c checksum algorithm
[ 1203.111065][T18834] loop6: detected capacity change from 0 to 32768
[ 1203.131537][T18834] BTRFS info: device /dev/loop6 (7:6) using temp-fsid c5601f2b-eef4-46e3-b739-6cb56f05aabf
[ 1203.131604][T18834] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3637 (18834)
[ 1203.206153][T18837] BTRFS info (device loop1): setting nodatasum
[ 1203.206181][T18837] BTRFS info (device loop1): setting nodatacow
[ 1203.206196][T18837] BTRFS info (device loop1): disabling tree log
[ 1203.206211][T18837] BTRFS info (device loop1): turning on async discard
[ 1203.206227][T18837] BTRFS info (device loop1): enabling free space tree
[ 1203.206243][T18837] BTRFS info (device loop1): max_inline set to 0
[ 1203.249407][T18834] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1203.249444][T18834] BTRFS info (device loop6): using crc32c checksum algorithm
[ 1203.598057][T18834] BTRFS info (device loop6): enabling ssd optimizations
[ 1203.598086][T18834] BTRFS info (device loop6): turning on flush-on-commit
[ 1203.598103][T18834] BTRFS info (device loop6): enabling free space tree
[ 1203.598119][T18834] BTRFS info (device loop6): enabling auto defrag
[ 1203.598136][T18834] BTRFS info (device loop6): use lzo compression, level 1
[ 1203.598156][T18834] BTRFS info (device loop6): max_inline set to 4096
[ 1204.046408][   T33] audit: type=1800 audit(1793817456.055:11246): pid=18878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3637" name="file1" dev="loop6" ino=260 res=0 errno=-22
[ 1204.081686][T18875] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1204.118882][T18877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1204.118906][T18877] block device autoloading is deprecated and will be removed.
[ 1204.194308][T18837] BTRFS info (device loop1): scrub: started on devid 1
[ 1204.255601][T18837] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[ 1205.308851][T12929] BTRFS info (device loop6): last unmount of filesystem c5601f2b-eef4-46e3-b739-6cb56f05aabf
[ 1205.505509][ T5634] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1207.964298][T18707] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[ 1207.998779][T18929] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1207.998804][T18929] overlayfs: failed to set xattr on upper
[ 1207.998813][T18929] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1207.998821][T18929] overlayfs: ...falling back to index=off.
[ 1207.998829][T18929] overlayfs: ...falling back to uuid=null.
[ 1208.083028][T18535] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1208.191499][T18535] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1208.195319][T18535] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1208.285283][T18707] usb 2-1: not running at top speed; connect to a high speed hub
[ 1208.285321][T18707] usb 2-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00
[ 1208.300663][T18707] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1208.300725][T18707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1208.318358][T18707] uvcvideo 2-1:1.0: Found UVC 1.00 device <unnamed> (046d:0825)
[ 1208.323888][T18535] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1208.334234][T18938] syzkaller0: left promiscuous mode
[ 1208.334876][T18938] batman_adv: batadv0: Interface activated: syzkaller0
[ 1208.369207][T18535] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1208.447146][T18535] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1208.462970][T18535] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1208.554145][T18707] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[ 1208.554779][T18707] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26).
[ 1208.554862][T18707] uvcvideo 2-1:1.1: Failed to initialize the device (-71).
[ 1208.555557][T18707] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71
[ 1208.627271][T18535] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1208.651897][T18707] usb 2-1: USB disconnect, device number 67
[ 1209.577836][T18535] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1209.707269][T18535] 8021q: adding VLAN 0 to HW filter on device team0
[ 1209.746419][T17309] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1209.746528][T17309] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1209.947129][T17309] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1209.947244][T17309] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1211.918102][T18983] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1212.422222][T18983] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1212.422450][T18983] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1213.544567][T18987] syzkaller0: entered promiscuous mode
[ 1213.544590][T18987] syzkaller0: entered allmulticast mode
[ 1223.683245][T18704] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1224.630145][T18704] usb 10-1: Using ep0 maxpacket: 32
[ 1224.652261][T18704] usb 10-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1224.709602][T18704] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[ 1224.709622][T18704] usb 10-1: config 0 has no interface number 0
[ 1224.709662][T18704] usb 10-1: config 0 interface 184 has no altsetting 0
[ 1224.847622][T18704] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1224.847640][T18704] usb 10-1: Product: syz
[ 1224.847648][T18704] usb 10-1: Manufacturer: syz
[ 1224.847656][T18704] usb 10-1: SerialNumber: syz
[ 1225.521787][T18704] usb 10-1: config 0 descriptor??
[ 1226.502848][T18535] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1226.545724][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1226.545752][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1226.918764][T18535] veth0_vlan: entered promiscuous mode
[ 1226.957684][T16479] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[ 1227.022783][T18535] veth1_vlan: entered promiscuous mode
[ 1227.102613][T18535] veth0_macvtap: entered promiscuous mode
[ 1227.120394][T16479] usb 8-1: Using ep0 maxpacket: 16
[ 1227.121195][T16479] usb 8-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1227.121824][T16479] usb 8-1: config 0 has no interfaces?
[ 1227.124186][T16479] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1227.124205][T16479] usb 8-1: Product: syz
[ 1227.124219][T16479] usb 8-1: Manufacturer: syz
[ 1227.124233][T16479] usb 8-1: SerialNumber: syz
[ 1227.180956][T18535] veth1_macvtap: entered promiscuous mode
[ 1227.236787][T16479] usb 8-1: config 0 descriptor??
[ 1227.256470][T18535] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1227.318162][T18535] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1227.379036][ T6050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.380547][ T6050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.380598][ T6050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.380631][ T6050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.691952][ T2263] usb 8-1: USB disconnect, device number 21
[ 1227.866176][T19044] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3662'.
[ 1228.275284][ T6050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.275299][ T6050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.393499][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[ 1228.393526][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[ 1228.393543][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1228.393560][T18704] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1228.405862][T18704] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71
[ 1228.614898][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.614912][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1229.253539][T19057] syz_tun: entered allmulticast mode
[ 1229.351988][T18704] usb 10-1: USB disconnect, device number 8
[ 1231.663770][T19057] dvmrp3: entered allmulticast mode
[ 1231.743044][T19056] syz_tun: left allmulticast mode
[ 1232.306477][    C1] net_ratelimit: 53 callbacks suppressed
[ 1232.530996][T16864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1232.556085][T16864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1232.576140][T16864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1232.623715][T16864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1232.653501][T16864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1232.678485][T18707] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1232.862791][T18707] usb 3-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00
[ 1232.909660][T18707] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1232.909698][T18707] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1232.909776][T18707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1233.013595][T18707] spcp8x5 3-1:1.0: SPCP8x5 converter detected
[ 1233.048463][T18707] usb 3-1: SPCP8x5 converter now attached to ttyUSB0
[ 1233.660862][T19080] SPCP8x5 ttyUSB0: failed to set control lines: -110
[ 1233.661288][T19080] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[ 1233.661712][T19080] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1233.845257][T18700] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 1233.898088][T19077] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 1233.937966][T18706] usb 3-1: USB disconnect, device number 2
[ 1233.961010][T18706] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 1233.973759][T18706] spcp8x5 3-1:1.0: device disconnected
[ 1234.019827][T18700] usb 7-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1234.022540][T18700] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1234.022560][T18700] usb 7-1: config 0 has no interface number 0
[ 1234.026840][T18700] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.026859][T18700] usb 7-1: Product: syz
[ 1234.026873][T18700] usb 7-1: Manufacturer: syz
[ 1234.026886][T18700] usb 7-1: SerialNumber: syz
[ 1234.030417][T18700] usb 7-1: config 0 descriptor??
[ 1234.393247][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1234.526078][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1234.563109][T18700] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1234.591272][T18700] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1234.602735][T18700] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1234.615180][T18700] usb 7-1: media controller created
[ 1234.730214][T18700] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1234.887250][T18700] usb 7-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)...
[ 1234.888331][T18700] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered.
[ 1235.273658][T18700] DVB: Unable to find symbol mxl5005s_attach()
[ 1235.352552][ T5647] Bluetooth: hci4: command tx timeout
[ 1235.384741][T19093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1235.407290][T19093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1236.485502][T18700] usb 7-1: USB disconnect, device number 28
[ 1237.240255][T19138] loop2: detected capacity change from 0 to 512
[ 1237.258729][T19138] EXT4-fs (loop2): Test dummy encryption mode enabled
[ 1237.275083][T19138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.3680: bg 0: block 7: invalid block bitmap
[ 1237.275115][T19138] loop2: lost filesystem error report for type 5 error -117
[ 1237.281650][    C0] EXT4-fs (loop2): error count since last fsck: 1
[ 1237.281676][    C0] EXT4-fs (loop2): initial error at time 1793817486: ext4_validate_block_bitmap:436
[ 1237.281700][    C0] EXT4-fs (loop2): last error at time 1793817486: ext4_validate_block_bitmap:436
[ 1237.379573][T19138] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem
[ 1237.379594][T19138] loop2: lost filesystem error report for type 5 error -117
[ 1237.407965][T19138] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #11: comm syz.2.3680: corrupted xattr block 95: invalid header
[ 1237.408000][T19138] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1237.423880][T19138] EXT4-fs warning (device loop2): ext4_evict_inode:355: xattr delete (err -117)
[ 1237.423971][T19138] EXT4-fs (loop2): 1 orphan inode deleted
[ 1237.480475][T19138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1237.597775][ T5647] Bluetooth: hci4: command tx timeout
[ 1237.743850][T18535] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1238.030487][    C1] net_ratelimit: 60 callbacks suppressed
[ 1239.175495][ T2263] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1239.347226][ T2263] usb 10-1: Using ep0 maxpacket: 8
[ 1239.350082][ T2263] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1239.350129][ T2263] usb 10-1: New USB device found: idVendor=13e5, idProduct=0001, bcdDevice=0.40
[ 1239.355682][ T2263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.355701][ T2263] usb 10-1: Product: syz
[ 1239.355715][ T2263] usb 10-1: Manufacturer: syz
[ 1239.355728][ T2263] usb 10-1: SerialNumber: syz
[ 1239.845484][ T5647] Bluetooth: hci4: command tx timeout
[ 1242.098589][ T5647] Bluetooth: hci4: command tx timeout
[ 1242.261108][ T5850] usb 8-1: new full-speed USB device number 22 using dummy_hcd
[ 1242.424587][ T5850] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a8, bcdDevice=0.40
[ 1242.426484][ T5850] usb 8-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1242.426512][ T5850] usb 8-1: config 1 interface 0 has no altsetting 0
[ 1242.430251][ T5850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1242.430270][ T5850] usb 8-1: Product: syz
[ 1242.430284][ T5850] usb 8-1: Manufacturer: syz
[ 1242.430297][ T5850] usb 8-1: SerialNumber: syz
[ 1242.510554][T19166] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1242.621137][T19142] smpboot: CPU 1 is now offline
[ 1243.662078][    C0] net_ratelimit: 85 callbacks suppressed
[ 1246.153819][    C0] sched: DL replenish lagged too much
[ 1248.137627][ T2263] usb 10-1: can't set config #1, error -110
[ 1250.268503][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1250.277022][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1252.295330][T19143] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1256.159864][  T303] net_ratelimit: 10 callbacks suppressed
[ 1261.836207][T17309] net_ratelimit: 27 callbacks suppressed
[ 1267.402451][    C0] net_ratelimit: 3 callbacks suppressed
[ 1268.815697][T16864] Bluetooth: hci3: command 0x0406 tx timeout
[ 1273.298195][    C0] net_ratelimit: 2 callbacks suppressed
[ 1295.396978][T18949] net_ratelimit: 17 callbacks suppressed
[ 1316.298048][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[ 1316.310150][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[ 1349.465415][    C0] net_ratelimit: 16 callbacks suppressed
[ 1360.560273][    C0] net_ratelimit: 14 callbacks suppressed
[ 1366.419871][T18953] net_ratelimit: 14 callbacks suppressed
[ 1378.710165][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1378.723280][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P19082/1:b..l.. P19166/1:b..l..
[ 1378.735092][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=128393, q=781 ncpus=2)
[ 1378.742892][    C0] task:syz.7.3685      state:R  running task     stack:26792 pid:19166 tgid:19165 ppid:13939  task_flags:0x40044c flags:0x00080002
[ 1378.756345][    C0] Call Trace:
[ 1378.759604][    C0]  <TASK>
[ 1378.762521][    C0]  __schedule+0x17dd/0x5830
[ 1378.767026][    C0]  ? irqentry_exit+0x2a0/0x9b0
[ 1378.771814][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1378.777035][    C0]  ? irqentry_exit+0x2a0/0x9b0
[ 1378.781792][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1378.786843][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1378.791872][    C0]  ? __pfx___schedule+0x10/0x10
[ 1378.796735][    C0]  ? preempt_schedule_thunk+0x16/0x40
[ 1378.802094][    C0]  preempt_schedule_common+0x7f/0xd0
[ 1378.807367][    C0]  preempt_schedule_thunk+0x16/0x40
[ 1378.812552][    C0]  _raw_spin_unlock+0x41/0x50
[ 1378.817216][    C0]  __zap_vma_range+0x3d52/0x4b80
[ 1378.822152][    C0]  ? mas_next_node+0xbd1/0xe50
[ 1378.826908][    C0]  ? __pfx___zap_vma_range+0x10/0x10
[ 1378.832176][    C0]  ? mas_find+0x71a/0xcf0
[ 1378.836486][    C0]  unmap_vmas+0x38b/0x550
[ 1378.840803][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[ 1378.845647][    C0]  exit_mmap+0x290/0xa40
[ 1378.849879][    C0]  ? __pfx_exit_mmap+0x10/0x10
[ 1378.854651][    C0]  ? __pfx_exit_aio+0x10/0x10
[ 1378.859318][    C0]  ? uprobe_clear_state+0x2a4/0x3d0
[ 1378.864504][    C0]  __mmput+0x118/0x420
[ 1378.868573][    C0]  exit_mm+0x18e/0x240
[ 1378.872622][    C0]  do_exit+0x6a8/0x2360
[ 1378.876775][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1378.881377][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1378.886383][    C0]  do_group_exit+0x22d/0x2f0
[ 1378.890950][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1378.896130][    C0]  get_signal+0x136a/0x1430
[ 1378.900627][    C0]  arch_do_signal_or_restart+0xbb/0x860
[ 1378.906152][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[ 1378.911335][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1378.917468][    C0]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[ 1378.923170][    C0]  exit_to_user_mode_loop+0x10e/0x770
[ 1378.928524][    C0]  ? rcu_is_watching+0x16/0xb0
[ 1378.933272][    C0]  do_syscall_64+0x32c/0x530
[ 1378.937841][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1378.942842][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1378.948889][    C0]  ? clear_bhb_loop+0x70/0xc0
[ 1378.953542][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1378.959411][    C0] RIP: 0033:0x00007efc40f6034e
[ 1378.964172][    C0] RSP: 002b:00007efc41e15ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[ 1378.972579][    C0] RAX: 0000000000000000 RBX: 00007efc41e186c0 RCX: 00007efc40f6034e
[ 1378.980529][    C0] RDX: 00007efc41e15f30 RSI: 0000000000000000 RDI: 0000000000000000
[ 1378.988481][    C0] RBP: 00007efc41e16fd0 R08: 0000000000000000 R09: 0000000000000000
[ 1378.996428][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[ 1379.004376][    C0] R13: 0000000800000000 R14: 0000000000000000 R15: 00007efc41056ba4
[ 1379.012344][    C0]  </TASK>
[ 1379.015346][    C0] task:syz-executor    state:R  running task     stack:25192 pid:19082 tgid:19082 ppid:19066  task_flags:0x400140 flags:0x00080000
[ 1379.028800][    C0] Call Trace:
[ 1379.032091][    C0]  <TASK>
[ 1379.035025][    C0]  __schedule+0x17dd/0x5830
[ 1379.039549][    C0]  ? trace_hrtimer_start+0x82/0x200
[ 1379.044761][    C0]  ? hrtimer_start_range_ns_common+0x7cd/0xb60
[ 1379.050910][    C0]  ? __lock_acquire+0x747/0x2de0
[ 1379.055830][    C0]  ? __pfx___schedule+0x10/0x10
[ 1379.060661][    C0]  ? __lock_acquire+0x747/0x2de0
[ 1379.065586][    C0]  preempt_schedule_irq+0x4b/0x90
[ 1379.070590][    C0]  irqentry_exit+0x14f/0x9b0
[ 1379.075159][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1379.080167][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1379.086123][    C0] RIP: 0010:lock_acquire+0x232/0x350
[ 1379.091385][    C0] Code: ff ff ff e8 20 28 65 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 c2 31 3e 13 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d f7 33 1d
[ 1379.110974][    C0] RSP: 0018:ffffc900034a72e0 EFLAGS: 00000292
[ 1379.117029][    C0] RAX: 2ab9f68f1c1eea00 RBX: 0000000000000000 RCX: 0000000000000046
[ 1379.124981][    C0] RDX: 00000000dcd51af4 RSI: ffffffff8e93ade0 RDI: ffffffff8c8eba80
[ 1379.132929][    C0] RBP: ffff888022330000 R08: ffffffff817889df R09: 0000000000000000
[ 1379.140880][    C0] R10: ffffc900034a7418 R11: ffffffff81b3c4c0 R12: ffffffff9015a560
[ 1379.148843][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[ 1379.156820][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1379.163023][    C0]  ? unwind_next_frame+0x8f/0x2550
[ 1379.168147][    C0]  ? copy_net_ns+0x536/0x770
[ 1379.172738][    C0]  ? unwind_next_frame+0x8f/0x2550
[ 1379.177926][    C0]  unwind_next_frame+0xac/0x2550
[ 1379.182868][    C0]  ? unwind_next_frame+0x8f/0x2550
[ 1379.188002][    C0]  ? setup_net+0x118/0x350
[ 1379.192404][    C0]  ? unwind_next_frame+0x8f/0x2550
[ 1379.197504][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1379.203644][    C0]  arch_stack_walk+0x11b/0x150
[ 1379.208405][    C0]  ? copy_net_ns+0x536/0x770
[ 1379.212979][    C0]  stack_trace_save+0xa9/0x100
[ 1379.217724][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1379.223094][    C0]  ? __lock_acquire+0x747/0x2de0
[ 1379.228013][    C0]  kasan_save_track+0x3f/0x90
[ 1379.232693][    C0]  ? kasan_save_track+0x3f/0x90
[ 1379.237537][    C0]  ? kasan_save_free_info+0x40/0x50
[ 1379.242711][    C0]  ? __kasan_slab_free+0x70/0x90
[ 1379.247639][    C0]  ? kfree+0x1c7/0x650
[ 1379.251706][    C0]  ? __free_slab+0x126/0x260
[ 1379.256273][    C0]  ? __slab_free+0x269/0x2c0
[ 1379.260844][    C0]  ? qlist_free_all+0x99/0x100
[ 1379.265587][    C0]  ? kasan_quarantine_reduce+0x148/0x160
[ 1379.271199][    C0]  ? __kasan_kmalloc+0x22/0xb0
[ 1379.275943][    C0]  ? __kvmalloc_node_noprof+0x50a/0x820
[ 1379.281469][    C0]  ? nf_hook_entries_grow+0x287/0x740
[ 1379.286929][    C0]  ? __nf_register_net_hook+0x26f/0x940
[ 1379.292512][    C0]  ? nf_register_net_hook+0xb2/0x190
[ 1379.297789][    C0]  ? nf_register_net_hooks+0x44/0x1b0
[ 1379.303144][    C0]  ? ops_init+0x35d/0x5d0
[ 1379.307457][    C0]  ? setup_net+0x118/0x350
[ 1379.311854][    C0]  ? copy_net_ns+0x536/0x770
[ 1379.316459][    C0]  kasan_save_free_info+0x40/0x50
[ 1379.321473][    C0]  __kasan_slab_free+0x70/0x90
[ 1379.326220][    C0]  kfree+0x1c7/0x650
[ 1379.330097][    C0]  ? __free_slab+0x126/0x260
[ 1379.334673][    C0]  __free_slab+0x126/0x260
[ 1379.339066][    C0]  __slab_free+0x269/0x2c0
[ 1379.343484][    C0]  ? qlist_free_all+0x8e/0x100
[ 1379.348238][    C0]  qlist_free_all+0x99/0x100
[ 1379.352815][    C0]  kasan_quarantine_reduce+0x148/0x160
[ 1379.358260][    C0]  __kasan_kmalloc+0x22/0xb0
[ 1379.362848][    C0]  __kvmalloc_node_noprof+0x50a/0x820
[ 1379.368218][    C0]  ? __kvmalloc_node_noprof+0x340/0x820
[ 1379.373761][    C0]  ? nf_hook_entries_grow+0x287/0x740
[ 1379.379149][    C0]  ? nf_hook_entries_grow+0x287/0x740
[ 1379.384529][    C0]  nf_hook_entries_grow+0x287/0x740
[ 1379.389727][    C0]  ? preempt_schedule_common+0x7f/0xd0
[ 1379.395184][    C0]  ? preempt_schedule_thunk+0x16/0x40
[ 1379.400552][    C0]  __nf_register_net_hook+0x26f/0x940
[ 1379.405922][    C0]  nf_register_net_hook+0xb2/0x190
[ 1379.411018][    C0]  nf_register_net_hooks+0x44/0x1b0
[ 1379.416194][    C0]  ops_init+0x35d/0x5d0
[ 1379.420342][    C0]  setup_net+0x118/0x350
[ 1379.424564][    C0]  ? __pfx_setup_net+0x10/0x10
[ 1379.429398][    C0]  ? down_read_killable+0x1b6/0x3b0
[ 1379.434577][    C0]  ? __ns_common_init+0x384/0x590
[ 1379.439584][    C0]  copy_net_ns+0x536/0x770
[ 1379.443992][    C0]  create_new_namespaces+0x3f0/0x6b0
[ 1379.449267][    C0]  ? security_capable+0x7e/0x2c0
[ 1379.454360][    C0]  unshare_nsproxy_namespaces+0x144/0x190
[ 1379.460061][    C0]  ksys_unshare+0x532/0x890
[ 1379.464559][    C0]  ? __pfx_ksys_unshare+0x10/0x10
[ 1379.469599][    C0]  ? fput_close_sync+0x11f/0x240
[ 1379.474517][    C0]  ? __pfx_do_faccessat+0x10/0x10
[ 1379.479523][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[ 1379.484617][    C0]  __x64_sys_unshare+0x38/0x50
[ 1379.489356][    C0]  do_syscall_64+0x16a/0x530
[ 1379.493944][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1379.498984][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.505105][    C0]  ? clear_bhb_loop+0x70/0xc0
[ 1379.509789][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1379.515673][    C0] RIP: 0033:0x00007f2b8f1a0de7
[ 1379.520423][    C0] RSP: 002b:00007ffee95d3d18 EFLAGS: 00000206 ORIG_RAX: 0000000000000110
[ 1379.528816][    C0] RAX: ffffffffffffffda RBX: 00007f2b8f425f40 RCX: 00007f2b8f1a0de7
[ 1379.536781][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[ 1379.544736][    C0] RBP: 00007f2b8f4267b8 R08: 0000000000000000 R09: 0000000000000000
[ 1379.552696][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008
[ 1379.560675][    C0] R13: 0000000000000003 R14: 00007ffee95d3f58 R15: 0000000000000000
[ 1379.568647][    C0]  </TASK>
[ 1379.571666][    C0] rcu: rcu_preempt kthread starved for 10159 jiffies! g128393 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0
[ 1379.582749][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1379.592725][    C0] rcu: RCU grace-period kthread stack dump:
[ 1379.598588][    C0] task:rcu_preempt     state:R  running task     stack:27400 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1379.612050][    C0] Call Trace:
[ 1379.615312][    C0]  <TASK>
[ 1379.618243][    C0]  __schedule+0x17dd/0x5830
[ 1379.622744][    C0]  ? __lock_acquire+0x747/0x2de0
[ 1379.627675][    C0]  ? do_raw_spin_unlock+0xf5/0x200
[ 1379.632772][    C0]  ? __pfx___schedule+0x10/0x10
[ 1379.637603][    C0]  ? lock_acquire+0x115/0x350
[ 1379.642269][    C0]  ? schedule+0x90/0x2b0
[ 1379.646488][    C0]  schedule+0x164/0x2b0
[ 1379.650629][    C0]  schedule_timeout+0x152/0x2c0
[ 1379.655462][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1379.660813][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1379.666083][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1379.671878][    C0]  ? prepare_to_swait_event+0x220/0x3e0
[ 1379.677411][    C0]  ? prepare_to_swait_event+0x35e/0x3e0
[ 1379.682954][    C0]  rcu_gp_fqs_loop+0x30c/0x1230
[ 1379.687994][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1379.694176][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1379.699451][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1379.704636][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1379.710431][    C0]  rcu_gp_kthread+0x9c/0x340
[ 1379.715009][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1379.720208][    C0]  ? __kthread_parkme+0x71/0x1f0
[ 1379.725129][    C0]  ? __kthread_parkme+0x199/0x1f0
[ 1379.730141][    C0]  kthread+0x38b/0x480
[ 1379.734196][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1379.739379][    C0]  ? __pfx_kthread+0x10/0x10
[ 1379.743975][    C0]  ret_from_fork+0x514/0xb70
[ 1379.748579][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1379.753674][    C0]  ? __switch_to+0xc78/0x1410
[ 1379.758356][    C0]  ? __pfx_kthread+0x10/0x10
[ 1379.762932][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1379.767694][    C0]  </TASK>
[ 1379.770724][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1379.777053][    C0] CPU: 0 UID: 0 PID: 3233 Comm: kworker/R-bat_e Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1379.788325][    C0] Tainted: [L]=SOFTLOCKUP
[ 1379.792645][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1379.802697][    C0] Workqueue: bat_events batadv_tt_purge
[ 1379.808358][    C0] RIP: 0010:unwind_next_frame+0xae3/0x2550
[ 1379.814167][    C0] Code: 8b 3b 48 85 ff 0f 84 b9 0d 00 00 48 83 c7 70 e8 c3 25 00 00 49 89 c0 48 8b 54 24 08 48 8d 5a 01 48 8b 44 24 30 42 0f b6 04 20 <84> c0 4c 89 04 24 0f 85 26 14 00 00 48 89 dd 48 c1 ed 03 42 0f b6
[ 1379.833765][    C0] RSP: 0018:ffffc90000006f40 EFLAGS: 00000282
[ 1379.839817][    C0] RAX: 0000000000000000 RBX: ffffffff92e9aeaf RCX: ffffffff923902ac
[ 1379.847775][    C0] RDX: ffffffff92e9aeae RSI: ffffffff92e9aeaa RDI: ffffffff8c8eba20
[ 1379.855737][    C0] RBP: ffffc90000007020 R08: ffffc90000007620 R09: 0000000000000000
[ 1379.863710][    C0] R10: ffffc90000007038 R11: ffffffff81b3c4c0 R12: dffffc0000000000
[ 1379.871701][    C0] R13: ffffffff92e9aeaa R14: ffffc90000006fe8 R15: 1ffff92000000dfd
[ 1379.879680][    C0] FS:  0000000000000000(0000) GS:ffff8881233f9000(0000) knlGS:0000000000000000
[ 1379.888599][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1379.895256][    C0] CR2: 00007f02309a7da3 CR3: 00000000669a0000 CR4: 00000000003526f0
[ 1379.903231][    C0] Call Trace:
[ 1379.906497][    C0]  <IRQ>
[ 1379.909329][    C0]  ? nft_synproxy_do_eval+0x389/0x5d0
[ 1379.914691][    C0]  ? unwind_next_frame+0x8f/0x2550
[ 1379.919790][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1379.925975][    C0]  arch_stack_walk+0x11b/0x150
[ 1379.930767][    C0]  ? nft_synproxy_do_eval+0x389/0x5d0
[ 1379.936135][    C0]  stack_trace_save+0xa9/0x100
[ 1379.940888][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[ 1379.946242][    C0]  ? __lock_acquire+0x747/0x2de0
[ 1379.951178][    C0]  kasan_save_track+0x3f/0x90
[ 1379.955841][    C0]  ? kasan_save_track+0x3f/0x90
[ 1379.960676][    C0]  ? kasan_save_free_info+0x40/0x50
[ 1379.965875][    C0]  ? __kasan_slab_free+0x70/0x90
[ 1379.970790][    C0]  ? kfree+0x1c7/0x650
[ 1379.974832][    C0]  ? __kfree_skb+0x5d/0x210
[ 1379.979318][    C0]  ? nft_synproxy_eval_v4+0x36a/0x4e0
[ 1379.984673][    C0]  ? nft_synproxy_do_eval+0x389/0x5d0
[ 1379.990045][    C0]  kasan_save_free_info+0x40/0x50
[ 1379.995047][    C0]  __kasan_slab_free+0x70/0x90
[ 1379.999792][    C0]  kfree+0x1c7/0x650
[ 1380.003667][    C0]  ? __kfree_skb+0x5d/0x210
[ 1380.008171][    C0]  __kfree_skb+0x5d/0x210
[ 1380.012482][    C0]  nft_synproxy_eval_v4+0x36a/0x4e0
[ 1380.017721][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[ 1380.023418][    C0]  ? lock_acquire+0x115/0x350
[ 1380.028079][    C0]  ? nf_ip_checksum+0x13c/0x510
[ 1380.032909][    C0]  nft_synproxy_do_eval+0x389/0x5d0
[ 1380.038088][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[ 1380.043787][    C0]  ? clockevents_program_event+0x491/0x630
[ 1380.049579][    C0]  nft_do_chain+0x48d/0x1b10
[ 1380.054159][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[ 1380.059166][    C0]  ? ipt_do_table+0x2b9/0x15d0
[ 1380.063922][    C0]  nft_do_chain_inet+0x360/0x4b0
[ 1380.068905][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1380.074338][    C0]  ? ipt_do_table+0x2b9/0x15d0
[ 1380.079080][    C0]  ? nf_nat_ipv4_local_in+0x21f/0x720
[ 1380.084433][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[ 1380.089870][    C0]  nf_hook_slow+0xc5/0x220
[ 1380.094266][    C0]  NF_HOOK+0x21f/0x3c0
[ 1380.098323][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1380.104303][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1380.108446][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1380.113016][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[ 1380.118979][    C0]  ? ip_local_deliver+0x113/0x190
[ 1380.123983][    C0]  NF_HOOK+0x336/0x3c0
[ 1380.128052][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1380.133142][    C0]  ? NF_HOOK+0x9e/0x3c0
[ 1380.137274][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[ 1380.141844][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[ 1380.147003][    C0]  ? ip_rcv_core+0x88d/0xd50
[ 1380.151600][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1380.156127][    C0]  ? __pfx_ip_rcv+0x10/0x10
[ 1380.160654][    C0]  process_backlog+0xa6b/0x18b0
[ 1380.165497][    C0]  ? process_backlog+0x3de/0x18b0
[ 1380.170595][    C0]  __napi_poll+0xaa/0x330
[ 1380.174976][    C0]  net_rx_action+0x61d/0xf50
[ 1380.179569][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1380.184664][    C0]  ? xfrm_dev_backlog+0x24b/0x3c0
[ 1380.189776][    C0]  ? net_tx_action+0x5bb/0xc30
[ 1380.194529][    C0]  ? net_tx_action+0xbff/0xc30
[ 1380.199297][    C0]  handle_softirqs+0x265/0x8d0
[ 1380.204149][    C0]  ? batadv_tt_local_purge+0x277/0x300
[ 1380.209619][    C0]  do_softirq+0x77/0xd0
[ 1380.213787][    C0]  </IRQ>
[ 1380.216715][    C0]  <TASK>
[ 1380.219631][    C0]  __local_bh_enable_ip+0x100/0x140
[ 1380.224827][    C0]  batadv_tt_local_purge+0x277/0x300
[ 1380.230119][    C0]  ? process_scheduled_works+0x97a/0x1630
[ 1380.235826][    C0]  batadv_tt_purge+0x35/0xa40
[ 1380.240493][    C0]  ? rcu_is_watching+0x16/0xb0
[ 1380.245253][    C0]  ? process_scheduled_works+0x97a/0x1630
[ 1380.251083][    C0]  process_scheduled_works+0xc3d/0x1630
[ 1380.256645][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1380.262618][    C0]  ? assign_work+0x3af/0x5d0
[ 1380.267223][    C0]  rescuer_thread+0x84a/0x12a0
[ 1380.271995][    C0]  ? rescuer_thread+0xb8/0x12a0
[ 1380.276866][    C0]  kthread+0x38b/0x480
[ 1380.280939][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[ 1380.286121][    C0]  ? __pfx_kthread+0x10/0x10
[ 1380.290703][    C0]  ret_from_fork+0x514/0xb70
[ 1380.295284][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1380.300376][    C0]  ? __switch_to+0xc78/0x1410
[ 1380.305035][    C0]  ? __pfx_kthread+0x10/0x10
[ 1380.309606][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1380.314362][    C0]  </TASK>