last executing test programs:

3m13.782483181s ago: executing program 1 (id=2):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e25}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000240)={<r5=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x10}, r5}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @local}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, r5, 0x9dff7ffc}}, 0x48)

3m9.613622926s ago: executing program 1 (id=6):
socket$inet6_udp(0xa, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff77}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1194, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000)

3m7.919919976s ago: executing program 1 (id=7):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB="0d0300000000feffffff130000000c0009800800020000000000"], 0x20}}, 0x4000014)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000006940)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="04000b0004000180bcb493de0bb58fd75bdc5e7c53ed39d06fd043db86af6933d71e30cab89da1cd72deb5178a8576e69b2ff911b2fc9aec9a3e2c48ddc884448fd51602af338a3185dcc3b9743391b1e5189f75c863271e1bf36c11da94a91a9711f9fd7b51"], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
syz_clone(0x7c54cb8ec36036ed, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x20000081)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000140a010200000000000000000a0000090c0006400000000000000003140000001100010000000001000000000100000a47766f08523249cb540183d8bb6ebda90a5d1bc2e7f948d93655e8c57e7d51870195c028329c4c59aabd1f5ff3839d631746d8922cde1ad593351235600e2ef33a66ab0353d19825be44937bcb3d9f4b075d4c0aadf9e5c5517b18369008a9ab22161391c23ea5938e7e4acd3bdac5"], 0x48}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180))
socket(0x2, 0x80805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))

3m5.870794829s ago: executing program 1 (id=8):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)={[{@stats}]})
chroot(&(0x7f0000000200)='./file0\x00')
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)

3m4.014247757s ago: executing program 1 (id=10):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./file1\x00', 0xa500014c)
inotify_add_watch(r0, &(0x7f0000000140)='./file0/file3\x00', 0x90000880)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
ioctl$BLKPG(r1, 0x81484d11, &(0x7f00000000c0)={0x1, 0x0, 0x94, &(0x7f0000000000)={0xfffffffffffffffd, 0x3ff, 0x6}})
ioctl$USBDEVFS_GET_SPEED(r1, 0x551f)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
readv(r2, &(0x7f0000000380)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1)

2m59.165323148s ago: executing program 1 (id=12):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x1, @private0, 0x807}, 0x1c)
ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7dfff9, 0x5})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10)
r5 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
getresgid(0x0, &(0x7f00000000c0)=<r6=>0x0, 0x0)
shmctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r6, 0x6, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x10, 0x2, 0x6})
setuid(0xffffffffffffffff)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023621, 0x20048, 0x1b35, 0xa, 0x4000002, 0x2, 0x0, 0x0, 0x1, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000840)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640)=[0x1], 0x0, 0x0)

2m42.562778727s ago: executing program 32 (id=12):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffffffffffff6b, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000580), 0x2, 0x2)
connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x1, @private0, 0x807}, 0x1c)
ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7dfff9, 0x5})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10)
r5 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil)
setgid(0xffffffffffffffff)
setgroups(0x0, 0x0)
getresgid(0x0, &(0x7f00000000c0)=<r6=>0x0, 0x0)
shmctl$IPC_SET(r5, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r6, 0x6, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x8, 0x10, 0x2, 0x6})
setuid(0xffffffffffffffff)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023621, 0x20048, 0x1b35, 0xa, 0x4000002, 0x2, 0x0, 0x0, 0x1, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, 0x0, 0x4000840)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f000008c000/0x3000)=nil], &(0x7f0000002640)=[0x1], 0x0, 0x0)

13.871376578s ago: executing program 3 (id=265):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000180)={0x0, 0x7fffffffffffffff, 0x1, [0x2000000000002, 0x7, 0x9, 0x9, 0xde], [0x9, 0xb329, 0x1000, 0x7, 0x5, 0xa, 0x4, 0xe970, 0x771, 0x9f, 0xcdc0, 0x9, 0x1, 0x10001, 0xefcf, 0xb13, 0x54, 0x3, 0xffff, 0x7fff, 0x9673, 0x6, 0xffffffffffffa59b, 0x7, 0x3, 0x8, 0x0, 0xd6f9, 0x4, 0x100000000, 0x0, 0x6, 0xbe40, 0x501, 0x7fffffffffffffff, 0x0, 0x5, 0x38, 0xe, 0xfe8, 0x101, 0x0, 0x6, 0xcbad, 0x0, 0x4, 0xe4e0, 0x2, 0x60000000, 0x2, 0x100000000, 0x98a, 0x6, 0x1, 0x7, 0x3, 0x1, 0x8001, 0x200, 0xa71, 0xe, 0x3, 0xfffffffeffffffff, 0xffff, 0x9, 0x5, 0x6, 0x8000, 0x83, 0x0, 0xc, 0x29, 0x4, 0x8000000000000001, 0x84a, 0x80000001, 0x8, 0x200, 0x8, 0x9, 0x4, 0x1ff, 0x9, 0x3, 0x8, 0x8fc0, 0x9, 0xffffffffffffffff, 0x0, 0x7f, 0x8, 0x53, 0x1, 0x8000000000000001, 0xfffffffffffffffc, 0x4, 0xfffffffffffffff9, 0x800000000000002, 0x6, 0x3, 0xfffffffffffffffb, 0x2, 0x9, 0x7ff, 0xffffffff, 0x1, 0x8000000000000001, 0xfffffffffffffffd, 0x1, 0x5, 0x1, 0xe, 0x3, 0x5, 0x2, 0x7, 0x5, 0x1, 0x6, 0x28f201bf, 0x5]})
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000030000000000000000000000182a0000", @ANYRES32=r0, @ANYBLOB="0000e8ff031f00009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1005, &(0x7f0000000940)=""/4101}, 0x94)
syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x810, &(0x7f0000000240)={[{@autodefrag}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@ssd_spread}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$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")
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2000c6, &(0x7f0000001340)=ANY=[], 0x1, 0xace, &(0x7f00000028c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff)
write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x29f)

8.879549836s ago: executing program 2 (id=274):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt6_stats\x00')
symlinkat(&(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a00008, 0x0, 0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x2)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, <r3=>0x0}, &(0x7f0000000000)=0xa)
setresgid(r3, 0xffffffffffffffff, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x1000)
ftruncate(r0, 0x7fffffffffffffff)

8.878909128s ago: executing program 3 (id=275):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.136642322s ago: executing program 4 (id=276):
syz_open_dev$usbfs(0x0, 0x75, 0x140341)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x1800000000]}})

7.19152109s ago: executing program 4 (id=278):
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00')
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = dup(0xffffffffffffffff)
write$UHID_INPUT(r2, 0x0, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
flistxattr(r3, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

6.843427226s ago: executing program 2 (id=279):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 32)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (rerun: 32)
r1 = getpgid(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x11, 0x7ffffffe}]})
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, 0x0, 0x0, 0x19, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="180700000000000097d2d3cc0000000000000000000000000000000088e62a6c64e8ca9f9debb9d994208bc2695c1fa2c0344b53a942c8b020570fa0f3aae847fb4f18e0f8e8f3bc81bfb7cb835cdf2ef4bc59965df69e8145581a7075e2a30f70a8b6ac1f636a98fed905ea6e5cbe9e4b8c5ae7d9ba984e970ad120760b8b145c69de981e11ce644c0df78bcc72cfc7bee8c41597376a5ce573db78051ffdf44e801010fcb56e99c31a6bc7f0203397b86c8829905fbacdee318e7bf0b35057411074d1f7a1103e0b36917f4a273ec8839e5bfebde93bfa43cd", @ANYRES32=r3, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x40040)

6.842200195s ago: executing program 4 (id=280):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0xff00)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4004)

6.422417471s ago: executing program 0 (id=281):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="3400fd004100070128bd7000fbdbdf25037c00000400c3801c00018018"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x2000c080)

6.241059766s ago: executing program 2 (id=282):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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")
r0 = syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0)
io_setup(0xa, &(0x7f0000000540)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f00000001c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000b80)="ed", 0x1, 0x600}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0xd86, r0, &(0x7f0000000580)="0e2a2b6ea41d030476b54eb83f3df615934560d094169634b844177a79717f6e8d8906f33ade3b7da9fc4bb70717c3dfe157541cc15f767c4739cedaf62f24bf5d706a7adca273f38819e0303ca2f2b4ff1784f2bb02254fab6c8c78bdd9878329685a023c4f3b847d837263584761578acd78770cfbeeb0115537371295307ee1982b3c94a1c2d4fc2fa80306698ac04937352532e37a852e83344c7f1aea9675e9b7186ede118c45bbe932b314ec0004ff43f3df3bc80400000000000000de0598fd8fde53f00606c6c26d5e9a0c4ce9b37108cfb3e2324009cdcd46112a50a6086b912dcacdb0b6a391dd7406846ba177210a6dfdae264f080502d94b2eed2852af1b2531361de45027b47415ba0c145d285f540262a25f1af84c6d67584c26ddf00fff00000000000000f9f5ae4c8ab6717c5fe17737a3acc5fa55dc9ff8e216e5cd263711bd22bec3492a55cc666f41e520d73e2bde296be21057c85714f6c916926f81595f98dbf507d500349ddf2a185eaf821f26c4e01889a4eeb7eb8e63ab3c5dc2a9cf33e1eef9f87beb9499e2ab8c63ad9f1113bb35a28b2e6e851d76c80eded2bf8e34238f699124ea597549ec1b785dda33afcf0c27bd6c1cd1450fe91c84ab9422a2b53a6f57cb956605", 0x1d1, 0x1f4, 0x0, 0x3}])
ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
fallocate(r3, 0x10, 0x3ffd, 0x8000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000100)
mmap$IORING_OFF_SQ_RING(&(0x7f0000925000/0x2000)=nil, 0x2000, 0x200000a, 0x53, r3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, 0x0)

6.224822234s ago: executing program 0 (id=283):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0xf80, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xf50, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0xf44, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x2, 0x9ab3, 0x3, 0x4, 0x1}, 0x81, 0x3, [{0x1, 0x333ad2b6, 0x2, 0x4, 0x9, 0x2}, {0x10001, 0x6794, 0x1, 0x8000, 0x6, 0x9}, {0x1ff, 0xc, 0x58, 0x3, 0x7, 0x1}, {0x7, 0x2, 0x7, 0x9, 0x1, 0xc}, {0x9522c21, 0x8, 0xffffffff, 0x0, 0x400, 0x7}, {0x4, 0x0, 0x0, 0x9, 0xd567, 0x1}, {0xb351, 0x2, 0xc4, 0xf, 0xe, 0xfff}, {0xdf9f, 0x9, 0x2, 0xfffffffb, 0xf, 0x5}, {0x5, 0x0, 0x1, 0xff, 0x3, 0x5}, {0x8, 0x6, 0xa3b, 0x7, 0x3, 0xdc7}]}, [{0x3, 0x2, 0x0, 0x1, 0xfffffff9, 0xc74b}, {0x6, 0x3800000, 0x4, 0xe527, 0xfffffffc, 0x2}, {0xfffff8bb, 0x4, 0x5, 0x80000001, 0x1, 0x10000}, {0x9, 0x5269, 0x3, 0x8000, 0x8, 0x101}, {0xff, 0x3, 0x1, 0xd, 0x3, 0x1}, {0x2, 0x0, 0x0, 0x80000001, 0x81, 0x1}, {0xd, 0x2, 0x6, 0x1, 0x5, 0x6}, {0x2, 0xfffffffa, 0x5, 0x5, 0xbaa, 0xa}, {0x4d18b60b, 0x1ff, 0x6, 0x768f, 0xffffffff, 0xfffff800}, {0x10, 0x0, 0x1, 0x4, 0xff}, {0x3, 0x14bc, 0x1, 0x6, 0x4, 0x87}, {0xffff2598, 0x800, 0x22, 0x6, 0xa7e8, 0x1}, {0x1767e2f5, 0xbe80, 0xfc8, 0x8, 0xbc, 0x401}, {0x1db4, 0x0, 0x7, 0x2, 0x4, 0x9}, {0x2, 0x7ff, 0x5, 0xbc000000, 0x52dcd590, 0x9}, {0x8d9, 0x9, 0xd7, 0x9, 0x6, 0x3}, {0x4, 0x3, 0x480000, 0x100, 0x9, 0x683}, {0x3b, 0xfd, 0x0, 0x7, 0xffff85e5, 0x8001}, {0xfffffc01, 0x5, 0x5, 0x800, 0x1000, 0x306}, {0x5, 0x9, 0x2, 0x8, 0x9, 0x7ff}, {0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x400}, {0x5, 0x4, 0x7, 0x1, 0x4, 0x9}, {0x5, 0x9, 0x9, 0x0, 0x80, 0x8}, {0x9, 0x6, 0x2, 0x8, 0x4}, {0x242, 0x3, 0xe, 0x0, 0xfbb, 0x1000000}, {0x4, 0x4, 0xffffff64, 0x3, 0x4, 0x101}, {0x4, 0x9, 0x6a8, 0x3, 0x7, 0x8}, {0xb, 0x9a, 0x5, 0x80000001, 0xfffeffff, 0xd}, {0xd, 0xf, 0x1, 0x0, 0x1, 0xd524}, {0x8, 0x7, 0xfffffff9, 0x3, 0x8, 0x19}, {0x7b1, 0xff, 0x8, 0x2, 0x6, 0x101}, {0x1, 0xffff, 0x2, 0x8, 0xb, 0x7}, {0x6, 0x10001, 0x9, 0x3, 0x1, 0x3}, {0x1, 0x5, 0x3ff, 0x2, 0x100, 0x101}, {0x3, 0x1880, 0xab4f, 0x1, 0x100000, 0x9}, {0x2, 0x1, 0xfffffe9e, 0xc0, 0xb0, 0x8}, {0x7ff, 0x9, 0x4, 0x2, 0x4}, {0x9, 0xae, 0x2, 0x8, 0x4, 0x8001}, {0xa, 0x1, 0x3, 0x8, 0x2, 0x5}, {0xf, 0xec6, 0xfffffff1, 0x7ff, 0x5}, {0x5, 0x0, 0x6285, 0x3, 0xdc, 0x8000}, {0xffffff01, 0x2, 0x7, 0x5, 0xb68, 0x2}, {0xb, 0x5, 0x2, 0x6, 0x4, 0xdc}, {0x5, 0xff, 0x10001, 0x100, 0x92}, {0x1ff, 0x40, 0x1, 0x3b3e, 0x2, 0x3}, {0xffffffff, 0x8, 0x9, 0x7, 0x1000, 0x6}, {0x2, 0x8, 0xf, 0x4, 0x8, 0x8}, {0x7fffffff, 0x0, 0xfffffff5, 0x6, 0x8, 0x7}, {0x2, 0x0, 0xa46, 0x4a, 0x8, 0x5c}, {0x6, 0x5, 0x2, 0x7, 0x7, 0x4}, {0x3, 0x3d8, 0x6, 0x1, 0x1, 0x8}, {0xdc9e, 0x60000000, 0x8, 0x3, 0x1, 0xd}, {0x7, 0x40, 0x200, 0xfffffffc, 0xd, 0x81}, {0x8, 0xffff, 0x8, 0x3, 0x8, 0xb1}, {0x5, 0xfffffffd, 0xdfb0, 0x3, 0xa, 0x9}, {0xfffffffa, 0xfff, 0x5, 0x9, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x1, 0x1000, 0x3ff}, {0x9, 0x1, 0x2, 0x4, 0x3, 0x25b7}, {0xff, 0x9, 0x8001, 0x4, 0x401, 0x81}, {0xd, 0x6, 0xf3, 0x2, 0x33, 0xde}, {0x2, 0x10000, 0x4bc, 0xe28d, 0x7, 0x943}, {0x7, 0xf, 0x42, 0x59, 0xe, 0xa2}, {0x70, 0x800, 0xfffffff5, 0x4, 0x10001, 0xe}, {0xe4b, 0xb203, 0xb90, 0x4, 0x8, 0x4}, {0x6, 0x5df, 0x70ef27b5, 0x3, 0x80000000, 0x9}, {0x7, 0x1, 0xc6f, 0x9, 0x6f9, 0x9}, {0x9, 0x1, 0x8000, 0xfffffd0f, 0x9, 0x7}, {0x5, 0x0, 0x80000001, 0x7, 0x6, 0x2}, {0x5, 0x100, 0x8, 0x200, 0x9c, 0x5}, {0x0, 0x2, 0x7204, 0x80, 0x10, 0x7}, {0x9, 0xfff, 0x2, 0x81, 0x7, 0x6}, {0x0, 0x2, 0x6bdf, 0xfffffffd, 0x5, 0x8}, {0x5, 0x4, 0x7, 0x7fff, 0x5, 0x81}, {0x100, 0x7, 0x1, 0x8, 0x49, 0x7fff}, {0x7, 0x2, 0xfffffff0, 0x537, 0x7f, 0x4}, {0x5, 0x0, 0xee, 0x1, 0x80, 0x10}, {0x3, 0xc85, 0xbfd, 0x3, 0x9}, {0x1, 0x9, 0x9, 0xe, 0x80000001, 0x5}, {0x7, 0x1, 0x80000001, 0x2, 0xa, 0x6}, {0x9, 0x3, 0x800, 0x2, 0x4, 0x7412}, {0x1ff, 0x91f1, 0x7, 0x1, 0x9, 0x62a}, {0x2, 0x0, 0x6, 0x1, 0x90000000, 0x9}, {0x4, 0xffffffff, 0x6, 0xfff, 0xa, 0x2}, {0x1a4ee000, 0x5, 0x2f15, 0x2, 0x0, 0x3}, {0xe2b, 0x3, 0x2, 0x6, 0xffff, 0x18}, {0x5, 0x3622, 0x9, 0x10, 0xae2, 0x9}, {0x7, 0x5, 0x81, 0x40, 0xeb, 0x2}, {0x4, 0x50ed48cf, 0x80000000, 0x7, 0x0, 0x7}, {0x81, 0x1000, 0x0, 0x100, 0x70, 0x3}, {0x72b10789, 0x1000, 0xfff, 0x7, 0x9, 0x7}, {0x18, 0x2, 0x1e000000, 0x5, 0x80000000, 0x4}, {0x0, 0x8, 0x4, 0x6d4, 0x2, 0x8}, {0x2, 0x9, 0x4, 0x7a9b, 0x7fffffff}, {0x8, 0x4, 0x2, 0x6, 0x7, 0x8}, {0x6, 0xa, 0x7, 0x8, 0x6, 0x3}, {0x7, 0x8, 0x8, 0x9, 0x3, 0x2}, {0x2d, 0xffffffff, 0x8, 0x8, 0xfae1, 0x7}, {0x9, 0x6, 0x968, 0x3, 0xffff9b5b, 0x97}, {0x6102, 0x0, 0x7, 0xffffffff, 0x4, 0x8405}, {0x2, 0x3, 0x6, 0x0, 0x776b, 0xfff}, {0xb847, 0x5, 0x4, 0x9, 0xe, 0x8}, {0x26, 0x3, 0xc, 0x2, 0x6, 0x7}, {0x17, 0x47bf, 0x7, 0x7, 0x1}, {0x5, 0x1, 0x12, 0x5, 0x0, 0x4}, {0x7ff, 0x3, 0x87, 0x18000, 0x8cb2, 0x4}, {0x2, 0x3, 0xfffff0f7, 0x8, 0x4, 0x401}, {0x3, 0x3, 0x1, 0x1, 0xfffeffff, 0x3}, {0xe, 0x59df, 0x7, 0x1ff, 0x9, 0x7}, {0xa, 0x81, 0x80000000, 0x3, 0x0, 0x7}, {0xfffffff7, 0x5, 0x3, 0x8, 0x4, 0xedb}, {0x2, 0x5a3352f8, 0x9, 0x8, 0x4, 0x8}, {0x1c000000, 0x7fffffff, 0x8000, 0x9, 0x1, 0x4}, {0x0, 0x1ff, 0x4, 0x9, 0xffff, 0xb}, {0x0, 0x7, 0x9, 0x5, 0x3, 0xa}, {0x1a0, 0x8, 0x40, 0xfffffffa, 0x2, 0x7f}, {0xe4360000, 0x0, 0x2f1, 0x40, 0x0, 0x6}, {0x8, 0x5, 0x7ff, 0x761, 0x8, 0x9}, {0x100, 0x5, 0x6b07, 0x58cc, 0x7fff, 0x4}, {0x8, 0x0, 0x1576, 0x5, 0x101, 0x3}, {0x9, 0x1, 0xd, 0x1ff, 0x3, 0x5}, {0xfffffffe, 0x9f1f, 0x4, 0x7, 0x3, 0x3}, {0x7, 0x2, 0x66dc, 0x7, 0x4, 0x2}, {0x8, 0x6, 0xb80, 0x8, 0x1, 0xc870}, {0x3, 0x9, 0xe2, 0x9, 0xffffffff}, {0x86, 0x9, 0x0, 0x6, 0xa, 0x463}, {0x8, 0x40, 0x2, 0x9, 0x7, 0x7fffffff}, {0xfffffffd, 0x4, 0x0, 0x800, 0x8, 0x3}, {0x3, 0x6, 0x4, 0x8001, 0xd, 0x400}], [{0x4, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3, 0x1}, {0x4}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x6}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}}, 0x80)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

5.47910656s ago: executing program 0 (id=284):
socket$inet6(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket(0xa, 0x3, 0x87)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
epoll_create1(0x80000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000000), 0x80000)

5.267657401s ago: executing program 2 (id=285):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) (async)
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x404, &(0x7f0000000100)={[{@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x609, &(0x7f0000000940)="$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")

5.127369352s ago: executing program 3 (id=286):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0)
mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000001c0)='./file1\x00', 0x300000a, &(0x7f0000000480)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x1}}, {@nodiscard}, {@clear_cache}, {@rescan_uuid_tree}, {@barrier}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}, {@datasum}, {@enospc_debug}, {@ssd_spread}, {@space_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0000000000000000000000000004"], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x143042, 0xd1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
r6 = memfd_create(&(0x7f00000000c0)='\x02Ab\x9e', 0x4)
pwritev2(r6, 0x0, 0x0, 0xffffffff, 0x5, 0x11)
fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080))
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, 0x0)

3.961806818s ago: executing program 3 (id=287):
r0 = socket$kcm(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x97ffffffffffffff)

3.497777925s ago: executing program 4 (id=288):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x21}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x86}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

3.388438772s ago: executing program 0 (id=289):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x200000000000000, 0x2})

3.178362082s ago: executing program 2 (id=290):
prlimit64(0x0, 0xe, 0x0, 0x0)
getrlimit(0x8, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
creat(0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="757365725f78617474f9e472bf20c960722c757365725f78617474722c6e6f6199702c757365725f78617474722c6e6f75736572655f73747261746567793d7265616461686561642c00d6b67dc1a82fc3e796edb07c82dd19982f04d179f6127edb5853aaa42350090996dac523e9257fc951b070a294"], 0x1, 0x177, &(0x7f0000000680)="$eJzslL9KA0EQxr/diwkROztBLAwYi1zuLio2IsEXCPgPO6M5Q/RiQnKCiZXY+gC2tr5CGsEXUSsRUlpH9naTWyV/RNAgzq+Y+/Z2dm52Dj4QBPFveX56e7x+bV0YAKaQQEy9fzHCHK7ln+XiB9OpjbvWzcPVenW20q9mp/P170cA3GcN+L2zH08n1HMLvKe3wbGo9C4YTKX3wbGjtAuGPaWPNV0R+aZ5VPJc87DiFYSwRLBFcETIfO6vfclQ0Ppj2n690TzJe55b+0Exan7tLMea1p/+v7qzsbT52eCwlc6AYVPpVcS6s5Ej0e4/EwnrG798fxIkSPw1EfpT55ZhQfOniOYfab9cTdcbzVSpnC+6RffUcTIr1pJlLTvpwIhkHOJ/8cCfJrX6EwNyoyyK87zv12wZe2tHxn6OywP/40jOy7Xw/ujAbuQ+U+dYoJLGkHSCIIixMQcWeOYInNy4GyUIgiAIgiAIgiAI4tu8BwAA//9iEXZY")
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000025c0)=<r3=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000002700)={"ea2f987fa0e718a9218f6144705e1b4a", r3, 0x0, {0x4, 0xf}, {0x70d7, 0x80000001}, 0x78117147, [0xffffffffffffffff, 0x10, 0x80, 0x8, 0x0, 0x5, 0x3, 0x5, 0x7, 0x10001, 0x7fffffffffffffff, 0x4cfb, 0xffffffffffffff63, 0x39d, 0x4, 0x9]})
ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000100))
mount$overlay(0x0, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000180), 0x840000, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000300)=[{0x15, 0x1, 0x0, 0xffffffff}, {0x54, 0xfe, 0x0, 0x300}, {0x6, 0x0, 0x0, 0xfff}]})

2.862963351s ago: executing program 3 (id=291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f00000008c0), &(0x7f0000000180)='./bus\x00', 0xf000000, &(0x7f0000000040)=ANY=[], 0xf5, 0x210, &(0x7f00000001c0)="$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")

2.829030828s ago: executing program 4 (id=292):
socket$netlink(0x10, 0x3, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$ptp0(0xffffff9c, 0x0, 0x400, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1)
syz_open_dev$vim2m(0x0, 0x0, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0xa)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000700000000001001000001000000000000"], 0x28}, 0xfc40)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r2, &(0x7f00000000c0)={0x2020}, 0x2020)
write$FUSE_NOTIFY_RESEND(r2, &(0x7f0000002200)={0x14}, 0x14)

1.616062821s ago: executing program 2 (id=293):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000})
fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmsg$can_bcm(r2, &(0x7f0000000c00)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/52, 0x34}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/235, 0xeb}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000640)=""/255, 0xff}, {&(0x7f0000000740)=""/218, 0xda}, {&(0x7f0000000840)=""/212, 0xd4}, {&(0x7f0000000940)=""/240, 0xf0}], 0xa, &(0x7f0000000b00)=""/205, 0xcd}, 0x40000023)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x101, 0x70bd25, 0x1000}, 0x14}}, 0x40044080)
r3 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x20132, 0xffffffffffffffff, 0xb299b000)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x8000, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x1, 0x93e, 0x7ffffff7fffffffc, 0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffff9, 0x800007ffb, 0x1751})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e1075"], 0xfdef)
r4 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0)
getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000), &(0x7f00000001c0)=0x4)
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e28, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4ea2, @private=0xa010102}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000600)='\'', 0x1}, {0x0}], 0x2}}], 0x1, 0x40)
connect$unix(r3, &(0x7f0000000080)=@abs={0xa}, 0x6e)
getsockname(r3, 0x0, &(0x7f0000000100))

526.608561ms ago: executing program 0 (id=294):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0xf80, 0x2c, 0xd27, 0x8030bd29, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xf50, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xe, 0x2}}, @TCA_ROUTE4_ACT={0xf44, 0x6, [@m_pedit={0xf40, 0x4, 0x0, 0x0, {{0xa}, {0xf14, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xf10, 0x4, {{{0x2, 0x9ab3, 0x3, 0x4, 0x1}, 0x81, 0x3, [{0x1, 0x333ad2b6, 0x2, 0x4, 0x9, 0x2}, {0x10001, 0x6794, 0x1, 0x8000, 0x6, 0x9}, {0x1ff, 0xc, 0x58, 0x3, 0x7, 0x1}, {0x7, 0x2, 0x7, 0x9, 0x1, 0xc}, {0x9522c21, 0x8, 0xffffffff, 0x0, 0x400, 0x7}, {0x4, 0x0, 0x0, 0x9, 0xd567, 0x1}, {0xb351, 0x2, 0xc4, 0xf, 0xe, 0xfff}, {0xdf9f, 0x9, 0x2, 0xfffffffb, 0xf, 0x5}, {0x5, 0x0, 0x1, 0xff, 0x3, 0x5}, {0x8, 0x6, 0xa3b, 0x7, 0x3, 0xdc7}]}, [{0x3, 0x2, 0x0, 0x1, 0xfffffff9, 0xc74b}, {0x6, 0x3800000, 0x4, 0xe527, 0xfffffffc, 0x2}, {0xfffff8bb, 0x4, 0x5, 0x80000001, 0x1, 0x10000}, {0x9, 0x5269, 0x3, 0x8000, 0x8, 0x101}, {0xff, 0x3, 0x1, 0xd, 0x3, 0x1}, {0x2, 0x0, 0x0, 0x80000001, 0x81, 0x1}, {0xd, 0x2, 0x6, 0x1, 0x5, 0x6}, {0x2, 0xfffffffa, 0x5, 0x5, 0xbaa, 0xa}, {0x4d18b60b, 0x1ff, 0x6, 0x768f, 0xffffffff, 0xfffff800}, {0x10, 0x0, 0x1, 0x4, 0xff}, {0x3, 0x14bc, 0x1, 0x6, 0x4, 0x87}, {0xffff2598, 0x800, 0x22, 0x6, 0xa7e8, 0x1}, {0x1767e2f5, 0xbe80, 0xfc8, 0x8, 0xbc, 0x401}, {0x1db4, 0x0, 0x7, 0x2, 0x4, 0x9}, {0x2, 0x7ff, 0x5, 0xbc000000, 0x52dcd590, 0x9}, {0x8d9, 0x9, 0xd7, 0x9, 0x6, 0x3}, {0x4, 0x3, 0x480000, 0x100, 0x9, 0x683}, {0x3b, 0xfd, 0x0, 0x7, 0xffff85e5, 0x8001}, {0xfffffc01, 0x5, 0x5, 0x800, 0x1000, 0x306}, {0x5, 0x9, 0x2, 0x8, 0x9, 0x7ff}, {0x9, 0xfffffff7, 0x1, 0x4, 0x4, 0x400}, {0x5, 0x4, 0x7, 0x1, 0x4, 0x9}, {0x5, 0x9, 0x9, 0x0, 0x80, 0x8}, {0x9, 0x6, 0x2, 0x8, 0x4}, {0x242, 0x3, 0xe, 0x0, 0xfbb, 0x1000000}, {0x4, 0x4, 0xffffff64, 0x3, 0x4, 0x101}, {0x4, 0x9, 0x6a8, 0x3, 0x7, 0x8}, {0xb, 0x9a, 0x5, 0x80000001, 0xfffeffff, 0xd}, {0xd, 0xf, 0x1, 0x0, 0x1, 0xd524}, {0x8, 0x7, 0xfffffff9, 0x3, 0x8, 0x19}, {0x7b1, 0xff, 0x8, 0x2, 0x6, 0x101}, {0x1, 0xffff, 0x2, 0x8, 0xb, 0x7}, {0x6, 0x10001, 0x9, 0x3, 0x1, 0x3}, {0x1, 0x5, 0x3ff, 0x2, 0x100, 0x101}, {0x3, 0x1880, 0xab4f, 0x1, 0x100000, 0x9}, {0x2, 0x1, 0xfffffe9e, 0xc0, 0xb0, 0x8}, {0x7ff, 0x9, 0x4, 0x2, 0x4}, {0x9, 0xae, 0x2, 0x8, 0x4, 0x8001}, {0xa, 0x1, 0x3, 0x8, 0x2, 0x5}, {0xf, 0xec6, 0xfffffff1, 0x7ff, 0x5}, {0x5, 0x0, 0x6285, 0x3, 0xdc, 0x8000}, {0xffffff01, 0x2, 0x7, 0x5, 0xb68, 0x2}, {0xb, 0x5, 0x2, 0x6, 0x4, 0xdc}, {0x5, 0xff, 0x10001, 0x100, 0x92}, {0x1ff, 0x40, 0x1, 0x3b3e, 0x2, 0x3}, {0xffffffff, 0x8, 0x9, 0x7, 0x1000, 0x6}, {0x2, 0x8, 0xf, 0x4, 0x8, 0x8}, {0x7fffffff, 0x0, 0xfffffff5, 0x6, 0x8, 0x7}, {0x2, 0x0, 0xa46, 0x4a, 0x8, 0x5c}, {0x6, 0x5, 0x2, 0x7, 0x7, 0x4}, {0x3, 0x3d8, 0x6, 0x1, 0x1, 0x8}, {0xdc9e, 0x60000000, 0x8, 0x3, 0x1, 0xd}, {0x7, 0x40, 0x200, 0xfffffffc, 0xd, 0x81}, {0x8, 0xffff, 0x8, 0x3, 0x8, 0xb1}, {0x5, 0xfffffffd, 0xdfb0, 0x3, 0xa, 0x9}, {0xfffffffa, 0xfff, 0x5, 0x9, 0x1, 0x8}, {0x1, 0x4, 0x0, 0x1, 0x1000, 0x3ff}, {0x9, 0x1, 0x2, 0x4, 0x3, 0x25b7}, {0xff, 0x9, 0x8001, 0x4, 0x401, 0x81}, {0xd, 0x6, 0xf3, 0x2, 0x33, 0xde}, {0x2, 0x10000, 0x4bc, 0xe28d, 0x7, 0x943}, {0x7, 0xf, 0x42, 0x59, 0xe, 0xa2}, {0x70, 0x800, 0xfffffff5, 0x4, 0x10001, 0xe}, {0xe4b, 0xb203, 0xb90, 0x4, 0x8, 0x4}, {0x6, 0x5df, 0x70ef27b5, 0x3, 0x80000000, 0x9}, {0x7, 0x1, 0xc6f, 0x9, 0x6f9, 0x9}, {0x9, 0x1, 0x8000, 0xfffffd0f, 0x9, 0x7}, {0x5, 0x0, 0x80000001, 0x7, 0x6, 0x2}, {0x5, 0x100, 0x8, 0x200, 0x9c, 0x5}, {0x0, 0x2, 0x7204, 0x80, 0x10, 0x7}, {0x9, 0xfff, 0x2, 0x81, 0x7, 0x6}, {0x0, 0x2, 0x6bdf, 0xfffffffd, 0x5, 0x8}, {0x5, 0x4, 0x7, 0x7fff, 0x5, 0x81}, {0x100, 0x7, 0x1, 0x8, 0x49, 0x7fff}, {0x7, 0x2, 0xfffffff0, 0x537, 0x7f, 0x4}, {0x5, 0x0, 0xee, 0x1, 0x80, 0x10}, {0x3, 0xc85, 0xbfd, 0x3, 0x9}, {0x1, 0x9, 0x9, 0xe, 0x80000001, 0x5}, {0x7, 0x1, 0x80000001, 0x2, 0xa, 0x6}, {0x9, 0x3, 0x800, 0x2, 0x4, 0x7412}, {0x1ff, 0x91f1, 0x7, 0x1, 0x9, 0x62a}, {0x2, 0x0, 0x6, 0x1, 0x90000000, 0x9}, {0x4, 0xffffffff, 0x6, 0xfff, 0xa, 0x2}, {0x1a4ee000, 0x5, 0x2f15, 0x2, 0x0, 0x3}, {0xe2b, 0x3, 0x2, 0x6, 0xffff, 0x18}, {0x5, 0x3622, 0x9, 0x10, 0xae2, 0x9}, {0x7, 0x5, 0x81, 0x40, 0xeb, 0x2}, {0x4, 0x50ed48cf, 0x80000000, 0x7, 0x0, 0x7}, {0x81, 0x1000, 0x0, 0x100, 0x70, 0x3}, {0x72b10789, 0x1000, 0xfff, 0x7, 0x9, 0x7}, {0x18, 0x2, 0x1e000000, 0x5, 0x80000000, 0x4}, {0x0, 0x8, 0x4, 0x6d4, 0x2, 0x8}, {0x2, 0x9, 0x4, 0x7a9b, 0x7fffffff}, {0x8, 0x4, 0x2, 0x6, 0x7, 0x8}, {0x6, 0xa, 0x7, 0x8, 0x6, 0x3}, {0x7, 0x8, 0x8, 0x9, 0x3, 0x2}, {0x2d, 0xffffffff, 0x8, 0x8, 0xfae1, 0x7}, {0x9, 0x6, 0x968, 0x3, 0xffff9b5b, 0x97}, {0x6102, 0x0, 0x7, 0xffffffff, 0x4, 0x8405}, {0x2, 0x3, 0x6, 0x0, 0x776b, 0xfff}, {0xb847, 0x5, 0x4, 0x9, 0xe, 0x8}, {0x26, 0x3, 0xc, 0x2, 0x6, 0x7}, {0x17, 0x47bf, 0x7, 0x7, 0x1}, {0x5, 0x1, 0x12, 0x5, 0x0, 0x4}, {0x7ff, 0x3, 0x87, 0x18000, 0x8cb2, 0x4}, {0x2, 0x3, 0xfffff0f7, 0x8, 0x4, 0x401}, {0x3, 0x3, 0x1, 0x1, 0xfffeffff, 0x3}, {0xe, 0x59df, 0x7, 0x1ff, 0x9, 0x7}, {0xa, 0x81, 0x80000000, 0x3, 0x0, 0x7}, {0xfffffff7, 0x5, 0x3, 0x8, 0x4, 0xedb}, {0x2, 0x5a3352f8, 0x9, 0x8, 0x4, 0x8}, {0x1c000000, 0x7fffffff, 0x8000, 0x9, 0x1, 0x4}, {0x0, 0x1ff, 0x4, 0x9, 0xffff, 0xb}, {0x0, 0x7, 0x9, 0x5, 0x3, 0xa}, {0x1a0, 0x8, 0x40, 0xfffffffa, 0x2, 0x7f}, {0xe4360000, 0x0, 0x2f1, 0x40, 0x0, 0x6}, {0x8, 0x5, 0x7ff, 0x761, 0x8, 0x9}, {0x100, 0x5, 0x6b07, 0x58cc, 0x7fff, 0x4}, {0x8, 0x0, 0x1576, 0x5, 0x101, 0x3}, {0x9, 0x1, 0xd, 0x1ff, 0x3, 0x5}, {0xfffffffe, 0x9f1f, 0x4, 0x7, 0x3, 0x3}, {0x7, 0x2, 0x66dc, 0x7, 0x4, 0x2}, {0x8, 0x6, 0xb80, 0x8, 0x1, 0xc870}, {0x3, 0x9, 0xe2, 0x9, 0xffffffff}, {0x86, 0x9, 0x0, 0x6, 0xa, 0x463}, {0x8, 0x40, 0x2, 0x9, 0x7, 0x7fffffff}, {0xfffffffd, 0x4, 0x0, 0x800, 0x8, 0x3}, {0x3, 0x6, 0x4, 0x8001, 0xd, 0x400}], [{0x4, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x4}, {0x4}, {0x2, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {}, {0x2}, {0x2}, {0x5}, {}, {0x5, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5}, {0x4}, {0x5}, {0x4}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x2, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x6}, {0x3, 0x1}, {0x4}, {}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x2}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0xb, 0x1}, {0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x5}, {0x5}, {0x6}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x5}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2}, {}, {0x4}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xf80}}, 0x80)
io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd)

520.509249ms ago: executing program 4 (id=295):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

72.033328ms ago: executing program 0 (id=296):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$loop(0x0, 0xffff, 0x40)
ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r1, 0x0, 0x801)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe)
r2 = dup(r1)
getdents64(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
socket(0x1e, 0x805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r6, 0x3)
write$UHID_DESTROY(r2, &(0x7f0000000040), 0x4)
accept4$bt_l2cap(r6, &(0x7f0000000200), 0x0, 0x800)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13111}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
socket$inet6(0xa, 0x38c18c2d7f940b0e, 0x3)

0s ago: executing program 3 (id=297):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
read(r1, 0x0, 0xff00)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000008740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4004)

kernel console output (not intermixed with test programs):

onfig 0 descriptor??
[  173.406169][ T5909] usb 5-1: USB disconnect, device number 2
[  173.434946][ T5911] gs_usb 3-1:0.0: Couldn't get device config: (err=-121)
[  173.434992][ T5911] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[  173.808926][ T6151] loop2: detected capacity change from 0 to 7
[  173.826350][ T6151] Dev loop2: unable to read RDB block 7
[  173.826396][ T6151]  loop2: AHDI p1 p2 p3
[  173.826435][ T6151] loop2: partition table partially beyond EOD, truncated
[  173.856577][ T6151] loop2: p1 start 1818582900 is beyond EOD, truncated
[  173.856605][ T6151] loop2: p3 start 335544320 is beyond EOD, truncated
[  174.001240][ T6153] loop2: detected capacity change from 0 to 7
[  174.012902][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  174.016136][ T6047] chnl_net:caif_netlink_parms(): no params data found
[  174.048775][ T6153] Dev loop2: unable to read RDB block 7
[  174.048799][ T6153]  loop2: AHDI p1 p2 p3
[  174.048820][ T6153] loop2: partition table partially beyond EOD, truncated
[  174.049020][ T6153] loop2: p1 start 1818582900 is beyond EOD, truncated
[  174.049042][ T6153] loop2: p3 start 335544320 is beyond EOD, truncated
[  174.204680][ T5909] usb 5-1: Using ep0 maxpacket: 32
[  174.226567][ T5909] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  174.226604][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0
[  174.226639][ T5909] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  174.226664][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.358575][ T5909] usb 5-1: config 0 descriptor??
[  174.731507][  T106] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.079090][ T5828] usb 3-1: USB disconnect, device number 4
[  175.290385][ T6168] loop2: detected capacity change from 0 to 7
[  175.426303][ T6168] Dev loop2: unable to read RDB block 7
[  175.426357][ T6168]  loop2: unable to read partition table
[  175.426593][ T6168] loop2: partition table beyond EOD, truncated
[  175.426628][ T6168] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5)
[  175.477712][ T5909] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0
[  175.769867][ T5909] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-71)
[  175.850406][ T5909] corsair-psu 0003:1B1C:1C09.0002: probe with driver corsair-psu failed with error -71
[  175.881530][ T5909] usb 5-1: USB disconnect, device number 3
[  176.022258][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  176.256375][ T6171] fido_id[6171]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  176.262975][ T6180] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'.
[  176.331938][ T5828] usb 4-1: Using ep0 maxpacket: 32
[  176.965051][ T5828] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  176.965095][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0
[  176.965146][ T5828] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  176.965175][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.530781][  T106] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.550297][ T5828] usb 4-1: config 0 descriptor??
[  177.861992][ T5559] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  178.010267][ T5828] corsair-psu 0003:1B1C:1C09.0003: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[  178.039493][ T5559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.039530][ T5559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.046711][ T5559] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  178.046786][ T5559] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  178.046837][ T5559] usb 5-1: Manufacturer: syz
[  178.185652][ T5559] usb 5-1: config 0 descriptor??
[  178.403798][ T5828] corsair-psu 0003:1B1C:1C09.0003: unable to initialize device (-71)
[  178.449133][ T5828] corsair-psu 0003:1B1C:1C09.0003: probe with driver corsair-psu failed with error -71
[  178.489444][ T5828] usb 4-1: USB disconnect, device number 2
[  178.626709][ T6184] fido_id[6184]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1B1C:1C09.0003/report_descriptor': No such device
[  179.355335][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  179.355823][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  179.356263][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  179.356800][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  179.357367][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  179.621547][ T5559] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0004/input/input5
[  180.848452][ T5559] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  180.958021][ T5559] usb 5-1: USB disconnect, device number 4
[  182.520570][ T6205] netlink: 44 bytes leftover after parsing attributes in process `syz.0.67'.
[  183.792912][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.4.68'.
[  184.953739][  T106] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.185439][ T5559] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  186.256524][  T106] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.334806][ T5559] usb 1-1: Using ep0 maxpacket: 32
[  186.347112][ T5559] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  186.347142][ T5559] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  186.347166][ T5559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  186.347225][ T5559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  186.347340][ T5559] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  186.347368][ T5559] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  186.347414][ T5559] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  186.347440][ T5559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.453435][ T5559] usb 1-1: config 0 descriptor??
[  186.923496][ T5559] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  186.987998][ T5559] usb 1-1: USB disconnect, device number 5
[  187.011172][ T5559] usblp0: removed
[  187.287747][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.288206][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.288479][ T6047] bridge_slave_0: entered allmulticast mode
[  187.297958][ T6047] bridge_slave_0: entered promiscuous mode
[  187.331611][ T5559] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  187.356691][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.357049][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.358675][ T6047] bridge_slave_1: entered allmulticast mode
[  187.425323][ T6047] bridge_slave_1: entered promiscuous mode
[  187.492118][ T5559] usb 1-1: Using ep0 maxpacket: 32
[  187.494837][ T5559] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  187.494864][ T5559] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  187.494887][ T5559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  187.494952][ T5559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  187.494976][ T5559] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  187.495003][ T5559] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  187.495046][ T5559] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  187.495071][ T5559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.635509][ T5559] usb 1-1: config 0 descriptor??
[  187.949561][ T5559] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  188.181012][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  188.230497][    C0] usblp0: nonzero read bulk status received: -71
[  188.242726][ T5828] usb 1-1: USB disconnect, device number 6
[  188.422613][ T6254] loop3: detected capacity change from 0 to 512
[  188.438406][ T6254] =======================================================
[  188.438406][ T6254] WARNING: The mand mount option has been deprecated and
[  188.438406][ T6254]          and is ignored by this kernel. Remove the mand
[  188.438406][ T6254]          option from the mount to silence this warning.
[  188.438406][ T6254] =======================================================
[  189.228951][   T37] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  189.515401][ T6254] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  189.553284][ T5828] usblp0: removed
[  189.622508][   T37] usb 3-1: Using ep0 maxpacket: 32
[  189.625093][   T37] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  189.625121][   T37] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  189.625144][   T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  189.625198][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  189.625222][   T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  189.625249][   T37] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  189.625293][   T37] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  189.625319][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.824796][   T37] usb 3-1: config 0 descriptor??
[  190.049554][ T3546] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  190.167244][   T37] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  190.189250][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.275776][   T37] usb 3-1: USB disconnect, device number 5
[  190.357223][   T37] usblp0: removed
[  190.786857][   T37] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  190.940206][ T6047] team0: Port device team_slave_0 added
[  190.971353][ T6047] team0: Port device team_slave_1 added
[  191.122712][ T5559] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.156058][   T37] usb 3-1: Using ep0 maxpacket: 32
[  192.119173][   T37] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  192.119204][   T37] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  192.119227][   T37] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  192.119387][   T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.119413][   T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.119440][   T37] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.119485][   T37] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.119511][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.346388][   T37] usb 3-1: config 0 descriptor??
[  192.486640][   T37] usb 3-1: can't set config #0, error -71
[  192.501998][   T37] usb 3-1: USB disconnect, device number 6
[  192.504513][ T5559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.504543][ T5559] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.505906][ T5559] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  192.505934][ T5559] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  192.505953][ T5559] usb 5-1: Manufacturer: syz
[  192.631350][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.631369][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.631399][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.685259][ T5559] usb 5-1: config 0 descriptor??
[  192.704499][ T6042] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  192.818962][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.818980][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.819010][ T6047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.871899][ T6042] usb 1-1: Using ep0 maxpacket: 32
[  192.887307][ T6042] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  192.887335][ T6042] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  192.887355][ T6042] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  192.887399][ T6042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.887420][ T6042] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.887444][ T6042] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.887485][ T6042] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.887506][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.941424][ T6042] usb 1-1: config 0 descriptor??
[  193.002119][ T6273] loop3: detected capacity change from 0 to 4096
[  193.132815][   T37] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  193.235966][ T6273] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  193.265205][ T6042] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  193.311880][   T37] usb 3-1: Using ep0 maxpacket: 32
[  193.328097][   T37] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  193.328125][   T37] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  193.328148][   T37] usb 3-1: config 0 interface 0 has no altsetting 0
[  193.362156][ T6042] usb 1-1: USB disconnect, device number 7
[  193.364084][   T37] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  193.364113][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.364193][   T37] usb 3-1: Product: syz
[  193.364209][   T37] usb 3-1: Manufacturer: syz
[  193.364224][   T37] usb 3-1: SerialNumber: syz
[  193.537676][ T6042] usblp0: removed
[  193.609565][   T37] usb 3-1: config 0 descriptor??
[  193.699659][  T106] bridge_slave_1: left allmulticast mode
[  193.757017][  T106] bridge_slave_1: left promiscuous mode
[  193.757797][  T106] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.816283][ T5559] uclogic 0003:256C:006D.0005: v1 frame probing failed: -71
[  193.816444][ T5559] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[  193.816598][ T5559] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[  193.906833][ T5559] usb 5-1: USB disconnect, device number 5
[  193.958262][ T6042] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  194.129325][  T106] bridge_slave_0: left allmulticast mode
[  194.129360][  T106] bridge_slave_0: left promiscuous mode
[  194.135496][ T6042] usb 1-1: Using ep0 maxpacket: 32
[  194.181933][   T37] gs_usb 3-1:0.0: Configuring for 1 interfaces
[  194.188981][ T6042] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  194.189067][ T6042] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  194.189091][ T6042] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  194.189188][ T6042] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  194.189221][ T6042] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  194.189248][ T6042] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  194.189308][ T6042] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  194.189376][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.236531][ T6042] usb 1-1: config 0 descriptor??
[  194.290524][  T106] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.384443][   T37] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO)
[  194.384821][   T37] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121
[  194.470396][ T6273] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  194.490839][ T6042] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  194.671156][ T6277] loop2: detected capacity change from 0 to 7
[  194.720827][ T6277] Dev loop2: unable to read RDB block 7
[  194.720859][ T6277]  loop2: AHDI p1 p2 p3
[  194.720887][ T6277] loop2: partition table partially beyond EOD, truncated
[  194.721312][ T6277] loop2: p1 start 1818582900 is beyond EOD, truncated
[  194.721335][ T6277] loop2: p3 start 335544320 is beyond EOD, truncated
[  194.843736][    C0] usblp0: nonzero read bulk status received: -71
[  194.883451][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'.
[  194.891352][ T5559] usb 1-1: USB disconnect, device number 8
[  195.056009][ T6269] usblp0: removed
[  195.109142][ T6280] loop2: detected capacity change from 0 to 7
[  195.111225][ T6280] Dev loop2: unable to read RDB block 7
[  195.111258][ T6280]  loop2: AHDI p1 p2 p3
[  195.111278][ T6280] loop2: partition table partially beyond EOD, truncated
[  195.111530][ T6280] loop2: p1 start 1818582900 is beyond EOD, truncated
[  195.111553][ T6280] loop2: p3 start 335544320 is beyond EOD, truncated
[  196.605148][   T37] usb 3-1: USB disconnect, device number 7
[  197.791774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  198.004234][  T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.134595][  T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.163277][  T106] bond0 (unregistering): Released all slaves
[  199.540551][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  199.540663][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  200.626057][ T6302] loop0: detected capacity change from 0 to 2048
[  200.641468][ T6302] EXT4-fs: Ignoring removed oldalloc option
[  201.940957][ T6312] loop4: detected capacity change from 0 to 1024
[  202.053053][ T6302] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  202.053234][ T6302] System zones: 0-7
[  202.263814][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.395479][ T6312] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  202.511678][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  202.562177][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  202.571661][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  202.587355][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  202.603686][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  202.652109][ T6318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  202.806657][ T6318] EXT4-fs (loop0): Remounting filesystem read-only
[  203.617942][ T6334] loop4: detected capacity change from 0 to 4096
[  203.678574][ T6334] NILFS (loop4): invalid segment: Checksum error in segment payload
[  203.678603][ T6334] NILFS (loop4): trying rollback from an earlier position
[  203.905440][ T5896] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  204.066061][ T5896] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  204.066091][ T5896] usb 4-1: config 0 has no interface number 0
[  204.100048][ T5896] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  204.100081][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.100103][ T5896] usb 4-1: Product: syz
[  204.100119][ T5896] usb 4-1: Manufacturer: syz
[  204.100134][ T5896] usb 4-1: SerialNumber: syz
[  204.249562][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.484585][ T6334] NILFS (loop4): recovery complete
[  204.521913][ T5910] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  204.633111][ T5896] usb 4-1: config 0 descriptor??
[  204.637821][ T6346] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.671676][ T5838] Bluetooth: hci2: command tx timeout
[  204.754268][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  204.789146][ T5910] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  204.789175][ T5910] usb 3-1: config 0 has no interface number 0
[  204.789222][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.789253][ T5910] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.789312][ T5910] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  204.789337][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.871920][ T5910] usb 3-1: config 0 descriptor??
[  204.975724][ T5896] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  205.505031][ T5910] uclogic 0003:28BD:0094.0006: pen parameters not found
[  205.505056][ T5910] uclogic 0003:28BD:0094.0006: interface is invalid, ignoring
[  205.731744][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  205.800987][ T5896] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  205.803631][ T5896] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  205.803722][ T5896] usb 4-1: media controller created
[  205.981956][ T6356] ptrace attach of "./syz-executor exec"[5825] was attempted by ""[6356]
[  206.281750][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  206.350102][  T820] usb 3-1: USB disconnect, device number 8
[  206.401455][ T5896] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.650308][ T5896] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  206.742112][ T5838] Bluetooth: hci2: command tx timeout
[  207.179303][ T6367] loop2: detected capacity change from 0 to 512
[  207.180404][ T6367] EXT4-fs: Ignoring removed oldalloc option
[  207.260723][ T5896] usb 4-1: USB disconnect, device number 3
[  207.422462][   T38] audit: type=1326 audit(2000000048.130:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c441bcdd9 code=0x7fc00000
[  207.517112][ T6367] EXT4-fs (loop2): 1 truncate cleaned up
[  207.520307][ T6367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.650863][ T6377] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.106: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0
[  207.727618][ T6377] EXT4-fs (loop2): Remounting filesystem read-only
[  207.885300][   T38] audit: type=1800 audit(2000000048.380:3): pid=6367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.106" name="file1" dev="loop2" ino=15 res=0 errno=0
[  208.150954][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'.
[  208.295753][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.730621][ T5488] 8021q: adding VLAN 0 to HW filter on device eth1
[  208.801917][ T5559] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  208.811879][ T5838] Bluetooth: hci2: command tx timeout
[  208.914326][   T37] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  208.952365][ T5559] usb 1-1: Using ep0 maxpacket: 32
[  208.957369][ T5559] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  208.957398][ T5559] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  208.957420][ T5559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  208.957487][ T5559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  208.957510][ T5559] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  208.957535][ T5559] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  208.957579][ T5559] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  208.957604][ T5559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.962348][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  209.067442][ T5559] usb 1-1: config 0 descriptor??
[  209.081968][   T37] usb 3-1: device descriptor read/64, error -71
[  209.121936][ T5896] usb 5-1: Using ep0 maxpacket: 32
[  209.124363][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  209.124397][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  209.124467][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  209.124486][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  209.923637][ T5896] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  209.923669][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.923690][ T5896] usb 5-1: Product: syz
[  209.923705][ T5896] usb 5-1: Manufacturer: syz
[  209.923720][ T5896] usb 5-1: SerialNumber: syz
[  209.968820][   T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  209.981336][ T5896] usb 5-1: config 0 descriptor??
[  210.001319][  T106] hsr_slave_0: left promiscuous mode
[  210.037861][  T106] hsr_slave_1: left promiscuous mode
[  210.039894][ T5559] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  210.075877][  T106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.089054][  T106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.112131][   T37] usb 3-1: device descriptor read/64, error -71
[  210.120541][ T5559] usb 1-1: USB disconnect, device number 9
[  210.144185][ T5896] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6
[  210.222627][   T37] usb usb3-port1: attempt power cycle
[  210.259399][ T5559] usblp0: removed
[  210.318665][  T106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.318696][  T106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.612844][   T37] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  210.643006][   T37] usb 3-1: device descriptor read/8, error -71
[  210.675088][ T5559] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  210.831878][ T5559] usb 1-1: Using ep0 maxpacket: 32
[  210.844915][ T5559] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  210.844945][ T5559] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  210.844967][ T5559] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  210.845020][ T5559] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  210.845043][ T5559] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  210.845070][ T5559] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  210.845113][ T5559] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  210.845147][ T5559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.846857][  T106] veth1_macvtap: left promiscuous mode
[  210.893399][ T5838] Bluetooth: hci2: command tx timeout
[  210.898008][  T106] veth0_macvtap: left promiscuous mode
[  210.898431][  T106] veth1_vlan: left promiscuous mode
[  210.899009][  T106] veth0_vlan: left promiscuous mode
[  210.981629][   T37] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  210.992749][ T5559] usb 1-1: config 0 descriptor??
[  211.003777][   T37] usb 3-1: device descriptor read/8, error -71
[  211.120210][   T37] usb usb3-port1: unable to enumerate USB device
[  211.216921][ T5559] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  211.439700][    C1] usblp0: nonzero read bulk status received: -71
[  211.453721][ T5559] usb 1-1: USB disconnect, device number 10
[  211.718968][ T6386] usblp0: removed
[  211.769179][ T6409] loop2: detected capacity change from 0 to 4096
[  211.779630][ T6409] ntfs3: Unknown parameter 'ÿÿÿÿ01777777777777777777777'
[  211.834413][ T5559] usb 5-1: USB disconnect, device number 6
[  212.358541][   T38] audit: type=1326 audit(2000000053.070:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  212.392736][   T38] audit: type=1326 audit(2000000053.070:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  212.400102][   T38] audit: type=1326 audit(2000000053.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  212.476904][   T38] audit: type=1326 audit(2000000053.190:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  212.626571][ T6425] FAULT_INJECTION: forcing a failure.
[  212.626571][ T6425] name failslab, interval 1, probability 0, space 0, times 1
[  212.626618][ T6425] CPU: 0 UID: 0 PID: 6425 Comm: syz.4.119 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  212.626644][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  212.626662][ T6425] Call Trace:
[  212.626674][ T6425]  <TASK>
[  212.626683][ T6425]  dump_stack_lvl+0xe8/0x150
[  212.626715][ T6425]  should_fail_ex+0x46b/0x600
[  212.626750][ T6425]  should_failslab+0xa8/0x100
[  212.626788][ T6425]  __kmalloc_cache_noprof+0x84/0x690
[  212.626823][ T6425]  ? netlbl_cipsov4_add+0x244/0x22b0
[  212.626852][ T6425]  netlbl_cipsov4_add+0x244/0x22b0
[  212.626875][ T6425]  ? trace_kmalloc+0x2a/0xf0
[  212.626926][ T6425]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[  212.626953][ T6425]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  212.626982][ T6425]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  212.627019][ T6425]  genl_family_rcv_msg_doit+0x22a/0x330
[  212.627056][ T6425]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  212.627098][ T6425]  ? bpf_lsm_capable+0x9/0x20
[  212.627128][ T6425]  ? security_capable+0x7e/0x2c0
[  212.627168][ T6425]  genl_rcv_msg+0x61c/0x7a0
[  212.627203][ T6425]  ? __pfx_genl_rcv_msg+0x10/0x10
[  212.627229][ T6425]  ? __pfx_netlbl_cipsov4_add+0x10/0x10
[  212.627268][ T6425]  netlink_rcv_skb+0x232/0x4b0
[  212.627317][ T6425]  ? __pfx_genl_rcv_msg+0x10/0x10
[  212.627346][ T6425]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  212.627394][ T6425]  ? netlink_deliver_tap+0x2e/0x1b0
[  212.627432][ T6425]  ? netlink_deliver_tap+0x2e/0x1b0
[  212.627494][ T6425]  genl_rcv+0x28/0x40
[  212.627518][ T6425]  netlink_unicast+0x780/0x920
[  212.627562][ T6425]  netlink_sendmsg+0x813/0xb40
[  212.627608][ T6425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.627645][ T6425]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  212.627688][ T6425]  ? aa_sock_msg_perm+0x122/0x200
[  212.627723][ T6425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  212.627756][ T6425]  sock_sendmsg_nosec+0x112/0x150
[  212.627788][ T6425]  ____sys_sendmsg+0x55c/0x870
[  212.627818][ T6425]  ? __pfx_____sys_sendmsg+0x10/0x10
[  212.627851][ T6425]  ? import_iovec+0x73/0xa0
[  212.627887][ T6425]  ___sys_sendmsg+0x2a5/0x360
[  212.627913][ T6425]  ? __lock_acquire+0x6b5/0x2cf0
[  212.627949][ T6425]  ? __pfx____sys_sendmsg+0x10/0x10
[  212.628012][ T6425]  ? __fget_files+0x2a/0x420
[  212.628039][ T6425]  ? __fget_files+0x3a6/0x420
[  212.628084][ T6425]  __x64_sys_sendmsg+0x1c3/0x2a0
[  212.628111][ T6425]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  212.628144][ T6425]  ? __pfx_ksys_write+0x10/0x10
[  212.628188][ T6425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.628212][ T6425]  do_syscall_64+0x15f/0xf80
[  212.628246][ T6425]  ? trace_irq_disable+0x3b/0x140
[  212.628273][ T6425]  ? clear_bhb_loop+0x40/0x90
[  212.628302][ T6425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.628326][ T6425] RIP: 0033:0x7f0d06cfcdd9
[  212.628356][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  212.628375][ T6425] RSP: 002b:00007f0d04f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  212.628399][ T6425] RAX: ffffffffffffffda RBX: 00007f0d06f75fa0 RCX: 00007f0d06cfcdd9
[  212.628416][ T6425] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004
[  212.628430][ T6425] RBP: 00007f0d04f4e090 R08: 0000000000000000 R09: 0000000000000000
[  212.628444][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  212.628457][ T6425] R13: 00007f0d06f76038 R14: 00007f0d06f75fa0 R15: 00007ffeffc02488
[  212.628493][ T6425]  </TASK>
[  213.517282][ T6439] loop0: detected capacity change from 0 to 1024
[  213.530754][ T6439] hfsplus: Unknown parameter 'ÿ'
[  213.803200][  T106] team0 (unregistering): Port device team_slave_1 removed
[  213.863385][  T106] team0 (unregistering): Port device team_slave_0 removed
[  214.479628][ T6437] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  214.479762][ T6437] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  214.872467][ T6437] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  215.074037][ T6437] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  215.074161][ T6437] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  215.234018][ T6448] FAULT_INJECTION: forcing a failure.
[  215.234018][ T6448] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  215.234055][ T6448] CPU: 0 UID: 0 PID: 6448 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  215.234080][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  215.234094][ T6448] Call Trace:
[  215.234103][ T6448]  <TASK>
[  215.234112][ T6448]  dump_stack_lvl+0xe8/0x150
[  215.234144][ T6448]  should_fail_ex+0x46b/0x600
[  215.234178][ T6448]  _copy_from_user+0x2d/0xb0
[  215.234210][ T6448]  get_sg_io_hdr+0xf6/0x850
[  215.234240][ T6448]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  215.234269][ T6448]  ? __pfx_get_sg_io_hdr+0x10/0x10
[  215.234290][ T6448]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  215.234329][ T6448]  ? rt_write_unlock+0x190/0x230
[  215.234360][ T6448]  ? sg_add_request+0x526/0x580
[  215.234385][ T6448]  sg_new_write+0x180/0x890
[  215.234417][ T6448]  ? __pfx_sg_new_write+0x10/0x10
[  215.234489][ T6448]  sg_ioctl+0x11fd/0x21a0
[  215.234534][ T6448]  ? __pfx_sg_ioctl+0x10/0x10
[  215.234569][ T6448]  ? __fget_files+0x2a/0x420
[  215.234600][ T6448]  ? __fget_files+0x2a/0x420
[  215.234626][ T6448]  ? __fget_files+0x3a6/0x420
[  215.234653][ T6448]  ? __fget_files+0x2a/0x420
[  215.234684][ T6448]  ? bpf_lsm_file_ioctl+0x9/0x20
[  215.234712][ T6448]  ? __pfx_sg_ioctl+0x10/0x10
[  215.234745][ T6448]  __se_sys_ioctl+0xff/0x170
[  215.234790][ T6448]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.234815][ T6448]  do_syscall_64+0x15f/0xf80
[  215.234847][ T6448]  ? trace_irq_disable+0x3b/0x140
[  215.234873][ T6448]  ? clear_bhb_loop+0x40/0x90
[  215.234901][ T6448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.234924][ T6448] RIP: 0033:0x7f4edfe1cdd9
[  215.234945][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  215.234964][ T6448] RSP: 002b:00007f4ede06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  215.234988][ T6448] RAX: ffffffffffffffda RBX: 00007f4ee0095fa0 RCX: 00007f4edfe1cdd9
[  215.235005][ T6448] RDX: 0000200000000040 RSI: 0000000000002285 RDI: 0000000000000005
[  215.235019][ T6448] RBP: 00007f4ede06e090 R08: 0000000000000000 R09: 0000000000000000
[  215.235034][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  215.235046][ T6448] R13: 00007f4ee0096038 R14: 00007f4ee0095fa0 R15: 00007ffc1433c028
[  215.235080][ T6448]  </TASK>
[  215.235628][ T6437] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  215.613425][ T6437] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  215.613516][ T6437] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  215.747980][ T6437] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  215.959554][ T6437] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  215.960771][ T6437] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  216.139399][ T6437] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  216.441570][ T6437] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  216.441956][ T6437] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  216.491807][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  216.600287][ T6437] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  216.964788][ T5909] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  216.990641][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.132'.
[  217.143313][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout
[  217.226830][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[  217.234897][ T5909] usb 3-1: config 125 has an invalid interface number: 38 but max is 0
[  217.234922][ T5909] usb 3-1: config 125 has no interface number 0
[  217.234954][ T5909] usb 3-1: config 125 interface 38 has no altsetting 0
[  217.262772][ T5909] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  217.262804][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.262826][ T5909] usb 3-1: Product: syz
[  217.262841][ T5909] usb 3-1: Manufacturer: syz
[  217.262857][ T5909] usb 3-1: SerialNumber: syz
[  217.392636][ T5488] 8021q: adding VLAN 0 to HW filter on device eth2
[  217.665511][ T5909] usb 3-1: USB disconnect, device number 13
[  217.692890][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  218.014077][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  218.041733][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  218.306216][ T6482] loop4: detected capacity change from 0 to 4096
[  218.502960][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout
[  218.577985][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout
[  218.615128][ T6492] vivid-000: disconnect
[  218.640021][ T6495] loop2: detected capacity change from 0 to 128
[  218.648787][ T6495] EXT4-fs: Ignoring removed nomblk_io_submit option
[  218.675053][ T6495] EXT4-fs (loop2): Test dummy encryption mode enabled
[  218.831046][ T6492] vivid-000: reconnect
[  218.872075][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  218.873014][ T6495] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.961159][ T6495] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.030031][ T6503] loop0: detected capacity change from 0 to 128
[  219.071146][ T5909] usb 4-1: unable to get BOS descriptor or descriptor too short
[  219.080594][ T5909] usb 4-1: config 0 has an invalid interface number: 13 but max is 0
[  219.080620][ T5909] usb 4-1: config 0 has no interface number 0
[  219.080648][ T5909] usb 4-1: config 0 interface 13 has no altsetting 0
[  219.121459][ T6503] EXT4-fs (loop0): Test dummy encryption mode enabled
[  219.123344][ T5909] usb 4-1: New USB device found, idVendor=090a, idProduct=1050, bcdDevice= 1.00
[  219.123372][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.123392][ T5909] usb 4-1: Product: syz
[  219.123407][ T5909] usb 4-1: Manufacturer: syz
[  219.123423][ T5909] usb 4-1: SerialNumber: syz
[  219.169824][ T6495] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  219.180453][ T5909] usb 4-1: config 0 descriptor??
[  219.203936][ T6503] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  219.204047][ T6503] System zones: 1-3, 19-19, 35-36
[  219.223677][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout
[  219.280790][ T6503] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  219.283119][  T106] bridge_slave_1: left allmulticast mode
[  219.283179][  T106] bridge_slave_1: left promiscuous mode
[  219.283663][  T106] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.370126][ T6503] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.582579][  T106] bridge_slave_0: left allmulticast mode
[  219.582616][  T106] bridge_slave_0: left promiscuous mode
[  219.582906][  T106] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.726535][ T6495] FAULT_INJECTION: forcing a failure.
[  219.726535][ T6495] name failslab, interval 1, probability 0, space 0, times 0
[  219.726575][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.2.137 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  219.726601][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.726615][ T6495] Call Trace:
[  219.726624][ T6495]  <TASK>
[  219.726634][ T6495]  dump_stack_lvl+0xe8/0x150
[  219.726668][ T6495]  should_fail_ex+0x46b/0x600
[  219.726723][ T6495]  should_failslab+0xa8/0x100
[  219.726764][ T6495]  __kmalloc_noprof+0xdf/0x7b0
[  219.726799][ T6495]  ? tomoyo_encode+0x28b/0x550
[  219.726844][ T6495]  tomoyo_encode+0x28b/0x550
[  219.726889][ T6495]  tomoyo_realpath_from_path+0x58d/0x5d0
[  219.726939][ T6495]  ? tomoyo_path_number_perm+0x219/0x630
[  219.726972][ T6495]  tomoyo_path_number_perm+0x246/0x630
[  219.727008][ T6495]  ? __d_add+0x54d/0x840
[  219.727046][ T6495]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  219.727085][ T6495]  ? d_splice_alias_ops+0x11a/0x3e0
[  219.727132][ T6495]  ? reacquire_held_locks+0x104/0x190
[  219.727193][ T6495]  ? __pfx_current_check_access_path+0x10/0x10
[  219.727230][ T6495]  ? d_alloc+0x144/0x190
[  219.727266][ T6495]  ? lookup_one_qstr_excl+0x1d4/0x360
[  219.727307][ T6495]  tomoyo_path_mkdir+0xb0/0xf0
[  219.727334][ T6495]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  219.727364][ T6495]  ? __pfx_filename_create+0x10/0x10
[  219.727405][ T6495]  security_path_mkdir+0x169/0x350
[  219.727438][ T6495]  filename_mkdirat+0x204/0x520
[  219.727485][ T6495]  ? __pfx_filename_mkdirat+0x10/0x10
[  219.727527][ T6495]  ? do_getname+0x151/0x250
[  219.727554][ T6495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.727581][ T6495]  __se_sys_mkdirat+0x35/0x150
[  219.727604][ T6495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.727631][ T6495]  do_syscall_64+0x15f/0xf80
[  219.727666][ T6495]  ? trace_irq_disable+0x3b/0x140
[  219.727695][ T6495]  ? clear_bhb_loop+0x40/0x90
[  219.727726][ T6495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  219.727751][ T6495] RIP: 0033:0x7f4edfe1bc47
[  219.727774][ T6495] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.727794][ T6495] RSP: 002b:00007f4ede06de58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  219.727820][ T6495] RAX: ffffffffffffffda RBX: 00007f4ede06dee0 RCX: 00007f4edfe1bc47
[  219.727850][ T6495] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c
[  219.727865][ T6495] RBP: 0000000000000000 R08: 0000200000000000 R09: 0000000000000000
[  219.727879][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0
[  219.727894][ T6495] R13: 00007f4ede06dea0 R14: 0000000000000000 R15: 0000000000000000
[  219.727929][ T6495]  </TASK>
[  219.727970][ T6495] ERROR: Out of memory at tomoyo_realpath_from_path.
[  219.848395][ T6516] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  220.201523][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout
[  220.201572][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout
[  220.534266][ T6517] afs: Unknown parameter 'obj_user'
[  220.598144][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout
[  220.653489][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout
[  221.017272][ T5823] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.300084][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  222.252920][ T5834] Bluetooth: hci4: command 0x0c1a tx timeout
[  222.252960][ T5834] Bluetooth: hci3: command 0x0c1a tx timeout
[  222.271332][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'.
[  222.278452][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  222.333634][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'.
[  222.424517][  T106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.544367][  T106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.613733][ T6539] netlink: 'syz.2.145': attribute type 1 has an invalid length.
[  222.630172][  T106] bond0 (unregistering): Released all slaves
[  222.651957][ T5834] Bluetooth: hci2: command 0x0c1a tx timeout
[  222.686688][ T6320] chnl_net:caif_netlink_parms(): no params data found
[  222.977414][ T5909] usb-storage 4-1:0.13: USB Mass Storage device detected
[  223.008134][ T5488] 8021q: adding VLAN 0 to HW filter on device eth3
[  223.233034][ T6539] bond1: entered promiscuous mode
[  223.234480][ T6539] 8021q: adding VLAN 0 to HW filter on device bond1
[  223.235859][ T3609] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  224.582073][ T5909] usb 4-1: USB disconnect, device number 4
[  224.591442][ T6540] 8021q: adding VLAN 0 to HW filter on device bond1
[  224.619061][ T6540] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  224.619086][ T6540] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  224.698193][ T6569] Zero length message leads to an empty skb
[  224.800871][ T6540] bond1: (slave vcan1): making interface the new active one
[  224.800902][ T6540] vcan1: entered promiscuous mode
[  224.837173][ T6540] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  224.905764][ T3609] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.266705][ T6573] loop2: detected capacity change from 0 to 40427
[  225.282559][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout
[  225.287807][ T5909] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  225.290341][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  225.318120][ T6573] F2FS-fs (loop2): invalid crc value
[  225.458778][ T6573] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  225.480540][ T6573] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  225.520867][ T5909] usb 4-1: Using ep0 maxpacket: 16
[  225.547215][ T5909] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  225.547244][ T5909] usb 4-1: config 0 has no interface number 0
[  225.547289][ T5909] usb 4-1: config 0 interface 106 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85
[  225.547319][ T5909] usb 4-1: config 0 interface 106 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 16
[  225.547342][ T5909] usb 4-1: config 0 interface 106 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1023
[  225.547364][ T5909] usb 4-1: config 0 interface 106 has no altsetting 0
[  225.550636][ T6573] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  225.551318][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.2.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  225.551346][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  225.551361][ T6573] Call Trace:
[  225.551371][ T6573]  <TASK>
[  225.551380][ T6573]  dump_stack_lvl+0xe8/0x150
[  225.551413][ T6573]  f2fs_stop_checkpoint+0x383/0x540
[  225.551447][ T6573]  do_garbage_collect+0x15a2/0x6d90
[  225.551469][ T6573]  ? lockdep_unlock+0x5d/0xd0
[  225.551498][ T6573]  ? __lock_acquire+0x146e/0x2cf0
[  225.551591][ T6573]  ? __pfx_do_garbage_collect+0x10/0x10
[  225.551650][ T6573]  ? __lock_acquire+0x6b5/0x2cf0
[  225.551690][ T6573]  ? do_raw_spin_lock+0x12b/0x2f0
[  225.551732][ T6573]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  225.551768][ T6573]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.551803][ T6573]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  225.551903][ T6573]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  225.551957][ T6573]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  225.552056][ T6573]  ? lockdep_hardirqs_on+0x7a/0x110
[  225.552091][ T6573]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  225.552186][ T6573]  f2fs_gc+0xcca/0x24d0
[  225.552276][ T6573]  ? __pfx_f2fs_gc+0x10/0x10
[  225.552434][ T6573]  f2fs_expand_inode_data+0x656/0xb20
[  225.552536][ T6573]  ? __pfx_f2fs_expand_inode_data+0x10/0x10
[  225.552569][ T6573]  ? __pfx_inode_dio_wait+0x10/0x10
[  225.552658][ T6573]  ? mnt_put_write_access_file+0xc6/0x100
[  225.552717][ T6573]  ? file_update_time_flags+0x406/0x4b0
[  225.552776][ T6573]  f2fs_fallocate+0x4e8/0x980
[  225.552865][ T6573]  vfs_fallocate+0x672/0x7f0
[  225.552902][ T6573]  ? __pfx_vfs_fallocate+0x10/0x10
[  225.553020][ T6573]  file_ioctl+0x5cb/0x870
[  225.553081][ T6573]  ? __pfx_file_ioctl+0x10/0x10
[  225.553203][ T6573]  ? kasan_quarantine_put+0xbb/0x1f0
[  225.553247][ T6573]  ? tomoyo_path_number_perm+0x219/0x630
[  225.553339][ T6573]  ? tomoyo_path_number_perm+0x219/0x630
[  225.553391][ T6573]  do_vfs_ioctl+0xc29/0x1540
[  225.553481][ T6573]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  225.553569][ T6573]  ? do_futex+0x333/0x420
[  225.553703][ T6573]  ? __fget_files+0x2a/0x420
[  225.553738][ T6573]  ? __fget_files+0x2a/0x420
[  225.553795][ T6573]  ? __fget_files+0x3a6/0x420
[  225.553866][ T6573]  ? __fget_files+0x2a/0x420
[  225.553907][ T6573]  ? bpf_lsm_file_ioctl+0x9/0x20
[  225.553976][ T6573]  __se_sys_ioctl+0x82/0x170
[  225.554058][ T6573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.554085][ T6573]  do_syscall_64+0x15f/0xf80
[  225.554164][ T6573]  ? trace_irq_disable+0x3b/0x140
[  225.554218][ T6573]  ? clear_bhb_loop+0x40/0x90
[  225.554247][ T6573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.554292][ T6573] RIP: 0033:0x7f4edfe1cdd9
[  225.554347][ T6573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.554387][ T6573] RSP: 002b:00007f4ede06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  225.554411][ T6573] RAX: ffffffffffffffda RBX: 00007f4ee0095fa0 RCX: 00007f4edfe1cdd9
[  225.554429][ T6573] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000005
[  225.554471][ T6573] RBP: 00007f4edfeb2d69 R08: 0000000000000000 R09: 0000000000000000
[  225.554505][ T6573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  225.554538][ T6573] R13: 00007f4ee0096038 R14: 00007f4ee0095fa0 R15: 00007ffc1433c028
[  225.554581][ T6573]  </TASK>
[  225.554707][ T6573] F2FS-fs (loop2): Stopped filesystem due to reason: 4
[  225.610582][ T5909] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a3.1e
[  225.610615][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.610637][ T5909] usb 4-1: Product: syz
[  225.610653][ T5909] usb 4-1: Manufacturer: syz
[  225.610668][ T5909] usb 4-1: SerialNumber: syz
[  226.003157][ T5909] usb 4-1: config 0 descriptor??
[  226.006931][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  226.007119][ T6568] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  226.038164][ T3609] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  226.236681][ T6568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.238900][ T6568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.537156][ T3609] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  226.537257][  T106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.622861][  T106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.800346][ T6586] loop0: detected capacity change from 0 to 64
[  228.029133][  T106] team0 (unregistering): Port device team_slave_1 removed
[  228.090839][ T6586] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount.
[  228.090858][ T6586] MINIX-fs: bad superblock
[  228.293422][    C0] usb 4-1: NFC: Urb failure (status -71)
[  228.296592][    C0] usb 4-1: NFC: Urb failure (status -71)
[  228.309617][ T5909] usb 4-1: NFC: Unable to get FW version
[  228.379730][ T5909] pn533_usb 4-1:0.106: probe with driver pn533_usb failed with error -71
[  228.448430][  T106] team0 (unregistering): Port device team_slave_0 removed
[  228.611420][ T5909] usb 4-1: USB disconnect, device number 5
[  229.082051][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  229.233597][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  229.236395][ T5909] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  229.236422][ T5909] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  229.236444][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  229.236649][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  229.236674][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  229.236699][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  229.236742][ T5909] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  229.236766][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.338996][ T5909] usb 4-1: config 0 descriptor??
[  229.632912][ T6603] 9pnet_fd: p9_fd_create_tcp (6603): problem binding to privport
[  229.782931][ T6604] FAULT_INJECTION: forcing a failure.
[  229.782931][ T6604] name failslab, interval 1, probability 0, space 0, times 0
[  229.782968][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.2.151 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  229.782993][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  229.783007][ T6604] Call Trace:
[  229.783015][ T6604]  <TASK>
[  229.783025][ T6604]  dump_stack_lvl+0xe8/0x150
[  229.783070][ T6604]  should_fail_ex+0x46b/0x600
[  229.783104][ T6604]  should_failslab+0xa8/0x100
[  229.783142][ T6604]  __kmalloc_cache_noprof+0x84/0x690
[  229.783177][ T6604]  ? binder_ioctl_write_read+0xc62/0xa490
[  229.783218][ T6604]  binder_ioctl_write_read+0xc62/0xa490
[  229.783293][ T6604]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  229.783331][ T6604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.783366][ T6604]  ? do_raw_spin_lock+0x12b/0x2f0
[  229.783403][ T6604]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  229.783437][ T6604]  ? lockdep_hardirqs_on+0x7a/0x110
[  229.783470][ T6604]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  229.783503][ T6604]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  229.783538][ T6604]  ? reacquire_held_locks+0x104/0x190
[  229.783571][ T6604]  ? rt_spin_lock+0x1e0/0x400
[  229.783598][ T6604]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  229.783632][ T6604]  ? rt_spin_unlock+0x14f/0x200
[  229.783668][ T6604]  ? binder_get_thread+0x595/0x6d0
[  229.783706][ T6604]  binder_ioctl+0x426/0x1b10
[  229.783739][ T6604]  ? tomoyo_path_number_perm+0x219/0x630
[  229.783771][ T6604]  ? tomoyo_path_number_perm+0x219/0x630
[  229.783805][ T6604]  ? do_vfs_ioctl+0x117b/0x1540
[  229.783840][ T6604]  ? __pfx_binder_ioctl+0x10/0x10
[  229.783873][ T6604]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  229.783943][ T6604]  ? __fget_files+0x2a/0x420
[  229.783974][ T6604]  ? __fget_files+0x2a/0x420
[  229.784000][ T6604]  ? __fget_files+0x3a6/0x420
[  229.784027][ T6604]  ? __fget_files+0x2a/0x420
[  229.784058][ T6604]  ? bpf_lsm_file_ioctl+0x9/0x20
[  229.784085][ T6604]  ? __pfx_binder_ioctl+0x10/0x10
[  229.784118][ T6604]  __se_sys_ioctl+0xff/0x170
[  229.784153][ T6604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.784176][ T6604]  do_syscall_64+0x15f/0xf80
[  229.784208][ T6604]  ? trace_irq_disable+0x3b/0x140
[  229.784234][ T6604]  ? clear_bhb_loop+0x40/0x90
[  229.784261][ T6604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.784283][ T6604] RIP: 0033:0x7f4edfe1cdd9
[  229.784304][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.784322][ T6604] RSP: 002b:00007f4ede06e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.784345][ T6604] RAX: ffffffffffffffda RBX: 00007f4ee0095fa0 RCX: 00007f4edfe1cdd9
[  229.784361][ T6604] RDX: 0000200000000540 RSI: 00000000c0306201 RDI: 0000000000000004
[  229.784376][ T6604] RBP: 00007f4ede06e090 R08: 0000000000000000 R09: 0000000000000000
[  229.784389][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.784402][ T6604] R13: 00007f4ee0096038 R14: 00007f4ee0095fa0 R15: 00007ffc1433c028
[  229.784435][ T6604]  </TASK>
[  229.822885][ T5909] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  229.993527][ T6604] binder: 6600:6604 ioctl c0306201 200000000540 returned -12
[  230.330319][ T5909] usb 4-1: USB disconnect, device number 6
[  230.431368][ T5909] usblp0: removed
[  230.704950][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.705318][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.705668][ T6320] bridge_slave_0: entered allmulticast mode
[  230.741106][ T6320] bridge_slave_0: entered promiscuous mode
[  230.831952][ T5909] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  230.992400][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.992802][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.993160][ T6320] bridge_slave_1: entered allmulticast mode
[  231.001098][ T6320] bridge_slave_1: entered promiscuous mode
[  231.004851][ T5909] usb 4-1: Using ep0 maxpacket: 32
[  231.011600][ T5909] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  231.011626][ T5909] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  231.011650][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  231.011783][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  231.011808][ T5909] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  231.011915][ T5909] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  231.011959][ T5909] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  231.011984][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.157561][ T5909] usb 4-1: config 0 descriptor??
[  231.402736][ T5909] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  231.630727][ T5834] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  231.631059][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  231.668909][ T5909] usb 4-1: USB disconnect, device number 7
[  231.706974][ T5909] usblp0: removed
[  231.760639][ T6630] loop4: detected capacity change from 0 to 32768
[  231.769335][ T6630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.163 (6630)
[  231.826663][ T6630] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.826710][ T6630] BTRFS info (device loop4): using sha256 checksum algorithm
[  232.086919][ T6630] BTRFS info (device loop4): setting nodatasum
[  232.086953][ T6630] BTRFS info (device loop4): enabling ssd optimizations
[  232.086972][ T6630] BTRFS info (device loop4): turning on async discard
[  232.086994][ T6630] BTRFS info (device loop4): enabling free space tree
[  232.153336][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.154460][ T6644] loop0: detected capacity change from 0 to 4096
[  232.210037][   T38] audit: type=1800 audit(2000000072.890:8): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.163" name="file1" dev="loop4" ino=260 res=0 errno=0
[  232.301935][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  232.436653][ T6320] team0: Port device team_slave_0 added
[  232.476196][ T6320] team0: Port device team_slave_1 added
[  232.790556][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0
[  232.790574][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.790603][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.853180][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.853199][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  232.853229][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.855266][ T6653] loop2: detected capacity change from 0 to 128
[  232.929581][ T6653] EXT4-fs: Ignoring removed nomblk_io_submit option
[  232.995548][ T6653] EXT4-fs (loop2): Test dummy encryption mode enabled
[  233.163312][ T6653] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.188421][ T6653] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  233.415380][ T6651] loop3: detected capacity change from 0 to 4096
[  233.491886][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  233.641859][ T5828] usb 1-1: Using ep0 maxpacket: 32
[  233.644292][ T5828] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  233.644321][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.819644][ T5828] usb 1-1: config 0 descriptor??
[  233.846444][ T5828] gspca_main: sunplus-2.14.0 probing 041e:400b
[  234.057355][ T6320] hsr_slave_0: entered promiscuous mode
[  234.069864][ T6320] hsr_slave_1: entered promiscuous mode
[  234.762503][ T6644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.763163][ T6644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.966420][ T6644] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  234.966454][ T6644] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  234.996311][ T5828] gspca_sunplus: reg_w_riv err -71
[  234.996409][ T5828] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  235.037326][ T5825] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.055473][ T5828] usb 1-1: USB disconnect, device number 11
[  235.392592][ T6673] trusted_key: syz.3.170 sent an empty control message without MSG_MORE.
[  235.473891][ T5826] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  235.761530][ T6676] process 'syz.2.169' launched './file0' with NULL argv: empty string added
[  235.784462][ T5488] 8021q: adding VLAN 0 to HW filter on device eth4
[  238.030587][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  238.030751][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  238.240644][ T6684] FAULT_INJECTION: forcing a failure.
[  238.240644][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.240684][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  238.240708][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  238.240737][ T6684] Call Trace:
[  238.240746][ T6684]  <TASK>
[  238.240755][ T6684]  dump_stack_lvl+0xe8/0x150
[  238.240791][ T6684]  should_fail_ex+0x46b/0x600
[  238.240826][ T6684]  strncpy_from_user+0x36/0x2b0
[  238.240863][ T6684]  do_getname+0x77/0x250
[  238.240892][ T6684]  user_path_at+0x2a/0x160
[  238.240925][ T6684]  __se_sys_mount+0x2dc/0x420
[  238.240961][ T6684]  ? __pfx___se_sys_mount+0x10/0x10
[  238.240996][ T6684]  ? __x64_sys_mount+0x20/0xc0
[  238.241024][ T6684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.241048][ T6684]  do_syscall_64+0x15f/0xf80
[  238.241081][ T6684]  ? trace_irq_disable+0x3b/0x140
[  238.241196][ T6684]  ? clear_bhb_loop+0x40/0x90
[  238.241233][ T6684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.241257][ T6684] RIP: 0033:0x7f6c441bcdd9
[  238.241279][ T6684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  238.241297][ T6684] RSP: 002b:00007f6c4240e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  238.241320][ T6684] RAX: ffffffffffffffda RBX: 00007f6c44435fa0 RCX: 00007f6c441bcdd9
[  238.241336][ T6684] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000200000000100
[  238.241353][ T6684] RBP: 00007f6c4240e090 R08: 0000000000000000 R09: 0000000000000000
[  238.241367][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  238.241380][ T6684] R13: 00007f6c44436038 R14: 00007f6c44435fa0 R15: 00007ffc615a46c8
[  238.241415][ T6684]  </TASK>
[  238.455183][ T6676] sg_write: data in/out 32731/14 bytes for SCSI command 0x0-- guessing data in;
[  238.455183][ T6676]    program syz.2.169 not setting count and/or reply_len properly
[  239.530732][ T6687] comedi comedi0: Minor 3 could not be opened
[  240.068388][  T820] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.267790][  T820] usb 1-1: Using ep0 maxpacket: 32
[  240.270244][  T820] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  240.270272][  T820] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  240.270296][  T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  240.270349][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  240.270373][  T820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  240.270400][  T820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  240.270444][  T820] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  240.270469][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.343656][  T820] usb 1-1: config 0 descriptor??
[  240.887009][ T6714] FAULT_INJECTION: forcing a failure.
[  240.887009][ T6714] name failslab, interval 1, probability 0, space 0, times 0
[  240.887075][ T6714] CPU: 0 UID: 0 PID: 6714 Comm: syz.3.177 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  240.887102][ T6714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  240.887116][ T6714] Call Trace:
[  240.887125][ T6714]  <TASK>
[  240.887135][ T6714]  dump_stack_lvl+0xe8/0x150
[  240.887167][ T6714]  should_fail_ex+0x46b/0x600
[  240.887203][ T6714]  should_failslab+0xa8/0x100
[  240.887242][ T6714]  __kvmalloc_node_noprof+0x170/0x8e0
[  240.887280][ T6714]  ? traverse+0xde/0x580
[  240.887310][ T6714]  traverse+0xde/0x580
[  240.887330][ T6714]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  240.887368][ T6714]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  240.887404][ T6714]  ? seq_read_iter+0xb8/0xe20
[  240.887431][ T6714]  seq_read_iter+0xd09/0xe20
[  240.887464][ T6714]  ? __asan_memset+0x22/0x50
[  240.887499][ T6714]  seq_read+0x36a/0x490
[  240.887532][ T6714]  ? __pfx_seq_read+0x10/0x10
[  240.887567][ T6714]  ? rw_verify_area+0x2ac/0x4e0
[  240.887605][ T6714]  vfs_readv+0x597/0x850
[  240.887634][ T6714]  ? __pfx_seq_read+0x10/0x10
[  240.887660][ T6714]  ? __pfx_vfs_readv+0x10/0x10
[  240.887684][ T6714]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  240.887741][ T6714]  ? __fget_files+0x3a6/0x420
[  240.887769][ T6714]  ? __fget_files+0x2a/0x420
[  240.887808][ T6714]  __se_sys_preadv2+0x187/0x2b0
[  240.887841][ T6714]  ? __pfx___se_sys_preadv2+0x10/0x10
[  240.887871][ T6714]  ? __x64_sys_preadv2+0x20/0xc0
[  240.887893][ T6714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.887918][ T6714]  do_syscall_64+0x15f/0xf80
[  240.887954][ T6714]  ? clear_bhb_loop+0x40/0x90
[  240.887983][ T6714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  240.888006][ T6714] RIP: 0033:0x7f226fa1cdd9
[  240.888027][ T6714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.888046][ T6714] RSP: 002b:00007f226dc34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147
[  240.888070][ T6714] RAX: ffffffffffffffda RBX: 00007f226fc96180 RCX: 00007f226fa1cdd9
[  240.888087][ T6714] RDX: 0000000000000001 RSI: 0000200000001140 RDI: 0000000000000006
[  240.888102][ T6714] RBP: 00007f226dc34090 R08: 0000000000000002 R09: 0000000000000000
[  240.888116][ T6714] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[  240.888129][ T6714] R13: 00007f226fc96218 R14: 00007f226fc96180 R15: 00007fffcf7c00e8
[  240.888166][ T6714]  </TASK>
[  241.485041][  T820] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  241.502025][  T820] usb 1-1: USB disconnect, device number 12
[  241.698444][  T820] usblp0: removed
[  241.708772][ T6722] FAULT_INJECTION: forcing a failure.
[  241.708772][ T6722] name failslab, interval 1, probability 0, space 0, times 0
[  241.708808][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.3.179 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  241.708833][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  241.708846][ T6722] Call Trace:
[  241.708855][ T6722]  <TASK>
[  241.708862][ T6722]  dump_stack_lvl+0xe8/0x150
[  241.708889][ T6722]  should_fail_ex+0x46b/0x600
[  241.708917][ T6722]  should_failslab+0xa8/0x100
[  241.708947][ T6722]  __kmalloc_noprof+0xdf/0x7b0
[  241.708975][ T6722]  ? tomoyo_encode+0x28b/0x550
[  241.709008][ T6722]  tomoyo_encode+0x28b/0x550
[  241.709041][ T6722]  tomoyo_realpath_from_path+0x58d/0x5d0
[  241.709079][ T6722]  ? tomoyo_path_number_perm+0x219/0x630
[  241.709107][ T6722]  tomoyo_path_number_perm+0x246/0x630
[  241.709134][ T6722]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  241.709158][ T6722]  ? __lock_acquire+0x6b5/0x2cf0
[  241.709185][ T6722]  ? do_raw_spin_lock+0x12b/0x2f0
[  241.709231][ T6722]  ? __fget_files+0x2a/0x420
[  241.709256][ T6722]  ? __fget_files+0x2a/0x420
[  241.709278][ T6722]  ? __fget_files+0x3a6/0x420
[  241.709299][ T6722]  ? __fget_files+0x2a/0x420
[  241.709328][ T6722]  security_file_ioctl+0xc3/0x2a0
[  241.709369][ T6722]  __se_sys_ioctl+0x47/0x170
[  241.709397][ T6722]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.709417][ T6722]  do_syscall_64+0x15f/0xf80
[  241.709444][ T6722]  ? trace_irq_disable+0x3b/0x140
[  241.709466][ T6722]  ? clear_bhb_loop+0x40/0x90
[  241.709488][ T6722]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  241.709506][ T6722] RIP: 0033:0x7f226fa1cdd9
[  241.709523][ T6722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  241.709538][ T6722] RSP: 002b:00007f226dc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  241.709556][ T6722] RAX: ffffffffffffffda RBX: 00007f226fc95fa0 RCX: 00007f226fa1cdd9
[  241.709583][ T6722] RDX: 0000200000000400 RSI: 0000000040946400 RDI: 0000000000000003
[  241.709594][ T6722] RBP: 00007f226dc76090 R08: 0000000000000000 R09: 0000000000000000
[  241.709605][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  241.709615][ T6722] R13: 00007f226fc96038 R14: 00007f226fc95fa0 R15: 00007fffcf7c00e8
[  241.709643][ T6722]  </TASK>
[  241.709716][ T6722] ERROR: Out of memory at tomoyo_realpath_from_path.
[  241.709947][ T6722] comedi comedi3: das16m1: I/O port conflict (0x500,8)
[  242.035126][ T6725] loop3: detected capacity change from 0 to 8
[  242.068297][ T6723] loop4: detected capacity change from 0 to 512
[  242.070780][ T6723] EXT4-fs: Ignoring removed orlov option
[  242.070807][ T6723] EXT4-fs: Ignoring removed bh option
[  242.161297][ T6723] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  242.246143][ T6723] EXT4-fs (loop4): orphan cleanup on readonly fs
[  242.248612][ T6725] FAULT_INJECTION: forcing a failure.
[  242.248612][ T6725] name failslab, interval 1, probability 0, space 0, times 0
[  242.248649][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  242.248674][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  242.248687][ T6725] Call Trace:
[  242.248696][ T6725]  <TASK>
[  242.248706][ T6725]  dump_stack_lvl+0xe8/0x150
[  242.248738][ T6725]  should_fail_ex+0x46b/0x600
[  242.248773][ T6725]  should_failslab+0xa8/0x100
[  242.248810][ T6725]  __kmalloc_cache_noprof+0x84/0x690
[  242.248842][ T6725]  ? squashfs_lookup+0x225/0xf20
[  242.248869][ T6725]  squashfs_lookup+0x225/0xf20
[  242.248903][ T6725]  ? irqentry_exit+0x218/0x730
[  242.248933][ T6725]  ? lockdep_hardirqs_on+0x7a/0x110
[  242.248965][ T6725]  ? __pfx_squashfs_lookup+0x10/0x10
[  242.248995][ T6725]  ? __pfx_squashfs_lookup+0x10/0x10
[  242.249029][ T6725]  __lookup_slow+0x2d2/0x440
[  242.249061][ T6725]  ? __pfx___lookup_slow+0x10/0x10
[  242.249102][ T6725]  ? down_read+0x156/0x200
[  242.249136][ T6725]  ? __pfx_down_read+0x10/0x10
[  242.249173][ T6725]  ? lookup_fast+0x1a3/0x5b0
[  242.249206][ T6725]  lookup_slow+0x53/0x70
[  242.249234][ T6725]  link_path_walk+0xd1e/0x18d0
[  242.249282][ T6725]  path_openat+0x2d5/0x38a0
[  242.249376][ T6725]  ? __pfx_path_openat+0x10/0x10
[  242.249414][ T6725]  ? kasan_save_track+0x4f/0x80
[  242.249443][ T6725]  ? kasan_save_track+0x3e/0x80
[  242.249471][ T6725]  ? __kasan_slab_alloc+0x6c/0x80
[  242.249501][ T6725]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  242.249551][ T6725]  ? do_raw_spin_lock+0x12b/0x2f0
[  242.249588][ T6725]  do_file_open+0x23e/0x4a0
[  242.249620][ T6725]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  242.249657][ T6725]  ? __pfx_do_file_open+0x10/0x10
[  242.249686][ T6725]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  242.249729][ T6725]  ? alloc_fd+0x64e/0x6c0
[  242.249763][ T6725]  do_sys_openat2+0x113/0x200
[  242.249793][ T6725]  ? __pfx_do_sys_openat2+0x10/0x10
[  242.249817][ T6725]  ? ksys_write+0x248/0x270
[  242.249849][ T6725]  ? __pfx_ksys_write+0x10/0x10
[  242.249883][ T6725]  __x64_sys_openat+0x138/0x170
[  242.249919][ T6725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.249943][ T6725]  do_syscall_64+0x15f/0xf80
[  242.249975][ T6725]  ? trace_irq_disable+0x3b/0x140
[  242.250002][ T6725]  ? clear_bhb_loop+0x40/0x90
[  242.250029][ T6725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  242.250052][ T6725] RIP: 0033:0x7f226fa1cdd9
[  242.250072][ T6725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  242.250090][ T6725] RSP: 002b:00007f226dc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  242.250114][ T6725] RAX: ffffffffffffffda RBX: 00007f226fc95fa0 RCX: 00007f226fa1cdd9
[  242.250130][ T6725] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 00000000ffffff9c
[  242.250145][ T6725] RBP: 00007f226dc76090 R08: 0000000000000000 R09: 0000000000000000
[  242.250158][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  242.250170][ T6725] R13: 00007f226fc96038 R14: 00007f226fc95fa0 R15: 00007fffcf7c00e8
[  242.250202][ T6725]  </TASK>
[  242.250585][ T6725] SQUASHFS error: Failed to allocate squashfs_dir_entry
[  242.363369][  T820] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  242.635342][ T6723] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.178: bg 0: block 248: padding at end of block bitmap is not set
[  242.637903][ T6723] loop4: lost filesystem error report for type 5 error -117
[  242.641820][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  242.641843][    C0] EXT4-fs (loop4): last error at time 2000000083: ext4_validate_block_bitmap:441
[  242.685379][ T6723] Quota error (device loop4): write_blk: dquota write failed
[  242.685478][ T6723] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  242.685523][ T6723] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.178: Failed to acquire dquot type 1
[  242.685549][ T6723] loop4: lost filesystem error report for type 5 error -117
[  242.755640][ T6720] warning: `syz.4.178' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  242.858858][ T6320] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  243.000340][ T6723] EXT4-fs (loop4): 1 truncate cleaned up
[  243.078297][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  243.082225][ T6320] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  243.246023][ T6723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  244.421089][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  244.535201][ T6742] [U] „
[  244.536623][ T6320] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  244.626180][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  244.964005][ T6320] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  245.175369][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  245.179521][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  247.423933][ T5825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.818748][ T6320] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  249.132035][ T5942] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  249.284652][ T5942] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.285948][ T5942] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.339182][ T5942] usb 4-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  249.339205][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.339220][ T5942] usb 4-1: Product: syz
[  249.339230][ T5942] usb 4-1: Manufacturer: syz
[  249.339241][ T5942] usb 4-1: SerialNumber: syz
[  249.417217][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.768661][ T6320] 8021q: adding VLAN 0 to HW filter on device team0
[  249.874458][ T5942] usb 4-1: cannot find UAC_HEADER
[  249.909631][ T3513] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.909914][ T3513] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.979795][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.979974][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.180565][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[  251.865897][ T6798] netlink: 'syz.0.193': attribute type 1 has an invalid length.
[  251.937578][ T6799] comedi comedi0: Minor 3 could not be opened
[  251.949421][ T6767] loop2: detected capacity change from 0 to 32768
[  252.280750][ T5942] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  252.295149][ T5942] usb 4-1: USB disconnect, device number 8
[  252.461943][ T5828] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  252.564526][ T6798] bond1: entered promiscuous mode
[  252.624998][ T6798] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.711109][ T5883] udevd[5883]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.771410][ T6767] read_mapping_page failed!
[  253.771463][ T6767] jfs_mount: diMount(ipaimap2) failed, rc = -5
[  253.935647][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  253.935679][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  253.935708][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  253.935737][ T5828] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  253.962680][ T6767] Mount JFS Failure: -5
[  253.962696][ T6767] jfs_mount failed w/return code = -5
[  254.017751][ T5828] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  254.017783][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.017817][ T5828] usb 1-1: Product: syz
[  254.017832][ T5828] usb 1-1: Manufacturer: syz
[  254.017849][ T5828] usb 1-1: SerialNumber: syz
[  254.106110][ T5828] usb 1-1: config 0 descriptor??
[  254.107667][ T6804] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  254.155107][ T5828] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8
[  254.324727][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.413175][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  254.413545][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout
[  254.946351][ T6820] loop3: detected capacity change from 0 to 40427
[  255.043850][ T6820] F2FS-fs (loop3): invalid crc value
[  255.210610][ T6820] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  255.231392][ T6820] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  255.352030][ T5896] usb 1-1: USB disconnect, device number 14
[  255.470028][ T6820] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT
[  255.470122][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.3.197 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  255.470149][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  255.470163][ T6820] Call Trace:
[  255.470172][ T6820]  <TASK>
[  255.470183][ T6820]  dump_stack_lvl+0xe8/0x150
[  255.470217][ T6820]  f2fs_stop_checkpoint+0x383/0x540
[  255.470252][ T6820]  do_garbage_collect+0x15a2/0x6d90
[  255.470276][ T6820]  ? __lock_acquire+0x6b5/0x2cf0
[  255.470381][ T6820]  ? __pfx_do_garbage_collect+0x10/0x10
[  255.470441][ T6820]  ? __lock_acquire+0x6b5/0x2cf0
[  255.470477][ T6820]  ? do_raw_spin_lock+0x12b/0x2f0
[  255.470522][ T6820]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  255.470559][ T6820]  ? lockdep_hardirqs_on+0x7a/0x110
[  255.470594][ T6820]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  255.470629][ T6820]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  255.470667][ T6820]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  255.470703][ T6820]  ? lockdep_hardirqs_on+0x7a/0x110
[  255.470736][ T6820]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  255.470780][ T6820]  f2fs_gc+0xcca/0x24d0
[  255.470850][ T6820]  ? __pfx_f2fs_gc+0x10/0x10
[  255.470926][ T6820]  f2fs_expand_inode_data+0x656/0xb20
[  255.470959][ T6820]  ? __pfx_f2fs_expand_inode_data+0x10/0x10
[  255.470983][ T6820]  ? __pfx_inode_dio_wait+0x10/0x10
[  255.471018][ T6820]  ? mnt_put_write_access_file+0xc6/0x100
[  255.471049][ T6820]  ? file_update_time_flags+0x406/0x4b0
[  255.471080][ T6820]  f2fs_fallocate+0x4e8/0x980
[  255.471113][ T6820]  vfs_fallocate+0x672/0x7f0
[  255.471136][ T6820]  ? __pfx_vfs_fallocate+0x10/0x10
[  255.471175][ T6820]  file_ioctl+0x5cb/0x870
[  255.471212][ T6820]  ? __pfx_file_ioctl+0x10/0x10
[  255.471254][ T6820]  ? kasan_quarantine_put+0xbb/0x1f0
[  255.471287][ T6820]  ? tomoyo_path_number_perm+0x219/0x630
[  255.471314][ T6820]  ? tomoyo_path_number_perm+0x219/0x630
[  255.471341][ T6820]  do_vfs_ioctl+0xc29/0x1540
[  255.471379][ T6820]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  255.471412][ T6820]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  255.471441][ T6820]  ? do_futex+0x333/0x420
[  255.471486][ T6820]  ? __fget_files+0x2a/0x420
[  255.471511][ T6820]  ? __fget_files+0x2a/0x420
[  255.471534][ T6820]  ? __fget_files+0x3a6/0x420
[  255.471556][ T6820]  ? __fget_files+0x2a/0x420
[  255.471582][ T6820]  ? bpf_lsm_file_ioctl+0x9/0x20
[  255.471607][ T6820]  __se_sys_ioctl+0x82/0x170
[  255.471639][ T6820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.471659][ T6820]  do_syscall_64+0x15f/0xf80
[  255.471705][ T6820]  ? clear_bhb_loop+0x40/0x90
[  255.471729][ T6820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.471748][ T6820] RIP: 0033:0x7f226fa1cdd9
[  255.471765][ T6820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.471779][ T6820] RSP: 002b:00007f226dc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  255.471799][ T6820] RAX: ffffffffffffffda RBX: 00007f226fc95fa0 RCX: 00007f226fa1cdd9
[  255.471812][ T6820] RDX: 0000200000000040 RSI: 0000000040305828 RDI: 0000000000000008
[  255.471823][ T6820] RBP: 00007f226fab2d69 R08: 0000000000000000 R09: 0000000000000000
[  255.471834][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  255.471844][ T6820] R13: 00007f226fc96038 R14: 00007f226fc95fa0 R15: 00007fffcf7c00e8
[  255.471871][ T6820]  </TASK>
[  255.472908][ T6820] F2FS-fs (loop3): Stopped filesystem due to reason: 4
[  255.969989][ T6835] loop2: detected capacity change from 0 to 7
[  256.177645][ T6835] Dev loop2: unable to read RDB block 7
[  256.177679][ T6835]  loop2: AHDI p1 p2 p3
[  256.177709][ T6835] loop2: partition table partially beyond EOD, truncated
[  256.177964][ T6835] loop2: p1 start 1818582900 is beyond EOD, truncated
[  256.177988][ T6835] loop2: p3 start 335544320 is beyond EOD, truncated
[  258.383996][ T6320] veth0_vlan: entered promiscuous mode
[  259.768322][ T6320] veth1_vlan: entered promiscuous mode
[  261.091448][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  261.182352][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  261.596491][ T6880] loop4: detected capacity change from 0 to 128
[  261.671941][ T5942] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  261.730542][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  261.796338][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  261.799973][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  261.832742][ T5942] usb 3-1: Using ep0 maxpacket: 32
[  261.867087][ T5942] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  261.867119][ T5942] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  261.867148][ T5942] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  261.867199][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  261.867223][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  261.867249][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  261.867291][ T5942] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  261.867316][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.934309][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  261.940978][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  262.010094][ T5942] usb 3-1: config 0 descriptor??
[  262.172580][   T32] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  262.332411][ T5942] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  262.372794][   T32] usb 1-1: unable to get BOS descriptor or descriptor too short
[  262.377524][   T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7
[  262.406805][   T32] usb 1-1: string descriptor 0 read error: -22
[  262.406930][   T32] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  262.406948][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.440601][ T5942] usb 3-1: USB disconnect, device number 14
[  262.659715][ T6887] netlink: 116 bytes leftover after parsing attributes in process `syz.3.209'.
[  262.704252][ T6880] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  262.719981][ T6880] hpfs: filesystem error: improperly stopped
[  262.720241][ T6880] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  262.744203][ T6880] hpfs: You really don't want any checks? You are crazy...
[  262.924225][ T5942] usblp0: removed
[  263.016988][ T6880] hpfs: hpfs_map_sector(): read error
[  263.017007][ T6880] hpfs: code page support is disabled
[  263.017184][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.209'.
[  263.097522][ T6880] hpfs: hpfs_map_4sectors(): unaligned read
[  263.098009][ T6880] hpfs: hpfs_map_4sectors(): unaligned read
[  263.098027][ T6880] hpfs: filesystem error: unable to find root dir
[  263.176343][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.209'.
[  263.201944][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.243378][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.294915][ T6887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.209'.
[  263.401808][ T6880] hpfs: hpfs_map_4sectors(): unaligned read
[  263.791869][ T5942] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  264.124251][ T5942] usb 3-1: Using ep0 maxpacket: 32
[  264.130330][ T5942] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  264.130364][ T5942] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  264.130484][ T5942] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  264.130550][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  264.130573][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  264.130657][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  264.130710][ T5942] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  264.130736][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.183517][ T5838] Bluetooth: hci5: command tx timeout
[  264.390986][ T5942] usb 3-1: config 0 descriptor??
[  264.581225][ T6904] loop3: detected capacity change from 0 to 128
[  264.643752][ T5942] usb 3-1: can't set config #0, error -71
[  264.648136][ T5942] usb 3-1: USB disconnect, device number 15
[  264.866335][ T6904] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  264.877271][ T6904] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  265.683487][   T32] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  265.836023][   T32] usb 1-1: USB disconnect, device number 15
[  266.254801][ T5838] Bluetooth: hci5: command tx timeout
[  266.361333][ T5822] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.026815][ T6932] loop3: detected capacity change from 0 to 256
[  268.217590][ T6916] loop2: detected capacity change from 0 to 32768
[  268.473972][ T5838] Bluetooth: hci5: command tx timeout
[  269.279209][ T6936] netlink: 'syz.3.216': attribute type 8 has an invalid length.
[  270.227338][ T6933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.491846][ T5838] Bluetooth: hci5: command tx timeout
[  271.705155][ T6948] fuse: Unknown parameter ''
[  272.251831][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  272.407346][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  272.412347][ T5942] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  272.412374][ T5942] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  272.412393][ T5942] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  272.412446][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  272.412465][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  272.412488][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  272.412526][ T5942] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  272.412547][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.582708][ T6971] loop2: detected capacity change from 0 to 4096
[  272.627141][ T6967] tmpfs: Bad value for 'mpol'
[  272.631422][ T5942] usb 1-1: config 0 descriptor??
[  272.916533][ T5942] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  273.067566][ T5942] usb 1-1: USB disconnect, device number 16
[  273.174614][ T6981] loop4: detected capacity change from 0 to 2048
[  273.196585][ T5942] usblp0: removed
[  273.335603][ T6981]  loop4: p1 < > p4
[  273.373277][ T6981] loop4: p4 size 722688 extends beyond EOD, truncated
[  273.655219][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  273.715709][ T5942] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  273.743720][ T5975] udevd[5975]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  273.761788][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'.
[  273.847098][ T1414] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.850971][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'.
[  273.887184][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  273.890377][ T5942] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  273.890405][ T5942] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  273.890427][ T5942] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  273.890480][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  273.890503][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  273.890531][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  273.890575][ T5942] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  273.890601][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.315159][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  275.226391][ T5883] udevd[5883]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  275.269302][ T5942] usb 1-1: config 0 descriptor??
[  275.303235][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  275.368111][ T5942] usb 1-1: can't set config #0, error -71
[  275.446546][ T5942] usb 1-1: USB disconnect, device number 17
[  275.529771][ T7001] netlink: 'syz.4.229': attribute type 11 has an invalid length.
[  276.378670][ T7009] loop2: detected capacity change from 0 to 7
[  276.379822][ T7009] Dev loop2: unable to read RDB block 7
[  276.379853][ T7009]  loop2: AHDI p1 p2 p3
[  276.379882][ T7009] loop2: partition table partially beyond EOD, truncated
[  276.380124][ T7009] loop2: p1 start 1818582900 is beyond EOD, truncated
[  276.380146][ T7009] loop2: p3 start 335544320 is beyond EOD, truncated
[  276.447443][ T6883] chnl_net:caif_netlink_parms(): no params data found
[  276.504358][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  277.739706][ T7016] syz.2.234 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  277.747560][ T7016] ubi31: attaching mtd0
[  277.754731][ T7016] ubi31: scanning is finished
[  277.754755][ T7016] ubi31: empty MTD device detected
[  278.816512][ T7016] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[  279.037405][ T7025] loop4: detected capacity change from 0 to 64
[  279.612629][ T7024] IPv6: addrconf: prefix option has invalid lifetime
[  279.744536][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  280.059590][ T7027] loop2: detected capacity change from 0 to 32768
[  280.156972][  T820] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  280.286525][ T7027] jfs_strtoUCS: char2uni returned -22.
[  280.286545][ T7027] charset = cp949, char = 0x84
[  280.326980][  T820] usb 1-1: Using ep0 maxpacket: 32
[  280.338096][  T820] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  280.338127][  T820] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  280.338151][  T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  280.338203][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  280.338228][  T820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  280.338256][  T820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  280.338303][  T820] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  280.338327][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.453533][  T820] usb 1-1: config 0 descriptor??
[  280.759702][  T820] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  280.810818][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'.
[  280.836184][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'.
[  280.917755][  T820] usb 1-1: USB disconnect, device number 18
[  280.973202][  T820] usblp0: removed
[  281.377192][  T820] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  281.448480][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'.
[  281.506023][ T7053] loop2: detected capacity change from 0 to 2048
[  281.543962][ T6042] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  281.549412][  T820] usb 1-1: Using ep0 maxpacket: 32
[  281.552050][  T820] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  281.552079][  T820] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  281.552101][  T820] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  281.552146][  T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  281.552168][  T820] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  281.552193][  T820] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  281.552231][  T820] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  281.552254][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.683451][  T820] usb 1-1: config 0 descriptor??
[  281.690035][ T6042] usb 4-1: device descriptor read/64, error -71
[  281.847233][ T7049] IPv6: sit1: Disabled Multicast RS
[  281.849019][ T7049] sit1: entered allmulticast mode
[  281.896712][  T820] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  281.918871][ T7053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.944036][ T6042] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  281.979178][ T7053] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  281.997998][  T820] usb 1-1: USB disconnect, device number 19
[  282.126693][  T820] usblp0: removed
[  282.163648][ T6042] usb 4-1: device descriptor read/64, error -71
[  282.229817][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.230549][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.230890][ T6883] bridge_slave_0: entered allmulticast mode
[  282.281899][ T6042] usb usb4-port1: attempt power cycle
[  282.284400][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.247'.
[  282.290990][ T6883] bridge_slave_0: entered promiscuous mode
[  282.343866][ T7062] syz.4.247 uses obsolete (PF_INET,SOCK_PACKET)
[  282.380985][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.386436][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.387474][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.388446][ T6883] bridge_slave_1: entered allmulticast mode
[  282.409600][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.4.247'.
[  282.426574][ T6883] bridge_slave_1: entered promiscuous mode
[  282.624572][ T6042] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  282.652535][ T6042] usb 4-1: device descriptor read/8, error -71
[  282.901843][ T6042] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  282.925331][ T6042] usb 4-1: device descriptor read/8, error -71
[  283.035768][ T6042] usb usb4-port1: unable to enumerate USB device
[  283.114873][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  283.168464][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.250330][ T7062] loop4: detected capacity change from 0 to 32768
[  283.287226][ T7062] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.247 (7062)
[  283.433768][ T7062] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  283.433982][ T7062] BTRFS info (device loop4): using sha256 checksum algorithm
[  283.742215][   T38] audit: type=1804 audit(2000000124.440:9): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.251" name="/newroot/51/file0" dev="tmpfs" ino=287 res=1 errno=0
[  283.746251][ T3609] bridge_slave_1: left allmulticast mode
[  283.746295][ T3609] bridge_slave_1: left promiscuous mode
[  283.746588][ T3609] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.001019][ T3609] bridge_slave_0: left allmulticast mode
[  284.001057][ T3609] bridge_slave_0: left promiscuous mode
[  284.001341][ T3609] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.070393][ T7062] BTRFS info (device loop4): enabling ssd optimizations
[  284.070422][ T7062] BTRFS info (device loop4): turning on async discard
[  284.070442][ T7062] BTRFS info (device loop4): enabling free space tree
[  284.413444][ T7095] loop2: detected capacity change from 0 to 7
[  284.441056][ T7095] Dev loop2: unable to read RDB block 7
[  284.441107][ T7095]  loop2: AHDI p1 p2 p3
[  284.441149][ T7095] loop2: partition table partially beyond EOD, truncated
[  284.441451][ T7095] loop2: p1 start 1818582900 is beyond EOD, truncated
[  284.441475][ T7095] loop2: p3 start 335544320 is beyond EOD, truncated
[  284.504893][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[  284.656058][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[  284.674955][ T5825] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.942592][ T6042] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  285.073199][ T6042] usb 4-1: device descriptor read/64, error -71
[  285.138905][ T7104] loop2: detected capacity change from 0 to 4096
[  285.151878][ T3609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  285.284549][ T3609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  285.325596][ T3609] bond0 (unregistering): Released all slaves
[  285.365114][ T6042] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  285.415366][ T7104] ntfs3(loop2): ino=3, mi_enum_attr
[  285.418038][ T6883] team0: Port device team_slave_0 added
[  285.502807][ T6042] usb 4-1: device descriptor read/64, error -71
[  285.504999][ T7104] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  285.505766][  T106] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  285.548982][ T6883] team0: Port device team_slave_1 added
[  285.549056][  T106] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  285.549542][  T106] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  285.551628][  T106] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  285.623190][ T6042] usb usb4-port1: attempt power cycle
[  285.705497][ T7104] ntfs3(loop2): Failed to initialize $Secure::$SDH (-22).
[  285.705618][ T7104] ntfs3(loop2): Failed to initialize $Secure (-22).
[  285.865881][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0
[  285.865899][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  285.865930][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  285.934114][ T7108] loop4: detected capacity change from 0 to 128
[  286.002282][ T6042] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  286.062572][ T6042] usb 4-1: device descriptor read/8, error -71
[  286.092306][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  286.101301][ T7108] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  286.125035][   T38] audit: type=1804 audit(2000000126.840:10): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.259" name="/newroot/55/file0" dev="tmpfs" ino=311 res=1 errno=0
[  286.236491][ T7108] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.238078][ T3609] hsr_slave_0: left promiscuous mode
[  286.272127][ T3609] hsr_slave_1: left promiscuous mode
[  286.273493][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_0
[  286.283354][    T9] usb 1-1: Using ep0 maxpacket: 32
[  286.325907][ T6042] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  286.326303][    T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  286.326328][    T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  286.326350][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  286.326565][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  286.326591][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  286.326618][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  286.326661][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  286.326686][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.343125][ T6042] usb 4-1: device descriptor read/8, error -71
[  286.409571][ T3609] batman_adv: batadv0: Removing interface: batadv_slave_1
[  286.444800][    T9] usb 1-1: config 0 descriptor??
[  286.466143][ T6042] usb usb4-port1: unable to enumerate USB device
[  286.711957][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  286.729428][    T9] usb 1-1: USB disconnect, device number 20
[  286.769262][    T9] usblp0: removed
[  286.814442][   T38] audit: type=1326 audit(2000000127.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.945032][   T38] audit: type=1326 audit(2000000127.640:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.945092][   T38] audit: type=1326 audit(2000000127.640:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.945143][   T38] audit: type=1326 audit(2000000127.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.946104][   T38] audit: type=1326 audit(2000000127.660:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.946158][   T38] audit: type=1326 audit(2000000127.660:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.946648][   T38] audit: type=1326 audit(2000000127.660:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  286.947272][   T38] audit: type=1326 audit(2000000127.660:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d06cfcdd9 code=0x7ffc0000
[  287.136065][ T7115] misc userio: No port type given on /dev/userio
[  287.198904][ T3609] veth1_vlan: left promiscuous mode
[  287.199120][ T3609] veth0_vlan: left promiscuous mode
[  287.318557][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.261'.
[  287.644713][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  288.104506][    T9] usb 1-1: Using ep0 maxpacket: 32
[  288.106992][    T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  288.107020][    T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  288.107043][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  288.107097][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  288.107121][    T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  288.107148][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  288.107192][    T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  288.107218][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.119406][    T9] usb 1-1: config 0 descriptor??
[  288.547550][ T5943] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  288.882892][ T5943] usb 3-1: no configurations
[  288.882916][ T5943] usb 3-1: can't read configurations, error -22
[  288.999074][    T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  289.032016][ T5943] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  289.183535][ T5943] usb 3-1: no configurations
[  289.183557][ T5943] usb 3-1: can't read configurations, error -22
[  289.184739][    T9] usb 1-1: USB disconnect, device number 21
[  289.185534][ T5943] usb usb3-port1: attempt power cycle
[  289.273997][ T7127] netlink: 'syz.4.263': attribute type 11 has an invalid length.
[  289.312571][    T9] usblp0: removed
[  289.406222][ T7131] loop2: detected capacity change from 0 to 7
[  289.424444][ T7131] Dev loop2: unable to read RDB block 7
[  289.424477][ T7131]  loop2: AHDI p1 p2 p3
[  289.424508][ T7131] loop2: partition table partially beyond EOD, truncated
[  289.424751][ T7131] loop2: p1 start 1818582900 is beyond EOD, truncated
[  289.424773][ T7131] loop2: p3 start 335544320 is beyond EOD, truncated
[  289.521937][ T5943] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  289.543558][ T5943] usb 3-1: no configurations
[  289.543578][ T5943] usb 3-1: can't read configurations, error -22
[  289.601995][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[  289.692061][ T5943] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  289.805801][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'.
[  289.812279][ T5943] usb 3-1: no configurations
[  289.812299][ T5943] usb 3-1: can't read configurations, error -22
[  289.829028][ T3609] team0 (unregistering): Port device team_slave_1 removed
[  289.832473][ T5943] usb usb3-port1: unable to enumerate USB device
[  289.892662][ T3609] team0 (unregistering): Port device team_slave_0 removed
[  290.167244][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1
[  290.167263][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  290.167296][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.229443][ T7129] loop3: detected capacity change from 0 to 32768
[  290.239054][ T7129] btrfs: Deprecated parameter 'usebackuproot'
[  290.239781][ T7129] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  290.651315][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'.
[  291.479888][ T7129] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.265 (7129)
[  291.799198][ T7141] syz.4.268 (7141) used greatest stack depth: 16936 bytes left
[  291.888657][ T7143] loop0: detected capacity change from 0 to 512
[  291.955333][ T6883] hsr_slave_0: entered promiscuous mode
[  291.973562][ T6883] hsr_slave_1: entered promiscuous mode
[  292.068446][ T7143] EXT4-fs: Ignoring removed mblk_io_submit option
[  292.303229][ T7143] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  292.982861][ T7154] loop4: detected capacity change from 0 to 16
[  293.480319][ T7129] BTRFS error (device loop3): open_ctree failed: -4
[  293.537670][ T7143] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.269: invalid indirect mapped block 33554432 (level 0)
[  293.537907][ T7143] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  293.547665][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  293.547685][    C1] EXT4-fs (loop0): initial error at time 2000000143: ext4_free_branches:1023: inode 13
[  293.547710][    C1] EXT4-fs (loop0): last error at time 2000000143: ext4_free_branches:1023: inode 13
[  293.644287][ T7143] EXT4-fs (loop0): Remounting filesystem read-only
[  293.649487][ T7143] EXT4-fs (loop0): 1 truncate cleaned up
[  293.712105][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.784071][ T5828] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  293.884317][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.030068][ T7143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.139223][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.273'.
[  295.131903][  T820] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  295.316052][  T820] usb 4-1: Using ep0 maxpacket: 32
[  295.321636][  T820] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  295.321837][  T820] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  295.321860][  T820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  295.321905][  T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  295.321928][  T820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  295.321951][  T820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  295.321991][  T820] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  295.322015][  T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.343004][  T820] usb 4-1: config 0 descriptor??
[  295.656045][ T7179] loop2: detected capacity change from 0 to 7
[  295.657359][ T7179] Dev loop2: unable to read RDB block 7
[  295.657392][ T7179]  loop2: AHDI p1 p2 p3
[  295.657421][ T7179] loop2: partition table partially beyond EOD, truncated
[  295.657680][ T7179] loop2: p1 start 1818582900 is beyond EOD, truncated
[  295.657702][ T7179] loop2: p3 start 335544320 is beyond EOD, truncated
[  295.742166][  T820] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  295.755091][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.807597][  T820] usb 4-1: USB disconnect, device number 18
[  295.840741][  T820] usblp0: removed
[  295.983572][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'.
[  296.002129][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'.
[  296.343805][ T5488] 8021q: adding VLAN 0 to HW filter on device eth5
[  296.424665][  T820] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  296.682870][  T820] usb 4-1: Using ep0 maxpacket: 32
[  296.685726][  T820] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  296.685758][  T820] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  296.685781][  T820] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  296.685828][  T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  296.685848][  T820] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  296.685870][  T820] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  296.685907][  T820] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  296.685928][  T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.721808][ T5828] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  296.770992][  T820] usb 4-1: config 0 descriptor??
[  296.892725][ T5828] usb 5-1: no configurations
[  296.892747][ T5828] usb 5-1: can't read configurations, error -22
[  297.044459][ T5828] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  297.211630][ T7204] loop2: detected capacity change from 0 to 512
[  297.230854][ T5828] usb 5-1: no configurations
[  297.230882][ T5828] usb 5-1: can't read configurations, error -22
[  297.251609][ T5828] usb usb5-port1: attempt power cycle
[  297.293438][ T7204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.293593][ T7204] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.356290][  T820] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  297.378028][  T820] usb 4-1: USB disconnect, device number 19
[  297.395617][  T820] usblp0: removed
[  297.602011][ T5828] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  297.628937][ T5828] usb 5-1: no configurations
[  297.628958][ T5828] usb 5-1: can't read configurations, error -22
[  297.753331][ T5828] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  297.773594][ T5828] usb 5-1: no configurations
[  297.773615][ T5828] usb 5-1: can't read configurations, error -22
[  297.773999][ T5828] usb usb5-port1: unable to enumerate USB device
[  298.016611][ T5826] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.432986][ T7224] loop3: detected capacity change from 0 to 32768
[  298.457734][ T7224] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.286 (7224)
[  298.493993][ T7224] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  298.494028][ T7224] BTRFS info (device loop3): using sha256 checksum algorithm
[  298.494087][ T7224] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  298.765698][ T7224] BTRFS info (device loop3): rebuilding free space tree
[  298.867137][ T7224] BTRFS info (device loop3): disabling free space tree
[  298.867278][ T7224] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  298.867307][ T7224] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  298.892333][ T7224] BTRFS info (device loop3): checking UUID tree
[  298.902825][ T7224] BTRFS info (device loop3): enabling ssd optimizations
[  298.902874][ T7224] BTRFS info (device loop3): using spread ssd allocation scheme
[  298.902929][ T7224] BTRFS info (device loop3): turning off barriers
[  298.902985][ T7224] BTRFS info (device loop3): enabling disk space caching
[  298.903031][ T7224] BTRFS info (device loop3): force clearing of disk cache
[  299.030090][ T7224] 9p: Bad value for 'rfdno'
[  299.200143][ T7248] loop2: detected capacity change from 0 to 1024
[  299.281137][ T5822] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  299.335025][ T7248] EXT4-fs error (device loop2): ext4_quota_enable:7225: inode #3: comm syz.2.285: iget: bad i_size value: -123145302304768
[  299.335062][ T7248] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  299.343450][    C1] EXT4-fs (loop2): initial error at time 2000000149: ext4_quota_enable:7225: inode 3
[  299.343495][    C1] EXT4-fs (loop2): last error at time 2000000149: ext4_quota_enable:7225: inode 3
[  299.383376][ T7248] EXT4-fs error (device loop2): ext4_quota_enable:7228: comm syz.2.285: Bad quota inode: 3, type: 0
[  299.383409][ T7248] loop2: lost filesystem error report for type 5 error -117
[  299.383944][ T7248] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  299.488988][ T7248] EXT4-fs (loop2): mount failed
[  300.585739][ T7268] loop2: detected capacity change from 0 to 16
[  300.601162][ T7268] erofs: Unknown parameter 'user_xattùär¿ É`r'
[  300.791796][   T38] kauditd_printk_skb: 12 callbacks suppressed
[  300.791907][   T38] audit: type=1326 audit(2000000150.364:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.290" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4edfe1cdd9 code=0x0
[  301.665568][ T7267] loop3: detected capacity change from 0 to 16
[  302.962133][   T32] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  303.111861][   T32] usb 5-1: Using ep0 maxpacket: 32
[  303.114128][   T32] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  303.114156][   T32] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  303.114178][   T32] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  303.114231][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  303.114256][   T32] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  303.114283][   T32] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  303.114328][   T32] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  303.114354][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.236462][   T32] usb 5-1: config 0 descriptor??
[  303.651322][   T32] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  303.686404][ T7280] loop2: detected capacity change from 0 to 4096
[  304.031437][ T7280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.064258][   T32] usb 5-1: USB disconnect, device number 11
[  304.097276][   T32] usblp0: removed
[  304.111877][ T5943] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  304.165264][ T7294] netlink: 'syz.0.296': attribute type 5 has an invalid length.
[  304.279595][ T5943] usb 4-1: no configurations
[  304.279595][ T5943] usb 4-1: no configurations
[  304.279617][ T5943] usb 4-1: can't read configurations, error -22
[  304.306135][ T5838] ==================================================================
[  304.306152][ T5838] BUG: KASAN: wild-memory-access in l2cap_connect_cfm+0x872/0x1560
[  304.306190][ T5838] Read of size 4 at addr deacfffffffffc0c by task kworker/u9:5/5838
[  304.306209][ T5838] 
[  304.306222][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  304.306248][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  304.306264][ T5838] Workqueue: hci1 hci_rx_work
[  304.306299][ T5838] Call Trace:
[  304.306308][ T5838]  <TASK>
[  304.306317][ T5838]  dump_stack_lvl+0xe8/0x150
[  304.306342][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.306378][ T5838]  kasan_report+0x117/0x150
[  304.306413][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.306443][ T5838]  kasan_check_range+0x264/0x2c0
[  304.306479][ T5838]  l2cap_connect_cfm+0x872/0x1560
[  304.306511][ T5838]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.306539][ T5838]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.306571][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.306601][ T5838]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  304.306633][ T5838]  ? mutex_lock_nested+0x152/0x1d0
[  304.306656][ T5838]  ? hci_connect_cfm+0x2c/0x140
[  304.306677][ T5838]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.306703][ T5838]  hci_connect_cfm+0x95/0x140
[  304.306726][ T5838]  le_conn_complete_evt+0x1134/0x16b0
[  304.306758][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  304.306781][ T5838]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.306810][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.306842][ T5838]  ? skb_pull_data+0xfb/0x200
[  304.306867][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[  304.306894][ T5838]  hci_event_packet+0x659/0xef0
[  304.306927][ T5838]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  304.306951][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  304.306972][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[  304.307001][ T5838]  ? rt_spin_unlock+0x14f/0x200
[  304.307029][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[  304.307058][ T5838]  hci_rx_work+0x3ee/0x1040
[  304.307098][ T5838]  ? process_one_work+0x8b7/0x1710
[  304.307121][ T5838]  process_one_work+0x9a3/0x1710
[  304.307156][ T5838]  ? __pfx_process_one_work+0x10/0x10
[  304.307177][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[  304.307213][ T5838]  worker_thread+0xba8/0x11e0
[  304.307246][ T5838]  kthread+0x388/0x470
[  304.307276][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  304.307299][ T5838]  ? __pfx_kthread+0x10/0x10
[  304.307330][ T5838]  ret_from_fork+0x514/0xb70
[  304.307355][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  304.307388][ T5838]  ? __switch_to+0xc79/0x1410
[  304.307423][ T5838]  ? __pfx_kthread+0x10/0x10
[  304.307451][ T5838]  ret_from_fork_asm+0x1a/0x30
[  304.307487][ T5838]  </TASK>
[  304.307496][ T5838] ==================================================================
[  304.307539][ T5838] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  304.307556][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  304.307583][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  304.307598][ T5838] Workqueue: hci1 hci_rx_work
[  304.307636][ T5838] Call Trace:
[  304.307644][ T5838]  <TASK>
[  304.307652][ T5838]  vpanic+0x56c/0xa60
[  304.307679][ T5838]  ? __pfx_vpanic+0x10/0x10
[  304.307705][ T5838]  ? irqentry_exit+0x218/0x730
[  304.307741][ T5838]  panic+0xc5/0xd0
[  304.307766][ T5838]  ? __pfx_panic+0x10/0x10
[  304.307791][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.307825][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.307852][ T5838]  check_panic_on_warn+0x89/0xb0
[  304.307884][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.307907][ T5838]  end_report+0x73/0x170
[  304.307935][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.307960][ T5838]  kasan_report+0x128/0x150
[  304.307995][ T5838]  ? l2cap_connect_cfm+0x872/0x1560
[  304.308028][ T5838]  kasan_check_range+0x264/0x2c0
[  304.308064][ T5838]  l2cap_connect_cfm+0x872/0x1560
[  304.308096][ T5838]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.308123][ T5838]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.308155][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.308187][ T5838]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  304.308219][ T5838]  ? mutex_lock_nested+0x152/0x1d0
[  304.308244][ T5838]  ? hci_connect_cfm+0x2c/0x140
[  304.308267][ T5838]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  304.308296][ T5838]  hci_connect_cfm+0x95/0x140
[  304.308322][ T5838]  le_conn_complete_evt+0x1134/0x16b0
[  304.308354][ T5838]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  304.308389][ T5838]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  304.308422][ T5838]  ? lockdep_hardirqs_on+0x7a/0x110
[  304.308454][ T5838]  ? skb_pull_data+0xfb/0x200
[  304.308478][ T5838]  hci_le_conn_complete_evt+0x187/0x470
[  304.308501][ T5838]  hci_event_packet+0x659/0xef0
[  304.308531][ T5838]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  304.308553][ T5838]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  304.308572][ T5838]  ? __pfx_hci_event_packet+0x10/0x10
[  304.308599][ T5838]  ? rt_spin_unlock+0x14f/0x200
[  304.308626][ T5838]  ? hci_send_to_monitor+0xe2/0x590
[  304.308650][ T5838]  hci_rx_work+0x3ee/0x1040
[  304.308681][ T5838]  ? process_one_work+0x8b7/0x1710
[  304.308699][ T5838]  process_one_work+0x9a3/0x1710
[  304.308727][ T5838]  ? __pfx_process_one_work+0x10/0x10
[  304.308744][ T5838]  ? do_raw_spin_lock+0x12b/0x2f0
[  304.308772][ T5838]  worker_thread+0xba8/0x11e0
[  304.308803][ T5838]  kthread+0x388/0x470
[  304.308828][ T5838]  ? __pfx_worker_thread+0x10/0x10
[  304.308846][ T5838]  ? __pfx_kthread+0x10/0x10
[  304.308871][ T5838]  ret_from_fork+0x514/0xb70
[  304.308892][ T5838]  ? __pfx_ret_from_fork+0x10/0x10
[  304.308911][ T5838]  ? __switch_to+0xc79/0x1410
[  304.308940][ T5838]  ? __pfx_kthread+0x10/0x10
[  304.308965][ T5838]  ret_from_fork_asm+0x1a/0x30
[  304.308995][ T5838]  </TASK>
[  304.309915][ T5838] Kernel Offset: disabled