last executing test programs:

8m4.205158763s ago: executing program 3 (id=19):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673faa90d6125", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50)
timer_create(0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

8m2.540293387s ago: executing program 3 (id=22):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001b40)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001b80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001c00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001c80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001cc0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001d00)=0x6)
pipe2$9p(0x0, 0x80)
r5 = landlock_create_ruleset(&(0x7f0000001d40)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
sendmmsg$inet6(r6, &(0x7f0000000280), 0x0, 0x6404c081)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'veth1_to_batadv\x00', {0x2, 0x4e20, @empty}})
sendto$inet6(r6, &(0x7f0000000380), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd)
connect$inet6(0xffffffffffffffff, &(0x7f0000001d80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001e00)={&(0x7f0000001e40)=@phonet, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1})

8m0.940309373s ago: executing program 3 (id=26):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000400))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673faa90d6125", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50)
timer_create(0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

7m59.456209585s ago: executing program 3 (id=30):
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x101c08a, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x2c1, &(0x7f0000000ac0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2rrAwMpOZzWSNMZHNyu1+Ps0++8zznfk9k4fsbJEnH748Obqfx8MnX/wSWZZEZxjDOEliEJ1ofBULht8EAPAsOymK+L2Y2SSXRES2vbIAgC1a7+9/d9786VLKAgC26N677729f3Bw550ssrg7+fp4VP5nX/6cHd9/GB/HOB7Ea9GP04jqQWE3qqeFsnm3KIppNy8N4uZkejwqk5MPntbn3/8tosrvRT8GVdfZ00aVf+vgzl4+08pPyzqer68/LPO3ox8vnoUX8reX5GOUxquvtOq/Ff34+aP4JMZxvypinv9yL8/fLL794/P3y/LKfDI9HvWqcXPFziW/NAAAAAAAAAAAAAAAAAAAAAAAXGG36r1zepHfiJuTsqvef2fnNNLy17wxWNyfZ5ZPmhO19wcqimJaxPetLQXzoh44z3fjpW57Y0EAAAAAAAAAAAAAAAAAAAC4vh5/+tnR4Xj84NGFNJrdALoR8ee9iP96nmGr50asHtyrr3k4Hnfq5sKYp2m7J3aaMUnEyjLKSVzQbfm3xnPna24aP/xYTnCTE2atnteXT3B3+/NqVtfRYbL8Wr1oerJ6kXyXRszHpLHmtdJ/OlTEJssvXXqov/Hc0xeqxnTFmEhWFfbGr7M7V/ck52eRVnd1aXy3brTi59bGWq97ZLP4398rkmq3jt723owAAAAAAAAAAAAAAAAAAOCam3/6d8nBJyujncJHgQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4Iubf/79BY1qH1xicxqPH//MUAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuAb+CgAA//8HIVi7")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f0000000280)='27', 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, 0x0, 0x0)
bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/74, 0x33e000, 0x1000}, 0x20)

7m59.326069282s ago: executing program 3 (id=31):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x20, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20)
socket(0x11, 0x3, 0x0)
read$midi(r0, 0x0, 0x3b)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x11, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000080)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x20, 0x60000000, 0x3}, {@rand_addr=0x64010102, 0x4e26, 0x12002, 0xfffffeff, 0xe1b2, 0xfffffffe}}, 0x44)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x80383, 0x0)
read$midi(r0, &(0x7f0000000400)=""/136, 0x88)
ioctl$SNDCTL_SEQ_RESET(r3, 0x5100)

7m58.944568322s ago: executing program 3 (id=32):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001b40)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001b80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001c00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001c80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001cc0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001d00)=0x6)
pipe2$9p(0x0, 0x80)
r5 = landlock_create_ruleset(&(0x7f0000001d40)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6404c081)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'veth1_to_batadv\x00', {0x2, 0x4e20, @empty}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd)
connect$inet6(r6, &(0x7f0000001d80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001e00)={&(0x7f0000001e40)=@phonet, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1})

7m57.2360448s ago: executing program 32 (id=32):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001b40)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001b80)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001bc0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000001c00)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000001c80), 0x651, 0x0)
recvmmsg(r3, &(0x7f0000001cc0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000001d00)=0x6)
pipe2$9p(0x0, 0x80)
r5 = landlock_create_ruleset(&(0x7f0000001d40)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x1)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8)
connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x6404c081)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={'veth1_to_batadv\x00', {0x2, 0x4e20, @empty}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000380), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd)
connect$inet6(r6, &(0x7f0000001d80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, 0x0, 0x0)
r7 = socket$kcm(0x23, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000001e00)={&(0x7f0000001e40)=@phonet, 0x80, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1})

3m52.588201718s ago: executing program 4 (id=662):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
readv(r0, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/10, 0xa}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x75b9, 0x9)
r1 = syz_open_dev$radio(&(0x7f0000000180), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x280, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x0, '\x00', @value=0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x143102)
r3 = timerfd_create(0x2, 0x180000)
timerfd_settime(r3, 0x3, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/4106, 0x100a}], 0x1)
writev(r2, &(0x7f0000002400)=[{&(0x7f0000002440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r4 = fsopen(&(0x7f0000002480)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000002500)='c:::\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x6)
r5 = syz_io_uring_setup(0x4a80, &(0x7f0000002580)={0x0, 0x5eec, 0x20, 0x5, 0x4e}, 0x0, &(0x7f0000002600)=<r6=>0x0, &(0x7f0000002640)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000002680)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000640], 0x0, 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"]}, 0x291)
syz_io_uring_submit(0x0, r6, r7, &(0x7f0000002940)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x3560, 0x8000001, 0x48, 0x0, 0x56)
r9 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r9, 0xb)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)

3m51.541371666s ago: executing program 4 (id=664):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000002940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000029c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000002a00), 0x0, 0x80001)
recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002e40)=""/21, 0x15}, {&(0x7f0000002e80)=""/4096, 0x1000}], 0x2}, 0x15}], 0x1, 0x40000141, 0x0)

3m51.388640584s ago: executing program 4 (id=666):
capset(&(0x7f0000000180)={0x20080522}, &(0x7f0000000200)={0x2, 0x6, 0x2, 0x87, 0xffffffff, 0x20002})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x3f, 0x0, &(0x7f0000000400)="b461802305624431ed3373010000003d2600906919d5d5fe00c6fc7ef8eef9757a879b27e474cc479f1a1cb462000200006390009c5bbd000000003632b69f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffefffc}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000440), 0x6f5e, 0x48903)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000480)=0x89) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r4=>0x0}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000240), &(0x7f0000000280)=""/3, 0x2}, 0x20) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getneightbl={0x14, 0x42, 0x20, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x0)

3m51.215782109s ago: executing program 4 (id=667):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, &(0x7f00000007c0))
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
ftruncate(0xffffffffffffffff, 0x8008976)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x6)
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000340)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551c030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f3231d04630343234ed32333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3ed41dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba28c090000000000004606474446d7cd066a4113e319f6bb6ea530a01f8e739e4c4fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf95dddd1520015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b880e518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e28123b79bcbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b5b30c3f3d028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c2d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97d8bd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edce40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d", 0x504, r0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000880), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a80)={[{@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000b00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000001140)='./proc\x00', &(0x7f0000001180)='proc\x00', 0x4000, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x6, @multicast1, 0x15, 0x0, 'rr\x00', 0x0, 0x0, 0x50}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000200)={{0x2, @broadcast, 0x15, 0x0, 'rr\x00', 0x0, 0x10, 0xfffffffd}, {@loopback, 0x4e21, 0x0, 0x1, 0x0, 0xfffffffd}}, 0x44)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x21000}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0)
r2 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='port', &(0x7f00000002c0)='0', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x20082, 0x103)

3m47.257915888s ago: executing program 4 (id=679):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x83)
fchdir(r0)
chdir(&(0x7f0000002000)='./sys\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000002040)='.\x00', 0x0, 0x2)
getdents64(r1, &(0x7f0000002080)=""/47, 0x2f)
getdents64(r1, &(0x7f0000003100)=""/4096, 0x1000)
r2 = fsopen(&(0x7f0000001c40)='sysfs\x00', 0x1)
ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000001f80))
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2000000010000340be00", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003040)=@generic={&(0x7f0000003000)='./file0\x00', 0x0, 0x8}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x42}}, {{0x0, 0x4, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x0, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x5, 0xf989, 'Q'}, @md5sig={0x13, 0x12}]}}}}}}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003080)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)="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", 0x37d}, {&(0x7f0000001700)="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", 0x1cb}, {&(0x7f0000001900)="f610e61ac81cc3edc86f0500", 0xc}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x4, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711833000000000095"], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000001940)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001d40)={'syztnl2\x00', &(0x7f0000001cc0)={'gre0\x00', 0x0, 0x8000, 0x80, 0x5, 0x5, {{0xc, 0x4, 0x1, 0x2a, 0x30, 0x68, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @generic={0x0, 0xd, "996f2de13e689bfdb88d7b"}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a14fe0000000c850000002b000000b70000000000002995"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
sendto(r5, &(0x7f0000001980)="91a50c031e06d5d8e5268f09cc94ce8679a50a32c09652ba48c3791fec927a2b8fd9def5f9f685d429fd8e33c4e6bb945695d7e3d7ccedac4620aa41279880433924a9b4f4cc472f7f9c6102771581a400de159ccb4c9c7ba52dd1ad61ecd47580479b0e070449b826e76897765065700be20e3a2d1e9c445eec7193456f84472633cd1f5965da9ca4ca77a14615b46fceaf4f89bbb4d920245332018746ed581cfee97893dacf0df45d0aeba5433ff3a20af06c20fac4e50a2118da46560045df091e471a59691cfb60ca7e322535643533f5b8", 0xd4, 0x20048000, &(0x7f0000001a80)=@in6={0xa, 0x4e23, 0x0, @remote, 0x8}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000280)=""/4096}, 0x94)
sendmsg$nl_xfrm(r3, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000064010100000000000000000000000000ac1414aa000000000000000000000000000000004e2400000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

3m42.756673532s ago: executing program 4 (id=692):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
readv(r0, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/10, 0xa}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x75b9, 0x9)
r1 = syz_open_dev$radio(&(0x7f0000000180), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x280, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x0, '\x00', @value=0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x143102)
r3 = timerfd_create(0x2, 0x180000)
timerfd_settime(r3, 0x3, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/4106, 0x100a}], 0x1)
writev(r2, &(0x7f0000002400)=[{&(0x7f0000002440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r4 = fsopen(&(0x7f0000002480)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000002500)='c:::\x00', 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000002540)='espintcp', 0x8)
r5 = syz_io_uring_setup(0x4a80, &(0x7f0000002580)={0x0, 0x5eec, 0x20, 0x5, 0x4e}, 0x0, &(0x7f0000002600)=<r6=>0x0, &(0x7f0000002640)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000002680)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000640], 0x0, 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"]}, 0x291)
syz_io_uring_submit(0x0, r6, r7, &(0x7f0000002940)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x3560, 0x8000001, 0x48, 0x0, 0x56)
r9 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r9, 0xb)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)

3m42.046886489s ago: executing program 33 (id=692):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0)
readv(r0, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/10, 0xa}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x75b9, 0x9)
r1 = syz_open_dev$radio(&(0x7f0000000180), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000001c0)={0xf000000, 0x280, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x98f909, 0x0, '\x00', @value=0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r2 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x143102)
r3 = timerfd_create(0x2, 0x180000)
timerfd_settime(r3, 0x3, &(0x7f0000000300)={{}, {0x0, 0x3938700}}, 0x0)
readv(r1, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/4106, 0x100a}], 0x1)
writev(r2, &(0x7f0000002400)=[{&(0x7f0000002440)="94", 0xf000}, {0x0}], 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r4 = fsopen(&(0x7f0000002480)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000002500)='c:::\x00', 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000002540)='espintcp', 0x8)
r5 = syz_io_uring_setup(0x4a80, &(0x7f0000002580)={0x0, 0x5eec, 0x20, 0x5, 0x4e}, 0x0, &(0x7f0000002600)=<r6=>0x0, &(0x7f0000002640)=<r7=>0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000002680)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000640], 0x0, 0x0, &(0x7f0000002700)=ANY=[@ANYBLOB="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"]}, 0x291)
syz_io_uring_submit(0x0, r6, r7, &(0x7f0000002940)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x3560, 0x8000001, 0x48, 0x0, 0x56)
r9 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
tkill(r9, 0xb)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)

1m54.494504908s ago: executing program 5 (id=1070):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r0, 0x0, 0x40804)
accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000003c0)=0x10)
prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESDEC, @ANYRESHEX])
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000240)={0x3, 0x2})
sched_setaffinity(r1, 0x8, &(0x7f00000007c0)=0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1m54.18826478s ago: executing program 5 (id=1072):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xefff}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa40000000000", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94)
r4 = socket$kcm(0x29, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0xfffffd63}}, 0x40)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/133}, 0x20)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r0})

1m52.065098222s ago: executing program 5 (id=1075):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x121, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0xf040}, 0x0)

1m51.96533616s ago: executing program 5 (id=1078):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%pK    \x00'}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0), 0xc)

1m51.822965871s ago: executing program 5 (id=1081):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a4bfda84"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x4008000)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1401, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004094)

1m51.401380143s ago: executing program 5 (id=1085):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

1m36.282234465s ago: executing program 34 (id=1085):
openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='0', 0x1)
openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$cdc_ncm(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003020000082505a1a44033eb7b7f010902740002010890020904000001020d00000524060001052400ffff0d240f0100000000000000000006391addff000c241ba10210008500efff0808241c7f000701000424012e0f2ba767a98cb46c"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0})
syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0)
unshare(0x42000000)

54.458960656s ago: executing program 0 (id=1434):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000001000852000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300009d000000850000000c000000b700000000000000"], &(0x7f0000000840)='GPL\x00', 0x3, 0xf2, &(0x7f0000000880)=""/242}, 0x94)

54.188030442s ago: executing program 0 (id=1436):
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04ff"], 0x4)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x58e, &(0x7f0000000100)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@test_dummy_encryption}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000840)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000d80)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000e00)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000e80), 0x651, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000f00)=0x6)
r3 = syz_open_dev$dri(&(0x7f0000000f40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000f80)={0x200, 0x200, 0x20})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000001080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)

53.366147175s ago: executing program 0 (id=1447):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x121000, 0x800, 0x8, 0x1}, 0x20)

52.949496189s ago: executing program 0 (id=1449):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000005540)=ANY=[@ANYBLOB="280000002f0007012bbd7000fedbdf25067c00000c000180080063007f0000010800"], 0x28}}, 0x4008030)

52.804948202s ago: executing program 0 (id=1450):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r4 = syz_open_procfs(0x0, 0x0)
pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x1)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000000)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000019200)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000019240)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba", 0x15)
syz_emit_vhci(0x0, 0x0)
nanosleep(0x0, 0x0)
setns(0xc9, 0x0)
r8 = socket(0x1f, 0x5, 0x8)
setsockopt$sock_timeval(r8, 0x1, 0x15, 0x0, 0x0)
bind(r8, &(0x7f0000019340)=@generic={0x1f, "aaaaaaaaaa000100"}, 0x80)
connect(r8, &(0x7f00000193c0)=@generic={0x1f, "0102030405060100"}, 0x80)
close_range(r5, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x8e8, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11, 0x1}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[{[{}, {}, {0x0, 0x1}], [], 0x9}, {[], [{}, {}, {}, {}, {}, {0x1}, {0x0, 0x8}]}, {}, {}, {[], [{}, {0xffffffff}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {0x3}]}, {[], [{}, {}, {0x0, 0x1}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}]}, {}, {[{0x0, 0x2}]}], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98)

49.658330548s ago: executing program 0 (id=1458):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x4, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002740)={0x0, 0xffffffff}, 0x10}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

34.364346308s ago: executing program 35 (id=1458):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bpf$PROG_LOAD(0x5, &(0x7f0000002140)={0x4, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002740)={0x0, 0xffffffff}, 0x10}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4c014}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002e40)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)

9.86564967s ago: executing program 7 (id=1635):
capset(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000})
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

9.365671505s ago: executing program 1 (id=1637):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0xffffffff, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x1, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0x2, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
pwritev(r2, &(0x7f0000000500)=[{&(0x7f00000002c0)="d4cc", 0x2}], 0x1, 0x2, 0x4a49)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

9.27730041s ago: executing program 7 (id=1639):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x420c0}, 0x0)

8.531669971s ago: executing program 7 (id=1640):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x1c, 0x18, &(0x7f0000001880)=ANY=[@ANYBLOB="1800000001000000000000000700000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000014000000b7100000000000048500000083000000bf09000000000000550901000000288b5f73c8bd087b1b23c9bd7a8d0ea0afab97dda7c4939b84be1dfd005b207a072281fb88a20b2d38a43805fb30147ba00000001ed291"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94)

8.087011717s ago: executing program 7 (id=1643):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000bc0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000c00)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000c40)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000cc0)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000d40), 0x651, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f00000000c0)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000001c0)={0x33}, 0x8)
io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0, 0x30}])
utimes(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={{}, {0x0, 0xea60}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0)

8.037430393s ago: executing program 1 (id=1644):
r0 = socket$inet(0x2, 0x5, 0x0)
close(0x3)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000000)='espintcp', 0x8)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0xa0d, 0x0, 0x0)

7.922251892s ago: executing program 6 (id=1646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

7.738026018s ago: executing program 6 (id=1648):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d80)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002f00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a0006"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000)

7.602146272s ago: executing program 8 (id=1650):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000800)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000a00)={0xfff, 0x0, 0x3, 0x14, 0x4})
r4 = syz_open_dev$dvb_demux(&(0x7f0000000a40), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000a80)={0x1, 0x1, 0x3, 0x4, 0x4})
ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0)

7.569508939s ago: executing program 6 (id=1651):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="8c", 0x1}, {&(0x7f00000000c0)='j', 0x1}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8880b870dffe)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

7.539999247s ago: executing program 1 (id=1652):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/versions\x00', 0x1, 0x0)
write(r0, &(0x7f0000000380)=' ', 0x1)

6.708870645s ago: executing program 1 (id=1654):
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000002d00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8], 0x0)
r0 = syz_open_dev$audion(&(0x7f0000002d40), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0)

6.62204041s ago: executing program 8 (id=1655):
r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="4010057f00fa1f00000000"], 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x1)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004051}, 0x80)
clock_gettime(0x2, &(0x7f0000000b00))
r4 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000e00)={0x2020}, 0x2020)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = creat(&(0x7f0000002e40)='./file0\x00', 0xecf86c37d53049cc)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00), 0x0, &(0x7f0000002f40)=ANY=[])
syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000003000)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r7, &(0x7f0000003080)="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", 0x2000, &(0x7f0000005080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000005100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000005140)=0x1a0000)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000051c0)=0x1, 0x4)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000005200)={0x0, 0x0, &(0x7f0000005240)={&(0x7f0000005280)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f00000000c0))

6.483056494s ago: executing program 2 (id=1656):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x1, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000540)=@framed={{}, [@generic={0x79, 0xa, 0x0, 0xfffffff0}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.252801652s ago: executing program 2 (id=1657):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x22)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000300), 0x0}, 0x20)

6.041608141s ago: executing program 2 (id=1658):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

5.863112362s ago: executing program 7 (id=1659):
unshare(0x64020800)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, &(0x7f0000000080)={[{@commit}]}, 0x7, 0x4f7, &(0x7f00000000c0)="$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")
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
r1 = socket(0x11, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getflags(r1, 0xb)

5.466261913s ago: executing program 6 (id=1660):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x141000, 0x100)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000240)='./bus\x00', 0x0, 0x341488, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='1', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x1a9ae43988baf4a2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f0000000540)={0x2201000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x0], 0x2}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6)

5.425195242s ago: executing program 2 (id=1661):
read$msr(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x2000084c, &(0x7f00000003c0)=ANY=[], 0x81, 0x14fc, &(0x7f0000000400)="$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")
syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001940)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000001980))
syz_mount_image$msdos(&(0x7f0000051e80), &(0x7f0000051ec0)='.\x00', 0x1a5a439, &(0x7f0000051f00)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYBLOB="368c05887fde699cd725e1d1136ff48333ebc806d812d6bfc38173e7", @ANYRES32, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="37b57cfa7d012134000205004f49a0f95b88671b8e9149556e5ff3c7012f7856b6557bae1d1d61efea623114a0b4b52f68387d2040dd08c4aa753b596ede3f3d637f96752310a389efcd8cf335ca9dbbbc10bda7a16342968c9ab4fd1ac65da604cd9b42d6d0dc0e895e0b2f42822d1b342f88a8d607008d20b22b776a70a07a2c53fc32be094c857279c58542b176bf316fbfbd808da687b44a8b21d23cc2f80050f8fd457f5a5595226d2008bcded226ab2e75d00ab5592daa23e83be04c2b370af460ae93b7efc32bf174830779058ad75290b9abb59be5f8859021e651c1d481f2288249ae7b385a9c40929cae3fa5a6f142cd057ebdbc000000e34db2d14a6458499de0819d89f570a72fee0dd8cf744e0daf8f31b1d8edda87296ca7632e1e6e23", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000053100))
rename(&(0x7f0000001a80)='./bus/file0\x00', 0x0)

5.31276439s ago: executing program 7 (id=1662):
syz_usb_connect(0x0, 0x2b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000402e0c20070001000000010902190001010080320904000001ff0000000705810340"], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000008c0)='./dev\x00', &(0x7f0000000900)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/ttyUSB0\x00', 0x2, 0x0)

3.590765511s ago: executing program 1 (id=1663):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x420c0}, 0x0)

2.317784344s ago: executing program 2 (id=1664):
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = dup3(r1, r0, 0x0)
read$FUSE(r2, &(0x7f0000003100)={0x2020}, 0x2020)

2.212793588s ago: executing program 8 (id=1665):
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x800)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x7, 0x101}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000800)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000880)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000900), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000940), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x6)
landlock_restrict_self(0xffffffffffffffff, 0x1)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000a00)={0xfff, 0x0, 0x3, 0x14, 0x4})
r4 = syz_open_dev$dvb_demux(&(0x7f0000000a40), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000a80)={0x1, 0x1, 0x3, 0x4, 0x4})
ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x4, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$random(0xffffffffffffff9c, 0x0, 0x400, 0x0)

2.187278418s ago: executing program 6 (id=1666):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8002, &(0x7f0000000500)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@oldalloc}, {@noload}, {@user_xattr}, {@errors_continue}, {@noinit_itable}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x47f, &(0x7f0000001080)="$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")
openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x200, 0x82)
dup(r1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)

2.047237568s ago: executing program 1 (id=1667):
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
getpgrp(0xffffffffffffffff)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000080)=0x33, 0x8)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000000100), 0xfeb5, 0x0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000140)=""/62, 0xfeb5, 0x10120, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1, 0x1, 0x1, 0x0, 0x0)

1.191659565s ago: executing program 8 (id=1668):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, 0x0, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x22)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000300), 0x0}, 0x20)

1.003503085s ago: executing program 6 (id=1669):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]})
setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001})

929.10843ms ago: executing program 2 (id=1670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000020900020073797a310000000008000a40fffffffc0900010073797a310000000008000540000000242c00128014000180090001006c617374000000000400028014ccff40a7000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0)

676.800378ms ago: executing program 8 (id=1671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010)
sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

0s ago: executing program 8 (id=1672):
unshare(0x64020800)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000200, &(0x7f0000000080)={[{@commit}]}, 0x7, 0x4f7, &(0x7f00000000c0)="$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")
prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff)
syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000680)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000006c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x11, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getflags(r1, 0xb)

kernel console output (not intermixed with test programs):

67295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.691410][   T32] audit: type=1326 audit(1792876977.009:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.732871][   T32] audit: type=1326 audit(1792876977.039:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.732921][   T32] audit: type=1326 audit(1792876977.039:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.745257][   T32] audit: type=1326 audit(1792876977.039:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.793368][   T32] audit: type=1326 audit(1792876977.089:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56bd9f559 code=0x7ffc0000
[  420.793418][   T32] audit: type=1326 audit(1792876977.089:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff56bd9f2c2 code=0x7ffc0000
[  420.793454][   T32] audit: type=1326 audit(1792876977.089:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff56bd9f357 code=0x7ffc0000
[  420.793490][   T32] audit: type=1326 audit(1792876977.089:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9471 comm="syz.6.828" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff56bd5c251 code=0x7ffc0000
[  420.992337][ T9476] loop6: detected capacity change from 0 to 2048
[  421.008268][ T5657] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.027265][ T9476] udf: Unknown parameter 'exfat'
[  421.600910][ T5744] libceph: connect (1)[c::]:6789 error -101
[  421.601075][ T5744] libceph: mon0 (1)[c::]:6789 connect error
[  421.625167][ T9487] ceph: No mds server is up or the cluster is laggy
[  421.997652][  T995] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  422.168660][  T995] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  422.180302][  T995] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  422.180328][  T995] usb 1-1: config 0 has no interface number 0
[  422.180366][  T995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  422.180389][  T995] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  422.180428][  T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  422.222266][  T995] usb 1-1: config 0 descriptor??
[  422.226218][ T9496] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  422.249111][  T995] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  422.404562][ T9500] loop6: detected capacity change from 0 to 256
[  422.409053][ T9500] vfat: Unknown parameter 'utfÀ£êþIÜ`hëž8'
[  422.830796][ T9505] netlink: 56 bytes leftover after parsing attributes in process `syz.6.837'.
[  422.881449][ T9505] loop6: detected capacity change from 0 to 1024
[  423.564779][ T9503] IPVS: Scheduler module ip_vs_mh not found
[  423.583329][ T9505] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  423.604291][ T9505] EXT4-fs error (device loop6): ext4_map_blocks:951: inode #3: block 1: comm syz.6.837: lblock 1 mapped to illegal pblock 1 (length 1)
[  423.604333][ T9505] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  423.604637][ T9505] EXT4-fs error (device loop6): ext4_acquire_dquot:7120: comm syz.6.837: Failed to acquire dquot type 0
[  423.604662][ T9505] loop6: lost filesystem error report for type 5 error -117
[  423.605330][ T9505] EXT4-fs error (device loop6): ext4_free_blocks:6717: comm syz.6.837: Freeing blocks not in datazone - block = 0, count = 4096
[  423.605360][ T9505] loop6: lost filesystem error report for type 5 error -117
[  423.605801][ T9505] EXT4-fs error (device loop6): ext4_read_inode_bitmap:141: comm syz.6.837: Invalid inode bitmap blk 0 in block_group 0
[  423.605829][ T9505] loop6: lost filesystem error report for type 5 error -117
[  423.606053][ T9505] EXT4-fs error (device loop6) in ext4_free_inode:363: Corrupt filesystem
[  423.606072][ T9505] loop6: lost filesystem error report for type 5 error -117
[  423.606295][ T9505] EXT4-fs (loop6): 1 orphan inode deleted
[  423.608122][ T9505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  423.760072][   T31] usb 1-1: USB disconnect, device number 19
[  423.760161][    C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  423.815247][ T3687] EXT4-fs error (device loop6): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1)
[  423.817592][ T3687] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:13: Failed to release dquot type 0
[  424.070856][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.172869][ T9511] loop5: detected capacity change from 0 to 256
[  424.173887][ T9511] vfat: Unknown parameter 'utfÀ£êþIÜ`hëž8'
[  424.458448][ T9496] afs: Unknown parameter 'measureetap'
[  424.671134][ T9521] netlink: 56 bytes leftover after parsing attributes in process `syz.5.838'.
[  425.293493][ T9514] loop1: detected capacity change from 0 to 2048
[  425.359042][ T9514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  425.385504][   T32] kauditd_printk_skb: 129 callbacks suppressed
[  425.385522][   T32] audit: type=1800 audit(1792876981.699:206): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.839" name="file1" dev="loop1" ino=1346 res=0 errno=-22
[  425.465512][ T9516] loop6: detected capacity change from 0 to 32768
[  425.513205][ T9516] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  425.693067][ T9534] loop5: detected capacity change from 0 to 256
[  425.740309][ T9516] XFS (loop6): Ending clean mount
[  426.006751][ T8696] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  427.177345][   T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  427.348783][   T10] usb 1-1: New USB device found: idVendor=056a, idProduct=033b, bcdDevice=0.00
[  427.349797][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  427.349841][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.817050][   T10] wacom 0003:056A:033B.0006: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  427.843055][   T10] wacom 0003:056A:033B.0006: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[  427.865710][   T10] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0006/input/input21
[  427.998391][  T995] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  428.135996][ T9549] netlink: 24 bytes leftover after parsing attributes in process `syz.6.844'.
[  428.136034][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.844'.
[  428.136048][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.844'.
[  428.273728][   T31] usb 1-1: USB disconnect, device number 20
[  430.357285][ T9570] IPVS: Scheduler module ip_vs_mh not found
[  430.632076][ T9576] loop6: detected capacity change from 0 to 2048
[  430.700702][ T9576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  430.757801][   T31] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  430.764120][   T32] audit: type=1800 audit(1792876987.079:207): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.853" name="file1" dev="loop6" ino=1346 res=0 errno=-22
[  430.908540][   T31] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  430.909715][   T31] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  430.909796][   T31] usb 3-1: config 0 has no interface number 0
[  430.909837][   T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  430.909863][   T31] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  430.909903][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.912746][   T31] usb 3-1: config 0 descriptor??
[  430.914420][ T9574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  431.001423][   T31] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  431.126468][   T31] usb 3-1: USB disconnect, device number 16
[  431.126573][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  431.393911][ T9569] loop0: detected capacity change from 0 to 32768
[  432.414830][ T9569] lbmIODone: I/O error in JFS log
[  432.414849][ T9569] *** Log Format Error ! ***
[  432.415396][ T9569] lmLogInit: exit(-22)
[  432.415440][ T9569] lmLogOpen: exit(-22)
[  434.563967][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.6.857'.
[  434.564308][ T9608] FAULT_INJECTION: forcing a failure.
[  434.564308][ T9608] name failslab, interval 1, probability 0, space 0, times 0
[  434.564340][ T9608] CPU: 0 UID: 0 PID: 9608 Comm: syz.6.857 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  434.564367][ T9608] Tainted: [L]=SOFTLOCKUP
[  434.564373][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  434.564389][ T9608] Call Trace:
[  434.564397][ T9608]  <TASK>
[  434.564405][ T9608]  dump_stack_lvl+0xe8/0x150
[  434.564441][ T9608]  should_fail_ex+0x3eb/0x540
[  434.564468][ T9608]  should_failslab+0xa8/0x100
[  434.564504][ T9608]  __kmalloc_cache_noprof+0x9e/0x600
[  434.564526][ T9608]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  434.564558][ T9608]  ? __request_module+0x2d0/0x630
[  434.564597][ T9608]  ? __request_module+0x2d0/0x630
[  434.564623][ T9608]  __request_module+0x2d0/0x630
[  434.564649][ T9608]  ? __pfx___request_module+0x10/0x10
[  434.564666][ T9608]  ? __up_read+0x29c/0x930
[  434.564696][ T9608]  ? crypto_alg_lookup+0x3d3/0x450
[  434.564737][ T9608]  crypto_alg_mod_lookup+0xa2/0x5d0
[  434.564766][ T9608]  crypto_alloc_tfm_node+0x135/0x3e0
[  434.564798][ T9608]  esp_init_state+0x3b6/0x1220
[  434.564899][ T9608]  ? do_syscall_64+0x166/0x520
[  434.564919][ T9608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.564943][ T9608]  ? __lock_acquire+0x747/0x2de0
[  434.564971][ T9608]  ? __pfx_esp_init_state+0x10/0x10
[  434.565029][ T9608]  ? __xfrm_init_state+0x745/0x1320
[  434.565092][ T9608]  __xfrm_init_state+0x9dd/0x1320
[  434.565115][ T9608]  ? __xfrm_init_state+0x745/0x1320
[  434.565140][ T9608]  xfrm_add_sa+0x2bcf/0x3c30
[  434.565206][ T9608]  ? __pfx_xfrm_add_sa+0x10/0x10
[  434.565224][ T9608]  ? apparmor_capable+0x126/0x170
[  434.565253][ T9608]  ? __nla_parse+0x40/0x60
[  434.565283][ T9608]  xfrm_user_rcv_msg+0x7a8/0xf30
[  434.565307][ T9608]  ? look_up_lock_class+0x57/0x110
[  434.565329][ T9608]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  434.565383][ T9608]  ? __mutex_trylock_common+0x15f/0x270
[  434.565415][ T9608]  ? __pfx___mutex_trylock_common+0x10/0x10
[  434.565447][ T9608]  ? rcu_is_watching+0x16/0xb0
[  434.565477][ T9608]  ? trace_contention_end+0x3d/0x140
[  434.565513][ T9608]  netlink_rcv_skb+0x226/0x4a0
[  434.565539][ T9608]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  434.565558][ T9608]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  434.565599][ T9608]  ? netlink_deliver_tap+0x2e/0x1b0
[  434.565623][ T9608]  ? netlink_deliver_tap+0x2e/0x1b0
[  434.565650][ T9608]  xfrm_netlink_rcv+0x79/0x90
[  434.565672][ T9608]  netlink_unicast+0x8ef/0xa80
[  434.565714][ T9608]  netlink_sendmsg+0x7f0/0xb20
[  434.565747][ T9608]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.565777][ T9608]  ? aa_sock_msg_perm+0x144/0x210
[  434.565811][ T9608]  ? apparmor_socket_sendmsg+0x98/0x360
[  434.565839][ T9608]  ? __pfx_netlink_sendmsg+0x10/0x10
[  434.565872][ T9608]  sock_sendmsg_nosec+0x14e/0x190
[  434.565901][ T9608]  ____sys_sendmsg+0x54e/0x850
[  434.565927][ T9608]  ? __pfx_____sys_sendmsg+0x10/0x10
[  434.565956][ T9608]  ? import_iovec+0x73/0xa0
[  434.565983][ T9608]  ___sys_sendmsg+0x2a5/0x360
[  434.565999][ T9608]  ? __lock_acquire+0x747/0x2de0
[  434.566030][ T9608]  ? __pfx____sys_sendmsg+0x10/0x10
[  434.566052][ T9608]  ? futex_wake+0x51b/0x5f0
[  434.566116][ T9608]  ? __fget_files+0x3a2/0x420
[  434.566139][ T9608]  ? __fget_files+0x2a/0x420
[  434.566173][ T9608]  __x64_sys_sendmsg+0x1b1/0x290
[  434.566196][ T9608]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  434.566239][ T9608]  do_syscall_64+0x166/0x520
[  434.566259][ T9608]  ? trace_irq_disable+0x3b/0x140
[  434.566284][ T9608]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.566303][ T9608]  ? clear_bhb_loop+0x70/0xc0
[  434.566328][ T9608]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  434.566354][ T9608] RIP: 0033:0x7ff56bd9f559
[  434.566373][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.566391][ T9608] RSP: 002b:00007ff56cc13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  434.566413][ T9608] RAX: ffffffffffffffda RBX: 00007ff56c025fa0 RCX: 00007ff56bd9f559
[  434.566427][ T9608] RDX: 00000000000020d4 RSI: 0000200000000000 RDI: 0000000000000008
[  434.566440][ T9608] RBP: 00007ff56be36b20 R08: 0000000000000000 R09: 0000000000000000
[  434.566453][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.566465][ T9608] R13: 00007ff56c026038 R14: 00007ff56c025fa0 R15: 00007fffe97f5ec8
[  434.566500][ T9608]  </TASK>
[  435.199298][ T9615] loop1: detected capacity change from 0 to 32768
[  435.351992][ T9615] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.862 (9615)
[  435.452668][ T9622] sctp: [Deprecated]: syz.5.858 (pid 9622) Use of struct sctp_assoc_value in delayed_ack socket option.
[  435.452668][ T9622] Use struct sctp_sack_info instead
[  435.609714][ T9620] loop2: detected capacity change from 0 to 32768
[  435.622139][ T9615] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  435.622184][ T9615] BTRFS info (device loop1): using blake2b checksum algorithm
[  435.984095][ T9620] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.596437][ T9620] XFS (loop2): Ending clean mount
[  436.671434][ T9620] XFS (loop2): Quotacheck needed: Please wait.
[  436.813834][ T9615] BTRFS info (device loop1): enabling ssd optimizations
[  436.813859][ T9615] BTRFS info (device loop1): turning on async discard
[  436.813875][ T9615] BTRFS info (device loop1): enabling free space tree
[  437.345489][   T32] audit: type=1804 audit(1792876993.659:208): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.862" name="/newroot/180/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  438.208362][ T9620] XFS (loop2): Quotacheck: Done.
[  438.355822][ T5636] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  438.538578][ T9650] IPVS: Scheduler module ip_vs_mh not found
[  438.775491][ T9661] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  438.797326][ T9661] netlink: 140 bytes leftover after parsing attributes in process `syz.5.868'.
[  438.975396][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.5.868'.
[  439.170018][ T9667] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  439.173692][ T9667] team0: Device macvlan2 is already an upper device of the team interface
[  439.642316][ T9664] loop6: detected capacity change from 0 to 4096
[  439.801581][ T9664] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  439.856777][ T5657] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  439.955061][ T9672] loop2: detected capacity change from 0 to 2048
[  440.048210][ T9672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  440.064920][ T9664] ntfs3(loop6): ino=19, mi_enum_attr
[  440.065338][ T9664] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  440.113334][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  440.113394][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  440.134848][   T32] audit: type=1800 audit(1792876996.449:209): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.871" name="file1" dev="loop2" ino=1346 res=0 errno=-22
[  440.266550][ T9664] ntfs3(loop6): ino=1a, mi_enum_attr
[  440.266788][ T9664] ntfs3(loop6): ino=1a, mi_enum_attr
[  440.266808][ T9664] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  440.609798][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'.
[  442.044297][ T9697] ceph: No mds server is up or the cluster is laggy
[  442.047901][ T5767] libceph: connect (1)[c::]:6789 error -101
[  442.048399][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  442.321704][ T5767] libceph: connect (1)[c::]:6789 error -101
[  442.321878][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  442.937281][ T5767] libceph: connect (1)[c::]:6789 error -101
[  442.938273][ T5767] libceph: mon0 (1)[c::]:6789 connect error
[  444.050885][   T10] libceph: connect (1)[c::]:6789 error -101
[  444.067482][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  444.963010][ T9704] loop2: detected capacity change from 0 to 2048
[  445.003123][ T5744] libceph: connect (1)[c::]:6789 error -101
[  445.003297][ T5744] libceph: mon0 (1)[c::]:6789 connect error
[  445.261594][ T5744] libceph: connect (1)[c::]:6789 error -101
[  445.261766][ T5744] libceph: mon0 (1)[c::]:6789 connect error
[  445.377487][ T9707] loop0: detected capacity change from 0 to 32768
[  445.387380][ T9707] xfs: Deprecated parameter 'noattr2'
[  445.387401][ T9707] XFS: noattr2 mount option is deprecated.
[  445.460611][ T9704]  loop2: p1 < > p3
[  445.482110][ T9704] loop2: p3 size 134217728 extends beyond EOD, truncated
[  445.501352][ T9707] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  445.585076][ T9707] XFS (loop0): Ending clean mount
[  445.725986][ T8931] udevd[8931]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  445.740860][ T8919] udevd[8919]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  445.964218][ T5638] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  446.138670][ T9719] loop6: detected capacity change from 0 to 512
[  446.145277][ T9719] EXT4-fs: Ignoring removed nobh option
[  446.593926][ T9729] IPVS: Scheduler module ip_vs_mh not found
[  446.685265][ T9719] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  446.805089][ T9719] EXT4-fs error (device loop6): ext4_do_update_inode:6701: inode #3: comm syz.6.877: corrupted inode contents
[  446.805214][ T9719] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  446.806079][ T9719] EXT4-fs (loop6): Remounting filesystem read-only
[  446.809265][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  446.809286][    C1] EXT4-fs (loop6): initial error at time 1792877003: ext4_do_update_inode:6701: inode 3
[  446.809317][    C1] EXT4-fs (loop6): last error at time 1792877003: ext4_do_update_inode:6701: inode 3
[  446.946843][ T9719] Quota error (device loop6): write_blk: dquota write failed
[  446.946921][ T9719] Quota error (device loop6): qtree_write_dquot: Error -30 occurred while creating quota
[  446.970005][ T9719] EXT4-fs (loop6): 1 truncate cleaned up
[  446.970902][ T9719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.970967][ T9719] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  447.014922][ T9736] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:21
[  447.025079][ T9736] IPVS: ovf: TCP 127.0.0.1:21 - no destination available
[  448.400092][ T9719] netlink: 32 bytes leftover after parsing attributes in process `syz.6.877'.
[  448.565387][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  448.775958][ T9745] loop0: detected capacity change from 0 to 32768
[  448.806673][ T9745] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  448.875167][ T9745] XFS (loop0): Ending clean mount
[  449.060286][ T5638] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  449.553043][ T9781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  449.931400][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  450.363661][ T9824] pimreg: tun_chr_ioctl cmd 1074025677
[  450.363772][ T9824] pimreg: linktype set to 768
[  451.110660][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'.
[  451.552256][ T9872] netlink: 108 bytes leftover after parsing attributes in process `syz.0.943'.
[  451.554981][ T9872] netlink: 108 bytes leftover after parsing attributes in process `syz.0.943'.
[  451.668965][ T9877] netlink: 'syz.5.944': attribute type 1 has an invalid length.
[  451.668989][ T9877] nbd: must specify at least one socket
[  452.235088][ T9907] netlink: 'syz.6.960': attribute type 3 has an invalid length.
[  452.492227][ T9917] netlink: 'syz.5.965': attribute type 19 has an invalid length.
[  452.492250][ T9917] netlink: 'syz.5.965': attribute type 28 has an invalid length.
[  452.492263][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.965'.
[  452.861582][ T9935] xt_hashlimit: max too large, truncated to 1048576
[  453.800867][ T9988] loop5: detected capacity change from 0 to 512
[  453.804110][ T9988] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  453.845846][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1002'.
[  453.971279][ T9988] syz.5.1001: attempt to access beyond end of device
[  453.971279][ T9988] loop5: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512
[  453.973306][ T9988] syz.5.1001: attempt to access beyond end of device
[  453.973306][ T9988] loop5: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512
[  453.973547][   T32] audit: type=1800 audit(1792877010.289:210): pid=9988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1001" name="file2" dev="loop5" ino=23 res=0 errno=-5
[  454.012859][T10002] Bluetooth: MGMT ver 1.23
[  455.204675][   T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  455.281136][   T31] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  455.395939][T10027] fido_id[10027]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  455.460548][ T9999] loop6: detected capacity change from 0 to 32768
[  455.521840][ T9999] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  455.637504][ T9999] XFS (loop6): Ending clean mount
[  455.670290][T10048] loop5: detected capacity change from 0 to 128
[  455.671159][T10048] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  455.694113][T10048] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  455.706209][ T9999] XFS (loop6): Quotacheck needed: Please wait.
[  455.730065][T10048] FAT-fs (loop5): error, parent dir link count too low (2)
[  455.730102][T10048] FAT-fs (loop5): Filesystem has been set read-only
[  455.849335][ T5992] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  455.960372][T10050] loop7: detected capacity change from 0 to 16384
[  455.961301][ T9999] XFS (loop6): Quotacheck: Done.
[  456.140748][ T8696] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  456.173730][    C0] I/O error, dev loop7, sector 15792 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2
[  456.174350][    C0] I/O error, dev loop7, sector 15792 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  456.174655][    C0] Buffer I/O error on dev loop7, logical block 1974, async page read
[  456.175881][    C0] I/O error, dev loop7, sector 3584 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  456.175977][    C0] I/O error, dev loop7, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  456.181135][T10052] loop7: detected capacity change from 16384 to 0
[  457.630245][T10095] smbdirect: ib_dev[rxe0] renamed to [syz1]
[  458.440945][T10126] tap0: tun_chr_ioctl cmd 1074025677
[  458.441036][T10126] tap0: linktype set to 776
[  458.444349][T10126] tap0: tun_chr_ioctl cmd 1074812118
[  459.922969][T10135] loop2: detected capacity change from 0 to 512
[  459.952089][T10135] EXT4-fs: Ignoring removed nobh option
[  460.106778][T10135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  460.106896][T10135] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  460.974280][T10147] loop1: detected capacity change from 0 to 4096
[  461.040050][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.091126][T10147] ntfs3(loop1): ino=9, mi_enum_attr
[  461.091149][T10147] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  461.094916][T10147] ntfs3(loop1): ino=9, mi_enum_attr
[  461.094987][T10147] ntfs3(loop1): ino=b, mi_enum_attr
[  461.095035][T10147] ntfs3(loop1): Failed to load $Extend (-22).
[  461.095044][T10147] ntfs3(loop1): Failed to initialize $Extend.
[  461.235572][T10156] ip_tables: iptables: counters copy to user failed while replacing table
[  461.275158][T10156] tipc: New replicast peer: 172.20.20.187
[  461.298169][T10156] tipc: Enabled bearer <udp:syz0>, priority 10
[  461.441817][T10133] loop6: detected capacity change from 0 to 32768
[  461.477821][T10133] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  461.584760][T10133] XFS (loop6): Ending clean mount
[  461.608905][T10170] loop2: detected capacity change from 0 to 4096
[  461.692717][ T8696] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  461.724950][T10176] loop5: detected capacity change from 0 to 512
[  461.727193][T10176] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  461.727221][T10176] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  461.837235][T10176] EXT4-fs (loop5): 1 truncate cleaned up
[  461.919298][T10176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  462.064555][T10176] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1058: corrupted xattr entries
[  462.142936][T10176] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:73: inode #15: comm syz.5.1058: corrupt xattr in inline inode
[  462.370654][T10176] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1058: corrupted xattr entries
[  462.489560][T10189] netlink: 15678 bytes leftover after parsing attributes in process `syz.1.1062'.
[  462.523724][T10180] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.1058: corrupted xattr entries
[  462.567700][   T32] audit: type=1800 audit(1792877018.879:211): pid=10182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=35 res=0 errno=-22
[  462.726295][T10187] ntfs3(loop2): ino=1f, mi_enum_attr
[  462.801383][T10186] loop6: detected capacity change from 0 to 32768
[  462.837467][T10186] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  462.857189][ T5992] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.954060][T10186] XFS (loop6): Ending clean mount
[  463.020734][ T8696] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  463.261412][T10205] syz_tun: entered allmulticast mode
[  463.354599][T10204] syz_tun: left allmulticast mode
[  466.292899][T10249] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  466.485882][T10252] loop0: detected capacity change from 0 to 256
[  467.493527][T10266] loop1: detected capacity change from 0 to 1024
[  467.538427][T10266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.587720][ T5373] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  467.757787][ T5373] usb 6-1: Using ep0 maxpacket: 8
[  467.760169][ T5373] usb 6-1: unable to get BOS descriptor or descriptor too short
[  467.760220][ T5373] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=33.40
[  467.833781][ T5373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  467.833808][ T5373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  467.833850][ T5373] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  467.873462][ T5373] usb 6-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127
[  467.873488][ T5373] usb 6-1: Product: syz
[  467.873502][ T5373] usb 6-1: Manufacturer: syz
[  467.873516][ T5373] usb 6-1: SerialNumber: syz
[  468.218183][ T5657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.301792][T10259] rxe_eth0 speed is unknown, defaulting to 1000
[  469.451054][T10284] loop0: detected capacity change from 0 to 40427
[  469.508528][T10284] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  469.508546][T10284] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  469.510583][T10284] F2FS-fs (loop0): build fault injection rate: 17008
[  469.510635][T10284] F2FS-fs (loop0): build fault injection type: 0x1f8
[  469.566118][T10284] F2FS-fs (loop0): invalid crc value
[  469.637654][  T995] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  469.757427][T10258] rxe_eth0 speed is unknown, defaulting to 1000
[  469.787688][  T995] usb 7-1: Using ep0 maxpacket: 32
[  469.792661][T10305] FAULT_INJECTION: forcing a failure.
[  469.792661][T10305] name failslab, interval 1, probability 0, space 0, times 0
[  469.792693][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.1.1105 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  469.792720][T10305] Tainted: [L]=SOFTLOCKUP
[  469.792728][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  469.792739][T10305] Call Trace:
[  469.792746][T10305]  <TASK>
[  469.792755][T10305]  dump_stack_lvl+0xe8/0x150
[  469.792793][T10305]  should_fail_ex+0x3eb/0x540
[  469.792820][T10305]  should_failslab+0xa8/0x100
[  469.792849][T10305]  ? __proc_create+0x55d/0xad0
[  469.792873][T10305]  kmem_cache_alloc_noprof+0x9c/0x600
[  469.792899][T10305]  ? __proc_create+0x55d/0xad0
[  469.792928][T10305]  __proc_create+0x55d/0xad0
[  469.792957][T10305]  ? __pfx___proc_create+0x10/0x10
[  469.792985][T10305]  ? _raw_write_unlock+0x28/0x50
[  469.793004][T10305]  ? proc_register+0x5d5/0x7f0
[  469.793029][T10305]  proc_create_data+0xa5/0x190
[  469.793059][T10305]  cache_register_net+0x307/0x4c0
[  469.793203][T10305]  unix_gid_cache_create+0x73/0x100
[  469.793254][T10305]  sunrpc_init_net+0x67/0x180
[  469.793275][T10305]  ops_init+0x35d/0x5d0
[  469.793374][T10305]  setup_net+0x118/0x350
[  469.793404][T10305]  ? __pfx_setup_net+0x10/0x10
[  469.793432][T10305]  ? down_read_killable+0x1b6/0x3b0
[  469.793470][T10305]  ? __ns_common_init+0x384/0x590
[  469.793509][T10305]  copy_net_ns+0x536/0x770
[  469.793540][T10305]  create_new_namespaces+0x3f0/0x6b0
[  469.793573][T10305]  ? security_capable+0x7e/0x2c0
[  469.793607][T10305]  unshare_nsproxy_namespaces+0x144/0x190
[  469.793641][T10305]  ksys_unshare+0x532/0x890
[  469.793673][T10305]  ? __pfx_ksys_unshare+0x10/0x10
[  469.793704][T10305]  ? rcu_is_watching+0x16/0xb0
[  469.793745][T10305]  __x64_sys_unshare+0x38/0x50
[  469.793763][T10305]  do_syscall_64+0x166/0x520
[  469.793782][T10305]  ? trace_irq_disable+0x3b/0x140
[  469.793808][T10305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.793828][T10305]  ? clear_bhb_loop+0x70/0xc0
[  469.793851][T10305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  469.793870][T10305] RIP: 0033:0x7f3393f9f559
[  469.793890][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  469.793906][T10305] RSP: 002b:00007f3394ecd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  469.793927][T10305] RAX: ffffffffffffffda RBX: 00007f3394225fa0 RCX: 00007f3393f9f559
[  469.793942][T10305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000
[  469.793955][T10305] RBP: 00007f3394036b20 R08: 0000000000000000 R09: 0000000000000000
[  469.793967][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  469.793978][T10305] R13: 00007f3394226038 R14: 00007f3394225fa0 R15: 00007ffe36cbb0f8
[  469.794012][T10305]  </TASK>
[  469.794415][  T995] usb 7-1: unable to get BOS descriptor or descriptor too short
[  469.794458][  T995] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[  469.795695][  T995] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[  469.795720][  T995] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[  469.795739][  T995] usb 7-1: config 14 has no interface number 0
[  469.795754][  T995] usb 7-1: config 14 has no interface number 1
[  469.795836][  T995] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  469.795860][  T995] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  469.795884][  T995] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  469.795933][  T995] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  469.795958][  T995] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  469.795980][  T995] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  469.796003][  T995] usb 7-1: config 14 interface 57 has no altsetting 0
[  469.796019][  T995] usb 7-1: config 14 interface 228 has no altsetting 0
[  469.817409][  T995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.817451][  T995] usb 7-1: Product: syz
[  469.817465][  T995] usb 7-1: Manufacturer: syz
[  469.817477][  T995] usb 7-1: SerialNumber: syz
[  470.456593][  T995] legousbtower 7-1:14.57: interrupt endpoints not found
[  470.669218][T10284] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  470.710574][T10284] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  470.710835][T10284] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  470.859153][  T995] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  470.896810][  T995] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  470.993330][T10284] syz.0.1096: attempt to access beyond end of device
[  470.993330][T10284] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  471.014798][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.0.1096 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  471.014833][T10284] Tainted: [L]=SOFTLOCKUP
[  471.014840][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  471.014851][T10284] Call Trace:
[  471.014859][T10284]  <TASK>
[  471.014867][T10284]  dump_stack_lvl+0xe8/0x150
[  471.014908][T10284]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  471.014995][T10284]  f2fs_write_end_bio+0x118e/0x15d0
[  471.015034][T10284]  __submit_merged_bio+0x258/0x6a0
[  471.015051][T10284]  ? rcu_is_watching+0x16/0xb0
[  471.015070][T10284]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  471.015087][T10284]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  471.015116][T10284]  f2fs_write_data_pages+0x2a13/0x36e0
[  471.015149][T10284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.015168][T10284]  ? is_bpf_text_address+0x292/0x2b0
[  471.015180][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  471.015205][T10284]  ? stack_trace_save+0xa9/0x100
[  471.015219][T10284]  ? __pfx_stack_trace_save+0x10/0x10
[  471.015242][T10284]  ? lockdep_unlock+0x5c/0xd0
[  471.015252][T10284]  ? __lock_acquire+0x1511/0x2de0
[  471.015270][T10284]  ? irqentry_exit+0x2a0/0x9b0
[  471.015290][T10284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  471.015302][T10284]  do_writepages+0x338/0x560
[  471.015330][T10284]  ? do_raw_spin_unlock+0xf5/0x200
[  471.015344][T10284]  filemap_fdatawrite+0x1e9/0x2f0
[  471.015358][T10284]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  471.015392][T10284]  ? preempt_schedule_common+0x7f/0xd0
[  471.015403][T10284]  ? preempt_schedule_thunk+0x16/0x40
[  471.015421][T10284]  f2fs_sync_dirty_inodes+0x471/0x970
[  471.015442][T10284]  f2fs_write_checkpoint+0x860/0x24d0
[  471.015478][T10284]  f2fs_issue_checkpoint+0x424/0x6f0
[  471.015496][T10284]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  471.015508][T10284]  ? is_bpf_text_address+0x292/0x2b0
[  471.015518][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  471.015531][T10284]  ? kernel_text_address+0xa5/0xe0
[  471.015556][T10284]  ? __lock_acquire+0x747/0x2de0
[  471.015621][T10284]  ? f2fs_sync_fs+0x1f2/0x3c0
[  471.015655][T10284]  f2fs_do_shutdown+0x137/0x5c0
[  471.015675][T10284]  __f2fs_ioctl+0x5291/0xde00
[  471.015690][T10284]  ? lock_acquire+0x115/0x350
[  471.015709][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  471.015722][T10284]  ? is_bpf_text_address+0x292/0x2b0
[  471.015733][T10284]  ? is_bpf_text_address+0x26/0x2b0
[  471.015744][T10284]  ? __pfx___f2fs_ioctl+0x10/0x10
[  471.015760][T10284]  ? kernel_text_address+0xa5/0xe0
[  471.015773][T10284]  ? __kernel_text_address+0xd/0x30
[  471.015786][T10284]  ? unwind_get_return_address+0x4d/0x90
[  471.015808][T10284]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  471.015821][T10284]  ? arch_stack_walk+0xfb/0x150
[  471.015847][T10284]  ? stack_trace_save+0xa9/0x100
[  471.015860][T10284]  ? __pfx_stack_trace_save+0x10/0x10
[  471.015872][T10284]  ? kasan_save_track+0x4f/0x80
[  471.015887][T10284]  ? stack_depot_save_flags+0x33/0x810
[  471.015900][T10284]  ? __lock_acquire+0x747/0x2de0
[  471.015915][T10284]  ? kasan_save_track+0x4f/0x80
[  471.015926][T10284]  ? kasan_save_track+0x3e/0x80
[  471.015938][T10284]  ? kasan_save_free_info+0x40/0x50
[  471.015948][T10284]  ? __kasan_slab_free+0x5c/0x80
[  471.015961][T10284]  ? kfree+0x1c5/0x650
[  471.015975][T10284]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  471.015990][T10284]  ? security_file_ioctl+0xc3/0x2a0
[  471.016002][T10284]  ? __se_sys_ioctl+0x47/0x170
[  471.016016][T10284]  ? do_syscall_64+0x166/0x520
[  471.016027][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.016063][T10284]  ? kasan_quarantine_put+0xbb/0x1f0
[  471.016081][T10284]  ? tomoyo_path_number_perm+0x219/0x5f0
[  471.016095][T10284]  ? tomoyo_path_number_perm+0x219/0x5f0
[  471.016111][T10284]  ? do_vfs_ioctl+0x116f/0x1530
[  471.016128][T10284]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  471.016151][T10284]  ? do_futex+0x3e7/0x4e0
[  471.016173][T10284]  ? __fget_files+0x2a/0x420
[  471.016187][T10284]  ? __fget_files+0x2a/0x420
[  471.016199][T10284]  ? __fget_files+0x2a/0x420
[  471.016213][T10284]  ? f2fs_ioctl+0x135/0x250
[  471.016228][T10284]  ? __pfx_f2fs_ioctl+0x10/0x10
[  471.016243][T10284]  __se_sys_ioctl+0xfc/0x170
[  471.016260][T10284]  do_syscall_64+0x166/0x520
[  471.016270][T10284]  ? trace_irq_disable+0x3b/0x140
[  471.016284][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.016294][T10284]  ? clear_bhb_loop+0x70/0xc0
[  471.016307][T10284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.016317][T10284] RIP: 0033:0x7f094259f559
[  471.016329][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.016338][T10284] RSP: 002b:00007f094347a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  471.016350][T10284] RAX: ffffffffffffffda RBX: 00007f0942825fa0 RCX: 00007f094259f559
[  471.016358][T10284] RDX: 0000200000000080 RSI: 000000008004587d RDI: 0000000000000004
[  471.016365][T10284] RBP: 00007f0942636b20 R08: 0000000000000000 R09: 0000000000000000
[  471.016372][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  471.016378][T10284] R13: 00007f0942826038 R14: 00007f0942825fa0 R15: 00007ffdba220028
[  471.016396][T10284]  </TASK>
[  471.288197][T10284] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  471.840148][ T5744] usb 7-1: USB disconnect, device number 4
[  471.900109][ T5744] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected
[  473.127068][T10339] loop1: detected capacity change from 0 to 256
[  473.167867][ T5373] cdc_ncm 6-1:1.0: skipping garbage
[  473.167882][ T5373] cdc_ncm 6-1:1.0: skipping garbage
[  473.167893][ T5373] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  473.167918][ T5373] cdc_ncm 6-1:1.0: bind() failure
[  475.047739][  T995] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  475.056509][T10355] loop0: detected capacity change from 0 to 512
[  475.094674][T10355] EXT4-fs (loop0): invalid journal inode
[  475.094743][T10355] EXT4-fs (loop0): can't get journal size
[  475.119452][T10355] EXT4-fs (loop0): 1 truncate cleaned up
[  475.124354][T10355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.198588][  T995] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  475.201448][  T995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.201463][  T995] usb 2-1: Product: syz
[  475.201471][  T995] usb 2-1: Manufacturer: syz
[  475.201478][  T995] usb 2-1: SerialNumber: syz
[  475.306161][  T995] usb 2-1: config 0 descriptor??
[  475.345154][  T995] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  475.387223][  T995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  475.397989][  T995] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  475.398114][  T995] usb 2-1: media controller created
[  475.431268][  T995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  475.986191][ T5638] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.049918][  T995] DVB: Unable to find symbol mt352_attach()
[  476.151611][  T995] DVB: Unable to find symbol nxt6000_attach()
[  476.151622][  T995] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  476.282857][  T995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24
[  476.308633][  T995] dvb-usb: schedule remote query interval to 1000 msecs.
[  476.308654][  T995] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  476.308669][  T995] dvb-usb: bulk message failed: -22 (7/0)
[  476.308682][  T995] dvb-usb: bulk message failed: -22 (7/0)
[  476.347951][  T995] usb 2-1: USB disconnect, device number 14
[  476.611559][  T995] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  479.789707][ T5373] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  480.033850][ T5373] usb 7-1: Using ep0 maxpacket: 8
[  480.080478][ T5373] usb 7-1: New USB device found: idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  480.299971][ T5373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.300073][ T5373] usb 7-1: Product: syz
[  480.300127][ T5373] usb 7-1: Manufacturer: syz
[  480.300176][ T5373] usb 7-1: SerialNumber: syz
[  480.822606][ T5373] usb 7-1: config 0 descriptor??
[  480.834816][ T5373] gspca_main: sq930x-2.14.0 probing 2770:930c
[  481.133584][T10393] syz.0.1133 (10393): drop_caches: 2
[  481.173505][ T5373] gspca_sq930x: reg_r 001f failed -71
[  481.173759][ T5373] sq930x 7-1:0.0: probe with driver sq930x failed with error -71
[  481.195977][ T5373] usb 7-1: USB disconnect, device number 5
[  481.506270][ T5767] usb 6-1: USB disconnect, device number 7
[  481.518296][   T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  481.669722][   T31] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  481.675061][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  481.675086][   T31] usb 3-1: Product: syz
[  481.675100][   T31] usb 3-1: Manufacturer: syz
[  481.675113][   T31] usb 3-1: SerialNumber: syz
[  481.714414][   T31] usb 3-1: config 0 descriptor??
[  481.725603][   T31] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  481.740829][   T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  481.741920][   T31] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  481.741972][   T31] usb 3-1: media controller created
[  481.779169][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  481.899912][   T31] DVB: Unable to find symbol mt352_attach()
[  481.946161][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  481.957079][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  481.965112][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  481.975784][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  481.976427][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  482.067963][   T31] DVB: Unable to find symbol nxt6000_attach()
[  482.067979][   T31] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  482.138387][   T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25
[  482.143447][   T31] dvb-usb: schedule remote query interval to 1000 msecs.
[  482.143470][   T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  482.143485][   T31] dvb-usb: bulk message failed: -22 (7/0)
[  482.143499][   T31] dvb-usb: bulk message failed: -22 (7/0)
[  482.233190][   T31] usb 3-1: USB disconnect, device number 17
[  482.412957][   T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  482.564072][T10444] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.570079][T10444] syzkaller0: entered promiscuous mode
[  482.570101][T10444] syzkaller0: entered allmulticast mode
[  482.587248][T10444] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  482.730907][T10444] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) !
[  482.745133][T10444] tipc: Resetting bearer <eth:syzkaller0>
[  483.100972][T10466] 9pnet_fd: Insufficient options for proto=fd
[  483.177785][ T5641] Bluetooth: hci3: command 0x040f tx timeout
[  483.612751][   T45] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.727098][T10470] loop6: detected capacity change from 0 to 512
[  483.756889][T10442] tipc: Resetting bearer <eth:syzkaller0>
[  483.852801][T10442] tipc: Disabling bearer <eth:syzkaller0>
[  484.023974][   T45] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.028313][ T5641] Bluetooth: hci5: command tx timeout
[  484.049045][ T5767] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  484.200350][   T45] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.219501][ T5767] usb 2-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  484.227447][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.227475][ T5767] usb 2-1: Product: syz
[  484.227487][ T5767] usb 2-1: Manufacturer: syz
[  484.227500][ T5767] usb 2-1: SerialNumber: syz
[  484.263791][ T5767] usb 2-1: config 0 descriptor??
[  484.275068][ T5767] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  484.322490][ T5767] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  484.323286][ T5767] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  484.323338][ T5767] usb 2-1: media controller created
[  484.372561][ T5767] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  484.438722][    C0] Unknown status report in ack skb
[  484.492594][   T45] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.527006][T10425] rxe_eth0 speed is unknown, defaulting to 1000
[  484.574857][ T5767] DVB: Unable to find symbol mt352_attach()
[  484.726298][ T5767] DVB: Unable to find symbol nxt6000_attach()
[  484.726310][ T5767] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  484.739251][ T5767] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26
[  484.752751][ T5767] dvb-usb: schedule remote query interval to 1000 msecs.
[  484.754367][ T5767] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  484.754386][ T5767] dvb-usb: bulk message failed: -22 (7/0)
[  484.754400][ T5767] dvb-usb: bulk message failed: -22 (7/0)
[  484.765687][ T5767] usb 2-1: USB disconnect, device number 15
[  485.121494][ T5767] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  485.239350][   T45] bridge_slave_1: left allmulticast mode
[  485.239375][   T45] bridge_slave_1: left promiscuous mode
[  485.239652][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.359546][   T45] bridge_slave_0: left allmulticast mode
[  485.359565][   T45] bridge_slave_0: left promiscuous mode
[  485.359780][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.628088][ T5641] Bluetooth: hci3: command 0x040f tx timeout
[  486.065205][   T45] bond1 (unregistering): (slave gretap1): Releasing active interface
[  486.078146][  T995] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  486.107725][ T5641] Bluetooth: hci5: command tx timeout
[  486.131098][   T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.137632][   T31] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  486.149516][   T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.170846][   T45] bond0 (unregistering): Released all slaves
[  486.186954][   T45] bond1 (unregistering): Released all slaves
[  486.214666][T10542] Cannot find add_set index 0 as target
[  486.254882][  T995] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  486.256619][  T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  486.256652][  T995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  486.256672][  T995] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  486.256709][  T995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.333241][  T995] usb 1-1: config 0 descriptor??
[  486.343294][   T31] usb 7-1: New USB device found: idVendor=04d8, idProduct=0082, bcdDevice=1.00
[  486.344496][   T31] usb 7-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B
[  486.344524][   T31] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  486.344549][   T31] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  486.344583][   T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.416603][ T5302] 8021q: adding VLAN 0 to HW filter on device eth9
[  486.444950][   T31] ims_pcu 7-1:1.0: First endpoint on data interface is not BULK OUT
[  486.445030][   T31] ims_pcu 7-1:1.0: probe with driver ims_pcu failed with error -22
[  486.512013][   T45] tipc: Left network mode
[  486.516899][   T45] IPVS: stopping master sync thread 7176 ...
[  486.594640][   T31] usb 7-1: USB disconnect, device number 6
[  486.818411][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818447][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818472][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818495][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818520][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818545][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818570][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818595][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818619][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.818644][  T995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  486.859086][T10546] FAULT_INJECTION: forcing a failure.
[  486.859086][T10546] name failslab, interval 1, probability 0, space 0, times 0
[  486.859120][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.2.1185 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  486.859147][T10546] Tainted: [L]=SOFTLOCKUP
[  486.859154][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  486.859165][T10546] Call Trace:
[  486.859172][T10546]  <TASK>
[  486.859180][T10546]  dump_stack_lvl+0xe8/0x150
[  486.859220][T10546]  should_fail_ex+0x3eb/0x540
[  486.859248][T10546]  should_failslab+0xa8/0x100
[  486.859280][T10546]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  486.859314][T10546]  ? __d_alloc+0x37/0x820
[  486.859338][T10546]  ? __d_alloc+0x37/0x820
[  486.859370][T10546]  __d_alloc+0x37/0x820
[  486.859399][T10546]  d_alloc_pseudo+0x21/0xc0
[  486.859426][T10546]  alloc_path_pseudo+0x107/0x220
[  486.859451][T10546]  ? __pfx_alloc_path_pseudo+0x10/0x10
[  486.859483][T10546]  alloc_file_pseudo+0xa8/0x1e0
[  486.859503][T10546]  ? apparmor_socket_post_create+0x337/0x420
[  486.859530][T10546]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  486.859551][T10546]  ? __raw_spin_lock_init+0x45/0x100
[  486.859579][T10546]  sock_alloc_file+0xb8/0x2e0
[  486.859607][T10546]  xs_local_connect+0x179/0x810
[  486.859778][T10546]  ? __pfx_xs_local_connect+0x10/0x10
[  486.859804][T10546]  ? preempt_schedule_thunk+0x16/0x40
[  486.859835][T10546]  xprt_connect+0x613/0x850
[  486.859857][T10546]  ? __pfx_call_connect+0x10/0x10
[  486.859887][T10546]  __rpc_execute+0x521/0x1280
[  486.859971][T10546]  ? __pfx___rpc_execute+0x10/0x10
[  486.859991][T10546]  ? rpc_task_get_xprt+0x26/0x250
[  486.860015][T10546]  ? rpc_make_runnable+0xae/0x1c0
[  486.860036][T10546]  rpc_execute+0x1c1/0x390
[  486.860055][T10546]  rpc_run_task+0x4a6/0x660
[  486.860082][T10546]  rpc_create_xprt+0x452/0xa90
[  486.860108][T10546]  ? __pfx_rpc_create_xprt+0x10/0x10
[  486.860142][T10546]  ? trace_kmalloc+0x2a/0xf0
[  486.860169][T10546]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  486.860194][T10546]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  486.860217][T10546]  ? xprt_create_transport+0x39b/0x5f0
[  486.860241][T10546]  ? xprt_create_transport+0x39b/0x5f0
[  486.860265][T10546]  ? kstrdup+0x81/0x100
[  486.860306][T10546]  ? __asan_memcpy+0x40/0x70
[  486.860334][T10546]  ? xprt_create_transport+0x438/0x5f0
[  486.860362][T10546]  rpc_create+0x68a/0x910
[  486.860386][T10546]  ? __pfx_rpc_create+0x10/0x10
[  486.860416][T10546]  ? trace_contention_end+0x3d/0x140
[  486.860477][T10546]  ? net_generic+0x1e/0x240
[  486.860534][T10546]  ? net_generic+0x1e/0x240
[  486.860560][T10546]  set_gssp_clnt+0x197/0x2f0
[  486.860580][T10546]  ? aa_file_perm+0x18b/0x15f0
[  486.860601][T10546]  ? __pfx_set_gssp_clnt+0x10/0x10
[  486.860640][T10546]  ? _parse_integer_limit+0x18e/0x1e0
[  486.860672][T10546]  ? kstrtoull+0x137/0x1d0
[  486.860704][T10546]  write_gssp+0x458/0x930
[  486.860726][T10546]  ? __pfx_write_gssp+0x10/0x10
[  486.860749][T10546]  ? lock_acquire+0x115/0x350
[  486.860785][T10546]  ? __pfx_write_gssp+0x10/0x10
[  486.860802][T10546]  proc_reg_write+0x1e9/0x2e0
[  486.860827][T10546]  ? __pfx_proc_reg_write+0x10/0x10
[  486.860847][T10546]  vfs_write+0x296/0xba0
[  486.860881][T10546]  ? __pfx_vfs_write+0x10/0x10
[  486.860908][T10546]  ? __fget_files+0x2a/0x420
[  486.860930][T10546]  ? __fget_files+0x3a2/0x420
[  486.860952][T10546]  ? __fget_files+0x2a/0x420
[  486.860979][T10546]  ? fdget+0x1ac/0x250
[  486.861009][T10546]  ksys_write+0x150/0x270
[  486.861037][T10546]  ? __pfx_ksys_write+0x10/0x10
[  486.861075][T10546]  do_syscall_64+0x166/0x520
[  486.861095][T10546]  ? trace_irq_disable+0x3b/0x140
[  486.861120][T10546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.861139][T10546]  ? clear_bhb_loop+0x70/0xc0
[  486.861163][T10546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  486.861182][T10546] RIP: 0033:0x7fc84979f559
[  486.861200][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  486.861217][T10546] RSP: 002b:00007fc84a6d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  486.861237][T10546] RAX: ffffffffffffffda RBX: 00007fc849a25fa0 RCX: 00007fc84979f559
[  486.861252][T10546] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005
[  486.861264][T10546] RBP: 00007fc849836b20 R08: 0000000000000000 R09: 0000000000000000
[  486.861275][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  486.861295][T10546] R13: 00007fc849a26038 R14: 00007fc849a25fa0 R15: 00007ffeb7740ab8
[  486.861330][T10546]  </TASK>
[  487.376316][  T995] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  487.393365][  T995] usb 1-1: USB disconnect, device number 21
[  487.570240][T10554] fido_id[10554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  487.711330][ T5641] Bluetooth: hci3: command 0x040f tx timeout
[  488.018548][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 8 > 4
[  488.018582][ T5641] Bluetooth: hci2: unexpected event for opcode 0x0c23
[  488.187711][ T5641] Bluetooth: hci5: command tx timeout
[  489.563023][   T45] hsr_slave_0: left promiscuous mode
[  489.587244][   T45] hsr_slave_1: left promiscuous mode
[  489.596482][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.596506][   T45] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.632906][   T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.632929][   T45] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.669677][   T45] veth1_macvtap: left promiscuous mode
[  489.669715][   T45] veth0_macvtap: left promiscuous mode
[  489.669815][   T45] veth1_vlan: left promiscuous mode
[  489.669958][   T45] veth0_vlan: left promiscuous mode
[  489.817656][ T5641] Bluetooth: hci3: command 0x040f tx timeout
[  490.302220][ T5641] Bluetooth: hci5: command tx timeout
[  491.305080][T10618] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1207'.
[  491.487349][T10615] loop2: detected capacity change from 0 to 8192
[  491.518835][   T32] audit: type=1800 audit(1792877053.841:212): pid=10615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1206" name="file2" dev="loop2" ino=114 res=0 errno=-22
[  491.743077][T10615] syz.2.1206: attempt to access beyond end of device
[  491.743077][T10615] loop2: rw=8388608, sector=57847, nr_sectors = 1 limit=8192
[  491.957075][   T45] team0 (unregistering): Port device team_slave_1 removed
[  491.999147][   T45] team0 (unregistering): Port device team_slave_0 removed
[  492.294470][ T5302] 8021q: adding VLAN 0 to HW filter on device eth10
[  492.561283][T10425] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.563218][T10425] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.563472][T10425] bridge_slave_0: entered allmulticast mode
[  492.565357][T10425] bridge_slave_0: entered promiscuous mode
[  492.610675][T10425] bridge0: port 2(bridge_slave_1) entered blocking state
[  492.614354][T10425] bridge0: port 2(bridge_slave_1) entered disabled state
[  492.614508][T10425] bridge_slave_1: entered allmulticast mode
[  492.649332][T10425] bridge_slave_1: entered promiscuous mode
[  492.725873][T10425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  492.749589][T10425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  492.933987][T10425] team0: Port device team_slave_0 added
[  492.969695][   T45] IPVS: stop unused estimator thread 0...
[  492.976083][T10425] team0: Port device team_slave_1 added
[  493.079749][T10425] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.079766][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.079790][T10425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.081763][T10425] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.081778][T10425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  493.081800][T10425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.323165][T10425] hsr_slave_0: entered promiscuous mode
[  493.331210][T10425] hsr_slave_1: entered promiscuous mode
[  493.632589][T10682] ip_tables: iptables: counters copy to user failed while replacing table
[  493.740524][T10676] loop1: detected capacity change from 0 to 40427
[  493.752955][T10676] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  493.752981][T10676] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  493.754787][T10676] F2FS-fs (loop1): build fault injection rate: 17008
[  493.754804][T10676] F2FS-fs (loop1): build fault injection type: 0x1f8
[  493.755576][T10676] F2FS-fs (loop1): invalid crc value
[  494.183364][T10676] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  494.250208][T10676] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  494.250237][T10676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  494.426170][T10714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1238'.
[  494.463573][ T5302] 8021q: adding VLAN 0 to HW filter on device eth11
[  494.852536][T10425] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  494.874510][T10425] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  494.884860][T10425] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  494.919261][T10425] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  494.923014][T10425] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  494.974082][T10425] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  494.984129][T10425] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  495.005677][T10425] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  495.021177][T10728] siw: device registration error -23
[  495.425199][T10751] loop6: detected capacity change from 0 to 1024
[  495.568456][T10425] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.670387][T10425] 8021q: adding VLAN 0 to HW filter on device team0
[  495.713594][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.713712][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.749223][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.749328][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.872244][ T5302] 8021q: adding VLAN 0 to HW filter on device eth12
[  497.696490][T10425] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.490007][T10425] veth0_vlan: entered promiscuous mode
[  499.543885][T10425] veth1_vlan: entered promiscuous mode
[  499.679142][T10425] veth0_macvtap: entered promiscuous mode
[  499.706809][T10425] veth1_macvtap: entered promiscuous mode
[  499.755481][T10425] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.801205][T10425] batman_adv: batadv0: Interface activated: batadv_slave_1
[  499.857820][   T64] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.858715][   T64] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.858755][   T64] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.858786][   T64] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.007445][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.007468][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.059667][  T986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.059687][  T986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.317726][T10855] block nbd7: NBD_DISCONNECT
[  500.548452][T10862] loop1: detected capacity change from 0 to 8
[  500.577056][T10860] loop2: detected capacity change from 0 to 512
[  500.594121][T10845] udevd[10845]: incorrect cramfs checksum on /dev/loop1
[  500.653372][T10838] loop6: detected capacity change from 0 to 32768
[  500.780189][T10838] JBD2: Ignoring recovery information on journal
[  500.825755][T10838] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  501.053379][T10878] loop1: detected capacity change from 0 to 128
[  501.107102][T10878] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  501.108282][T10878] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  501.268667][ T5744] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  501.500393][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1277'.
[  501.523588][ T5744] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  501.530966][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.531125][ T5744] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  501.531191][ T5744] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  501.531383][ T5744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.552798][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  501.552876][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  501.569024][ T5744] usb 1-1: config 0 descriptor??
[  502.215109][ T5657] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  502.396055][ T8696] ocfs2: Unmounting device (7,6) on (node local)
[  502.500653][ T5744] hid_parser_main: 14 callbacks suppressed
[  502.500772][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500805][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500825][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500895][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500917][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500939][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500962][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.500982][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.501011][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.501033][ T5744] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  502.658613][ T5744] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  502.721747][ T5744] usb 1-1: USB disconnect, device number 22
[  502.871851][T10905] fido_id[10905]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  502.922833][   T32] audit: type=1800 audit(1792877065.241:213): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1288" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22
[  503.402499][T10922] loop7: detected capacity change from 0 to 1024
[  503.408638][T10922] ext4: Unknown parameter 'subj_role'
[  504.247650][    T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  504.400625][    T9] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  504.401641][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  504.401665][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.401683][    T9] usb 2-1: config 0 has no interface number 0
[  504.401719][    T9] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  504.401756][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.404369][    T9] usb 2-1: config 0 descriptor??
[  505.111167][    T9] iowarrior 2-1:0.1: no interrupt-in endpoint found
[  505.113737][    T9] usb 2-1: USB disconnect, device number 16
[  505.200396][T10941] can0: slcan on ttyS3.
[  505.235827][T10946] siw: device registration error -23
[  505.312821][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1303'.
[  505.480227][T10941] can0 (unregistered): slcan off ttyS3.
[  505.486913][T10956] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1306'.
[  505.658295][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  505.743176][T10966] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0 (while UP)
[  505.786827][T10969] loop1: detected capacity change from 0 to 64
[  505.796471][T10969] hfs: unable to change iocharset
[  505.807726][    T9] usb 1-1: Using ep0 maxpacket: 8
[  505.808620][    T9] usb 1-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  505.812325][    T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  505.812374][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  505.812394][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  505.812416][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  505.812438][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  505.812477][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.024011][T10960] loop7: detected capacity change from 0 to 32768
[  506.037338][T10960] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1308 (10960)
[  506.075794][T10960] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  506.075830][T10960] BTRFS info (device loop7): using blake2b checksum algorithm
[  506.077361][    T9] usb 1-1: usb_control_msg returned -32
[  506.077407][    T9] usbtmc 1-1:16.0: can't read capabilities
[  506.299550][T10960] BTRFS info (device loop7): enabling ssd optimizations
[  506.299591][T10960] BTRFS info (device loop7): using spread ssd allocation scheme
[  506.299608][T10960] BTRFS info (device loop7): turning off barriers
[  506.299623][T10960] BTRFS info (device loop7): enabling free space tree
[  506.299637][T10960] BTRFS info (device loop7): enabling auto defrag
[  506.299746][T10960] BTRFS info (device loop7): force zlib compression, level 3
[  506.575166][T10425] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  507.017772][  T995] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  507.052794][T11018] usbtmc 1-1:16.0: usb_control_msg returned -32
[  507.055126][T11027] netlink: 'syz.6.1331': attribute type 19 has an invalid length.
[  507.055145][T11027] netlink: 'syz.6.1331': attribute type 28 has an invalid length.
[  507.177824][  T995] usb 3-1: device descriptor read/64, error -71
[  507.207032][T11029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  507.427694][  T995] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  507.579170][  T995] usb 3-1: device descriptor read/64, error -71
[  507.709666][    T9] usb 1-1: USB disconnect, device number 23
[  507.734143][  T995] usb usb3-port1: attempt power cycle
[  507.936509][T11031] loop1: detected capacity change from 0 to 32768
[  507.937610][T11031] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  507.944589][T11031] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1332 (11031)
[  507.987428][T11031] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  507.987459][T11031] BTRFS info (device loop1): using crc32c checksum algorithm
[  508.118459][T11031] BTRFS info (device loop1): rebuilding free space tree
[  508.153162][T11031] BTRFS info (device loop1): disabling free space tree
[  508.153228][T11031] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  508.153249][T11031] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  508.157146][T11031] BTRFS info (device loop1): enabling ssd optimizations
[  508.157171][T11031] BTRFS info (device loop1): turning on async discard
[  508.157186][T11031] BTRFS info (device loop1): force clearing of disk cache
[  508.157203][T11031] BTRFS info (device loop1): use zstd compression, level 3
[  508.207622][  T995] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  508.233272][  T995] usb 3-1: device descriptor read/8, error -71
[  508.260763][T11035] syzkaller0: entered promiscuous mode
[  508.260788][T11035] syzkaller0: entered allmulticast mode
[  508.594218][  T995] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  509.017763][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1334'.
[  509.105238][  T995] usb 3-1: device descriptor read/8, error -71
[  509.211457][  T995] usb usb3-port1: unable to enumerate USB device
[  509.213577][ T5657] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  509.828539][T11092] netlink: 'syz.6.1343': attribute type 19 has an invalid length.
[  509.828563][T11092] netlink: 'syz.6.1343': attribute type 28 has an invalid length.
[  510.297897][T10846] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  510.447893][T10846] usb 3-1: Using ep0 maxpacket: 8
[  510.449504][T10846] usb 3-1: New USB device found: idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  510.451396][T10846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  510.451442][T10846] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  510.451467][T10846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  510.451491][T10846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  510.453487][T10846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.453510][T10846] usb 3-1: Product: syz
[  510.453523][T10846] usb 3-1: Manufacturer: syz
[  510.453537][T10846] usb 3-1: SerialNumber: syz
[  510.456229][T10846] usb 3-1: config 0 descriptor??
[  510.457006][T11103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  510.689825][T10846] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  511.378029][T10846] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28
[  511.386021][    C0] powermate: config urb returned -71
[  511.386305][    C0] powermate: config urb returned -71
[  511.386535][    C0] powermate: config urb returned -71
[  511.386743][    C0] powermate: config urb returned -71
[  511.430040][T10846] usb 3-1: USB disconnect, device number 22
[  511.430164][    C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  511.840036][T11138] netlink: 'syz.2.1356': attribute type 19 has an invalid length.
[  511.840058][T11138] netlink: 'syz.2.1356': attribute type 28 has an invalid length.
[  511.893630][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1352'.
[  511.968127][T11131] bond1: entered promiscuous mode
[  511.968884][T11131] 8021q: adding VLAN 0 to HW filter on device bond1
[  511.998649][   T26] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  512.127615][   T26] usb 8-1: device descriptor read/64, error -71
[  512.378596][   T26] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  512.547693][   T26] usb 8-1: device descriptor read/64, error -71
[  512.558541][   T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  512.609878][T11161] netlink: 'syz.6.1362': attribute type 1 has an invalid length.
[  512.609901][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1362'.
[  512.672137][   T26] usb usb8-port1: attempt power cycle
[  512.714832][   T31] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  512.718676][   T31] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  512.718728][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.719688][   T31] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  512.719711][   T31] usb 3-1: Manufacturer: syz
[  512.726490][   T31] usb 3-1: config 0 descriptor??
[  512.894492][T11174] netlink: 'syz.1.1367': attribute type 19 has an invalid length.
[  512.894514][T11174] netlink: 'syz.1.1367': attribute type 28 has an invalid length.
[  512.929353][   T31] rc_core: IR keymap rc-hauppauge not found
[  512.929374][   T31] Registered IR keymap rc-empty
[  512.960780][   T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  512.964929][   T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29
[  513.027673][  T995] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  513.040744][   T26] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  513.063617][   T26] usb 8-1: device descriptor read/8, error -71
[  513.181330][  T995] usb 7-1: Using ep0 maxpacket: 16
[  513.182451][  T995] usb 7-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  513.188120][  T995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  513.188150][  T995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  513.200448][  T995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.200495][  T995] usb 7-1: Product: syz
[  513.200507][  T995] usb 7-1: Manufacturer: syz
[  513.200521][  T995] usb 7-1: SerialNumber: syz
[  513.209237][  T995] usb 7-1: config 0 descriptor??
[  513.226340][  T995] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  513.226394][  T995] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  513.299679][   T26] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  513.318398][   T26] usb 8-1: device descriptor read/8, error -71
[  513.403856][   T31] usb 3-1: USB disconnect, device number 23
[  513.428994][   T26] usb usb8-port1: unable to enumerate USB device
[  513.863593][  T995] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  513.864361][  T995] em28xx 7-1:0.0: Config register raw data: 0xf7
[  513.864461][  T995] em28xx 7-1:0.0: I2S Audio (3 sample rate(s))
[  513.864477][  T995] em28xx 7-1:0.0: No AC97 audio processor
[  514.323876][  T995] usb 7-1: USB disconnect, device number 7
[  515.707766][  T995] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  515.747618][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  515.858920][  T995] usb 8-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40
[  515.860390][  T995] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  515.860448][  T995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  515.860474][  T995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  515.862925][  T995] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.862951][  T995] usb 8-1: Product: syz
[  515.862964][  T995] usb 8-1: Manufacturer: syz
[  515.862976][  T995] usb 8-1: SerialNumber: syz
[  515.866635][T11237] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  515.874308][  T995] cdc_mbim 8-1:1.0: skipping garbage
[  515.929909][    T9] usb 2-1: Using ep0 maxpacket: 8
[  515.942049][    T9] usb 2-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  515.962519][    T9] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  515.962546][    T9] usb 2-1: config 0 has no interface number 0
[  515.962583][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  515.962604][    T9] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  515.962628][    T9] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  515.962652][    T9] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  515.962682][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.964930][    T9] usb 2-1: config 0 descriptor??
[  515.994570][    T9] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  516.130931][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  516.238641][ T5373] usb 2-1: USB disconnect, device number 17
[  516.240629][    C0] ldusb 2-1:0.55: usb_submit_urb failed (-19)
[  516.259965][    T9] usb 7-1: device descriptor read/64, error -71
[  516.276048][T11242] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19
[  516.289316][ T5373] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  516.376232][T11253] device-mapper: table: 248:2: thin-pool: target type may not be included in a read-only table (-EINVAL)
[  516.376290][T11253] device-mapper: ioctl: error adding target to table
[  516.484116][T11250] loop2: detected capacity change from 0 to 32768
[  516.497693][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  516.524068][T11250] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.606012][T11250] XFS (loop2): Ending clean mount
[  516.628935][    T9] usb 7-1: device descriptor read/64, error -71
[  516.658677][ T5636] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.740860][    T9] usb usb7-port1: attempt power cycle
[  516.907394][  T995] cdc_mbim 8-1:1.0: bind() failure
[  516.958748][  T995] usbtest 8-1:1.1: probe with driver usbtest failed with error -71
[  516.968436][  T995] usb 8-1: USB disconnect, device number 6
[  517.079011][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  517.098348][    T9] usb 7-1: device descriptor read/8, error -71
[  517.273873][T11281] loop1: detected capacity change from 0 to 256
[  517.296893][T11281] FAT-fs (loop1): bogus number of FAT sectors
[  517.296916][T11281] FAT-fs (loop1): Can't find a valid FAT filesystem
[  517.337913][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  517.362858][    T9] usb 7-1: device descriptor read/8, error -71
[  517.468386][    T9] usb usb7-port1: unable to enumerate USB device
[  518.881860][T11304] loop2: detected capacity change from 0 to 8
[  519.924106][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1416'.
[  519.943510][T11321] lo speed is unknown, defaulting to 1000
[  519.943595][T11321] lo speed is unknown, defaulting to 1000
[  519.963042][T11321] lo speed is unknown, defaulting to 1000
[  519.974822][T11321] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  519.974858][T11321] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  519.974896][T11321] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  520.058935][T11321] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22
[  520.136507][T11321] lo speed is unknown, defaulting to 1000
[  520.145732][T11321] lo speed is unknown, defaulting to 1000
[  520.153609][T11321] lo speed is unknown, defaulting to 1000
[  520.155853][T11321] lo speed is unknown, defaulting to 1000
[  520.169966][T11321] lo speed is unknown, defaulting to 1000
[  520.270487][T11329] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed
[  520.409565][T11330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.613767][   T26] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  521.151703][   T26] usb 8-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[  521.172861][   T26] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.172890][   T26] usb 8-1: Product: syz
[  521.172904][   T26] usb 8-1: Manufacturer: syz
[  521.172918][   T26] usb 8-1: SerialNumber: syz
[  521.405898][T11346] input: syz0 as /devices/virtual/input/input30
[  521.658639][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  521.658704][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  521.886654][T11360] ip_tables: iptables: counters copy to user failed while replacing table
[  522.879917][T11364] overlayfs: failed to resolve './proc': -2
[  523.147328][T11371] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  523.378721][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  523.595681][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  523.596181][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  523.596234][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  523.651365][   T26] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  523.672276][   T26] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71
[  523.689853][   T26] usb 8-1: USB disconnect, device number 7
[  523.764479][T11378] loop6: detected capacity change from 0 to 512
[  523.791764][T11378] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  523.876378][T11378] EXT4-fs (loop6): 1 orphan inode deleted
[  523.886947][T11378] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.889649][  T145] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  523.889842][  T145] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1
[  523.889862][  T145] loop6: lost filesystem error report for type 5 error -117
[  523.910490][T11378] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.983570][T11378] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  524.041861][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.167223][T11390] comedi comedi2: das16m1: I/O base address or length out of range
[  524.229956][T11392] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[  524.303695][T11396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  524.317807][T11396] FAULT_INJECTION: forcing a failure.
[  524.317807][T11396] name fail_futex, interval 1, probability 0, space 0, times 1
[  524.317842][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.7.1441 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  524.317870][T11396] Tainted: [L]=SOFTLOCKUP
[  524.317877][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  524.317890][T11396] Call Trace:
[  524.317897][T11396]  <TASK>
[  524.317906][T11396]  dump_stack_lvl+0xe8/0x150
[  524.317946][T11396]  should_fail_ex+0x3eb/0x540
[  524.317975][T11396]  get_futex_key+0x1ab/0x1410
[  524.318020][T11396]  ? __pfx_get_futex_key+0x10/0x10
[  524.318062][T11396]  futex_wake+0x119/0x5f0
[  524.318094][T11396]  ? __pfx_futex_wake+0x10/0x10
[  524.318134][T11396]  do_futex+0x458/0x4e0
[  524.318160][T11396]  ? __pfx_do_futex+0x10/0x10
[  524.318189][T11396]  __se_sys_futex+0x3a8/0x450
[  524.318217][T11396]  ? __pfx___se_sys_futex+0x10/0x10
[  524.318236][T11396]  ? rcu_is_watching+0x16/0xb0
[  524.318272][T11396]  ? __x64_sys_futex+0x21/0xf0
[  524.318296][T11396]  do_syscall_64+0x166/0x520
[  524.318319][T11396]  ? trace_irq_disable+0x3b/0x140
[  524.318345][T11396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.318365][T11396]  ? clear_bhb_loop+0x70/0xc0
[  524.318387][T11396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.318406][T11396] RIP: 0033:0x7f69bbd9f559
[  524.318425][T11396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  524.318442][T11396] RSP: 002b:00007f69bcc640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  524.318463][T11396] RAX: ffffffffffffffda RBX: 00007f69bc025fa8 RCX: 00007f69bbd9f559
[  524.318478][T11396] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f69bc025fac
[  524.318491][T11396] RBP: 00007f69bc025fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  524.318503][T11396] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  524.318516][T11396] R13: 00007f69bc026038 R14: 00007ffdb99a6830 R15: 00007ffdb99a6918
[  524.318548][T11396]  </TASK>
[  524.620027][T11405] loop6: detected capacity change from 0 to 4096
[  524.638354][T11405] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  524.747421][T11405] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  524.750358][T11405] ntfs3(loop6): Inode r=b is not in use!
[  524.750442][T11405] ntfs3(loop6): Failed to load $Extend (-116).
[  524.750458][T11405] ntfs3(loop6): Failed to initialize $Extend.
[  524.973851][T11414] netlink: 'syz.0.1449': attribute type 1 has an invalid length.
[  526.068337][T11423] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  526.149179][T11424] No such timeout policy "syz1"
[  528.346933][T11452] netlink: 'syz.6.1460': attribute type 1 has an invalid length.
[  528.590521][T11429] loop7: detected capacity change from 0 to 32768
[  528.635085][T11429] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  528.735792][T11429] XFS (loop7): Ending clean mount
[  528.782191][T11429] XFS (loop7): Quotacheck needed: Please wait.
[  529.153283][T11429] XFS (loop7): Quotacheck: Done.
[  529.387299][T10425] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  529.757841][T11474] netlink: 'syz.1.1467': attribute type 10 has an invalid length.
[  529.816082][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.833835][T11474] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  529.909253][    T9] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  529.912083][T11475] bond0: (slave batadv0): Releasing backup interface
[  529.976998][T11475] bridge_slave_0: left allmulticast mode
[  529.977025][T11475] bridge_slave_0: left promiscuous mode
[  529.992878][T11475] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.045006][T11475] bridge_slave_1: left allmulticast mode
[  530.045033][T11475] bridge_slave_1: left promiscuous mode
[  530.046259][T11475] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.069042][    T9] usb 7-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  530.091451][    T9] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  530.091478][    T9] usb 7-1: Product: syz
[  530.091492][    T9] usb 7-1: Manufacturer: syz
[  530.091505][    T9] usb 7-1: SerialNumber: syz
[  530.144299][    T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  530.182289][T11475] bond0: (slave bond_slave_0): Releasing backup interface
[  530.265543][T11475] bond0: (slave bond_slave_1): Releasing backup interface
[  530.364978][T11475] team0: Port device team_slave_0 removed
[  530.379375][    T9] vp7045: USB control message 'out' went wrong.
[  530.379393][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  530.379431][    T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  530.432419][    T9] usb 7-1: USB disconnect, device number 12
[  530.453802][T11475] team0: Port device team_slave_1 removed
[  530.475008][T11475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  530.475025][T11475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  530.505723][T11475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  530.505739][T11475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  530.560509][T11475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  531.949540][T11487] loop6: detected capacity change from 0 to 2048
[  531.992213][T11487] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  531.992293][T11487] ext4 filesystem being mounted at /165/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  532.145662][T11487] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only
[  532.145688][T11487] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  532.400154][T11477] loop7: detected capacity change from 0 to 32768
[  533.039921][T11477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1465 (11477)
[  533.254863][T11477] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  533.254899][T11477] BTRFS info (device loop7): using crc32c checksum algorithm
[  533.279275][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  533.281492][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR
[  533.377099][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[  533.377472][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  533.407647][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  533.407997][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  533.408315][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  533.437452][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  533.519704][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  533.556649][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  533.561178][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  533.595563][T11477] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  533.677767][T11477] BTRFS error (device loop7): open_ctree failed: -ENOMEM
[  533.762336][T11493] loop2: detected capacity change from 0 to 32768
[  533.778426][T11493] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1472 (11493)
[  533.984830][T11493] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  533.984853][T11493] BTRFS info (device loop2): using sha256 checksum algorithm
[  534.226020][T11493] BTRFS info (device loop2): turning off barriers
[  534.226049][T11493] BTRFS info (device loop2): enabling free space tree
[  535.262425][ T5636] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  537.157893][ T5744] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  537.325367][ T5744] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  537.331419][ T5744] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  537.331451][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  537.331473][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  537.331494][ T5744] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  537.331529][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.402971][ T5744] usb 7-1: config 0 descriptor??
[  537.834910][ T5744] hid_parser_main: 5 callbacks suppressed
[  537.834934][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.834964][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.834989][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835014][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835039][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835064][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835088][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835111][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835136][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.835160][ T5744] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  537.971517][ T5744] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  538.042621][ T5744] usb 7-1: USB disconnect, device number 13
[  538.117400][T11569] fido_id[11569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  539.450044][T11583] ip_tables: iptables: counters copy to user failed while replacing table
[  540.598821][   T26] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  540.758642][   T26] usb 7-1: Using ep0 maxpacket: 16
[  540.765792][   T26] usb 7-1: New USB device found: idVendor=057e, idProduct=2019, bcdDevice=0.00
[  540.783020][   T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  540.783055][   T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  540.783079][   T26] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  540.783120][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  540.791773][   T26] usb 7-1: config 0 descriptor??
[  541.004615][T11605] loop1: detected capacity change from 0 to 512
[  541.051256][T11605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1503: bg 0: block 5: invalid block bitmap
[  541.051291][T11605] loop1: lost filesystem error report for type 5 error -117
[  541.057582][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  541.057608][    C0] EXT4-fs (loop1): initial error at time 1792877103: ext4_validate_block_bitmap:436
[  541.057634][    C0] EXT4-fs (loop1): last error at time 1792877103: ext4_validate_block_bitmap:436
[  541.156888][T11605] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  541.156913][T11605] loop1: lost filesystem error report for type 5 error -117
[  541.170430][T11605] EXT4-fs error (device loop1): ext4_free_branches:1040: inode #11: comm syz.1.1503: invalid indirect mapped block 3 (level 2)
[  541.170465][T11605] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  541.202950][T11605] EXT4-fs (loop1): 1 orphan inode deleted
[  541.203000][T11605] EXT4-fs (loop1): 1 truncate cleaned up
[  541.233580][T11605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  541.443044][ T5657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.514434][   T26] nintendo 0003:057E:2019.000B: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.6-1/input0
[  541.934586][   T26] nintendo 0003:057E:2019.000B: Failed to get joycon info; ret=-71
[  541.934650][   T26] nintendo 0003:057E:2019.000B: Failed to retrieve controller info; ret=-71
[  541.934668][   T26] nintendo 0003:057E:2019.000B: Failed to initialize controller; ret=-71
[  542.143216][   T26] nintendo 0003:057E:2019.000B: probe - fail = -71
[  542.143510][   T26] nintendo 0003:057E:2019.000B: probe with driver nintendo failed with error -71
[  542.235057][T11622] ip_tables: iptables: counters copy to user failed while replacing table
[  542.931215][   T26] usb 7-1: USB disconnect, device number 14
[  543.818404][T11643] loop6: detected capacity change from 0 to 512
[  543.865583][T11643] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1515: bg 0: block 5: invalid block bitmap
[  543.865607][T11643] loop6: lost filesystem error report for type 5 error -117
[  543.865963][T11643] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  543.865980][T11643] loop6: lost filesystem error report for type 5 error -117
[  543.866385][T11643] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.1515: invalid indirect mapped block 3 (level 2)
[  543.866414][T11643] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  543.867563][    C1] EXT4-fs (loop6): error count since last fsck: 3
[  543.867581][    C1] EXT4-fs (loop6): initial error at time 1792877106: ext4_validate_block_bitmap:436
[  543.867601][    C1] EXT4-fs (loop6): last error at time 1792877106: ext4_free_branches:1040: inode 11
[  543.963972][T11643] EXT4-fs (loop6): 1 orphan inode deleted
[  543.963989][T11643] EXT4-fs (loop6): 1 truncate cleaned up
[  543.964952][T11643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  544.267397][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  544.302367][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  544.315505][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  544.332732][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  544.365621][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  544.375227][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  544.904567][T11661] loop6: detected capacity change from 0 to 512
[  544.995500][T11661] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  545.147198][T11661] EXT4-fs (loop6): 1 orphan inode deleted
[  545.162910][  T145] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  545.163016][  T145] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 1
[  545.163036][  T145] loop6: lost filesystem error report for type 5 error -117
[  545.166981][T11661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.211179][T11661] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  545.430238][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.553927][T11669] loop7: detected capacity change from 0 to 256
[  545.559756][T11669] exfat: Deprecated parameter 'namecase'
[  545.560055][T11669] exfat: Deprecated parameter 'namecase'
[  546.402633][T11669] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  546.507664][ T5647] Bluetooth: hci1: command tx timeout
[  547.014920][T11647] rxe_eth0 speed is unknown, defaulting to 1000
[  547.015851][T11684] loop6: detected capacity change from 0 to 512
[  547.299137][T11684] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1526: bg 0: block 5: invalid block bitmap
[  547.299174][T11684] loop6: lost filesystem error report for type 5 error -117
[  547.305119][T11684] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  547.305136][T11684] loop6: lost filesystem error report for type 5 error -117
[  547.305860][T11684] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.1526: invalid indirect mapped block 3 (level 2)
[  547.305891][T11684] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  547.309769][T11684] EXT4-fs (loop6): 1 orphan inode deleted
[  547.309790][T11684] EXT4-fs (loop6): 1 truncate cleaned up
[  547.314422][T11684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.728610][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  548.601750][ T5647] Bluetooth: hci1: command tx timeout
[  549.263782][T10425] svc: failed to register nfsdv3 RPC service (errno 5).
[  549.263803][T10425] failed to unregister tcp with rpcbind
[  549.630362][T11647] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.632482][T11647] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.632643][T11647] bridge_slave_0: entered allmulticast mode
[  549.663546][T11647] bridge_slave_0: entered promiscuous mode
[  549.679046][T11647] bridge0: port 2(bridge_slave_1) entered blocking state
[  549.681270][T11647] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.681430][T11647] bridge_slave_1: entered allmulticast mode
[  549.687355][T11647] bridge_slave_1: entered promiscuous mode
[  549.809740][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  549.831400][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  550.021358][T11647] team0: Port device team_slave_0 added
[  550.032051][T11647] team0: Port device team_slave_1 added
[  550.187156][T11647] batman_adv: batadv0: Adding interface: batadv_slave_0
[  550.187185][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.187210][T11647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  550.260404][T11647] batman_adv: batadv0: Adding interface: batadv_slave_1
[  550.260424][T11647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  550.260450][T11647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  550.667603][ T5647] Bluetooth: hci1: command tx timeout
[  551.036023][T11647] hsr_slave_0: entered promiscuous mode
[  551.051452][T11647] hsr_slave_1: entered promiscuous mode
[  551.051890][T11647] debugfs: 'hsr0' already exists in 'hsr'
[  551.051909][T11647] Cannot create hsr debugfs directory
[  552.750594][ T5647] Bluetooth: hci1: command tx timeout
[  552.873893][T11647] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  552.897891][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  552.900950][T11647] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  552.925727][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  552.927405][T11647] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  552.980341][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  552.981271][T11647] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  553.004979][T11647] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  553.129620][T11647] 8021q: adding VLAN 0 to HW filter on device bond0
[  553.161783][T11647] 8021q: adding VLAN 0 to HW filter on device team0
[  553.168778][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.168885][ T6928] bridge0: port 1(bridge_slave_0) entered forwarding state
[  553.225395][ T6077] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.225502][ T6077] bridge0: port 2(bridge_slave_1) entered forwarding state
[  553.770890][T11775] Invalid ELF header magic: != ELF
[  555.277279][ T7069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.904174][ T7069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.216853][ T7069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  556.371310][T11829] netlink: 'syz.7.1575': attribute type 1 has an invalid length.
[  558.440315][ T7069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  558.659070][T11856] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1582'.
[  559.026836][T11866] netlink: 'syz.6.1586': attribute type 1 has an invalid length.
[  559.077312][ T7069] bridge_slave_1: left allmulticast mode
[  559.077339][ T7069] bridge_slave_1: left promiscuous mode
[  559.093945][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.114598][ T7069] bridge_slave_0: left allmulticast mode
[  559.114617][ T7069] bridge_slave_0: left promiscuous mode
[  559.114764][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state
[  559.228532][T11872] loop7: detected capacity change from 0 to 512
[  559.254972][T11872] EXT4-fs (loop7): Test dummy encryption mode enabled
[  559.255092][T11872] EXT4-fs (loop7): can't mount with commit=, fs mounted w/o journal
[  559.397736][ T2262] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  559.458920][T11879] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  559.486277][T11879] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0)
[  559.557666][ T2262] usb 7-1: Using ep0 maxpacket: 16
[  559.565309][ T2262] usb 7-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  559.572152][ T2262] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.572172][ T2262] usb 7-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.572184][ T2262] usb 7-1: config 0 interface 0 has no altsetting 0
[  559.572203][ T2262] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.698123][ T2262] usb 7-1: config 0 descriptor??
[  561.262713][ T2262] hid_parser_main: 5 callbacks suppressed
[  561.262731][ T2262] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  561.262749][ T2262] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  561.262764][ T2262] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  561.262779][ T2262] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  561.262794][ T2262] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0
[  561.263290][ T2262] mcp2221 0003:04D8:00DD.000C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[  561.607675][T11884] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1594'.
[  561.862842][ T2262] usb 7-1: USB disconnect, device number 15
[  562.330652][ T7069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.368921][ T7069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.392453][ T7069] bond0 (unregistering): Released all slaves
[  562.424742][T11647] 8021q: adding VLAN 0 to HW filter on device batadv0
[  562.596893][ T7069] tipc: Disabling bearer <udp:syz0>
[  562.600169][ T7069] tipc: Left network mode
[  562.694148][ T7069] IPVS: stopping master sync thread 6709 ...
[  562.993317][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  562.993372][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  563.121048][T11924] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1605'.
[  564.856778][T11647] veth0_vlan: entered promiscuous mode
[  564.947078][ T7069] hsr_slave_0: left promiscuous mode
[  564.964983][ T7069] hsr_slave_1: left promiscuous mode
[  564.965677][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.965690][ T7069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  565.001657][ T7069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  565.001675][ T7069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.041466][ T7069] veth1_macvtap: left promiscuous mode
[  565.041508][ T7069] veth0_macvtap: left promiscuous mode
[  565.041613][ T7069] veth1_vlan: left promiscuous mode
[  565.041681][ T7069] 
@ÿ: left promiscuous mode
[  565.101633][T11959] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1615'.
[  565.127961][ T5753] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  565.277787][ T5753] usb 7-1: Using ep0 maxpacket: 8
[  565.278909][ T5753] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  565.317750][ T5753] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  565.317776][ T5753] usb 7-1: config 0 has no interface number 0
[  565.317803][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  565.317816][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  565.317828][ T5753] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  565.317841][ T5753] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  565.317864][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.319439][ T5753] usb 7-1: config 0 descriptor??
[  565.409189][ T5753] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  565.476655][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1619'.
[  565.598678][ T2262] usb 7-1: USB disconnect, device number 16
[  565.599809][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  565.599930][T11956] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19
[  565.602904][ T2262] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  565.716055][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b085c00: rx timeout, send abort
[  565.862088][ T7069] team0 (unregistering): Port device team_slave_1 removed
[  565.884942][ T7069] team0 (unregistering): Port device team_slave_0 removed
[  566.080062][ T5302] 8021q: adding VLAN 0 to HW filter on device eth14
[  566.170035][T11981] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  567.662187][T12004] netlink: 'syz.6.1631': attribute type 1 has an invalid length.
[  567.781264][T11647] veth1_vlan: entered promiscuous mode
[  567.787265][   T45] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.787622][   T45] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.790277][   T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.790380][   T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.990854][T11647] veth0_macvtap: entered promiscuous mode
[  568.009070][T11647] veth1_macvtap: entered promiscuous mode
[  568.047526][T11647] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.055760][T11647] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.158671][ T6928] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.162551][   T45] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.162748][   T45] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.162801][   T45] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.200235][ T7069] IPVS: stop unused estimator thread 0...
[  568.218488][ T5744] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  568.368447][ T5744] usb 7-1: Using ep0 maxpacket: 8
[  568.373146][ T5744] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  568.382921][ T5744] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  568.382944][ T5744] usb 7-1: config 0 has no interface number 0
[  568.382981][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  568.383002][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  568.383025][ T5744] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  568.383048][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  568.383083][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  568.419415][ T5744] usb 7-1: config 0 descriptor??
[  568.479256][ T5744] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  568.746813][ T5767] usb 7-1: USB disconnect, device number 17
[  568.746928][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  568.900583][ T5767] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  569.109702][ T6001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.109767][ T6001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.673671][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  569.673690][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  569.793658][T12045] netlink: 'syz.6.1642': attribute type 1 has an invalid length.
[  570.074759][ T5302] 8021q: adding VLAN 0 to HW filter on device eth15
[  570.106445][T12059] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1512'.
[  570.234086][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1648'.
[  571.217647][ T5744] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  571.367625][ T5744] usb 7-1: Using ep0 maxpacket: 8
[  571.373616][ T5744] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  571.379985][ T5744] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  571.380010][ T5744] usb 7-1: config 0 has no interface number 0
[  571.380049][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  571.380071][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  571.380094][ T5744] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  571.380116][ T5744] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  571.380164][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.385911][ T5744] usb 7-1: config 0 descriptor??
[  571.412718][ T5744] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  571.581308][  T195] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  571.650179][ T2262] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  571.669521][ T5767] usb 7-1: USB disconnect, device number 18
[  571.669628][    C0] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  571.674201][T12067] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19
[  571.694487][ T5767] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  571.743239][  T195] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  571.755803][  T195] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  571.755835][  T195] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  571.755857][  T195] usb 2-1: config 0 interface 0 has no altsetting 0
[  571.772309][  T195] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  571.772335][  T195] usb 2-1: Product: syz
[  571.772349][  T195] usb 2-1: Manufacturer: syz
[  571.772361][  T195] usb 2-1: SerialNumber: syz
[  571.788645][  T195] usb 2-1: config 0 descriptor??
[  571.808132][ T2262] usb 9-1: unable to get BOS descriptor or descriptor too short
[  571.808180][ T2262] usb 9-1: New USB device found: idVendor=21b4, idProduct=0081, bcdDevice=0.40
[  571.811682][ T2262] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  571.811705][ T2262] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  571.811745][ T2262] usb 9-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  571.811778][ T2262] usb 9-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  571.811812][ T2262] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  571.811836][ T2262] usb 9-1: config 1 interface 1 has no altsetting 0
[  571.830390][ T2262] usb 9-1: string descriptor 0 read error: -22
[  571.830540][ T2262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.896328][  T195] usb 2-1: selecting invalid altsetting 0
[  572.000298][T12102] loop7: detected capacity change from 0 to 512
[  572.020631][T12102] EXT4-fs error (device loop7): ext4_validate_block_bitmap:436: comm syz.7.1659: bg 0: block 5: invalid block bitmap
[  572.020671][T12102] loop7: lost filesystem error report for type 5 error -117
[  572.033693][    C1] EXT4-fs (loop7): error count since last fsck: 1
[  572.033718][    C1] EXT4-fs (loop7): initial error at time 1792877134: ext4_validate_block_bitmap:436
[  572.033738][    C1] EXT4-fs (loop7): last error at time 1792877134: ext4_validate_block_bitmap:436
[  572.067611][T12102] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  572.067636][T12102] loop7: lost filesystem error report for type 5 error -117
[  572.069135][T12102] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.1659: invalid indirect mapped block 3 (level 2)
[  572.069167][T12102] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  572.072965][T12102] EXT4-fs (loop7): 1 orphan inode deleted
[  572.072985][T12102] EXT4-fs (loop7): 1 truncate cleaned up
[  572.087809][T12102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.530036][T10425] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.627464][  T195] usb 2-1: USB disconnect, device number 18
[  575.531023][ T2262] usb 9-1: 2:0: failed to get current value for ch 1 (-71)
[  575.733375][ T2262] usb 9-1: USB disconnect, device number 2
[  575.738831][  T995] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  575.773438][T12130] loop6: detected capacity change from 0 to 512
[  575.774473][T12130] EXT4-fs: Ignoring removed oldalloc option
[  575.936021][T12130] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.1666: corrupted in-inode xattr: e_value size too large
[  575.936150][T12130] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  575.937552][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  575.937574][    C0] EXT4-fs (loop6): initial error at time 1792877138: ext4_iget_extra_inode:6027: inode 15
[  575.937604][    C0] EXT4-fs (loop6): last error at time 1792877138: ext4_iget_extra_inode:6027: inode 15
[  575.955823][T12130] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1666: couldn't read orphan inode 15 (err -117)
[  575.955859][T12130] loop6: lost filesystem error report for type 5 error -117
[  575.981586][T12130] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  575.984289][T12130] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.1666: corrupted in-inode xattr: e_value size too large
[  576.646842][ T5302] 8021q: adding VLAN 0 to HW filter on device eth13
[  576.660349][  T995] usb 8-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00
[  576.680837][  T995] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  576.680889][  T995] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.745999][  T995] metro_usb 8-1:1.0: Metrologic USB to Serial converter detected
[  576.888025][ T8696] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  576.934531][  T995] usb 8-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  576.995595][  T995] usb 8-1: USB disconnect, device number 8
[  577.250105][  T995] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  577.885513][  T995] metro_usb 8-1:1.0: device disconnected
[  577.911968][T12152] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR
[  577.918118][T12152] ==================================================================
[  577.918138][T12152] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480
[  577.918258][T12152] Read of size 4 at addr 0000000000000174 by task syz.6.1669/12152
[  577.918274][T12152] 
[  577.918287][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.6.1669 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  577.918312][T12152] Tainted: [L]=SOFTLOCKUP
[  577.918319][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  577.918331][T12152] Call Trace:
[  577.918337][T12152]  <TASK>
[  577.918345][T12152]  dump_stack_lvl+0xe8/0x150
[  577.918375][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  577.918396][T12152]  kasan_report+0x117/0x150
[  577.918423][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  577.918444][T12152]  kasan_check_range+0x264/0x2c0
[  577.918471][T12152]  dm_kcopyd_client_destroy+0xae/0x480
[  577.918493][T12152]  ? __pfx_dm_kcopyd_client_destroy+0x10/0x10
[  577.918510][T12152]  ? kasan_quarantine_put+0xbb/0x1f0
[  577.918530][T12152]  ? lockdep_hardirqs_on+0x7b/0x110
[  577.918550][T12152]  ? kfree+0x1c5/0x650
[  577.918567][T12152]  ? __destroy+0x139/0x2f0
[  577.918635][T12152]  ? vfree+0x426/0x490
[  577.918656][T12152]  __destroy+0x172/0x2f0
[  577.918676][T12152]  cache_ctr+0x1674/0x2bf0
[  577.918701][T12152]  ? __pfx_cache_ctr+0x10/0x10
[  577.918726][T12152]  dm_table_add_target+0x58d/0xc70
[  577.918790][T12152]  table_load+0x325/0x8a0
[  577.918812][T12152]  ? __pfx_table_load+0x10/0x10
[  577.918831][T12152]  ? __might_fault+0xaf/0x130
[  577.918853][T12152]  dm_ctl_ioctl+0x9ec/0xe10
[  577.918884][T12152]  ? __pfx_table_load+0x10/0x10
[  577.918900][T12152]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  577.918942][T12152]  ? hook_file_ioctl+0xc/0x600
[  577.918971][T12152]  ? bpf_lsm_file_ioctl+0x9/0x20
[  577.919004][T12152]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  577.919030][T12152]  __se_sys_ioctl+0xfc/0x170
[  577.919067][T12152]  do_syscall_64+0x166/0x520
[  577.919088][T12152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.919107][T12152]  ? clear_bhb_loop+0x70/0xc0
[  577.919129][T12152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.919147][T12152] RIP: 0033:0x7ff56bd9f559
[  577.919165][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.919181][T12152] RSP: 002b:00007ff56cbd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  577.919200][T12152] RAX: ffffffffffffffda RBX: 00007ff56c026180 RCX: 00007ff56bd9f559
[  577.919213][T12152] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003
[  577.919225][T12152] RBP: 00007ff56be36b20 R08: 0000000000000000 R09: 0000000000000000
[  577.919237][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  577.919246][T12152] R13: 00007ff56c026218 R14: 00007ff56c026180 R15: 00007fffe97f5ec8
[  577.919266][T12152]  </TASK>
[  577.919273][T12152] ==================================================================
[  577.919298][T12152] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  578.222057][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.6.1669 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  578.233068][T12152] Tainted: [L]=SOFTLOCKUP
[  578.237378][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  578.247419][T12152] Call Trace:
[  578.250685][T12152]  <TASK>
[  578.253608][T12152]  vpanic+0x26f/0x710
[  578.257621][T12152]  panic+0xc5/0xd0
[  578.261329][T12152]  ? __pfx_panic+0x10/0x10
[  578.265731][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  578.271356][T12152]  ? rcu_is_watching+0x16/0xb0
[  578.276116][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  578.281738][T12152]  check_panic_on_warn+0x89/0xb0
[  578.286667][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  578.292294][T12152]  end_report+0x73/0x170
[  578.296539][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  578.302162][T12152]  kasan_report+0x128/0x150
[  578.306663][T12152]  ? dm_kcopyd_client_destroy+0xae/0x480
[  578.312313][T12152]  kasan_check_range+0x264/0x2c0
[  578.317248][T12152]  dm_kcopyd_client_destroy+0xae/0x480
[  578.322694][T12152]  ? __pfx_dm_kcopyd_client_destroy+0x10/0x10
[  578.328753][T12152]  ? kasan_quarantine_put+0xbb/0x1f0
[  578.334033][T12152]  ? lockdep_hardirqs_on+0x7b/0x110
[  578.339228][T12152]  ? kfree+0x1c5/0x650
[  578.343317][T12152]  ? __destroy+0x139/0x2f0
[  578.347723][T12152]  ? vfree+0x426/0x490
[  578.351789][T12152]  __destroy+0x172/0x2f0
[  578.356029][T12152]  cache_ctr+0x1674/0x2bf0
[  578.360445][T12152]  ? __pfx_cache_ctr+0x10/0x10
[  578.365225][T12152]  dm_table_add_target+0x58d/0xc70
[  578.370332][T12152]  table_load+0x325/0x8a0
[  578.374653][T12152]  ? __pfx_table_load+0x10/0x10
[  578.379490][T12152]  ? __might_fault+0xaf/0x130
[  578.384160][T12152]  dm_ctl_ioctl+0x9ec/0xe10
[  578.388673][T12152]  ? __pfx_table_load+0x10/0x10
[  578.393514][T12152]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  578.398545][T12152]  ? hook_file_ioctl+0xc/0x600
[  578.403305][T12152]  ? bpf_lsm_file_ioctl+0x9/0x20
[  578.408235][T12152]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  578.413253][T12152]  __se_sys_ioctl+0xfc/0x170
[  578.417842][T12152]  do_syscall_64+0x166/0x520
[  578.422421][T12152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.428593][T12152]  ? clear_bhb_loop+0x70/0xc0
[  578.433264][T12152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.439144][T12152] RIP: 0033:0x7ff56bd9f559
[  578.443551][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.463145][T12152] RSP: 002b:00007ff56cbd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  578.471554][T12152] RAX: ffffffffffffffda RBX: 00007ff56c026180 RCX: 00007ff56bd9f559
[  578.479517][T12152] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003
[  578.487477][T12152] RBP: 00007ff56be36b20 R08: 0000000000000000 R09: 0000000000000000
[  578.495452][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  578.503430][T12152] R13: 00007ff56c026218 R14: 00007ff56c026180 R15: 00007fffe97f5ec8
[  578.511408][T12152]  </TASK>
[  578.514691][T12152] Kernel Offset: disabled
[  578.519032][T12152] Rebooting in 86400 seconds..