last executing test programs:

9m37.851612011s ago: executing program 3 (id=59):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000200), 0x0, 0x2000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='file0\x00', 0x42, 0x1ff)
write(r1, &(0x7f0000000280)='/sy', 0x3)
r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read(r3, &(0x7f0000000300), 0x12)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008080)
openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000680)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000700)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000780), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f00000007c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000028c0)={0x0, &(0x7f0000002900)=""/106, &(0x7f0000002980)="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", &(0x7f0000002b00), 0x80, r7, 0x0, 0x7}, 0x38)
setns(0xc9, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x4)
write(r9, &(0x7f0000000300)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064d1, &(0x7f00000003c0)={0x4000000000000103, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001840)={r10, 0x0, "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", "4875586f39becf3b44a3e68c310d8df0ee11a00772d920c1e6c80d2d1d2316b270ff920483b8de1e02b94a6fa2bd7d3bc1c55124bab0114d9b6db5339a94bdbca6ce00acf505572b4386c09b74c9c891b8032d0df6ac5be1326c74e192907411aa31a74698d8fe1140cf67e568ae079b449e17692bf4b1b0feee7dd2068a6800fc0cd1c72f579df115dee54b46ea6300dbd97ab7a8d8004d1f36800bee38dee22ffbed0e1019b276ea5b9f3175b48ad0e7350123456c9dc7eab21377e32a1a7d37d8ed5731405986d305d34c1764958891ff47bf0611982b9cce985d6da2e586309480f84c0d646bf7a5ed4f663e34534ed80ec898fbef661a7ded213b97ead45b3df4a441bc958b36266799cbdc224071b7d6c57637ab7522d43bf2202c79c27be83c0cbaf960c6197f359502a77c8ffb43cd797d8dec62798dd05337bd4903644037cab1cbef3b803b88d3abe956e8314cc7d5bc8a4489d00f3e4293b34f31b9959d6dfa4ab91a036589fc96ba5703d91b248665262d79391daa38727cfbb739928c4924cd9fc888627a062630cd743dffe51c0a6a8e440d8cf4410ba14ff8c7a834ee37957ef6d55dfd93680b0ef468c65b6b7107af3a7cc7415711e62a6e2ac6d0ba45ba5aeeeb402ebcf6ffa91e186d15196dd0377c33f197b6e518cdbfe26d7027b53616189776d4059ec05797a99252543717d09b18dfce3be8a8d2be0cb78fe18805cfa90f46f55fff476ccabec8c8018a1449050f4a3b95808ac6ac171a484e1065d983809d061dbe91802b3b13a0032c82a4177dcc26dc72e9253baa919fce115dd2234449b6a131c1fe78f1494e58443d76255a4b1a0a0792889f5e89bc01938bc6892db69c705021a43e425a9c0f461b0ca0e21192a71fac6dc7026c20a73f43442f33848c4cf6efb8bc7d8bb747f9361a3a353d95159be4ed73433dabdb226195d1cace27690bd43208fbf5b62a9a9276b162493e8f24dd1cb8250f0cf3436f19ef0ae3adaa0518816e0d422ffcaff66a58dc691235475fffa62bea3544710bc14c5a183ddea14919a8995c241800b684354f1781c33e7ca3879297a1636ee98ebaf7b81143ef7379b9f40ddbd54e26cdba5c22bdd98a1ac4a4a3ab20fa41e39a1c0be39753f9161258ac5ed94e5fa991755119fb73bfa417b1c0bb0bed1190ee9bbd6b1c8d1aa63d7313b95a37c900c3eca0316af2381b9559b5e5ed9014dac9ad4cc1e4e6e62ad3f956344f33383f00e95e68a8bc9dc9e320267e665709a6e2251f18a7954e9b3c680bcfe59e352ba6bdbd03d7c40a3ff31cfdb4556912e9719b76be1041fff2cc1ec00b12686667eb66e00811bb1d5a05ec9d9862b17554ac7916ec45d44a7be0f6d44a95721a70e9520db51c202700d0bb01998b54c94ebff2bb576f396615d33da510063fafff4fcfd84f5a487ff141e151cd4a5bae7eac59924cabeacf4c710b4ded02126a1d240a82390f222919e1a47fc5c8208fa814b9fa8bdfb4d93339dd12b8c48dcb7960ce0ea2997c6cc7d5f5c51c868f8475c229eb261f9934173bc14413104305e12b067b8ba60536ec65492ba39be33d98aad33396916a39a5e653217ee778a55ddfd9f787566570add7ea149e82609911c381876485674e1ef51f33c78292d9adbe60f246f4197e73d6e6f9aa9ef7fb074fea0773a5088508b7e4654c0c9aa7880ecbe690c817d488912ba87d0ca6f32df0181d7c7961ddc29947463aa8a9cc81f48f8aa9936481b743e362f4f1d4b65ea01cd799021310dfbd4e46b8e0848be489f52f516d0b1d5388177a51ec29a045d1199e00b9651cb1f93cd608f7e5ee24300fa2d1dccfc8ec05961b5ae04582830d2eed30e3153bab88efe6afc17717f901f0220dc02613d9d964c747fd36988dc5bbe74b813ac6856f6e52ea35874509ab11416dea5d16d79ecd58e5767e2d939c23bf8ccf9678afa659560778ea090a5306f5f0701b85fe4a89ff4178295c407aebbc8fda507c83068349edece2092b87149a83d7450b65cfb5da3fb59322c8497ccb0ed30ec0bbe7e9a054e267f7bff4f01b7265de231a616dca53dc217470355b8ccb76af42a781e860f7b045e6f4174e81c639162bc0e2bfc6ad91b150aea713a8313ee2ffbd1f4eb2489327005c1c5d20ae5e0c5303fcbb029c21f36efc80ffb33f926cfdea7149228db953918babb222afbbd6c0219e96d538b96d399a9e47fce7a6264ba8e2d9e0b1ccfab66cd61ae40a500a150c66898871038bc6d6ebbd479247273be7167e75ce86ad36e85d9e0b4194002b0866c13c9d45e306f2623e5eec58b9aa87e3ecbb5bf8e09c519d1e5dceaef8b05a53251e1e2707921dc44d91d4a4494ebedb5c42c4cf44a2bc0e898e550c46185279cb9fd07d7157cc54733bba1d0b5c462714c9eb82ba754ecec40772140afa2504138d3b372000a2922787addd9f83096e83ebb1cc817f544a2de2e330e75d19919586e3574a57a9769eb3062d873420e01587493f6a5f0e0e9a5a9c4bbd56d6a418f9513f8e2f504624d0c5b6e3140ae862070f37c87c7dc866907b5766f48e151ac62f34ad8182a4c92f9b1199985969e4d17de286ef2e2a28f0904c27dd8e8c45ced28682595689adb4e61d60ead35aad4169f58e704fcb1b0eb49d647ac4fe91cf62f827f20701fb9ec4a7b0b224453cc9348233073601050f3bbc20a6af1eff479ca07b63a9808b4f40e3eaa4384939d5e0963f01940ee65a52fbb8222723a3a440fa68d26878f5d50f90d2cb87c0cbb6d457c27a02de95e1251733e3fb1480f93f6aaf4e11728d51d6088cb9a17f5b1a0526402a54a88817f7c8639dce936dc564db28c1fa4006bdbd34ac6a639cdb8373c56175debe11218a4c38ed04d6bb553cdc6233a98adaa92eab0b783dc0456ddcb9374e2341629736a3dafe7578b2b6e430ac39b2d85531072b9a0d7676761177751ba198d1258f68b13c5a7b193092622f32359642d35a2f724ce5fcdc3f8d61fa87df76b3a95b12f27064e68e5c49635d638bf04f7f5ba1219a4fec0e211e89b589b39eb923ab5a9a68d150bb1a7583a1bccea57dfeedb56107c98989ffb0149657e73ac364959f4bf9f60bc1d2aad96b5c15ed515678a179379f38a698712bed30502f0683366910bcdb3249fd68fbb85db4dd413c8239dfc1bbc7e8cfdbf21f0601eb30cf5c00cfb8e70dc69e7a420db85eeea1395dbc411722792bd63194a87de4d083ce5cc9044cfee32f3cab00e51d2dc952f9cb3e96a87f14189fa6d7f752b1016e924dbd38a6317d514d81a4fcb9d9e14ac90f75d627e46df863648266af0083e0bb3962ee88b39f0cfd5968c1ccc41837842cbcefe55d3a91a079d1cd8e4143319c6fa6edc8228915d690cdf029d8269b846e12f6067b4d48966c802cd9e15456dffab30816296506d4505336370b5767e8bebdf333c23b358c98570a90ebf9ce6e8e39dc3f9555ce58d23696f0ad70e7774ab20036cd51b8033ca067dbace108600b1606f3fb9ec976fb6953e038512ba447de19c2e0206e1331eb2fc093b6e250783e598571d9c62f6c7c6d83af81767f1040ea73f131469c7e10810e4d6cd5fc8c5874633f451ccf162cfc7be55dc558dded9cd0d4bfafe51102c35f200b5f331fe3727aa4949512de10864563238fbf68564af147b0d96b53a7e4260e826962c1d8d873f578dabdc73faa28a9418a9d786d0f59eb507a90711ec936ab832a590e78f5dcea33f5e6dd56340038cc1edaca1bb26606e3ce82b249053f4c198932bb12edf57bf3ffff7a9c2c658bb9aa88e7254d168ca0db174cc56ed8cfdc7df65170f94dafdb6bc7efc78a3f272dcc299e0085c13c72945cbaccbd7667611a438a3c23651d5cad01679904f3ccfb6064012cb056e00abfe8ffb0f2067ef175d7ffe246eb139c3ae396d2a8fe6611b4cf05d946220ffbd9764302d355be72e60c1f5c3ae17fb303f175ea6d97fc9fc34e9e058f149ce5de8dfb035c4daaece0fcc1eda977021dbc18e0c960773d6148e16cffa42e418c647004fe16873093f3ecbf380f31ff0e4f53ad60604315afbcc71f02effaed214e0c5270bd8ff82d0fe7667dba0d3d1a8c2691563bf700fd7df598a52175f102d39bbed4a8e602a65f6b9703c1e3e458305027ae03de2097e398a79139d16274566481e04c2de96b74e3ead5ad00b5989e34800d9233f00660a9b340555687407ce499bc56cc8358ca3cd08bc9a84b52482429abf6959c02e6885580439eb266f21a819372e54822db5b170a42dabbe6de103c35e7fe5ee6da3394f21609274929d33ba06393f7347f4309e219dc78dd54abaddaf380c6a5ea30bf2092073237b63f92ddc6197904ffce64a5f98bb2665bd9f74ee3949ed69027dadbb08a977131ee031089f42e1fb1c020c685160707bcd0ec7282c509a713032ca9ac006245aace642f6fadafeaac481f94652e4009f164384feba3ecbd85ecd4024d8fcdecff9d2954b65b025f309cd80a1fc5098614b2ac44190b099266c8c1e2f50994bdc383f70cd411608afaa47180052f493d321da42b08f66e7408ed51f92f995030280f534a443db61b5f6f22a81d3f8a7d275a3acebd8f98a133945782f1d08c1ad5fa6d2eea42af2535a19a4276bf92b2656db6aef9fd9ff2abc2816420cf7a97fe2bd6aa0eb7dadbdd2ca48d40c5e49211189bc6e08ac0c45e1d438fa4554e0c3a0f786b515be2e0e8756de285af63e0391ed896d19215da6801fb15fbda96724f5b8ae954628614ad8f0a21c7c326d254c7c0ac0eef05e3efb79a67e99412e17d00d3bfc84038efb43360668b2bb3663720b8d1c66b4d73384a4eafa802141f97ec68959c968fccb947da7d7a50ac8a05e06689ccf3bc4b419d9c7d3860526ef719b1c2cc4a9ffd7e2500d014f417e31071e4574feac01c5119a6617af2509849848e62bb01237d5b6e6a0c076cb3dc57ba658e42453a3410f715441e0f425d18e52ee3b4bf35f70dcb981966d528bc6afca8700d0bda92bedd33d414d833e817e64e03dbe36813d696982f65d66819cc7f3968defebe3b85916df9e4c8066177aad5f19263e38a002ea90d37efa7973063ba6e00ed5ec8693df6b080381656fabbb14b7c19b5f035800b3eefb7c075838b9072e8b34961484282202bee0d4fa59068243f05248526f899b3436172668c2adac7408ee623207353f26ebd6369a6c9fd7fea3f704c419def473b5b6870f88e3b4c293b6c20f494238a0711c1de7809f1f07efa126e0b6263219440680e3ee38c3388d6f2b301abcfacd07639c2b275a15304fed56d6571ad0c8fbbfc41fd82d37905a7bea96a2f71b89bd559b37a800e1bea44a56bd1e902340a2795570fc52a48efbe529bbfcfad8d22fa93eb4061"})
setsockopt(r0, 0x0, 0x482, &(0x7f0000000380)="110000007f0000014e200000000000006d6811000000000000000000000000001000"/44, 0x2c)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000800)=""/4096, &(0x7f0000001800)=0x18)

9m34.949893094s ago: executing program 3 (id=64):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xff, 0x451, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r3, 0x4b32, 0x8)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x13)
munmap(&(0x7f0000694000/0x3000)=nil, 0x3000)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$netlink(r4, 0x0, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000280), &(0x7f00000002c0)=0x8)
getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r6 = io_uring_setup(0x1f35, &(0x7f0000000040)={0x0, 0x2096c, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

9m31.247917221s ago: executing program 3 (id=68):
r0 = openat(0xffffffffffffff9c, 0x0, 0x40242, 0x31)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_QUERY(r0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="383b87ee388300000000000008007d00850000002e0000009500000500000000"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
syz_mount_image$vfat(&(0x7f0000000d80), &(0x7f0000001200)='./file1\x00', 0x8080, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES32, @ANYRES8], 0x3, 0x252, &(0x7f00000013c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000001640)='./bus\x00', 0x10068ad, 0x0, 0x1, 0x0, 0x0)
chdir(&(0x7f0000001680)='./bus\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000016c0)='.\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000001700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

9m30.357583352s ago: executing program 3 (id=72):
socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x101c08a, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x2c1, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x4000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x202, 0x150)
write(r0, &(0x7f0000000280)='27', 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x16f)
execve(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, 0x0, 0x0)
bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000380), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000400)={&(0x7f0000000440)=""/74, 0x33e000, 0x1000}, 0x20)

9m27.715923431s ago: executing program 3 (id=78):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x16)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000d40)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000d80)='1\x00', 0x2)
socket$netlink(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0040818293bb09641cc805d086fa0417dada7f19c35c2111ca986dd9dfb3125357a4789868336e092d5084bbb3b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000280)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000340)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c)
recvmmsg$unix(r1, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0)
sendmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0xa9cc7003, &(0x7f0000001e80)=[{&(0x7f0000001ec0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100"], 0xc8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000020c0), 0x1fffffffc000, 0x10d900)
r4 = socket(0x2d, 0x2, 0x0)
bind$xdp(r4, &(0x7f00000000c0)={0x2d, 0x0, 0x0, 0x48}, 0x10)
socket(0x2d, 0x2, 0x0)

9m26.995310156s ago: executing program 3 (id=81):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673faa90d6125", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50)
timer_create(0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

9m25.010648965s ago: executing program 32 (id=81):
openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @adiantum, 0x0, @desc2})
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(r0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="130000001000020000000000000000000000000000000000e190557c87ac14be8066b673faa90d6125", @ANYRES16=r1, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50)
timer_create(0x1, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f00000076c0)=""/4126, 0x101e)
getdents64(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c)

6m29.174771441s ago: executing program 0 (id=437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001c80)=""/145, 0x91}, {&(0x7f0000001d40)=""/236, 0xec}, {&(0x7f0000001e40)=""/64, 0x40}, {&(0x7f0000001e80)=""/4098, 0x1002}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002f40)=""/4090, 0xffa}, {&(0x7f0000003f40)=""/4099, 0x1003}, {&(0x7f0000004f80)=""/101, 0x65}, {&(0x7f0000005000)=""/203, 0xcb}, {&(0x7f0000005100)=""/84, 0x54}], 0x5}, 0x900000}], 0x6, 0x0, 0x0)

6m28.580051382s ago: executing program 0 (id=440):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000180)=0x200000000)
write$vhost_msg(r2, &(0x7f00000001c0)={0x1, {&(0x7f00000006c0)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f0000000780)={0x1, {&(0x7f0000000800)=""/39, 0x27, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000840)={0x2, 0x0, {&(0x7f00000008c0)=""/69, 0x45, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg(r2, &(0x7f0000000940)={0x1, {&(0x7f00000009c0)=""/130, 0x82, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r2, &(0x7f0000000a80)={0x2, 0x0, {&(0x7f0000000b00)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)
preadv2(r1, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x2d0, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m27.767061692s ago: executing program 0 (id=444):
pipe(0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000ac0))
prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000b80)=0x7)
setrlimit(0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0)
r3 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x8)
ioctl$BTRFS_IOC_DEFRAG(r3, 0xc010128e, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f0000000240)=[{0x0, 0x3, 0x1000}], 0x1, 0x0)
semop(r4, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0x19c, &(0x7f0000000f00)="$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")
r5 = syz_open_procfs(0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x40000)
pipe2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)

6m26.198879601s ago: executing program 0 (id=445):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8=0x0, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000000200)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==")
setrlimit(0x1, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000001e00))
r1 = syz_open_pts(r0, 0x8000)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001e40)=0x1)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001fc0)={0x0, 0x9}, 0x10}, 0x94)
writev(0xffffffffffffffff, &(0x7f0000002000)=[{&(0x7f0000002040)}], 0x1)
timer_create(0x0, &(0x7f0000002080)={0x0, 0x21, 0x2, @thr={&(0x7f0000000000)="0fb134396945cd53c4f7e3ae2dccd26e638364a2bd03657945b4f22a0cff7c82819fc05ae1fe6f5267d9dfe66a3a305c93b3e74ad87743b0579286e05cc2687ce73431206cc80e504e4f9a950ad160a2ebb8355fe320205004765022abcd4eca4d0eec353b1aec2f1c6367dfbd38a137801cbc15b8f9fc632c598e1137c0e23c635f2eb726ed1003634b4a0f8f3e6a74deeb87d5571ee5fe1b3d99f28370342ddbe5e171c2974d8649e00fe6f6186496d9297d9d6a2966121581b59a9c1f70850d42401e6c0af27acc5af7b739f3", &(0x7f0000000c80)="3819c15d4c831caa4b0ec6499a16a688965d6670bcbfa1d1bab57bc08305b4db1a9df1c62efc48ad332313a05974e4f480a97703589c3701010000ddd138c05daf5426955037a4dc13c835280fd03319131e33e383e0dd5750480838f990e4"}}, &(0x7f00000020c0))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000002100)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000002140)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
fsopen(&(0x7f0000002180)='ext3\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x11c0, 0x5)
r2 = msgget$private(0x0, 0x6)
msgrcv(r2, &(0x7f0000002200)={0x0, ""/246}, 0xfe, 0x0, 0x2000)
openat(0xffffffffffffff9c, &(0x7f0000002300)='./file0\x00', 0x0, 0x80)
open(&(0x7f0000002400)='./file0\x00', 0x148640, 0x78e22799f4a46eaf)
r3 = syz_clone3(&(0x7f0000002440)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = landlock_create_ruleset(&(0x7f00000024c0)={0x0, 0x3}, 0x10, 0x0)
landlock_create_ruleset(&(0x7f0000002500)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0xa)
r5 = landlock_create_ruleset(&(0x7f0000002540)={0x2fbd, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
tgkill(r3, r3, 0x21)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)

6m21.985530552s ago: executing program 0 (id=452):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df2508000100000000000900", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c0810)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0)
gettimeofday(0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000600)=0x6f)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r5)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'lo\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={0x20, r6, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000)

6m19.21768328s ago: executing program 0 (id=458):
pipe(0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000ac0))
prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000b80)=0x7)
setrlimit(0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0)
r3 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x8)
ioctl$BTRFS_IOC_DEFRAG(r3, 0xc010128e, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f0000000240)=[{0x0, 0x3, 0x1000}], 0x1, 0x0)
semop(r4, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0x19c, &(0x7f0000000f00)="$eJzs0L9rE2Ecx/H397lLLleoGhWHCDZgMZ4U80NxcApOETxwcBEsGNqzES9qchlULNRBChLsv6BTHcXBSUTBuTgIDnou3SQ3iIOIw8ndPQ7+DX1ecHzv++H5xXcQjSIH2ADokrPYx0cEG1iQIlOqqK91/13XraJwQfdTIV/5Qve16P6DW/0wDMb183Wq/wXAzzwrokfBOFrgiCIRusjnHw9X+nLdJ+0yVKsuHMDNzxx5T6nZ8xxWWKSNKRcVIykB+5uT4d1m9CdN02F/LVgLbnc6Z861zrYcOs0bN8NgDsR7IopnrOP5OD6ut05pmcc79hxLgngDFVtyKqG8zNaOdfL4UoLyZqQI7xoJzld7UFdXOEHlWvb4HoeE51g+i5dwFTbZRa0eclm9krb9yf5VUlQ2LOv0yp1wdfOqkt/l7a7MKtLepdRop46eYY2DvGczZjGmF7Mds/sNkTfZLdN8nq5e+VJP9yjHoMy9/mQybpfhgzR8OtlXhfn8OJW/qwpv9R5d+PLvxzAMwzAMwzAMw9gD/gYAAP//bMZfuA==")
r5 = syz_open_procfs(0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x40000)
pipe2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)

6m18.059888188s ago: executing program 33 (id=458):
pipe(0x0)
accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000ac0))
prlimit64(0x0, 0xe, &(0x7f0000000b00)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000b40)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000b80)=0x7)
setrlimit(0xf, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000cc0), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000d00), 0x10106, 0x2, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x6000, 0x0)
r3 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x8)
ioctl$BTRFS_IOC_DEFRAG(r3, 0xc010128e, 0x3)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r4 = semget$private(0x0, 0x6, 0x0)
semtimedop(r4, &(0x7f0000000240)=[{0x0, 0x3, 0x1000}], 0x1, 0x0)
semop(r4, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000e40), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000ec0), 0x1, 0x19c, &(0x7f0000000f00)="$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")
r5 = syz_open_procfs(0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x40000)
pipe2(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, 0x0)

1m50.930431918s ago: executing program 1 (id=1314):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="0000000001000000", 0x8)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r0, 0x5)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect(r1, &(0x7f0000000140)=@in={0x2, 0x4e20, @loopback}, 0x80)

1m50.457797393s ago: executing program 1 (id=1319):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff)
add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
syz_open_dev$video(0x0, 0x7, 0x40)
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
symlinkat(&(0x7f0000000840)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00')
symlinkat(&(0x7f00000008c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00')

1m49.206042436s ago: executing program 1 (id=1322):
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRESHEX=r4])

1m44.515424393s ago: executing program 1 (id=1338):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000006c0), &(0x7f0000000700)='./file1\x00', 0x218018, &(0x7f0000000900)=ANY=[@ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f72676574006769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESOCT=0x0, @ANYBLOB="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"], 0xff, 0xc2d, &(0x7f0000001300)="$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")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m42.794603755s ago: executing program 1 (id=1342):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000010000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0c0001"], 0x2c}], 0x1}, 0x0)

1m39.808057606s ago: executing program 1 (id=1349):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9})

1m38.12850886s ago: executing program 34 (id=1349):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000140)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000180)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x5e, 0xfffffffffffffff9})

12.924382636s ago: executing program 4 (id=1619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xe4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x10000)

12.340077948s ago: executing program 4 (id=1622):
socket$nl_rdma(0x10, 0x3, 0x14)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

11.279542897s ago: executing program 7 (id=1626):
syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x121400)
ioctl$I2C_RDWR(r0, 0x707, 0x0)

9.694457051s ago: executing program 2 (id=1633):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x22)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x20)

7.393771112s ago: executing program 6 (id=1634):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000001280)='syzkaller\x00'}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})

7.39207772s ago: executing program 4 (id=1635):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x5)
write$dsp(r0, &(0x7f0000000280)="5cba91a4", 0xffffffd9)
write$dsp(r0, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54)
write$dsp(r0, &(0x7f0000000340)="cd", 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000380)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0x8)
syz_clone3(&(0x7f00000003c0)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

6.811394839s ago: executing program 7 (id=1636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0)
recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40018180)

6.211169181s ago: executing program 5 (id=1637):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe80000000000000000000000000001f0000000000000000000000000000000000000001000000000a000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000050000000000000001000000000000000000000000000000dd0200000000000000000000000000000000000000000000c4000500ac141438000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000fcffffff01030000000000000080000000000000ff020000000000000000000000000001000000003c000000020000407f000000000000000000008459c7487ecfd478f0c4"], 0x17c}}, 0x0)

6.19992734s ago: executing program 2 (id=1638):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]})
setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001})

6.078014428s ago: executing program 6 (id=1639):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a4bfda84"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375e", 0x39}], 0x1}, 0x4008000)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1401, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004094)

6.043627801s ago: executing program 5 (id=1640):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x420c0}, 0x0)

5.842944802s ago: executing program 7 (id=1641):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000840)={0x3, &(0x7f0000000880)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90)

5.077298909s ago: executing program 5 (id=1642):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'dummy0\x00'})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000300), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
sendfile(r2, 0xffffffffffffffff, 0x0, 0x106f)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000007c0)={0xc})
ioctl(r3, 0x3b8f, &(0x7f0000000800)="2800000006000000010000000400000000000000000000000010")

5.006291233s ago: executing program 2 (id=1643):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000002c0)=r3, 0x4)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@caif=@dgm={0x25, 0x5, 0x3}, 0x80, &(0x7f0000000580)}, 0x10)

4.983868817s ago: executing program 6 (id=1644):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='.\x00', 0x800714, &(0x7f0000000280)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7}}, {@minixdf}]}, 0x1, 0x4da, &(0x7f0000000b80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000580)={0x9, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_io_uring_setup(0x2d39, 0x0, 0x0, 0x0, 0x0)
migrate_pages(0x0, 0x6fb8, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x304}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", '\x00', "a915950d158d5a6b"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
writev(r3, &(0x7f00000005c0)=[{&(0x7f0000000140)='X', 0x1}], 0x1)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

4.931455974s ago: executing program 4 (id=1645):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x5)
write$dsp(r0, &(0x7f0000000280)="5cba91a4", 0xffffffd9)
write$dsp(r0, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54)
write$dsp(r0, &(0x7f0000000340)="cd", 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x8)
syz_clone3(&(0x7f00000003c0)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, 0x0)
pwritev(r1, 0x0, 0x0, 0x0, 0x0)

3.942217558s ago: executing program 7 (id=1646):
syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x1, 0x121400)
ioctl$I2C_RDWR(r0, 0x707, 0x0)

3.941271841s ago: executing program 5 (id=1647):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x10000)

3.77090829s ago: executing program 2 (id=1648):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x22)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, 0x0, 0x0}, 0x20)

3.713785507s ago: executing program 5 (id=1649):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0xc0045405, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000001280)='syzkaller\x00'}, 0x94)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000600)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0x2, 0x10000, 0x7ffd, 0x6, 0x1007, 0xc72d, 0x4, 0x10, 0xadd2, 0x8, 0x4ce, 0x9e9b, 0x101, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x0, 0x4]})

1.380258232s ago: executing program 6 (id=1650):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe80000000000000000000000000001f0000000000000000000000000000000000000001000000000a000020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000050000000000000001000000000000000000000000000000dd0200000000000000000000000000000000000000000000c4000500ac141438000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb000000000000000000000000fcffffff01030000000000000080000000000000ff020000000000000000000000000001000000003c000000020000407f000000000000000000008459c7487ecfd478f0c4"], 0x17c}}, 0x0)

343.100003ms ago: executing program 2 (id=1651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x408c1}, 0x0)
recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x40018180)

268.163047ms ago: executing program 7 (id=1652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x420c0}, 0x0)

211.131879ms ago: executing program 4 (id=1653):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000300))
setns(0xc9, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

208.393679ms ago: executing program 6 (id=1654):
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, 0x1e, 0x301, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="a4bfda84"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375e", 0x39}], 0x1}, 0x4008000)
sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, 0x1401, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4004094)

206.185052ms ago: executing program 5 (id=1655):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x42f82, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x5)
write$dsp(r0, &(0x7f0000000280)="5cba91a4", 0xffffffd9)
write$dsp(r0, &(0x7f00000002c0)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54)
write$dsp(r0, &(0x7f0000000340)="cd", 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000380)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r1, 0x8)
syz_clone3(&(0x7f00000003c0)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

20.602202ms ago: executing program 2 (id=1656):
r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}})
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000440)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000540), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000580), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x4c7ac37826251993, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@cache={0x0, 0x800, 0x0, 0x80, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x1}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'default 0'}}]})
setrlimit(0x5, &(0x7f0000000540)={0x7, 0x8001})

9.799968ms ago: executing program 4 (id=1657):
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000740)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000840), 0x651, 0x0)
recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000008c0)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
ioctl$int_in(r3, 0x5452, &(0x7f0000000900)=0xffffffffffffffff)
sendto$inet6(r3, &(0x7f0000000940)="8b", 0x34000, 0x0, &(0x7f0000000980)={0xa, 0x0, 0x0, @private1}, 0x1c)
ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000840)={0x3, &(0x7f0000000880)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90)

7.922578ms ago: executing program 7 (id=1658):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000002c0)=r3, 0x4)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000500)=@caif=@dgm={0x25, 0x5, 0x3}, 0x80, &(0x7f0000000580)}, 0x10)

0s ago: executing program 6 (id=1659):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x108, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x100}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x4}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x10000)

kernel console output (not intermixed with test programs):

fido_id[9048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  512.609637][ T9050] loop5: detected capacity change from 0 to 2048
[  512.878042][ T5649] libceph: connect (1)[c::]:6789 error -101
[  512.886650][ T5649] libceph: mon0 (1)[c::]:6789 connect error
[  512.897265][ T9053] ceph: No mds server is up or the cluster is laggy
[  512.916292][ T5649] libceph: connect (1)[c::]:6789 error -101
[  512.929976][ T5649] libceph: mon0 (1)[c::]:6789 connect error
[  513.267874][ T9050]  loop5: p1 < > p3
[  513.913129][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  514.019437][ T9050] loop5: p3 size 134217728 extends beyond EOD, truncated
[  514.081919][ T5787] hsr0: entered promiscuous mode
[  514.101777][ T9058] loop4: detected capacity change from 0 to 16
[  514.104173][ T9058] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  514.337966][ T9045] loop2: detected capacity change from 0 to 32768
[  514.430456][ T9045] JBD2: Ignoring recovery information on journal
[  514.441151][ T9045] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  514.441183][ T9045] JBD2: bad block at offset 32
[  514.472009][ T9045] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  514.656742][ T9065] loop5: detected capacity change from 0 to 2048
[  514.704586][ T9065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  514.759517][   T33] audit: type=1800 audit(1792876989.463:436): pid=9065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.677" name="file1" dev="loop5" ino=1346 res=0 errno=-22
[  514.788249][ T5644] ocfs2: Unmounting device (7,2) on (node local)
[  514.869053][ T9075] loop6: detected capacity change from 0 to 2048
[  515.246427][ T9075]  loop6: p1 < > p3
[  515.721323][ T9075] loop6: p3 size 134217728 extends beyond EOD, truncated
[  517.869942][ T9098] loop5: detected capacity change from 0 to 256
[  517.879007][ T9098] vfat: Unknown parameter 'utfÀ£êþIÜ`hëž8'
[  518.072566][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'.
[  518.072615][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.684'.
[  518.072633][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'.
[  518.358412][ T9102] netlink: 56 bytes leftover after parsing attributes in process `syz.5.686'.
[  518.416643][ T9102] loop5: detected capacity change from 0 to 1024
[  518.605091][ T9102] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  518.847156][ T9102] EXT4-fs error (device loop5): ext4_map_blocks:951: inode #3: block 1: comm syz.5.686: lblock 1 mapped to illegal pblock 1 (length 1)
[  518.847269][ T9102] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  518.851817][ T9102] Quota error (device loop5): write_blk: dquota write failed
[  518.852031][ T9102] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  518.852291][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  518.852313][    C0] EXT4-fs (loop5): initial error at time 1792876993: ext4_map_blocks:951: inode 3: block 1
[  518.852355][    C0] EXT4-fs (loop5): last error at time 1792876993: ext4_map_blocks:951: inode 3: block 1
[  518.852497][ T9102] EXT4-fs error (device loop5): ext4_acquire_dquot:7120: comm syz.5.686: Failed to acquire dquot type 0
[  518.852546][ T9102] loop5: lost filesystem error report for type 5 error -117
[  518.910173][ T9102] EXT4-fs error (device loop5): ext4_free_blocks:6717: comm syz.5.686: Freeing blocks not in datazone - block = 0, count = 4096
[  518.910256][ T9102] loop5: lost filesystem error report for type 5 error -117
[  519.070129][ T9102] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.686: Invalid inode bitmap blk 0 in block_group 0
[  519.070170][ T9102] loop5: lost filesystem error report for type 5 error -117
[  519.071834][ T9102] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem
[  519.071860][ T9102] loop5: lost filesystem error report for type 5 error -117
[  519.092322][ T9102] EXT4-fs (loop5): 1 orphan inode deleted
[  519.094117][ T9102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  519.161389][  T103] EXT4-fs error (device loop5): ext4_map_blocks:867: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1)
[  519.165360][  T103] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  519.171436][  T103] EXT4-fs error (device loop5): ext4_release_dquot:7156: comm kworker/u8:5: Failed to release dquot type 0
[  519.430136][ T6245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.432130][ T9121] loop6: detected capacity change from 0 to 2048
[  525.011001][ T9121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  525.040995][   T33] audit: type=1800 audit(1792876999.743:437): pid=9121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.693" name="file1" dev="loop6" ino=1346 res=0 errno=-22
[  525.527497][ T9134] syzkaller1: entered promiscuous mode
[  525.527524][ T9134] syzkaller1: entered allmulticast mode
[  526.977327][ T9141] loop5: detected capacity change from 0 to 2048
[  526.978396][ T9141] udf: Unknown parameter 'ÿÿ0xffffffffffffffffÿÿ'
[  527.159390][ T9151] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  527.167307][ T9148] loop1: detected capacity change from 0 to 512
[  527.274597][ T9153] loop4: detected capacity change from 0 to 2048
[  527.297625][ T9153] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  527.996075][   T33] audit: type=1800 audit(1792877002.703:438): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.695" name="file1" dev="loop4" ino=1346 res=0 errno=-22
[  528.282484][ T9160] FAULT_INJECTION: forcing a failure.
[  528.282484][ T9160] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  528.282523][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.2.700 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  528.282553][ T9160] Tainted: [L]=SOFTLOCKUP
[  528.282561][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  528.282575][ T9160] Call Trace:
[  528.282584][ T9160]  <TASK>
[  528.282594][ T9160]  dump_stack_lvl+0xe8/0x150
[  528.282639][ T9160]  should_fail_ex+0x3eb/0x540
[  528.282671][ T9160]  strncpy_from_user+0x36/0x2c0
[  528.282788][ T9160]  do_getname+0x77/0x250
[  528.282859][ T9160]  __se_sys_link+0x2b/0x2c0
[  528.282911][ T9160]  do_syscall_64+0x166/0x520
[  528.282947][ T9160]  ? trace_irq_disable+0x3b/0x140
[  528.282978][ T9160]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.283002][ T9160]  ? clear_bhb_loop+0x70/0xc0
[  528.283030][ T9160]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  528.283053][ T9160] RIP: 0033:0x7fc7afb9f559
[  528.283074][ T9160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  528.283093][ T9160] RSP: 002b:00007fc7b0b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  528.283124][ T9160] RAX: ffffffffffffffda RBX: 00007fc7afe25fa0 RCX: 00007fc7afb9f559
[  528.283140][ T9160] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0
[  528.283155][ T9160] RBP: 00007fc7b0b17090 R08: 0000000000000000 R09: 0000000000000000
[  528.283168][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  528.283182][ T9160] R13: 00007fc7afe26038 R14: 00007fc7afe25fa0 R15: 00007ffc99fa1788
[  528.283216][ T9160]  </TASK>
[  529.924545][ T9178] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.705'.
[  529.946222][ T9175] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.705'.
[  530.369550][ T9196] Illegal XDP return value 4294967274 on prog  (id 53) dev N/A, expect packet loss!
[  530.938888][ T9214] netlink: 'syz.5.725': attribute type 29 has an invalid length.
[  530.939967][ T9214] netlink: 'syz.5.725': attribute type 29 has an invalid length.
[  531.055099][ T9222] netlink: 48 bytes leftover after parsing attributes in process `syz.5.727'.
[  531.058889][ T9221] warning: `syz.4.728' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  531.597713][ T9247] netlink: 108 bytes leftover after parsing attributes in process `syz.1.740'.
[  531.616770][ T9247] netlink: 108 bytes leftover after parsing attributes in process `syz.1.740'.
[  532.409164][ T9287] netlink: 'syz.2.759': attribute type 15 has an invalid length.
[  532.409196][ T9287] netlink: 'syz.2.759': attribute type 7 has an invalid length.
[  532.409213][ T9287] netlink: 52 bytes leftover after parsing attributes in process `syz.2.759'.
[  532.665019][ T9293] netlink: 'syz.2.761': attribute type 1 has an invalid length.
[  532.979086][ T9301] netlink: 'syz.6.765': attribute type 39 has an invalid length.
[  533.057982][ T9301] hsr_slave_0: left promiscuous mode
[  533.100889][ T9301] hsr_slave_1: left promiscuous mode
[  533.617714][ T9329] netlink: del zone limit has 4 unknown bytes
[  533.686214][ T9331] netlink: 56 bytes leftover after parsing attributes in process `syz.6.779'.
[  533.938875][ T9337] smbdirect: ib_dev[rxe0] renamed to [syz1]
[  534.009819][ T9341] lo speed is unknown, defaulting to 1000
[  534.023614][ T9341] lo speed is unknown, defaulting to 1000
[  534.030230][ T9341] lo speed is unknown, defaulting to 1000
[  534.107082][ T9351] netlink: 'syz.4.788': attribute type 3 has an invalid length.
[  534.661612][ T9341] infiniband s
z1: set active
[  534.661684][ T5649] lo speed is unknown, defaulting to 1000
[  534.669760][ T9341] infiniband s
z1: added lo
[  534.915328][ T9341] smbdirect: ib_dev[s
z1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  534.915379][ T9341] smbdirect: ib_dev[s
z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  534.915424][ T9341] smbdirect: ib_dev[s
z1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  535.061540][ T9341] RDS/IB: s
z1: added
[  535.061604][ T9341] smc: adding ib device s
z1 with port count 1
[  535.061626][ T9341] smc:    ib device s
z1 port 1 has no pnetid
[  535.080753][ T5787] lo speed is unknown, defaulting to 1000
[  535.091044][ T9341] lo speed is unknown, defaulting to 1000
[  535.423473][ T9341] lo speed is unknown, defaulting to 1000
[  535.597545][ T9394] netlink: 'syz.4.808': attribute type 21 has an invalid length.
[  535.597570][ T9394] netlink: 'syz.4.808': attribute type 20 has an invalid length.
[  536.057077][ T9408] netlink: 'syz.2.814': attribute type 1 has an invalid length.
[  536.057109][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'.
[  536.138764][ T9341] lo speed is unknown, defaulting to 1000
[  536.654371][ T9341] lo speed is unknown, defaulting to 1000
[  536.838977][ T9430] loop2: detected capacity change from 0 to 4096
[  536.957705][ T9430] ntfs3(loop2): ino=9, mi_enum_attr
[  536.957740][ T9430] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  536.978078][ T9430] ntfs3(loop2): ino=9, mi_enum_attr
[  536.978205][ T9430] ntfs3(loop2): ino=b, mi_enum_attr
[  536.978293][ T9430] ntfs3(loop2): Failed to load $Extend (-22).
[  536.978312][ T9430] ntfs3(loop2): Failed to initialize $Extend.
[  537.140335][ T9341] lo speed is unknown, defaulting to 1000
[  537.760344][ T9451] FAULT_INJECTION: forcing a failure.
[  537.760344][ T9451] name failslab, interval 1, probability 0, space 0, times 0
[  537.760387][ T9451] CPU: 1 UID: 0 PID: 9451 Comm: syz.4.829 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  537.760426][ T9451] Tainted: [L]=SOFTLOCKUP
[  537.760434][ T9451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  537.760449][ T9451] Call Trace:
[  537.760458][ T9451]  <TASK>
[  537.760468][ T9451]  dump_stack_lvl+0xe8/0x150
[  537.760511][ T9451]  should_fail_ex+0x3eb/0x540
[  537.760545][ T9451]  should_failslab+0xa8/0x100
[  537.760583][ T9451]  __kmalloc_cache_noprof+0x9e/0x600
[  537.760611][ T9451]  ? __kmalloc_cache_noprof+0x148/0x600
[  537.760637][ T9451]  ? ioc_cpd_alloc+0x73/0x120
[  537.760774][ T9451]  ? ioc_cpd_alloc+0x73/0x120
[  537.760803][ T9451]  ioc_cpd_alloc+0x73/0x120
[  537.760826][ T9451]  blkcg_css_alloc+0x45a/0xa80
[  537.760921][ T9451]  cgroup_apply_control_enable+0x5bb/0xda0
[  537.760984][ T9451]  cgroup_mkdir+0x1220/0x14b0
[  537.761031][ T9451]  ? __pfx_cgroup_mkdir+0x10/0x10
[  537.761065][ T9451]  kernfs_iop_mkdir+0x213/0x360
[  537.761129][ T9451]  vfs_mkdir+0x40e/0x630
[  537.761175][ T9451]  filename_mkdirat+0x285/0x510
[  537.761207][ T9451]  ? __might_fault+0xaf/0x130
[  537.761243][ T9451]  ? __pfx_filename_mkdirat+0x10/0x10
[  537.761282][ T9451]  ? do_getname+0x151/0x250
[  537.761312][ T9451]  __se_sys_mkdirat+0x35/0x150
[  537.761351][ T9451]  do_syscall_64+0x166/0x520
[  537.761375][ T9451]  ? trace_irq_disable+0x3b/0x140
[  537.761406][ T9451]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.761431][ T9451]  ? clear_bhb_loop+0x70/0xc0
[  537.761459][ T9451]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.761482][ T9451] RIP: 0033:0x7f8758d9f559
[  537.761504][ T9451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.761524][ T9451] RSP: 002b:00007f8759c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  537.761549][ T9451] RAX: ffffffffffffffda RBX: 00007f8759025fa0 RCX: 00007f8758d9f559
[  537.761565][ T9451] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c
[  537.761581][ T9451] RBP: 00007f8758e36b20 R08: 0000000000000000 R09: 0000000000000000
[  537.761595][ T9451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.761609][ T9451] R13: 00007f8759026038 R14: 00007f8759025fa0 R15: 00007ffd816de058
[  537.761652][ T9451]  </TASK>
[  538.940592][ T9474] ip_tables: iptables: counters copy to user failed while replacing table
[  539.398865][ T9491] netlink: 'syz.6.846': attribute type 10 has an invalid length.
[  539.446885][ T9491] team0: Port device dummy0 added
[  540.047446][ T9514] CIFS: Attempting to mount //127.0.0.1/share
[  540.089383][ T9514] CIFS: VFS: Error connecting to socket. Aborting operation.
[  540.089705][ T9514] CIFS: VFS: cifs_mount failed w/return code = -101
[  540.795442][ T9518] loop6: detected capacity change from 0 to 32768
[  540.817637][ T9518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.858 (9518)
[  540.850516][ T9518] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  540.850556][ T9518] BTRFS info (device loop6): using sha256 checksum algorithm
[  541.066301][ T9518] BTRFS info (device loop6): enabling ssd optimizations
[  541.066331][ T9518] BTRFS info (device loop6): disabling tree log
[  541.066397][ T9518] BTRFS info (device loop6): turning on async discard
[  541.066415][ T9518] BTRFS info (device loop6): enabling free space tree
[  541.390244][   T33] audit: type=1800 audit(1792877016.093:439): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.858" name="file1" dev="loop6" ino=260 res=0 errno=-22
[  541.604082][ T9556] loop2: detected capacity change from 0 to 1024
[  541.611143][ T9556] ext4: Unknown parameter 'subj_role'
[  543.163850][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  543.322115][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  543.322176][   T31] usb 6-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00
[  543.355506][   T31] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.355539][   T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  543.355587][   T31] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  543.401137][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  543.401166][   T31] usb 6-1: Product: syz
[  543.401179][   T31] usb 6-1: Manufacturer: syz
[  543.546661][   T31] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -22
[  544.133415][ T7945] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  544.208889][ T5757] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  545.053208][ T5757] usb 3-1: New USB device found: idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  545.056672][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  545.056705][ T5757] usb 3-1: Product: syz
[  545.056721][ T5757] usb 3-1: Manufacturer: syz
[  545.056736][ T5757] usb 3-1: SerialNumber: syz
[  545.158643][ T5757] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  545.587418][ T5757] vp7045: USB control message 'in' went wrong.
[  545.587439][ T5757] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  545.587495][ T5757] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  545.626957][ T5757] usb 3-1: USB disconnect, device number 17
[  546.608202][ T5649] usb 6-1: USB disconnect, device number 9
[  546.773452][ T9615] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  547.038174][ T9629] loop6: detected capacity change from 0 to 2048
[  547.277045][ T9629] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  547.277512][ T9629] ext4 filesystem being mounted at /70/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  549.343403][ T7945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.591638][ T9652] loop4: detected capacity change from 0 to 32768
[  551.308723][ T9699] loop5: detected capacity change from 0 to 1024
[  551.436582][ T9699] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.771932][ T6245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.194640][ T9721] loop5: detected capacity change from 0 to 512
[  553.805574][ T9735] siw: device registration error -23
[  553.901153][ T9735] smc: removing ib device s
z1
[  554.022529][ T5851] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  554.178523][ T5851] usb 6-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  554.207967][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.207998][ T5851] usb 6-1: Product: syz
[  554.208013][ T5851] usb 6-1: Manufacturer: syz
[  554.208028][ T5851] usb 6-1: SerialNumber: syz
[  554.256732][ T5851] usb 6-1: config 0 descriptor??
[  554.385061][ T9735] smbdirect: ib_dev[s
z1] removed
[  554.511083][ T5851] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  555.534503][ T5851] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  555.579513][ T5851] usb 6-1: USB disconnect, device number 10
[  555.892336][   T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  556.042383][   T31] usb 5-1: Using ep0 maxpacket: 16
[  556.043238][   T31] usb 5-1: New USB device found: idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  556.044886][   T31] usb 5-1: config 166 has an invalid interface number: 177 but max is 1
[  556.044914][   T31] usb 5-1: config 166 has an invalid interface number: 34 but max is 1
[  556.044937][   T31] usb 5-1: config 166 has no interface number 0
[  556.044955][   T31] usb 5-1: config 166 has no interface number 1
[  556.045009][   T31] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  556.045032][   T31] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  556.045071][   T31] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  556.045098][   T31] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  556.045127][   T31] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  556.045157][   T31] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  556.045184][   T31] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  556.045211][   T31] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  556.045235][   T31] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  556.045263][   T31] usb 5-1: config 166 interface 177 has no altsetting 0
[  556.045283][   T31] usb 5-1: config 166 interface 34 has no altsetting 0
[  556.058186][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.058213][   T31] usb 5-1: Product: syz
[  556.058229][   T31] usb 5-1: Manufacturer: syz
[  556.058244][   T31] usb 5-1: SerialNumber: syz
[  556.354801][    C0] Unknown status report in ack skb
[  556.740910][   T31] ums-realtek 5-1:166.177: USB Mass Storage device detected
[  557.003935][   T31] ums-realtek 5-1:166.34: USB Mass Storage device detected
[  557.143518][   T31] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5
[  557.177732][   T31] uvcvideo 5-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  557.177876][   T31] uvcvideo 5-1:166.34: No valid video chain found.
[  557.214792][   T31] usb 5-1: USB disconnect, device number 12
[  557.482362][ T5649] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  557.633862][ T5649] usb 7-1: New USB device found: idVendor=0681, idProduct=0005, bcdDevice=1.00
[  557.636462][ T5649] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  557.636496][ T5649] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  557.636551][ T5649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.743952][ T5649] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[  559.600454][ T9808] loop4: detected capacity change from 0 to 256
[  559.624638][ T5757] usb 7-1: USB disconnect, device number 5
[  559.698388][ T5757] idmouse 7-1:1.0: disconnected
[  559.752785][ T9808] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  559.801353][ T9807] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10)
[  559.813483][   T33] audit: type=1800 audit(1792877034.523:440): pid=9807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.963" name="file1" dev="loop4" ino=11 res=0 errno=-22
[  560.032670][ T9817] loop1: detected capacity change from 0 to 4096
[  560.272477][ T5757] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  560.424300][ T5757] usb 3-1: Using ep0 maxpacket: 8
[  560.430240][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short
[  560.430297][ T5757] usb 3-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31
[  560.431569][ T5757] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  560.431595][ T5757] usb 3-1: config 0 has no interface number 0
[  560.431638][ T5757] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  560.431666][ T5757] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  560.431689][ T5757] usb 3-1: config 0 interface 88 has no altsetting 0
[  560.438101][ T5757] usb 3-1: language id specifier not provided by device, defaulting to English
[  560.453762][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  560.453838][ T5757] usb 3-1: Product: syz
[  560.453897][ T5757] usb 3-1: Manufacturer: �ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚��똗⊇ͳ䭔妸�芑���횷풋ⷦ�鑲쌯�玜帕⃢槴�캟�ᓩﮠ�턷Ù
[  560.453957][ T5757] usb 3-1: SerialNumber: syz
[  560.494740][ T5757] usb 3-1: config 0 descriptor??
[  560.574543][ T5851] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  560.642398][   T31] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  560.726329][ T5851] usb 7-1: Using ep0 maxpacket: 8
[  560.728027][ T5851] usb 7-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  560.729762][ T5851] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  560.729818][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.753614][ T5851] usb 7-1: config 0 descriptor??
[  560.789802][ T5851] gspca_main: vc032x-2.14.0 probing 046d:0892
[  560.802094][   T31] usb 6-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40
[  560.826966][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.826999][   T31] usb 6-1: Product: syz
[  560.827016][   T31] usb 6-1: Manufacturer: syz
[  560.827030][   T31] usb 6-1: SerialNumber: syz
[  560.877239][ T5757] input: �ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚��똗⊇ͳ䭔妸�芑���횷풋ⷦ�鑲쌯�玜帕⃢槴�캟�ᓩﮠ�턷Ù s as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input21
[  560.951237][ T5757] usb 3-1: USB disconnect, device number 18
[  561.293337][   T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  561.445797][ T9853] block nbd4: NBD_DISCONNECT
[  561.495499][ T9842] loop1: detected capacity change from 0 to 40427
[  561.515693][ T9855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.983'.
[  561.548193][ T9842] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  561.548259][ T9842] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  561.605032][ T9842] F2FS-fs (loop1): build fault injection rate: 17008
[  561.605065][ T9842] F2FS-fs (loop1): build fault injection type: 0x1f8
[  561.622795][ T9842] F2FS-fs (loop1): invalid crc value
[  561.847194][ T9842] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  562.109277][ T9872] 9pnet_fd: Insufficient options for proto=fd
[  562.134194][ T9842] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  562.134630][ T9842] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  562.872709][ T5851] usb 7-1: USB disconnect, device number 6
[  563.156893][ T9842] syz.1.977: attempt to access beyond end of device
[  563.156893][ T9842] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  563.190176][ T9842] CPU: 1 UID: 0 PID: 9842 Comm: syz.1.977 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  563.190216][ T9842] Tainted: [L]=SOFTLOCKUP
[  563.190225][ T9842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  563.190240][ T9842] Call Trace:
[  563.190250][ T9842]  <TASK>
[  563.190261][ T9842]  dump_stack_lvl+0xe8/0x150
[  563.190307][ T9842]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  563.190513][ T9842]  f2fs_write_end_bio+0x118e/0x15d0
[  563.190602][ T9842]  __submit_merged_bio+0x258/0x6a0
[  563.190664][ T9842]  ? rcu_is_watching+0x16/0xb0
[  563.190715][ T9842]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  563.190755][ T9842]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  563.190812][ T9842]  f2fs_write_data_pages+0x2a13/0x36e0
[  563.190837][ T9842]  ? is_bpf_text_address+0x292/0x2b0
[  563.190922][ T9842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  563.190963][ T9842]  ? is_bpf_text_address+0x292/0x2b0
[  563.190986][ T9842]  ? is_bpf_text_address+0x26/0x2b0
[  563.191042][ T9842]  ? stack_trace_save+0xa9/0x100
[  563.191080][ T9842]  ? __pfx_stack_trace_save+0x10/0x10
[  563.191129][ T9842]  ? lockdep_unlock+0x5c/0xd0
[  563.191154][ T9842]  ? __lock_acquire+0x1511/0x2de0
[  563.191213][ T9842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  563.191241][ T9842]  do_writepages+0x338/0x560
[  563.191280][ T9842]  ? do_raw_spin_unlock+0xf5/0x200
[  563.191310][ T9842]  filemap_fdatawrite+0x1e9/0x2f0
[  563.191342][ T9842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  563.191420][ T9842]  ? do_raw_spin_unlock+0xf5/0x200
[  563.191451][ T9842]  f2fs_sync_dirty_inodes+0x471/0x970
[  563.191507][ T9842]  f2fs_write_checkpoint+0x860/0x24d0
[  563.191584][ T9842]  f2fs_issue_checkpoint+0x424/0x6f0
[  563.191626][ T9842]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  563.191656][ T9842]  ? is_bpf_text_address+0x292/0x2b0
[  563.191679][ T9842]  ? is_bpf_text_address+0x26/0x2b0
[  563.191708][ T9842]  ? kernel_text_address+0xa5/0xe0
[  563.191768][ T9842]  ? __lock_acquire+0x747/0x2de0
[  563.191853][ T9842]  ? f2fs_sync_fs+0x1f2/0x3c0
[  563.191890][ T9842]  f2fs_do_shutdown+0x137/0x5c0
[  563.191996][ T9842]  __f2fs_ioctl+0x5291/0xde00
[  563.192029][ T9842]  ? lock_acquire+0x115/0x350
[  563.192069][ T9842]  ? is_bpf_text_address+0x26/0x2b0
[  563.192100][ T9842]  ? is_bpf_text_address+0x292/0x2b0
[  563.192124][ T9842]  ? is_bpf_text_address+0x26/0x2b0
[  563.192148][ T9842]  ? __pfx___f2fs_ioctl+0x10/0x10
[  563.192185][ T9842]  ? kernel_text_address+0xa5/0xe0
[  563.192214][ T9842]  ? __kernel_text_address+0xd/0x30
[  563.192241][ T9842]  ? unwind_get_return_address+0x4d/0x90
[  563.192282][ T9842]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  563.192310][ T9842]  ? arch_stack_walk+0xfb/0x150
[  563.192360][ T9842]  ? stack_trace_save+0xa9/0x100
[  563.192387][ T9842]  ? __pfx_stack_trace_save+0x10/0x10
[  563.192420][ T9842]  ? stack_depot_save_flags+0x33/0x810
[  563.192447][ T9842]  ? __lock_acquire+0x747/0x2de0
[  563.192479][ T9842]  ? kasan_save_track+0x4f/0x80
[  563.192517][ T9842]  ? kasan_save_track+0x3e/0x80
[  563.192545][ T9842]  ? kasan_save_free_info+0x40/0x50
[  563.192569][ T9842]  ? __kasan_slab_free+0x5c/0x80
[  563.192598][ T9842]  ? kfree+0x1c5/0x650
[  563.192619][ T9842]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  563.192686][ T9842]  ? security_file_ioctl+0xc3/0x2a0
[  563.192738][ T9842]  ? __se_sys_ioctl+0x47/0x170
[  563.192770][ T9842]  ? do_syscall_64+0x166/0x520
[  563.192794][ T9842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.192872][ T9842]  ? kasan_quarantine_put+0xbb/0x1f0
[  563.192912][ T9842]  ? tomoyo_path_number_perm+0x219/0x5f0
[  563.192944][ T9842]  ? tomoyo_path_number_perm+0x219/0x5f0
[  563.192979][ T9842]  ? do_vfs_ioctl+0x116f/0x1530
[  563.193017][ T9842]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  563.193067][ T9842]  ? do_futex+0x3e7/0x4e0
[  563.193113][ T9842]  ? __fget_files+0x2a/0x420
[  563.193146][ T9842]  ? __fget_files+0x2a/0x420
[  563.193175][ T9842]  ? __fget_files+0x2a/0x420
[  563.193208][ T9842]  ? f2fs_ioctl+0x135/0x250
[  563.193243][ T9842]  ? __pfx_f2fs_ioctl+0x10/0x10
[  563.193278][ T9842]  __se_sys_ioctl+0xfc/0x170
[  563.193315][ T9842]  do_syscall_64+0x166/0x520
[  563.193338][ T9842]  ? trace_irq_disable+0x3b/0x140
[  563.193369][ T9842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.193392][ T9842]  ? clear_bhb_loop+0x70/0xc0
[  563.193421][ T9842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.193444][ T9842] RIP: 0033:0x7f291a19f559
[  563.193467][ T9842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.193486][ T9842] RSP: 002b:00007f291af83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  563.193520][ T9842] RAX: ffffffffffffffda RBX: 00007f291a425fa0 RCX: 00007f291a19f559
[  563.193538][ T9842] RDX: 0000200000000080 RSI: 000000008004587d RDI: 0000000000000004
[  563.193554][ T9842] RBP: 00007f291a236b20 R08: 0000000000000000 R09: 0000000000000000
[  563.193569][ T9842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  563.193583][ T9842] R13: 00007f291a426038 R14: 00007f291a425fa0 R15: 00007fff1aa18988
[  563.193621][ T9842]  </TASK>
[  563.373618][ T9842] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  564.613828][   T56] Bluetooth: hci2: Malformed LE Event: 0x02
[  565.048074][ T9927] loop4: detected capacity change from 0 to 128
[  565.134375][ T9927] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  565.134893][ T9927] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  567.422799][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1012'.
[  568.383965][ T5646] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  568.637503][   T31] usb 6-1: USB disconnect, device number 11
[  568.672326][   T31] usblp0: removed
[  570.234936][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  570.234981][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  570.343961][ T9989] loop6: detected capacity change from 0 to 256
[  570.350384][ T9989] exfat: Deprecated parameter 'namecase'
[  570.350662][ T9989] exfat: Deprecated parameter 'namecase'
[  571.278704][ T9989] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  571.757876][ T9997] loop2: detected capacity change from 0 to 64
[  573.359299][T10018] ip_tables: iptables: counters copy to user failed while replacing table
[  573.410709][ T9996] loop4: detected capacity change from 0 to 32768
[  573.537187][ T9996] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  573.628477][ T9996] XFS (loop4): Ending clean mount
[  573.802762][ T9996] XFS (loop4): Quotacheck needed: Please wait.
[  573.916184][T10043] can0: slcan on ttyS3.
[  574.059517][ T9996] XFS (loop4): Quotacheck: Done.
[  574.128333][ T5646] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  574.339293][T10043] can0 (unregistered): slcan off ttyS3.
[  574.461111][T10058] loop5: detected capacity change from 0 to 512
[  574.711090][T10053] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.713044][T10053] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.065847][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  575.083981][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  580.062125][T10107] loop4: detected capacity change from 0 to 512
[  580.592820][ T5976] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.592872][ T5976] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.592910][ T5976] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.592947][ T5976] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  580.898371][T10112] FAULT_INJECTION: forcing a failure.
[  580.898371][T10112] name failslab, interval 1, probability 0, space 0, times 0
[  580.898412][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.4.1077 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  580.898445][T10112] Tainted: [L]=SOFTLOCKUP
[  580.898454][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  580.898468][T10112] Call Trace:
[  580.898477][T10112]  <TASK>
[  580.898488][T10112]  dump_stack_lvl+0xe8/0x150
[  580.898532][T10112]  should_fail_ex+0x3eb/0x540
[  580.898567][T10112]  should_failslab+0xa8/0x100
[  580.898606][T10112]  kmem_cache_alloc_lru_noprof+0xa2/0x5f0
[  580.898636][T10112]  ? __d_alloc+0x37/0x820
[  580.898746][T10112]  ? __d_alloc+0x37/0x820
[  580.898795][T10112]  __d_alloc+0x37/0x820
[  580.898832][T10112]  __d_alloc_parallel+0xde/0x1700
[  580.898891][T10112]  ? __pfx___d_alloc_parallel+0x10/0x10
[  580.898926][T10112]  ? lock_acquire+0x115/0x350
[  580.898974][T10112]  __lookup_slow+0x82/0x2f0
[  580.899009][T10112]  lookup_slow+0x59/0x80
[  580.899040][T10112]  link_path_walk+0xd22/0x1910
[  580.899093][T10112]  path_lookupat+0xe4/0x8c0
[  580.899141][T10112]  filename_lookup+0x265/0x5d0
[  580.899178][T10112]  ? __pfx_filename_lookup+0x10/0x10
[  580.899235][T10112]  ? do_getname_kernel+0x54/0x230
[  580.899260][T10112]  ? do_getname_kernel+0x97/0x230
[  580.899289][T10112]  ? __asan_memcpy+0x40/0x70
[  580.899322][T10112]  ? do_getname_kernel+0x183/0x230
[  580.899353][T10112]  kern_path+0x3d/0x150
[  580.899386][T10112]  unix_find_other+0x18d/0xaf0
[  580.899488][T10112]  ? __pfx_unix_find_other+0x10/0x10
[  580.899518][T10112]  ? sock_wmalloc+0xca/0x130
[  580.899550][T10112]  unix_stream_connect+0x315/0x1000
[  580.899636][T10112]  ? __pfx_unix_stream_connect+0x10/0x10
[  580.899679][T10112]  ? kernel_connect+0xf1/0x1c0
[  580.899713][T10112]  kernel_connect+0x141/0x1c0
[  580.899743][T10112]  ? __pfx_kernel_connect+0x10/0x10
[  580.899783][T10112]  ? reacquire_held_locks+0x117/0x1a0
[  580.899839][T10112]  ? __local_bh_enable_ip+0xd6/0x140
[  580.899889][T10112]  xs_local_connect+0x626/0x810
[  580.900011][T10112]  ? __pfx_xs_local_connect+0x10/0x10
[  580.900045][T10112]  ? preempt_schedule_thunk+0x16/0x40
[  580.900084][T10112]  xprt_connect+0x613/0x850
[  580.900111][T10112]  ? __pfx_call_connect+0x10/0x10
[  580.900148][T10112]  __rpc_execute+0x521/0x1280
[  580.900261][T10112]  ? __pfx___rpc_execute+0x10/0x10
[  580.900289][T10112]  ? rpc_task_get_xprt+0x26/0x250
[  580.900326][T10112]  ? rpc_make_runnable+0xae/0x1c0
[  580.900354][T10112]  rpc_execute+0x1c1/0x390
[  580.900381][T10112]  rpc_run_task+0x4a6/0x660
[  580.900417][T10112]  rpc_create_xprt+0x452/0xa90
[  580.900449][T10112]  ? __pfx_rpc_create_xprt+0x10/0x10
[  580.900492][T10112]  ? trace_kmalloc+0x2a/0xf0
[  580.900526][T10112]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  580.900557][T10112]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  580.900619][T10112]  ? xprt_create_transport+0x39b/0x5f0
[  580.900650][T10112]  ? xprt_create_transport+0x39b/0x5f0
[  580.900680][T10112]  ? kstrdup+0x81/0x100
[  580.900715][T10112]  ? __asan_memcpy+0x40/0x70
[  580.900758][T10112]  ? xprt_create_transport+0x438/0x5f0
[  580.900793][T10112]  rpc_create+0x68a/0x910
[  580.900825][T10112]  ? __pfx_rpc_create+0x10/0x10
[  580.900863][T10112]  ? trace_contention_end+0x3d/0x140
[  580.900937][T10112]  ? net_generic+0x1e/0x240
[  580.900990][T10112]  ? net_generic+0x1e/0x240
[  580.901023][T10112]  set_gssp_clnt+0x197/0x2f0
[  580.901048][T10112]  ? aa_file_perm+0x18b/0x15f0
[  580.901074][T10112]  ? __pfx_set_gssp_clnt+0x10/0x10
[  580.901119][T10112]  ? _parse_integer_limit+0x18e/0x1e0
[  580.901162][T10112]  ? kstrtoull+0x137/0x1d0
[  580.901199][T10112]  write_gssp+0x458/0x930
[  580.901226][T10112]  ? __pfx_write_gssp+0x10/0x10
[  580.901252][T10112]  ? lock_acquire+0x115/0x350
[  580.901296][T10112]  ? __pfx_write_gssp+0x10/0x10
[  580.901317][T10112]  proc_reg_write+0x1e9/0x2e0
[  580.901382][T10112]  ? __pfx_proc_reg_write+0x10/0x10
[  580.901408][T10112]  vfs_write+0x296/0xba0
[  580.901452][T10112]  ? __pfx_vfs_write+0x10/0x10
[  580.901486][T10112]  ? __fget_files+0x2a/0x420
[  580.901514][T10112]  ? __fget_files+0x3a2/0x420
[  580.901541][T10112]  ? __fget_files+0x2a/0x420
[  580.901574][T10112]  ? fdget+0x1ac/0x250
[  580.901610][T10112]  ksys_write+0x150/0x270
[  580.901643][T10112]  ? __pfx_ksys_write+0x10/0x10
[  580.901688][T10112]  do_syscall_64+0x166/0x520
[  580.901713][T10112]  ? trace_irq_disable+0x3b/0x140
[  580.901833][T10112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.901902][T10112]  ? clear_bhb_loop+0x70/0xc0
[  580.902012][T10112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.902046][T10112] RIP: 0033:0x7f8758d9f559
[  580.902071][T10112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  580.902094][T10112] RSP: 002b:00007f8759c9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  580.902120][T10112] RAX: ffffffffffffffda RBX: 00007f8759025fa0 RCX: 00007f8758d9f559
[  580.902139][T10112] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005
[  580.902154][T10112] RBP: 00007f8758e36b20 R08: 0000000000000000 R09: 0000000000000000
[  580.902170][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  580.902184][T10112] R13: 00007f8759026038 R14: 00007f8759025fa0 R15: 00007ffd816de058
[  580.902224][T10112]  </TASK>
[  581.007950][T10112] xs_local_setup_socket: unhandled error (12) connecting to /var/run/gssproxy.sock
[  582.339744][T10114] loop6: detected capacity change from 0 to 32768
[  582.341651][T10139] loop2: detected capacity change from 0 to 16
[  582.408677][T10139] erofs (device loop2): mounted with root inode @ nid 36.
[  582.476782][T10114] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  582.601407][T10114] XFS (loop6): Ending clean mount
[  582.727277][T10153] FAULT_INJECTION: forcing a failure.
[  582.727277][T10153] name fail_futex, interval 1, probability 0, space 0, times 1
[  582.727320][T10153] CPU: 1 UID: 0 PID: 10153 Comm: syz.5.1094 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  582.727352][T10153] Tainted: [L]=SOFTLOCKUP
[  582.727361][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  582.727375][T10153] Call Trace:
[  582.727384][T10153]  <TASK>
[  582.727395][T10153]  dump_stack_lvl+0xe8/0x150
[  582.727448][T10153]  should_fail_ex+0x3eb/0x540
[  582.727481][T10153]  get_futex_key+0x1ab/0x1410
[  582.727531][T10153]  ? __pfx_get_futex_key+0x10/0x10
[  582.727569][T10153]  ? update_se+0x90/0x1080
[  582.727596][T10153]  futex_wait_setup+0x4a/0x590
[  582.727631][T10153]  ? __futex_wait+0xdb/0x470
[  582.727664][T10153]  __futex_wait+0x175/0x470
[  582.727690][T10153]  ? update_protect_slice+0x45/0x320
[  582.727725][T10153]  ? __pfx___futex_wait+0x10/0x10
[  582.727758][T10153]  ? __pfx_futex_wake_mark+0x10/0x10
[  582.727792][T10153]  ? try_to_wake_up+0x8ce/0x14e0
[  582.727837][T10153]  futex_wait+0x121/0x390
[  582.727868][T10153]  ? __pfx_futex_wait+0x10/0x10
[  582.727917][T10153]  do_futex+0x3e7/0x4e0
[  582.727946][T10153]  ? __pfx_do_futex+0x10/0x10
[  582.727966][T10153]  ? __fget_files+0x3a2/0x420
[  582.727995][T10153]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  582.728035][T10153]  __se_sys_futex+0x3a8/0x450
[  582.728067][T10153]  ? __pfx___se_sys_futex+0x10/0x10
[  582.728089][T10153]  ? rcu_is_watching+0x16/0xb0
[  582.728130][T10153]  ? __x64_sys_futex+0x21/0xf0
[  582.728157][T10153]  do_syscall_64+0x166/0x520
[  582.728180][T10153]  ? trace_irq_disable+0x3b/0x140
[  582.728210][T10153]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.728233][T10153]  ? clear_bhb_loop+0x70/0xc0
[  582.728262][T10153]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  582.728284][T10153] RIP: 0033:0x7fe50979f559
[  582.728306][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  582.728326][T10153] RSP: 002b:00007fe50a65b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  582.728351][T10153] RAX: ffffffffffffffda RBX: 00007fe509a25fa8 RCX: 00007fe50979f559
[  582.728367][T10153] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe509a25fa8
[  582.728382][T10153] RBP: 00007fe509a25fa0 R08: 0000000000000000 R09: 0000000000000000
[  582.728396][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  582.728410][T10153] R13: 00007fe509a26038 R14: 00007ffd0f900590 R15: 00007ffd0f900678
[  582.728454][T10153]  </TASK>
[  583.070381][   T33] audit: type=1800 audit(1792877057.773:441): pid=10114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1080" name="file1" dev="loop6" ino=6150 res=0 errno=-4
[  583.251863][ T7945] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  583.540754][T10160] loop4: detected capacity change from 0 to 32768
[  583.556146][T10160] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1091 (10160)
[  583.613681][T10160] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  583.613724][T10160] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  583.778522][T10160] BTRFS info (device loop4): setting nodatasum
[  583.778552][T10160] BTRFS info (device loop4): allowing degraded mounts
[  583.778571][T10160] BTRFS info (device loop4): turning on async discard
[  583.778588][T10160] BTRFS info (device loop4): enabling free space tree
[  583.778700][T10160] BTRFS info (device loop4): force zlib compression, level 3
[  583.964500][T10182] loop2: detected capacity change from 0 to 8
[  584.044807][ T5646] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  584.116235][T10158] udevd[10158]: incorrect cramfs checksum on /dev/loop2
[  584.400112][T10136] loop1: detected capacity change from 0 to 40427
[  584.471188][T10136] F2FS-fs (loop1): build fault injection type: 0x7
[  584.481256][T10136] F2FS-fs (loop1): invalid crc value

getty: ttyS0: read error: Resource temporarily unavailable
[  586.234671][T10136] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  586.324870][T10136] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  586.324906][T10136] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  586.324998][T10136] F2FS-fs (loop1): Start checkpoint disabled!
[  586.378842][T10203] FAULT_INJECTION: forcing a failure.
[  586.378842][T10203] name failslab, interval 1, probability 0, space 0, times 0
[  586.378881][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.6.1106 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  586.378914][T10203] Tainted: [L]=SOFTLOCKUP
[  586.378923][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  586.378937][T10203] Call Trace:
[  586.378946][T10203]  <TASK>
[  586.378956][T10203]  dump_stack_lvl+0xe8/0x150
[  586.379001][T10203]  should_fail_ex+0x3eb/0x540
[  586.379034][T10203]  should_failslab+0xa8/0x100
[  586.379069][T10203]  ? security_file_alloc+0x34/0x310
[  586.379098][T10203]  kmem_cache_alloc_noprof+0x9c/0x600
[  586.379124][T10203]  ? rcu_is_watching+0x16/0xb0
[  586.379161][T10203]  ? security_file_alloc+0x34/0x310
[  586.379196][T10203]  security_file_alloc+0x34/0x310
[  586.379227][T10203]  init_file+0x90/0x2b0
[  586.379347][T10203]  alloc_empty_file+0x74/0x1d0
[  586.379374][T10203]  alloc_file_pseudo+0x110/0x1e0
[  586.379398][T10203]  ? apparmor_socket_post_create+0x337/0x420
[  586.379430][T10203]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  586.379457][T10203]  ? __raw_spin_lock_init+0x45/0x100
[  586.379489][T10203]  sock_alloc_file+0xb8/0x2e0
[  586.379521][T10203]  xs_local_connect+0x179/0x810
[  586.379560][T10203]  ? __pfx_xs_local_connect+0x10/0x10
[  586.379596][T10203]  ? do_raw_spin_unlock+0xf5/0x200
[  586.379625][T10203]  xprt_connect+0x613/0x850
[  586.379652][T10203]  ? __pfx_call_connect+0x10/0x10
[  586.379689][T10203]  __rpc_execute+0x521/0x1280
[  586.379740][T10203]  ? __pfx___rpc_execute+0x10/0x10
[  586.379767][T10203]  ? rpc_task_get_xprt+0x26/0x250
[  586.379800][T10203]  ? rpc_make_runnable+0xae/0x1c0
[  586.379827][T10203]  rpc_execute+0x1c1/0x390
[  586.379854][T10203]  rpc_run_task+0x4a6/0x660
[  586.379888][T10203]  rpc_create_xprt+0x452/0xa90
[  586.379919][T10203]  ? __pfx_rpc_create_xprt+0x10/0x10
[  586.379961][T10203]  ? trace_kmalloc+0x2a/0xf0
[  586.379992][T10203]  ? __kmalloc_node_track_caller_noprof+0x4cd/0x720
[  586.380023][T10203]  ? __kmalloc_node_track_caller_noprof+0x2e6/0x720
[  586.380066][T10203]  ? xprt_create_transport+0x39b/0x5f0
[  586.380096][T10203]  ? xprt_create_transport+0x39b/0x5f0
[  586.380126][T10203]  ? kstrdup+0x81/0x100
[  586.380153][T10203]  ? __asan_memcpy+0x40/0x70
[  586.380187][T10203]  ? xprt_create_transport+0x438/0x5f0
[  586.380222][T10203]  rpc_create+0x68a/0x910
[  586.380253][T10203]  ? __pfx_rpc_create+0x10/0x10
[  586.380289][T10203]  ? trace_contention_end+0x3d/0x140
[  586.380359][T10203]  ? net_generic+0x1e/0x240
[  586.380381][T10203]  ? net_generic+0x1e/0x240
[  586.380406][T10203]  set_gssp_clnt+0x197/0x2f0
[  586.380425][T10203]  ? aa_file_perm+0x18b/0x15f0
[  586.380444][T10203]  ? __pfx_set_gssp_clnt+0x10/0x10
[  586.380481][T10203]  ? _parse_integer_limit+0x18e/0x1e0
[  586.380515][T10203]  ? kstrtoull+0x137/0x1d0
[  586.380545][T10203]  write_gssp+0x458/0x930
[  586.380567][T10203]  ? __pfx_write_gssp+0x10/0x10
[  586.380588][T10203]  ? lock_acquire+0x115/0x350
[  586.380622][T10203]  ? __pfx_write_gssp+0x10/0x10
[  586.380639][T10203]  proc_reg_write+0x1e9/0x2e0
[  586.380664][T10203]  ? __pfx_proc_reg_write+0x10/0x10
[  586.380683][T10203]  vfs_write+0x296/0xba0
[  586.380719][T10203]  ? __pfx_vfs_write+0x10/0x10
[  586.380755][T10203]  ? __fget_files+0x2a/0x420
[  586.380779][T10203]  ? __fget_files+0x3a2/0x420
[  586.380803][T10203]  ? __fget_files+0x2a/0x420
[  586.380830][T10203]  ? fdget+0x1ac/0x250
[  586.380861][T10203]  ksys_write+0x150/0x270
[  586.380889][T10203]  ? __pfx_ksys_write+0x10/0x10
[  586.380928][T10203]  do_syscall_64+0x166/0x520
[  586.380949][T10203]  ? trace_irq_disable+0x3b/0x140
[  586.380976][T10203]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.380995][T10203]  ? clear_bhb_loop+0x70/0xc0
[  586.381020][T10203]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.381040][T10203] RIP: 0033:0x7f3e0f99f559
[  586.381060][T10203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.381078][T10203] RSP: 002b:00007f3e1089b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  586.381101][T10203] RAX: ffffffffffffffda RBX: 00007f3e0fc25fa0 RCX: 00007f3e0f99f559
[  586.381115][T10203] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005
[  586.381127][T10203] RBP: 00007f3e0fa36b20 R08: 0000000000000000 R09: 0000000000000000
[  586.381139][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.381151][T10203] R13: 00007f3e0fc26038 R14: 00007f3e0fc25fa0 R15: 00007fff335c6138
[  586.381184][T10203]  </TASK>
[  587.331511][T10136] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  587.479400][T10219] netlink: 'syz.2.1113': attribute type 19 has an invalid length.
[  587.479425][T10219] netlink: 'syz.2.1113': attribute type 28 has an invalid length.
[  587.747254][T10227] loop2: detected capacity change from 0 to 8
[  587.807671][T10227] SQUASHFS error: zlib decompression failed, data probably corrupt
[  587.807709][T10227] SQUASHFS error: Failed to read block 0x9b: -5
[  587.807725][T10227] SQUASHFS error: Unable to read metadata cache entry [99]
[  587.807739][T10227] SQUASHFS error: Unable to read inode 0x127
[  590.432632][T10231] loop4: detected capacity change from 0 to 32768
[  590.510232][T10231] JBD2: Ignoring recovery information on journal
[  590.605179][T10231] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  591.252991][T10294] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  592.373353][ T5646] ocfs2: Unmounting device (7,4) on (node local)
[  592.564137][T10304] loop1: detected capacity change from 0 to 32768
[  592.565346][T10304] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  592.567884][T10304] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1144 (10304)
[  592.595084][T10304] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  592.595195][T10304] BTRFS info (device loop1): using crc32c checksum algorithm
[  592.745567][T10304] BTRFS info (device loop1): rebuilding free space tree
[  592.790785][T10304] BTRFS info (device loop1): disabling free space tree
[  592.790914][T10304] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  592.790940][T10304] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  592.826543][T10304] BTRFS info (device loop1): enabling ssd optimizations
[  592.826579][T10304] BTRFS info (device loop1): turning on async discard
[  592.826598][T10304] BTRFS info (device loop1): force clearing of disk cache
[  592.826616][T10304] BTRFS info (device loop1): use zstd compression, level 3
[  593.617962][T10330] netlink: 'syz.4.1143': attribute type 1 has an invalid length.
[  593.617992][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'.
[  593.975918][ T5645] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  594.081641][T10336] loop2: detected capacity change from 0 to 4096
[  594.104933][T10336] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  594.152447][ T5787] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  594.216766][T10336] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  594.229850][T10336] ntfs3(loop2): Inode r=b is not in use!
[  594.229978][T10336] ntfs3(loop2): Failed to load $Extend (-116).
[  594.229999][T10336] ntfs3(loop2): Failed to initialize $Extend.
[  594.302358][ T5787] usb 5-1: Using ep0 maxpacket: 8
[  594.303134][ T5787] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  594.304354][ T5787] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  594.304381][ T5787] usb 5-1: config 0 has no interface number 0
[  594.304431][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  594.304456][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  594.304482][ T5787] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  594.304510][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  594.304555][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.335560][ T5787] usb 5-1: config 0 descriptor??
[  594.411762][ T5787] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  594.819208][   T26] usb 5-1: USB disconnect, device number 13
[  594.819325][    C1] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  594.988568][   T26] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  596.040964][T10360] netlink: 'syz.4.1162': attribute type 1 has an invalid length.
[  596.159599][T10338] loop6: detected capacity change from 0 to 32768
[  596.226599][T10338] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  596.310843][T10338] XFS (loop6): Ending clean mount
[  596.336158][T10375] netlink: 'syz.1.1165': attribute type 1 has an invalid length.
[  596.336196][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1165'.
[  596.394991][T10378] loop5: detected capacity change from 0 to 256
[  596.452875][T10378] FAT-fs (loop5): bogus number of FAT sectors
[  596.452903][T10378] FAT-fs (loop5): Can't find a valid FAT filesystem
[  596.462681][ T5787] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  596.502021][ T7945] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  596.657673][ T5787] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  596.666582][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  596.666682][ T5787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  596.666752][ T5787] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  596.666855][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.726198][ T5787] usb 3-1: config 0 descriptor??
[  596.942526][T10389] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  596.942526][T10389] 
[  596.942909][T10389] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  596.943035][T10389] CIFS: Attempting to mount //172.20.20.170/share
[  597.038433][T10389] CIFS: VFS: Error connecting to socket. Aborting operation.
[  597.038493][T10389] CIFS: VFS: cifs_mount failed w/return code = -111
[  597.300595][ T5787] hid_parser_main: 14 callbacks suppressed
[  597.300672][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300704][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300732][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300760][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300786][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300813][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300840][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300865][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300892][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.300920][ T5787] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  597.486408][ T5787] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  597.526007][T10398] netlink: 'syz.4.1176': attribute type 1 has an invalid length.
[  597.546107][ T5787] usb 3-1: USB disconnect, device number 19
[  597.611519][T10401] fido_id[10401]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  597.893071][T10410] netlink: 'syz.6.1180': attribute type 1 has an invalid length.
[  600.249294][T10438] netlink: 'syz.2.1189': attribute type 1 has an invalid length.
[  600.830935][ T5787] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  600.984747][ T5787] usb 3-1: Using ep0 maxpacket: 8
[  600.989332][ T5787] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  600.994916][ T5787] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  600.995004][ T5787] usb 3-1: config 0 has no interface number 0
[  600.995125][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  600.995205][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  600.995278][ T5787] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  600.995354][ T5787] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  600.995469][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.076976][ T5787] usb 3-1: config 0 descriptor??
[  601.088613][T10459] fuse: Bad value for 'fd'
[  601.119052][ T5787] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  601.327073][    T9] usb 3-1: USB disconnect, device number 20
[  601.358019][    T9] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  601.456836][T10472] netlink: 'syz.5.1207': attribute type 1 has an invalid length.
[  601.499865][T10474] loop6: detected capacity change from 0 to 512
[  601.531544][T10474] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.1208: bg 0: block 5: invalid block bitmap
[  601.531595][T10474] loop6: lost filesystem error report for type 5 error -117
[  601.533665][    C1] EXT4-fs (loop6): initial error at time 1792877076: ext4_validate_block_bitmap:436
[  601.533705][    C1] EXT4-fs (loop6): last error at time 1792877076: ext4_validate_block_bitmap:436
[  601.555789][ T5857] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  601.613128][T10474] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  601.613163][T10474] loop6: lost filesystem error report for type 5 error -117
[  601.614409][T10474] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #11: comm syz.6.1208: invalid indirect mapped block 3 (level 2)
[  601.614451][T10474] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  601.617621][T10474] EXT4-fs (loop6): 1 orphan inode deleted
[  601.617647][T10474] EXT4-fs (loop6): 1 truncate cleaned up
[  601.621094][T10474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  601.716069][ T5857] usb 2-1: device descriptor read/64, error -71
[  601.959047][ T5857] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  601.974790][T10474] overlayfs: failed to resolve './proc': -2
[  602.122394][ T5857] usb 2-1: device descriptor read/64, error -71
[  602.126987][ T7945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.233613][    T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  602.233624][ T5857] usb usb2-port1: attempt power cycle
[  602.395746][    T9] usb 6-1: New USB device found: idVendor=17ef, idProduct=6067, bcdDevice=0.00
[  602.397491][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  602.397528][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  602.397574][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.400589][    T9] usb 6-1: config 0 descriptor??
[  602.401400][T10480] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  602.572380][ T5857] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  602.596977][ T5857] usb 2-1: device descriptor read/8, error -71
[  602.832342][ T5857] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  602.863657][ T5857] usb 2-1: device descriptor read/8, error -71
[  602.892892][    T9] hid_parser_main: 5 callbacks suppressed
[  602.892918][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.892954][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.892982][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893009][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893037][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893065][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893092][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893119][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893146][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.893172][    T9] lenovo 0003:17EF:6067.0007: unknown main item tag 0x0
[  602.976655][ T5857] usb usb2-port1: unable to enumerate USB device
[  603.015826][    T9] lenovo 0003:17EF:6067.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.5-1/input0
[  603.082801][T10500] loop2: detected capacity change from 0 to 8192
[  603.100827][ T5857] usb 6-1: USB disconnect, device number 12
[  603.349302][T10501] fido_id[10501]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  603.478305][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1218'.
[  603.718353][T10507] netlink: 'syz.2.1220': attribute type 1 has an invalid length.
[  603.833646][T10509] loop5: detected capacity change from 0 to 512
[  603.863650][T10509] EXT4-fs (loop5): Test dummy encryption mode enabled
[  603.863793][T10509] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal
[  607.092496][T10529] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  607.092520][T10529] One or more global auth toks could not properly register; rc = [-22]
[  607.092670][T10529] Error validating options; rc = [-22]
[  607.183550][    T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  607.225523][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1230'.
[  607.342720][    T9] usb 5-1: Using ep0 maxpacket: 8
[  607.343497][    T9] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  607.344689][    T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  607.344718][    T9] usb 5-1: config 0 has no interface number 0
[  607.344771][    T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  607.344797][    T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  607.345137][T10535] netlink: 'syz.5.1232': attribute type 1 has an invalid length.
[  607.345508][    T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  607.345529][    T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  607.345581][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.455277][    T9] usb 5-1: config 0 descriptor??
[  607.489953][    T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  607.731857][    T9] usb 5-1: USB disconnect, device number 14
[  607.747234][    T9] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  607.803763][   T31] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  607.944012][T10545] Unknown status report in ack skb
[  607.958732][   T31] usb 3-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  607.972125][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  607.972320][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.011837][   T31] usb 3-1: config 0 descriptor??
[  608.034950][   T31] pwc: Askey VC010 type 2 USB webcam detected.
[  608.525612][T10553] Need at least one configuration in g1.
[  608.526102][T10553] udc usbip-vudc.0: failed to start g1: -22
[  608.526130][T10553] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22
[  608.530975][T10553] UDC core: g1: couldn't find an available UDC or it's busy
[  608.876512][   T31] pwc: recv_control_msg error -32 req 02 val 2b00
[  608.880500][   T31] pwc: recv_control_msg error -32 req 02 val 2700
[  608.899672][   T31] pwc: recv_control_msg error -32 req 02 val 2c00
[  608.912949][   T31] pwc: recv_control_msg error -32 req 04 val 1000
[  608.919047][   T31] pwc: recv_control_msg error -32 req 04 val 1300
[  608.938442][   T31] pwc: recv_control_msg error -32 req 04 val 1400
[  608.939785][   T31] pwc: recv_control_msg error -32 req 02 val 2000
[  608.958529][   T31] pwc: recv_control_msg error -32 req 02 val 2100
[  608.960193][   T31] pwc: recv_control_msg error -32 req 04 val 1500
[  608.969009][   T31] pwc: recv_control_msg error -32 req 02 val 2500
[  608.986354][   T31] pwc: recv_control_msg error -32 req 02 val 2400
[  609.013533][T10523] loop1: detected capacity change from 0 to 32768
[  609.024804][   T31] pwc: recv_control_msg error -32 req 02 val 2600
[  609.028308][T10523] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1225 (10523)
[  609.028913][   T31] pwc: recv_control_msg error -32 req 02 val 2900
[  609.041305][   T31] pwc: recv_control_msg error -32 req 02 val 2800
[  609.172505][T10523] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  609.172546][T10523] BTRFS info (device loop1): using blake2b checksum algorithm
[  609.458723][   T31] pwc: recv_control_msg error -71 req 04 val 1200
[  609.487355][   T31] pwc: Registered as video103.
[  609.500093][   T31] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input23
[  609.531528][   T31] usb 3-1: USB disconnect, device number 21
[  609.635968][T10568] Bluetooth: MGMT ver 1.23
[  610.285690][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  610.286142][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  610.286575][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  610.286934][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  610.353001][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  610.353460][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  610.353968][T10523] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  610.462073][T10580] loop4: detected capacity change from 0 to 512
[  610.487493][T10580] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  610.487515][T10580] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  610.715068][T10587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1242'.
[  610.983184][T10580] EXT4-fs (loop4): 1 orphan inode deleted
[  611.026065][  T805] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  611.026228][  T805] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:7: Failed to release dquot type 1
[  611.026246][  T805] loop4: lost filesystem error report for type 5 error -117
[  611.071254][T10580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.117106][T10580] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  611.287681][T10580] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  611.388902][T10523] BTRFS error (device loop1): open_ctree failed: -ENOMEM
[  611.564853][ T5646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.788896][T10607] fuse: Unknown parameter ''
[  611.926859][T10609] Could not find valid key in user session keyring for sig specified in mount option: [syz]
[  611.926925][T10609] One or more global auth toks could not properly register; rc = [-22]
[  611.932604][T10609] Error validating options; rc = [-22]
[  613.122060][T10625] comedi comedi2: das16m1: I/O base address or length out of range
[  613.985882][T10644] mmap: syz.6.1265 (10644) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  615.569966][T10664] loop4: detected capacity change from 0 to 4096
[  615.586873][T10664] EXT4-fs: Ignoring removed orlov option
[  615.607085][T10664] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  615.607108][T10664] EXT4-fs (loop4): Test dummy encryption mode enabled
[  615.644163][T10664] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec128, mo2=0002]
[  615.644631][T10664] System zones: 0-5
[  615.697878][T10664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  616.111800][T10664] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-lib"
[  616.230893][T10672] overlayfs: failed to resolve './bus': -2
[  617.218304][ T5646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  619.863294][T10722] netlink: 'syz.5.1292': attribute type 1 has an invalid length.
[  620.105052][T10722] bond1: entered promiscuous mode
[  620.119660][T10722] 8021q: adding VLAN 0 to HW filter on device bond1
[  620.231010][T10727] 8021q: adding VLAN 0 to HW filter on device bond1
[  620.248990][T10727] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  620.249013][T10727] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  620.537448][T10727] bond1: (slave wireguard0): making interface the new active one
[  620.537477][T10727] wireguard0: entered promiscuous mode
[  620.735781][T10727] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  622.970014][T10762] loop1: detected capacity change from 0 to 256
[  622.976473][T10762] exfat: Deprecated parameter 'namecase'
[  622.976787][T10762] exfat: Deprecated parameter 'namecase'
[  623.511530][    C0] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  623.829475][T10762] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  624.093289][ T5851] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  624.254929][ T5851] usb 3-1: New USB device found: idVendor=1b1c, idProduct=0a55, bcdDevice=0.00
[  624.258598][ T5851] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  624.258625][ T5851] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  624.258643][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0
[  624.258668][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.342802][ T5851] usb 3-1: config 0 descriptor??
[  624.732958][ T5857] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  624.851332][ T5851] hid-corsair-void 0003:1B1C:0A55.0008: collection stack underflow
[  624.851376][ T5851] hid-corsair-void 0003:1B1C:0A55.0008: item 0 4 0 12 parsing failed
[  624.852134][ T5851] hid-corsair-void 0003:1B1C:0A55.0008: parse failed (reason: -22)
[  624.861006][ T5851] hid-corsair-void 0003:1B1C:0A55.0008: probe with driver hid-corsair-void failed with error -22
[  624.895937][T10773] loop1: detected capacity change from 0 to 256
[  624.911263][ T5857] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  624.926802][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  624.926842][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  624.926871][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  624.926897][ T5857] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  624.926943][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.931362][ T5857] usb 6-1: config 0 descriptor??
[  625.056665][ T5851] usb 3-1: USB disconnect, device number 22
[  625.498694][ T5857] hid_parser_main: 14 callbacks suppressed
[  625.498715][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498737][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498756][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498775][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498793][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498812][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498831][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498849][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498868][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.498887][ T5857] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  625.630593][ T5857] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  625.736087][ T5851] usb 6-1: USB disconnect, device number 13
[  625.775646][T10778] fido_id[10778]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  626.802483][   T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  626.956106][   T31] usb 5-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  626.957527][   T31] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  626.957547][   T31] usb 5-1: config 0 has no interface number 0
[  626.957575][   T31] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  626.959847][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.959867][   T31] usb 5-1: Product: syz
[  626.959877][   T31] usb 5-1: Manufacturer: syz
[  626.959888][   T31] usb 5-1: SerialNumber: syz
[  627.040812][   T31] usb 5-1: config 0 descriptor??
[  627.080684][   T31] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  628.030627][    C1] usb 5-1: yurex_control_callback - control failed: -71
[  628.046226][   T31] usb 5-1: USB disconnect, device number 15
[  628.087531][   T31] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  628.487473][T10812] 9p: Bad value for 'rfdno'
[  629.282371][   T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  629.438192][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  629.438253][   T31] usb 3-1: New USB device found: idVendor=05f9, idProduct=ffff, bcdDevice=61.9f
[  629.466634][   T31] usb 3-1: config 189 has an invalid interface number: 127 but max is 0
[  629.466656][   T31] usb 3-1: config 189 has no interface number 0
[  629.466678][   T31] usb 3-1: config 189 interface 127 has no altsetting 0
[  629.472272][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.472302][   T31] usb 3-1: Product: syz
[  629.472319][   T31] usb 3-1: Manufacturer: syz
[  629.472335][   T31] usb 3-1: SerialNumber: syz
[  630.205935][T10834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1332'.
[  631.430745][T10843] Invalid ELF header magic: != ELF
[  631.676660][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  631.676781][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  633.132974][T10849] loop1: detected capacity change from 0 to 2048
[  633.437058][T10849] overlayfs: upper fs needs to support d_type.
[  633.498377][T10842] loop4: detected capacity change from 0 to 32768
[  633.530457][T10842] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  633.619826][T10842] XFS (loop4): Ending clean mount
[  633.637543][T10842] XFS (loop4): Quotacheck needed: Please wait.
[  633.767556][T10849] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  633.767584][T10849] overlayfs: failed to set xattr on upper
[  633.767591][T10849] overlayfs: ...falling back to redirect_dir=nofollow.
[  633.767597][T10849] overlayfs: ...falling back to index=off.
[  633.767602][T10849] overlayfs: ...falling back to uuid=null.
[  634.054088][T10865] loop6: detected capacity change from 0 to 512
[  634.121642][T10842] XFS (loop4): Quotacheck: Done.
[  634.580296][   T31] usbserial_generic 3-1:189.127: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  634.580325][   T31] usbserial_generic 3-1:189.127: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  634.580395][   T31] usbserial_generic 3-1:189.127: device has no bulk endpoints
[  634.599936][   T31] safe_serial 3-1:189.127: safe_serial converter detected
[  634.612112][   T31] safe_serial 3-1:189.127: probe with driver safe_serial failed with error -22
[  634.697590][ T5646] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  635.271123][T10870] loop4: detected capacity change from 0 to 1024
[  635.379723][T10870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  635.495700][T10875] loop6: detected capacity change from 0 to 512
[  635.497355][T10875] EXT4-fs: Ignoring removed oldalloc option
[  635.545256][T10875] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.1344: corrupted in-inode xattr: e_value size too large
[  635.545386][T10875] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  635.545940][T10875] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1344: couldn't read orphan inode 15 (err -117)
[  635.545964][T10875] loop6: lost filesystem error report for type 5 error -117
[  635.547572][T10875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.552145][T10875] EXT4-fs error (device loop6): ext4_iget_extra_inode:6027: inode #15: comm syz.6.1344: corrupted in-inode xattr: e_value size too large
[  635.825586][ T5645] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  635.826626][ T5645] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  636.757366][ T7945] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.309509][ T5857] usb 3-1: USB disconnect, device number 23
[  638.657885][  T986] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.964323][ T5646] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.303949][T10900] loop6: detected capacity change from 0 to 512
[  639.526137][  T986] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.643382][ T5658] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  639.645430][ T5658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  639.647898][ T5658] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  639.649020][ T5658] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  639.650006][ T5658] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  640.080257][T10919] loop2: detected capacity change from 0 to 512
[  640.128107][T10919] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1361: bg 0: block 5: invalid block bitmap
[  640.128136][T10919] loop2: lost filesystem error report for type 5 error -117
[  640.142410][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  640.142432][    C1] EXT4-fs (loop2): initial error at time 1792877114: ext4_validate_block_bitmap:436
[  640.142450][    C1] EXT4-fs (loop2): last error at time 1792877114: ext4_validate_block_bitmap:436
[  640.212357][T10919] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  640.212389][T10919] loop2: lost filesystem error report for type 5 error -117
[  640.226238][T10919] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.1361: invalid indirect mapped block 3 (level 2)
[  640.226284][T10919] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  640.251470][T10919] EXT4-fs (loop2): 1 orphan inode deleted
[  640.251501][T10919] EXT4-fs (loop2): 1 truncate cleaned up
[  640.291162][T10919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  640.337557][  T986] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.628253][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.757721][   T56] Bluetooth: hci2: command tx timeout
[  642.003265][  T986] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.704011][T10951] loop6: detected capacity change from 0 to 512
[  643.358855][  T986] bridge_slave_1: left allmulticast mode
[  643.358885][  T986] bridge_slave_1: left promiscuous mode
[  643.359124][  T986] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.394282][  T986] bridge_slave_0: left allmulticast mode
[  643.394314][  T986] bridge_slave_0: left promiscuous mode
[  643.394578][  T986] bridge0: port 1(bridge_slave_0) entered disabled state
[  643.833523][   T56] Bluetooth: hci2: command tx timeout
[  643.972526][   T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  644.122508][   T31] usb 6-1: Using ep0 maxpacket: 8
[  644.123296][   T31] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  644.124689][   T31] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  644.126695][  T986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  644.126869][   T31] usb 6-1: config 0 has no interface number 0
[  644.126917][   T31] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  644.126943][   T31] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  644.126968][   T31] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  644.126996][   T31] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  644.127042][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.251254][   T31] usb 6-1: config 0 descriptor??
[  644.284287][   T31] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  644.286564][  T986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  644.319442][  T986] bond0 (unregistering): Released all slaves
[  644.803019][   T31] usb 6-1: USB disconnect, device number 14
[  644.803102][    C1] ldusb 6-1:0.55: usb_submit_urb failed (-19)
[  644.857345][T10979] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -19
[  645.037297][   T31] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  645.063683][T10908] rxe_eth0 speed is unknown, defaulting to 1000
[  645.209146][  T986] tipc: Left network mode
[  645.338952][T10996] loop6: detected capacity change from 0 to 512
[  645.414126][T10996] EXT4-fs (loop6): Test dummy encryption mode enabled
[  645.414501][T10996] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[  646.673489][ T5658] Bluetooth: hci2: command tx timeout
[  647.673778][  T986] IPVS: stopping master sync thread 6267 ...
[  648.152405][   T31] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  648.632958][   T31] usb 5-1: Using ep0 maxpacket: 16
[  648.636169][   T31] usb 5-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00
[  648.669716][   T31] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  648.669758][   T31] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  648.669785][   T31] usb 5-1: config 0 interface 0 has no altsetting 0
[  648.669822][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.672846][   T31] usb 5-1: config 0 descriptor??
[  648.724772][   T56] Bluetooth: hci2: command tx timeout
[  648.772635][T11015] loop6: detected capacity change from 0 to 256
[  649.224082][   T31] hid_parser_main: 5 callbacks suppressed
[  649.236308][   T31] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  649.236380][   T31] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  649.236399][   T31] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  649.236417][   T31] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  649.236435][   T31] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0
[  649.238009][   T31] mcp2221 0003:04D8:00DD.000A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  649.401839][T11012] i2c i2c-1: unsupported multi-msg i2c transaction
[  649.447626][   T31] usb 5-1: USB disconnect, device number 16
[  649.880018][T11034] loop2: detected capacity change from 0 to 512
[  650.835720][T11034] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1392: bg 0: block 5: invalid block bitmap
[  650.835749][T11034] loop2: lost filesystem error report for type 5 error -117
[  650.849748][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  650.849771][    C1] EXT4-fs (loop2): initial error at time 1792877125: ext4_validate_block_bitmap:436
[  650.849789][    C1] EXT4-fs (loop2): last error at time 1792877125: ext4_validate_block_bitmap:436
[  650.894363][T11034] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  650.894393][T11034] loop2: lost filesystem error report for type 5 error -117
[  650.904145][T11034] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.1392: invalid indirect mapped block 3 (level 2)
[  650.904190][T11034] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  650.958035][T11034] EXT4-fs (loop2): 1 orphan inode deleted
[  650.958079][T11034] EXT4-fs (loop2): 1 truncate cleaned up
[  650.960284][T11034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  651.262359][ T5757] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  651.359275][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.455199][ T5757] usb 5-1: Using ep0 maxpacket: 8
[  651.462720][ T5757] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  651.481435][ T5757] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  651.481467][ T5757] usb 5-1: config 0 has no interface number 0
[  651.481509][ T5757] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  651.481535][ T5757] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  651.481561][ T5757] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  651.481589][ T5757] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  651.481633][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.595131][ T5757] usb 5-1: config 0 descriptor??
[  651.690710][ T5757] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  651.935377][   T31] usb 5-1: USB disconnect, device number 17
[  651.937212][    C0] ldusb 5-1:0.55: usb_submit_urb failed (-19)
[  651.959324][T11042] ldusb 5-1:0.55: Couldn't submit interrupt_out_urb -19
[  651.998054][   T31] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  652.426966][ T5300] 8021q: adding VLAN 0 to HW filter on device eth9
[  652.583896][  T986] hsr_slave_0: left promiscuous mode
[  652.601231][  T986] hsr_slave_1: left promiscuous mode
[  652.610608][  T986] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  652.610631][  T986] batman_adv: batadv0: Removing interface: batadv_slave_0
[  652.633485][  T986] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  652.633512][  T986] batman_adv: batadv0: Removing interface: batadv_slave_1
[  652.704620][  T986] veth1_macvtap: left promiscuous mode
[  652.704737][  T986] veth0_macvtap: left promiscuous mode
[  652.704812][  T986] veth1_vlan: left promiscuous mode
[  652.704860][  T986] 
@ÿ: left promiscuous mode
[  654.913998][  T986] team0 (unregistering): Port device team_slave_1 removed
[  654.959879][  T986] team0 (unregistering): Port device team_slave_0 removed
[  655.150234][ T5757] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  656.132550][ T5757] usb 3-1: Using ep0 maxpacket: 8
[  656.134367][ T5757] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  656.162351][ T5757] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  656.162385][ T5757] usb 3-1: config 0 has no interface number 0
[  656.162431][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  656.162455][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  656.162483][ T5757] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  656.162512][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  656.162559][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  656.260885][ T5757] usb 3-1: config 0 descriptor??
[  656.293677][ T5757] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  656.326950][T11107] loop4: detected capacity change from 0 to 512
[  656.588754][ T5757] usb 3-1: USB disconnect, device number 24
[  656.588918][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  656.595131][T11098] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19
[  656.640190][ T5757] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  656.968778][T10908] bridge0: port 1(bridge_slave_0) entered blocking state
[  656.968897][T10908] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.969056][T10908] bridge_slave_0: entered allmulticast mode
[  656.971785][T10908] bridge_slave_0: entered promiscuous mode
[  657.082300][T10908] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.086015][T10908] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.089378][T10908] bridge_slave_1: entered allmulticast mode
[  657.190869][T10908] bridge_slave_1: entered promiscuous mode
[  658.024669][  T986] IPVS: stop unused estimator thread 0...
[  658.108680][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.156032][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.402048][T10908] team0: Port device team_slave_0 added
[  658.444345][T10908] team0: Port device team_slave_1 added
[  659.724261][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.724282][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.724311][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.787525][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.787548][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  659.787579][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  660.119861][T10908] hsr_slave_0: entered promiscuous mode
[  660.131294][T10908] hsr_slave_1: entered promiscuous mode
[  663.510365][ T5300] 8021q: adding VLAN 0 to HW filter on device eth10
[  663.839549][T11201] loop6: detected capacity change from 0 to 512
[  664.142491][ T5851] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  664.312566][ T5851] usb 3-1: Using ep0 maxpacket: 8
[  664.315270][ T5851] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  664.343740][ T5851] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  664.343773][ T5851] usb 3-1: config 0 has no interface number 0
[  664.343817][ T5851] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  664.343841][ T5851] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  664.343869][ T5851] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  664.343897][ T5851] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  664.343943][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.454999][ T5851] usb 3-1: config 0 descriptor??
[  664.473555][ T5851] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  664.732513][   T31] usb 3-1: USB disconnect, device number 25
[  664.732715][    C0] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  664.758099][T11209] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19
[  664.824399][   T31] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  664.943779][T10908] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  665.039105][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  665.051223][T10908] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  665.116992][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  665.117934][T10908] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  665.159577][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  665.177857][T10908] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  665.213673][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  665.823297][T10908] 8021q: adding VLAN 0 to HW filter on device bond0
[  666.832344][T10908] 8021q: adding VLAN 0 to HW filter on device team0
[  666.878286][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state
[  666.878415][ T5976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  666.962231][  T805] bridge0: port 2(bridge_slave_1) entered blocking state
[  666.962347][  T805] bridge0: port 2(bridge_slave_1) entered forwarding state
[  666.991753][T11232] loop6: detected capacity change from 0 to 32768
[  667.005506][T11232] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1440 (11232)
[  667.047887][T11232] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  667.047927][T11232] BTRFS info (device loop6): using crc32c checksum algorithm
[  667.239982][T11232] BTRFS info (device loop6): enabling ssd optimizations
[  667.240016][T11232] BTRFS info (device loop6): turning on flush-on-commit
[  667.240034][T11232] BTRFS info (device loop6): enabling free space tree
[  667.240051][T11232] BTRFS info (device loop6): enabling auto defrag
[  667.240069][T11232] BTRFS info (device loop6): use lzo compression, level 1
[  667.240091][T11232] BTRFS info (device loop6): max_inline set to 4096
[  667.404693][ T5300] 8021q: adding VLAN 0 to HW filter on device eth12
[  667.457535][ T7945] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  668.005161][ T5857] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  668.162729][ T5857] usb 3-1: Using ep0 maxpacket: 8
[  668.165606][ T5857] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  668.201572][ T5857] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  668.239776][ T5857] usb 3-1: config 0 has no interface number 0
[  668.241190][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  668.241218][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  668.241932][ T5857] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  668.317629][ T5857] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  668.367085][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  668.862969][ T5857] usb 3-1: config 0 descriptor??
[  668.948824][ T5857] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  669.133592][   T32] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  669.155365][ T5851] usb 3-1: USB disconnect, device number 26
[  669.155417][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  669.155791][T11288] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19
[  669.183790][ T5851] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  669.235577][T11308] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  669.282394][   T32] usb 7-1: Using ep0 maxpacket: 8
[  669.283264][   T32] usb 7-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  669.285504][   T32] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  669.285534][   T32] usb 7-1: config 0 has no interface number 0
[  669.285575][   T32] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  669.285599][   T32] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  669.285624][   T32] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  669.285649][   T32] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  669.285689][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.390936][   T32] usb 7-1: config 0 descriptor??
[  669.411511][   T32] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  669.666134][ T5851] usb 7-1: USB disconnect, device number 7
[  669.668294][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[  669.700190][ T5851] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  669.741515][T11324] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  669.759105][T11319] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  670.050868][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0
[  670.186477][T11339] bridge0: port 3(vlan3) entered blocking state
[  670.186727][T11339] bridge0: port 3(vlan3) entered disabled state
[  670.187365][T11339] vlan3: entered allmulticast mode
[  670.189627][T11339] vlan3: entered promiscuous mode
[  670.234947][T11339] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.271031][T11339] bridge_slave_1: left allmulticast mode
[  670.271081][T11339] bridge_slave_1: left promiscuous mode
[  670.271329][T11339] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.314898][T11341] FAULT_INJECTION: forcing a failure.
[  670.314898][T11341] name failslab, interval 1, probability 0, space 0, times 0
[  670.314939][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.2.1460 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  670.314969][T11341] Tainted: [L]=SOFTLOCKUP
[  670.314977][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  670.314992][T11341] Call Trace:
[  670.315001][T11341]  <TASK>
[  670.315011][T11341]  dump_stack_lvl+0xe8/0x150
[  670.315113][T11341]  should_fail_ex+0x3eb/0x540
[  670.315173][T11341]  should_failslab+0xa8/0x100
[  670.315245][T11341]  __kmalloc_cache_noprof+0x9e/0x600
[  670.315286][T11341]  ? __raw_spin_lock_init+0x45/0x100
[  670.315335][T11341]  ? bpf_prog_stream_init+0x24c/0x4a0
[  670.315390][T11341]  ? bpf_prog_stream_init+0x24c/0x4a0
[  670.315426][T11341]  bpf_prog_stream_init+0x24c/0x4a0
[  670.315459][T11341]  bpf_prog_load+0xd0b/0x1d60
[  670.315508][T11341]  ? __pfx_bpf_prog_load+0x10/0x10
[  670.315549][T11341]  ? __might_fault+0xaf/0x130
[  670.315585][T11341]  __sys_bpf+0xd86/0xe00
[  670.315616][T11341]  ? __pfx___sys_bpf+0x10/0x10
[  670.315643][T11341]  ? do_futex+0x458/0x4e0
[  670.315705][T11341]  ? rcu_is_watching+0x16/0xb0
[  670.315750][T11341]  __x64_sys_bpf+0xba/0xd0
[  670.315787][T11341]  do_syscall_64+0x166/0x520
[  670.315845][T11341]  ? trace_irq_disable+0x3b/0x140
[  670.315877][T11341]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.315915][T11341]  ? clear_bhb_loop+0x70/0xc0
[  670.315943][T11341]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.315966][T11341] RIP: 0033:0x7fc7afb9f559
[  670.315988][T11341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.316008][T11341] RSP: 002b:00007fc7b0b17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  670.316034][T11341] RAX: ffffffffffffffda RBX: 00007fc7afe25fa0 RCX: 00007fc7afb9f559
[  670.316051][T11341] RDX: 000000000000001c RSI: 00002000000007c0 RDI: 0000000000000005
[  670.316066][T11341] RBP: 00007fc7afc36b20 R08: 0000000000000000 R09: 0000000000000000
[  670.316079][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  670.316092][T11341] R13: 00007fc7afe26038 R14: 00007fc7afe25fa0 R15: 00007ffc99fa1788
[  670.316128][T11341]  </TASK>
[  670.487616][T11339] bond0: (slave bond_slave_0): Releasing backup interface
[  670.607485][T11339] bond0: (slave bond_slave_1): Releasing backup interface
[  670.655262][T11339] team0: Port device team_slave_0 removed
[  673.725219][T11339] team0: Port device team_slave_1 removed
[  673.725981][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  673.726004][T11339] batman_adv: batadv0: Removing interface: batadv_slave_0
[  673.731187][T11339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  673.731206][T11339] batman_adv: batadv0: Removing interface: batadv_slave_1
[  673.783425][T11339] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  673.833875][ T5300] 8021q: adding VLAN 0 to HW filter on device eth11
[  674.273271][ T5851] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  674.433274][ T5851] usb 7-1: New USB device found: idVendor=0c2e, idProduct=0720, bcdDevice=1.00
[  674.435204][ T5851] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.435294][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.490575][ T5851] metro_usb 7-1:1.0: Metrologic USB to Serial converter detected
[  674.777468][ T5851] usb 7-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  674.958453][    T9] usb 7-1: USB disconnect, device number 8
[  675.005653][    T9] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  675.010538][    T9] metro_usb 7-1:1.0: device disconnected
[  675.025302][ T5757] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  675.073705][T10908] veth0_vlan: entered promiscuous mode
[  675.091558][T10908] veth1_vlan: entered promiscuous mode
[  675.175824][T10908] veth0_macvtap: entered promiscuous mode
[  675.196114][T10908] veth1_macvtap: entered promiscuous mode
[  675.213520][ T5757] usb 3-1: Using ep0 maxpacket: 8
[  675.215376][ T5757] usb 3-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  675.219904][ T5757] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  675.219934][ T5757] usb 3-1: config 0 has no interface number 0
[  675.219977][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  675.220002][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  675.220030][ T5757] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  675.220058][ T5757] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  675.220104][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.224344][ T5757] usb 3-1: config 0 descriptor??
[  675.331739][ T5757] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  675.371788][T10908] batman_adv: batadv0: Interface activated: batadv_slave_0
[  675.426550][T10908] batman_adv: batadv0: Interface activated: batadv_slave_1
[  675.492584][ T1411] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  675.494261][ T1411] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.520424][ T5757] usb 3-1: USB disconnect, device number 27
[  675.520453][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[  675.524342][ T1411] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.526775][ T1411] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.529683][T11387] ldusb 3-1:0.55: Couldn't submit interrupt_out_urb -19
[  675.575661][ T5757] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  675.812911][ T5919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.812938][ T5919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.920378][ T5919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  675.920406][ T5919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  677.925140][T11416] loop5: detected capacity change from 0 to 512
[  677.937149][T11416] EXT4-fs: Ignoring removed oldalloc option
[  677.959338][T11416] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.1476: corrupted in-inode xattr: e_value size too large
[  677.959368][T11416] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  677.959914][T11416] EXT4-fs error (device loop5): ext4_orphan_get:1409: comm syz.5.1476: couldn't read orphan inode 15 (err -117)
[  677.960128][T11416] loop5: lost filesystem error report for type 5 error -117
[  678.005705][T11416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  678.008963][T11416] EXT4-fs error (device loop5): ext4_iget_extra_inode:6027: inode #15: comm syz.5.1476: corrupted in-inode xattr: e_value size too large
[  679.328618][ T5787] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  680.124069][ T5787] usb 8-1: Using ep0 maxpacket: 8
[  680.125000][ T5787] usb 8-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  680.126489][ T5787] usb 8-1: config 0 has an invalid interface number: 55 but max is 0
[  680.126517][ T5787] usb 8-1: config 0 has no interface number 0
[  680.126555][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  680.126573][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  680.126590][ T5787] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  680.126609][ T5787] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  680.126639][ T5787] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  680.241530][ T5787] usb 8-1: config 0 descriptor??
[  680.256991][T11434] netlink: 'syz.2.1480': attribute type 1 has an invalid length.
[  680.260599][ T6245] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.281068][T11434] netlink: 'syz.2.1480': attribute type 1 has an invalid length.
[  680.359547][ T5787] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  681.537001][T11474] loop2: detected capacity change from 0 to 512
[  681.590517][T11461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  681.590928][T11461] block device autoloading is deprecated and will be removed.
[  682.168313][T11474] EXT4-fs (loop2): Test dummy encryption mode enabled
[  682.168757][T11474] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal
[  683.978081][   T31] usb 8-1: USB disconnect, device number 2
[  684.565508][   T31] ldusb 8-1:0.55: LD USB Device #0 now disconnected
[  686.181065][T11513] loop4: detected capacity change from 0 to 32768
[  686.181928][T11513] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  686.206509][T11513] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1501 (11513)
[  686.256526][T11513] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  686.256573][T11513] BTRFS info (device loop4): using crc32c checksum algorithm
[  686.389528][T11513] BTRFS info (device loop4): rebuilding free space tree
[  686.475770][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1502'.
[  686.558010][T11513] BTRFS info (device loop4): disabling free space tree
[  686.558116][T11513] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  686.558142][T11513] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  686.580321][T11513] BTRFS info (device loop4): enabling ssd optimizations
[  686.580472][T11513] BTRFS info (device loop4): turning on async discard
[  686.580519][T11513] BTRFS info (device loop4): force clearing of disk cache
[  686.580565][T11513] BTRFS info (device loop4): use zstd compression, level 3
[  687.496805][ T5646] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  688.152573][ T5787] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  688.324092][ T5787] usb 5-1: Using ep0 maxpacket: 8
[  688.325650][ T5787] usb 5-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  688.326965][ T5787] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  688.326992][ T5787] usb 5-1: config 0 has no interface number 0
[  688.327031][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  688.327056][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  688.327083][ T5787] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  688.327110][ T5787] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  688.327152][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.593867][ T5787] usb 5-1: config 0 descriptor??
[  688.622845][ T5787] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  688.624931][T11545] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input24
[  690.055092][T11578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  690.055204][T11578] block device autoloading is deprecated and will be removed.
[  690.422839][   T32] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  690.580613][   T32] usb 8-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  690.592429][   T32] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  690.611383][   T32] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.611416][   T32] usb 8-1: Product: syz
[  690.611432][   T32] usb 8-1: Manufacturer: syz
[  690.611448][   T32] usb 8-1: SerialNumber: syz
[  690.643948][   T32] usb 8-1: config 0 descriptor??
[  690.914124][   T32] usb 8-1: USB disconnect, device number 3
[  691.021392][   T26] usb 5-1: USB disconnect, device number 18
[  691.047535][   T26] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  691.341944][T11609] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further
[  693.158217][ T1323] ieee802154 phy0 wpan0: encryption failed: -22
[  693.158325][ T1323] ieee802154 phy1 wpan1: encryption failed: -22
[  695.432447][   T26] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  695.583963][   T26] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  695.608838][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.608873][   T26] usb 3-1: Product: syz
[  695.608892][   T26] usb 3-1: Manufacturer: syz
[  695.608909][   T26] usb 3-1: SerialNumber: syz
[  695.675584][   T26] usb 3-1: config 0 descriptor??
[  695.699474][   T26] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  695.728902][   T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  695.732059][   T26] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  695.732103][   T26] usb 3-1: media controller created
[  695.783473][   T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  695.885698][   T26] DVB: Unable to find symbol mt352_attach()
[  695.958387][   T26] DVB: Unable to find symbol nxt6000_attach()
[  695.958407][   T26] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  695.968827][   T26] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25
[  695.994266][   T26] dvb-usb: schedule remote query interval to 1000 msecs.
[  695.994292][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  695.994310][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  695.994327][   T26] dvb-usb: bulk message failed: -22 (7/0)
[  696.442380][   T26] usb 3-1: USB disconnect, device number 28
[  699.925423][   T26] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  702.511194][T11722] loop7: detected capacity change from 0 to 512
[  702.543332][T11722] vfat: Unknown parameter 'ÿÿÿÿÿÿ (95) exit
[  702.543332][T11722] Program dump (scc? loop_header? idom insn#: livxœìÝ'
[  702.792730][T11740] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1558'.
[  702.813412][ T5857] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  702.963202][ T5857] usb 3-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  702.970611][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.970642][ T5857] usb 3-1: Product: syz
[  702.970659][ T5857] usb 3-1: Manufacturer: syz
[  702.970675][ T5857] usb 3-1: SerialNumber: syz
[  703.013973][ T5857] usb 3-1: config 0 descriptor??
[  703.054976][ T5857] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  703.081283][ T5857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  703.098099][ T5857] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  703.098173][ T5857] usb 3-1: media controller created
[  703.137357][ T5857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  703.390945][ T5857] DVB: Unable to find symbol mt352_attach()
[  703.771752][ T5857] DVB: Unable to find symbol nxt6000_attach()
[  703.771768][ T5857] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  703.806835][ T5857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26
[  703.829603][ T5857] dvb-usb: schedule remote query interval to 1000 msecs.
[  703.829630][ T5857] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  703.829648][ T5857] dvb-usb: bulk message failed: -22 (7/0)
[  703.829664][ T5857] dvb-usb: bulk message failed: -22 (7/0)
[  703.872036][ T5857] usb 3-1: USB disconnect, device number 29
[  703.946465][T11763] loop4: detected capacity change from 0 to 512
[  703.965862][T11763] EXT4-fs (loop4): Test dummy encryption mode enabled
[  703.968536][T11763] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  704.042855][ T5857] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  708.038828][T11792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1575'.
[  708.116451][T11789] loop5: detected capacity change from 0 to 512
[  708.353432][T11804] loop6: detected capacity change from 0 to 512
[  708.372354][T11804] EXT4-fs (loop6): Test dummy encryption mode enabled
[  708.374055][T11804] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[  711.532394][   T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  711.686442][   T10] usb 8-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  711.712391][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.712433][   T10] usb 8-1: Product: syz
[  711.712450][   T10] usb 8-1: Manufacturer: syz
[  711.712466][   T10] usb 8-1: SerialNumber: syz
[  711.790217][   T10] usb 8-1: config 0 descriptor??
[  711.844885][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  711.998937][T11834] loop2: detected capacity change from 0 to 512
[  712.793915][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  712.852372][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  712.852441][   T10] usb 8-1: media controller created
[  712.938118][T11834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.1587: bg 0: block 5: invalid block bitmap
[  712.938159][T11834] loop2: lost filesystem error report for type 5 error -117
[  712.942247][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  712.942274][    C0] EXT4-fs (loop2): initial error at time 1792877187: ext4_validate_block_bitmap:436
[  712.942300][    C0] EXT4-fs (loop2): last error at time 1792877187: ext4_validate_block_bitmap:436
[  712.998977][T11834] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6678: Corrupt filesystem
[  712.999005][T11834] loop2: lost filesystem error report for type 5 error -117
[  713.011664][T11834] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.1587: invalid indirect mapped block 3 (level 2)
[  713.011705][T11834] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  713.015383][T11834] EXT4-fs (loop2): 1 orphan inode deleted
[  713.015447][T11834] EXT4-fs (loop2): 1 truncate cleaned up
[  713.025800][T11834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  713.091941][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  713.197411][   T10] DVB: Unable to find symbol mt352_attach()
[  713.268032][   T10] DVB: Unable to find symbol nxt6000_attach()
[  713.268066][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  713.272103][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27
[  713.307049][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  713.307077][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  713.307096][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  713.307113][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  713.347493][   T10] usb 8-1: USB disconnect, device number 4
[  713.539343][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  713.579913][ T5644] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.735888][T11855] loop5: detected capacity change from 0 to 512
[  713.741628][T11855] EXT4-fs (loop5): Test dummy encryption mode enabled
[  713.751091][T11855] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal
[  715.728953][T11865] loop4: detected capacity change from 0 to 512
[  716.150961][T11872] ip_tables: iptables: counters copy to user failed while replacing table
[  717.422409][T11879] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1603'.
[  720.643685][   T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  720.798149][   T10] usb 7-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  720.837977][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.838011][   T10] usb 7-1: Product: syz
[  720.838025][   T10] usb 7-1: Manufacturer: syz
[  720.838041][   T10] usb 7-1: SerialNumber: syz
[  720.876211][   T10] usb 7-1: config 0 descriptor??
[  720.909517][   T10] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  720.937830][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  720.950475][   T10] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  720.950516][   T10] usb 7-1: media controller created
[  721.084511][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  721.109893][T11914] loop4: detected capacity change from 0 to 512
[  721.139022][T11914] EXT4-fs (loop4): Test dummy encryption mode enabled
[  721.150579][T11919] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1614'.
[  721.172575][T11914] EXT4-fs (loop4): can't mount with commit=, fs mounted w/o journal
[  721.343444][   T26] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  721.559091][   T26] usb 8-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[  721.560640][   T26] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  721.560675][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  721.560701][   T26] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  721.560724][   T26] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  721.560770][   T26] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.442669][   T26] usb 8-1: config 0 descriptor??
[  724.038712][   T26] usbhid 8-1:0.0: can't add hid device: -71
[  724.038828][   T26] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  724.088608][   T26] usb 8-1: USB disconnect, device number 5
[  724.254377][   T10] DVB: Unable to find symbol mt352_attach()
[  724.429976][   T10] DVB: Unable to find symbol nxt6000_attach()
[  724.429991][   T10] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  724.460702][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28
[  724.484231][   T10] dvb-usb: schedule remote query interval to 1000 msecs.
[  724.484263][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  724.484281][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  724.484298][   T10] dvb-usb: bulk message failed: -22 (7/0)
[  724.511648][   T10] usb 7-1: USB disconnect, device number 9
[  725.082103][   T10] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  725.910275][T11952] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1625'.
[  726.316124][T11963] loop6: detected capacity change from 0 to 512
[  727.233923][T11963] EXT4-fs (loop6): Test dummy encryption mode enabled
[  727.234298][T11963] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[  727.262689][   T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  727.546380][   T10] usb 8-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  728.510002][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.510025][   T10] usb 8-1: Product: syz
[  728.510036][   T10] usb 8-1: Manufacturer: syz
[  728.510046][   T10] usb 8-1: SerialNumber: syz
[  729.860639][   T10] usb 8-1: config 0 descriptor??
[  730.397341][   T10] usb 8-1: can't set config #0, error -71
[  730.841703][   T10] usb 8-1: USB disconnect, device number 6
[  731.114783][T11997] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1637'.
[  733.415590][T12024] loop6: detected capacity change from 0 to 512
[  733.438772][T12024] EXT4-fs (loop6): Test dummy encryption mode enabled
[  733.438918][T12024] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal
[  735.734705][   T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  735.920189][   T31] usb 8-1: New USB device found: idVendor=0547, idProduct=0201, bcdDevice=11.64
[  736.112960][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.113037][   T31] usb 8-1: Product: syz
[  736.113090][   T31] usb 8-1: Manufacturer: syz
[  736.113149][   T31] usb 8-1: SerialNumber: syz
[  736.777435][   T31] usb 8-1: config 0 descriptor??
[  736.821398][T12042] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1650'.
[  736.905826][   T31] usb 8-1: can't set config #0, error -71
[  736.909536][   T31] usb 8-1: USB disconnect, device number 7
[  738.654965][T12070] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR
[  738.656520][T12070] ==================================================================
[  738.656543][T12070] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xae/0x480
[  738.656692][T12070] Read of size 4 at addr 0000000000000174 by task syz.2.1656/12070
[  738.656712][T12070] 
[  738.656727][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.2.1656 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  738.656759][T12070] Tainted: [L]=SOFTLOCKUP
[  738.656768][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  738.656783][T12070] Call Trace:
[  738.656792][T12070]  <TASK>
[  738.656802][T12070]  dump_stack_lvl+0xe8/0x150
[  738.656841][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  738.656867][T12070]  kasan_report+0x117/0x150
[  738.656903][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  738.656934][T12070]  kasan_check_range+0x264/0x2c0
[  738.656969][T12070]  dm_kcopyd_client_destroy+0xae/0x480
[  738.656997][T12070]  ? __pfx_dm_kcopyd_client_destroy+0x10/0x10
[  738.657021][T12070]  ? kasan_quarantine_put+0xbb/0x1f0
[  738.657049][T12070]  ? lockdep_hardirqs_on+0x7b/0x110
[  738.657077][T12070]  ? kfree+0x1c5/0x650
[  738.657098][T12070]  ? __destroy+0x139/0x2f0
[  738.657153][T12070]  ? vfree+0x426/0x490
[  738.657178][T12070]  __destroy+0x172/0x2f0
[  738.657201][T12070]  cache_ctr+0x1674/0x2bf0
[  738.657239][T12070]  ? __pfx_cache_ctr+0x10/0x10
[  738.657260][T12070]  ? __sanitizer_cov_trace_switch+0x6c/0x120
[  738.657308][T12070]  ? skip_spaces+0x8a/0xa0
[  738.657367][T12070]  dm_table_add_target+0x58d/0xc70
[  738.657433][T12070]  table_load+0x325/0x8a0
[  738.657459][T12070]  ? __pfx_table_load+0x10/0x10
[  738.657483][T12070]  ? __might_fault+0xaf/0x130
[  738.657509][T12070]  dm_ctl_ioctl+0x9ec/0xe10
[  738.657547][T12070]  ? __pfx_table_load+0x10/0x10
[  738.657566][T12070]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  738.657618][T12070]  ? security_file_ioctl+0x19/0x2a0
[  738.657657][T12070]  ? bpf_lsm_file_ioctl+0x9/0x20
[  738.657704][T12070]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  738.657836][T12070]  __se_sys_ioctl+0xfc/0x170
[  738.657912][T12070]  do_syscall_64+0x166/0x520
[  738.658018][T12070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.658054][T12070]  ? clear_bhb_loop+0x70/0xc0
[  738.658084][T12070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  738.658109][T12070] RIP: 0033:0x7fc7afb9f559
[  738.658133][T12070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.658155][T12070] RSP: 002b:00007fc7b0ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  738.658183][T12070] RAX: ffffffffffffffda RBX: 00007fc7afe26270 RCX: 00007fc7afb9f559
[  738.658202][T12070] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003
[  738.658220][T12070] RBP: 00007fc7afc36b20 R08: 0000000000000000 R09: 0000000000000000
[  738.658236][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  738.658253][T12070] R13: 00007fc7afe26308 R14: 00007fc7afe26270 R15: 00007ffc99fa1788
[  738.658281][T12070]  </TASK>
[  738.658289][T12070] ==================================================================
[  738.658323][T12070] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  738.982101][T12070] CPU: 0 UID: 0 PID: 12070 Comm: syz.2.1656 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[  738.993193][T12070] Tainted: [L]=SOFTLOCKUP
[  738.997552][T12070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  739.007642][T12070] Call Trace:
[  739.010951][T12070]  <TASK>
[  739.014005][T12070]  vpanic+0x26f/0x710
[  739.018084][T12070]  panic+0xc5/0xd0
[  739.022042][T12070]  ? __pfx_panic+0x10/0x10
[  739.026506][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  739.032448][T12070]  ? rcu_is_watching+0x16/0xb0
[  739.037356][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  739.043029][T12070]  check_panic_on_warn+0x89/0xb0
[  739.048046][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  739.053719][T12070]  end_report+0x73/0x170
[  739.058010][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  739.063680][T12070]  kasan_report+0x128/0x150
[  739.068243][T12070]  ? dm_kcopyd_client_destroy+0xae/0x480
[  739.074024][T12070]  kasan_check_range+0x264/0x2c0
[  739.079662][T12070]  dm_kcopyd_client_destroy+0xae/0x480
[  739.085769][T12070]  ? __pfx_dm_kcopyd_client_destroy+0x10/0x10
[  739.092082][T12070]  ? kasan_quarantine_put+0xbb/0x1f0
[  739.097514][T12070]  ? lockdep_hardirqs_on+0x7b/0x110
[  739.102762][T12070]  ? kfree+0x1c5/0x650
[  739.107048][T12070]  ? __destroy+0x139/0x2f0
[  739.111560][T12070]  ? vfree+0x426/0x490
[  739.115860][T12070]  __destroy+0x172/0x2f0
[  739.120341][T12070]  cache_ctr+0x1674/0x2bf0
[  739.125269][T12070]  ? __pfx_cache_ctr+0x10/0x10
[  739.130180][T12070]  ? __sanitizer_cov_trace_switch+0x6c/0x120
[  739.136232][T12070]  ? skip_spaces+0x8a/0xa0
[  739.140720][T12070]  dm_table_add_target+0x58d/0xc70
[  739.146147][T12070]  table_load+0x325/0x8a0
[  739.151070][T12070]  ? __pfx_table_load+0x10/0x10
[  739.155987][T12070]  ? __might_fault+0xaf/0x130
[  739.160821][T12070]  dm_ctl_ioctl+0x9ec/0xe10
[  739.165390][T12070]  ? __pfx_table_load+0x10/0x10
[  739.170326][T12070]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  739.175456][T12070]  ? security_file_ioctl+0x19/0x2a0
[  739.181665][T12070]  ? bpf_lsm_file_ioctl+0x9/0x20
[  739.187126][T12070]  ? __pfx_dm_ctl_ioctl+0x10/0x10
[  739.192231][T12070]  __se_sys_ioctl+0xfc/0x170
[  739.197112][T12070]  do_syscall_64+0x166/0x520
[  739.201748][T12070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.207939][T12070]  ? clear_bhb_loop+0x70/0xc0
[  739.212830][T12070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.218794][T12070] RIP: 0033:0x7fc7afb9f559
[  739.223683][T12070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.243506][T12070] RSP: 002b:00007fc7b0ab4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  739.252163][T12070] RAX: ffffffffffffffda RBX: 00007fc7afe26270 RCX: 00007fc7afb9f559
[  739.260589][T12070] RDX: 0000200000000200 RSI: 00000000c138fd09 RDI: 0000000000000003
[  739.268777][T12070] RBP: 00007fc7afc36b20 R08: 0000000000000000 R09: 0000000000000000
[  739.276975][T12070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  739.285334][T12070] R13: 00007fc7afe26308 R14: 00007fc7afe26270 R15: 00007ffc99fa1788
[  739.293353][T12070]  </TASK>
[  739.297018][T12070] Kernel Offset: disabled
[  739.301490][T12070] Rebooting in 86400 seconds..